About

Application Security Solutions LTDA is an independent Application Security consultancy, run by Carlos Lago. The focus is on attacking the problem where it originates: architecture, code, and the pipeline that ships them.

The work combines technical depth (manual code review, threat modeling, exploit automation) with the operation of industry tools (Fortify, Checkmarx, Snyk, Semgrep) and program maturity (OWASP ASVS/SAMM).

The same discipline I apply for clients guides my own systems: minimal surface, security by default, and documented decisions.