Raphael Bottino — Sales Engineer at Linx

The fastest way I know to explain a system is to go build one.

Which is a long way of saying I'm a sales engineer who can't stop opening the editor. Below is what I actually think about security, and the things I made because of it.

Start here ↓ raphabot@gmail.com

DALLAS, TEXAS ● ONLINE

On the badge vs the practice

DevSecOps is a lie. Security in DevOps isn't.

Nobody's job title fixed a pipeline. The teams that get this right don't reorganise around a portmanteau — they make the secure path the fastest path, and they check the place everyone forgets: the CI system holding every credential you own.

So I did something about it

Pipefort 74 deterministic rules for CI/CD, with the fix attached The talk Austin DevOps Connect

On knowing versus assuming

You can't defend against an attack you've never run.

Reading about a new attack tells you it exists. Running it against your own account tells you whether you'd survive it. When cloud ransomware started encrypting S3 buckets with keys AWS never stores, I wanted the second answer, so I built the thing that gives it.

So I did something about it

S3 Ransomware Simulator Attack, detection and auto-quarantine, as code The full writeup How SSE-C ransomware actually works

On privacy claims

A privacy policy is a promise. An absent network call is a fact.

Every dictation app solves the problem by shipping your voice to a datacenter and asking you to trust the terms. I wanted one that couldn't betray me even if it wanted to, so I built it with no server at all. Same principle I'd apply to anything handling data I care about.

So I did something about it

Lousa On-device dictation for macOS — no cloud, no account

On what happens next

Agents are learning to attack faster than we are learning to watch them.

The same capability shows up on offense and defense within a month of each other, and most coverage picks a side or picks a vendor. I've been tracking it week by week — partly to stay useful to the people I work with, mostly because it is the most interesting problem in security right now.

So I did something about it

Agentic Security The newsletter — hundreds of subscribers Awesome Cybersecurity Agentic AI 538 stars — the index the field uses

Right now

Updated August 2026

Adding rules to Pipefort and shipping updates to Lousa. Writing Agentic Security most weeks and reading far too much about agent sandboxing. Recording A Culpa é de Sec with Tales. Organising AWS Dallas. Dad duty, which outranks all of the above.

If you want to talk about sales engineering, pipeline security, or what agents are about to do to both — I'm easy to find.