Juan Tosso
Lead Solutions Architect at Harness
Pontevedra, Galicia, Spain
Summary
🤩
Rockstar🎓
Top SchoolJuan Tosso is a Lead Solutions Architect and founder of the OWASP Coraza WAF project, combining a decade of hands-on cybersecurity, open-source engineering, and product-focused architecture. He specializes in Golang and core WAF internals, having refactored and advanced Coraza into a production-grade, ModSecurity-compatible library used to harden web apps. Juan advises Fortune 500 clients on API and web application security, translating deep research and penetration-testing experience into practical, customer-first solutions. His background spans roles from CISO to research engineer, and he leverages entrepreneurial training from MIT to keep work at the intersection of innovation and real-world risk reduction. Based in Pontevedra, Spain, he quietly balances high-impact enterprise engagements with ongoing open-source stewardship.
10 years of coding experience
5 years of employment as a software developer
MIT Entrepreneurship Bootcamp, Entrepreneurship/Entrepreneurial Studies, MIT Entrepreneurship Bootcamp, Entrepreneurship/Entrepreneurial Studies at Massachusetts Institute of Technology
English, Spanish, Portuguese
Github Skills (4)
waf10
go10
modsecurity10
testing9
Programming languages (8)
Github contributions (5)
corazawaf/coraza
May 2020 - Jan 2023
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
Role in this project:
Back-end Developer
Back-end DeveloperContributions:26 releases, 255 reviews, 389 commits in 2 years 8 months
Contributions summary:Juan appears to have been involved in refactoring and modifying core functionalities within the Coraza WAF project. They have been modifying code related to the repository name change and refactoring. Based on the filenames, such as "pkg/waf/parser.go," "pkg/waf/operators/begins_with_test.go", the changes primarily focus on enhancing the project's internal components.
web-applicationwafcorazasession-cookieweb-application-firewall
corazawaf/coraza-caddy
Jun 2021 - Jan 2023
OWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities
Contributions:5 releases, 8 reviews, 71 commits in 1 year 7 months
golangwebapplicationfirewallcaddyserverapplication-firewallsecurity
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.