Security consultancy for AI built apps · Charleston, SC

Your AI built the app. I make sure it doesn’t get you hacked.

Apps built with AI tools ship fast and skip the boring parts, like checking who can read whose data. I go through yours the way an attacker would, tell you what’s broken in plain English, and hand you the fixes. I also build websites, online stores, and custom software in English and Spanish. You work directly with me. Not an account manager, not a rotating team.

Recent: llm-audit · NEVA Estudio · Tinta Gallery · Coastal Millwork

llm-audit, a Semgrep rule pack for the OWASP LLM Top 10

Problems I solve

Five things that cost small businesses money, starting with the one that can cost the most. Here’s how I fix them.

01

AI App Security Reviews

You built the app with AI and it works. What nobody has checked is whether a stranger can read your customers’ data, get past the paywall, or run up your OpenAI bill. A review has a fixed scope and a fixed price, and you get it back in one week. I run an automated scan with llm-audit, then read the code by hand to catch what a scanner misses. You get every finding written up with a prompt you can paste into your AI tool to fix it, plus a call where I walk you through all of it.

Your app, read the way an attacker reads it.

GIAC GCIH · GSEC · GFACT certified · 1st place, HackOps 2024 · author of llm-audit

  1. 02

    AI Integrations

    If your staff spends half the day answering the same five questions, or you’re bleeding money to no shows, automate it. I build bilingual chatbots and WhatsApp flows that take bookings, answer FAQs, capture leads, and chase follow-ups, in whatever language the customer texted in.

    In build → bilingual booking bot + WhatsApp flow

  2. 03

    Web & Ecommerce

    Your site is slow, looks like a template, or loses customers at checkout. Usually all three at once. I rebuild it so pages load fast on a phone and the checkout doesn’t leak buyers.

    Recently shipped → Coastal Millwork & Supply

  3. 04

    Bilingual & Multilingual Sites

    Half your customers speak Spanish and your site is English-only. That is money walking out the door. I build sites in English, Spanish, and German where each language reads like it was written there, because it was.

    Recently shipped → Tinta Gallery, NEVA Estudio

  4. 05

    Custom Business Applications

    You run the business on spreadsheets, email, and three SaaS tools that don’t talk to each other. I replace the stack with one piece of software built around how you actually work. A dashboard, a portal, a marketplace, or an internal tool nobody outside the office will ever see.

    Live → Axis, a platform for exit-planning advisors

Selected work

Selected work

Recent projects, starting with the security side: llm-audit, the open source scanner behind my security reviews for apps built with AI. Next to it, the client builds. Websites, online stores, marketplaces, and the kind of custom software businesses build when the SaaS options stop fitting. Some shipped, some still in the oven.

SaaS Platform

Axis

A subscription platform for exit planning advisors and the business owners they work with. Built for Southern Exits and running in production.

  • Next.js
  • React
  • TypeScript
  • Tailwind CSS
Web + iOS App

Standshot

Self-guided tours of the places film and television were shot, starting with Charleston. Every location is free to read on the website. The iOS app carries the day.

  • Next.js 16
  • React 19
  • TypeScript
  • Expo
Luis Javier Lozoya, founder of IberiaTech Solutions

Meet the founder

I’m Luis Javier. Founders now ship apps built with AI, and nobody checks the locks. I started IberiaTech to be the one who checks. It’s just me: I read your code myself and tell you straight what I find.

Security-focused software engineer based in the Charleston, SC area, originally from Spain. I studied architectural engineering at IE University and spent six years in commercial construction before switching to software in 2020. I work directly with every client, write the code myself, and think about security from day one of the project.

GIAC GCIH, GSEC and GFACT certified, the GCIH earned through the SANS CyberTalent Academy. 1st place at HackOps 2024, speaker and judge at HarborHack, and SANS Cyber Academy scholarship recipient.