I build, secure and maintain the web systems your business runs on
20+ years shipping for the web. I work as an independent contractor for US clients in fintech, marketing and health: custom development, QA/QC, AI-assisted delivery pipelines and security review. Cofounder of Krei.dev, SwapIt.dev and MiExpediente.app.
A specialist, not a generalist with a portfolio
I am Osvaldo Noe Gonzalez Del Rio. I have spent more than twenty years around web systems: first writing them, then leading the people who write them, and now doing both for a small number of clients who need the work to be right rather than merely finished.
My background is unusual on purpose. I hold degrees in psychology, law and web systems development. Psychology taught me how people actually use an interface. Law taught me to read a specification the way an opposing party would. Engineering lets me ship it.
Today I work as an independent contractor for US clients, and I cofounded Krei.dev, SwapIt.dev and MiExpediente.app. I also research vulnerabilities in the WordPress ecosystem, where more than seventy of my findings have been published and assigned CVEs.
- Based inMexico, working with US clients
- FocusCustom web systems, QA/QC, security
- CofounderKrei.dev · SwapIt.dev · MiExpediente.app
- Research70+ vulnerabilities published
Four ways I usually get hired
Most engagements start with one of these and grow from there.
- 01
Custom web development
Web systems built to your requirements, not bent out of a template. From a marketing site that has to convert to an internal application your team depends on daily.
- 02
Security review
Targeted reviews of WordPress stacks, plugins and themes: upload paths, sanitization, authentication and the places automated scanners never reach. The same method behind my 70+ published vulnerability findings.
- 03
QA/QC for delivery teams
Process, checklists and automation that stop the same defects from shipping twice. I have built and documented these systems for agencies delivering at volume.
- 04
AI-assisted pipelines
Automated pipelines that take real work off your team: code review, content, migration and testing, designed so a human still owns the outcome.
Regulated industries and teams that ship
The constraints differ, the standard does not.
- 20+Years of experience
- 70+Vulnerabilities published
- 3Products cofounded
Fintech
Systems where a defect is measured in money and trust, and where review has to be part of delivery rather than an afterthought.
Marketing
High-volume agency delivery: repeatable build-outs, design hand-offs and the QA process that keeps quality steady at scale.
Health
Software handling sensitive records, where privacy and access control are requirements rather than features.
What I am doing right now
Five commitments that run in parallel. None of them is a former life: every one of these is current work.
- Since Jul 20251 yr 3 mos · Remote
Bug Bounty Hunter · Security Researcher
Vulnerability research in the WordPress ecosystem: themes, plugins and the responsible disclosure process behind my published CVEs.
- Since Jan 20242 yrs 9 mos · Remote
Cofounder
Professional websites for businesses, built and maintained by a small team that owns the whole delivery.
- Since Oct 20233 yrs · Remote
Lead Web Developer (Independent Contractor)
I build, maintain and optimize websites and digital platforms for agency clients, with performance, accessibility and security as delivery requirements rather than afterthoughts.
- Since Jul 20188 yrs 3 mos · Remote
Head of Development
RIIDE · Red de Investigación, Innovación, Desarrollo y Estadística
Technology for research and public-interest projects, on the premise that software can serve a purpose beyond the commercial one.
- Since Jan 201016 yrs 9 mos · Remote
Cofounder
A digital publishing project with millions of views across multiple channels, and the longest-running thing on this list.
What I bring to the table
Education
- Bachelor of Psychology Human behaviour and how people use systems
- Attorney at Law Contracts, compliance and specifications
- Web Systems Development Engineering foundation
Security research
- Researcher profile at WordSec 70+ published findings
Building & profiles
- Krei.dev Cofounder
- SwapIt.dev Cofounder
- MiExpediente.app Cofounder
- GitHub Open work
- LinkedIn Professional profile
I write down what I find
Vulnerability research, quality control for creative work, and what changes when part of the output is machine-generated.
-
Security Lead Time: The Advantage of Working With a Developer Who Finds Vulnerabilities
Six of the 15 Divi vulnerabilities documented by Wordfence are mine, and what that window between discovery and public disclosure is worth to the sites I maintain.
-
Security and Quality Are Like an Onion
Defense in depth applied to creative quality control, and the index to a thirteen-article series on severity, escapes and adversarial review.
-
AI Made QA More Important, Not Less
Generated output is fluent, well-formatted and occasionally wrong in a way no proofreader can see, because nothing about it is malformed.
Tell me what you are building
One email is enough to start. Describe the system, the deadline and what is currently going wrong. I will tell you honestly whether I am the right person for it.
hello@osvaldogdelrio.devI read every message myself and reply within two business days.