jcsec.io

Contact

ES

Fractional Protocol Security for Early-Stage Web3 Teams

New projects need senior security judgment, even before they are ready to hire a full-time security lead.

I help protocols bring security into the product and engineering process early, so risks are addressed before they become expensive to fix.

The goal is simple: make security part of how your team builds, not something you only think about two weeks before an audit.

Shall we start?
  • Cibersecurity icon
  • Cibersecurity icon
  • Cibersecurity icon
shift-left security

No one can guarantee that a protocol will be perfectly secure.

What you can do is understand the risks, reduce the avoidable ones, and make better security decisions before they become expensive.

Answer a few questions and I’ll point you to the right service.
What are you up to?

Answer a few questions and I’ll point you to the service that best matches your situation.

jcsec_ENG
Do you need ongoing security guidance for your Web3 team?
Do you need an independent review of a specific component, integration, or design decision?
Are you preparing for an external audit or production release?
Do you want to train your developers, auditors, or students?

Use Shift+Tab to go back

How I can help

FRACTIONAL SECURITY

Ongoing senior security guidance for early-stage Web3 teams that are not ready to hire a full-time security lead.

PROTOCOL REVIEW

Focused review of smart contracts, architecture, integrations, or protocol design decisions before they become expensive to fix.

AUDIT READINESS

Preparation and remediation support before, during, and after an external audit.

I also deliver practical smart-contract security training for developers, auditors, and university programs.

Tell me more
OK, but.... who are you?

I’m José C. Ramírez, a security engineer, auditor, and lecturer with 10+ years of experience across offensive security, smart-contract security, and blockchain protocol review.

I previously worked on the Protocol Security team at Matter Labs / ZKsync, and before that as a smart-contract auditor and lead auditor across Web3 audit firms.

My background combines traditional offensive security with hands-on protocol and smart-contract security, which helps me look beyond code alone and reason about how systems fail in practice.

If we work together, you can expect:

  • Practical judgment: I focus on the risks that matter for your stage, architecture, and roadmap.
  • Clear communication: findings, trade-offs, and recommendations explained in a way your team can act on.
  • Hands-on support: not just a report, but guidance before and after the review so security decisions become easier to manage.
Learn more about my professional background
Profile pic
Some of my public projects
Resources and exercises to learn Solidity security
Roadmap to start auditing CosmWasm
Workshop on advanced reentrancy vulnerabilities
CosmWasm CTF - AwesomWasm 2023
Latest news about this curious planet

If you want the security of your project not to be a problem, regardless of its stage, drop me a message and we’ll get to work

Contact me