Hey. I'm Fábio Gomes — a security specialist based in Lisbon with over 8 years of hands-on offensive security experience. I've spent my career breaking into things professionally: web apps, APIs, Active Directory environments, cloud infrastructure, SCADA/OT systems, and AI integrations.

I got into security through CTFs at IST, where I was part of the STT university team. That curiosity snowballed into a career spanning principal penetration testing at Integrity SA, where I founded the SCADA/OT pentest practice, and now leading Red Team operations at Cybertrust/Devoteam — running PCI DSS and TIBER-EU engagements and building out a purple team service.

Outside of work, I'm into smart contract auditing, researching vehicle CAN bus protocols, Crossfit, and a long-term project of buying and restoring a classic car. This blog is where I put the stuff I find interesting enough to write up.