Secure transit · fragmented

Your visit travels as 8 encrypted shards · nothing is stored

A real example

You, to your AI assistant“Book my Milan trip. Up to €1,200, hotel under €250 a night, until Friday.”

Humanos mandate€1,200 totalHotel ≤ €250 / nightUntil Friday
  • FlightLisbon → Milan€420Allowed ✓
  • HotelDuomo€310/nightBlocked ✕
  • HotelBrera€230/nightAllowed ✓

Signed receipt · anyone can verify it

Live in

0+

hospitals, insurers & payment processors

↺ Some of them orbit the core

FileSonic

Apr 2023 — Mar 2024

Co-Founder & CTO · Dubai

A storage name, rebuilt decentralized.

FileSonic, "the unlimited storage company", was a well-known storage service until it closed around 2011. I co-founded its relaunch and owned the technical redefinition: security-first and decentralized, instead of one company's servers.

Secure storageDistributed systemsScalability

Live examples · illustrative

N1N2N3N4N5N6report.pdf2.4 MB4 SHARDSCID bafy…k1dhb4 shards × 2 copies · 6 nodesUPLOAD · IPFS● NODES 6/6 ONLINE

No single node holds the file, and none of them can read it

The rebuild

2011 · Centralized

ThenOne company's servers: one point of failure, one point of trust.

NowEncrypted, split and spread across a network no one owns.

The team I built

Built and led engineering, and defined its:

Technical standardsDevelopment processExecution roadmap
  1. Apr 2023Co-founded, architecture defined
  2. May 2023Marketplace prototype, 2 prizes
  3. Jan 2024Launched in Dubai: marketplace on IPFS & Polygon
  4. NextDecentralized storage service

Built on

  • IPFSContent-addressed files
  • PolygonSmart contracts
  • LensProfiles & identity
  • ChainlinkAutomated pricing
OmniClouds

2024 — 2025

Lead Systems Architect · Lisbon · Hybrid

CCTV that notices what matters.

Led the projects and multidisciplinary teams that designed and deployed AI video surveillance: existing CCTV wired into computer vision models that flag theft, unusual behaviour and entities of interest.

RetailPrivate securityLaw enforcementEnterprise & public sector

Live examples · illustrative

PERSON 0.97ITEM · PICKEDCONCEALMENTCAM 04 · RETAIL● REC 14:32:07Faces blurred · on-site only⚠ Suspected theft · Aisle 4

Operator notified · evidence clip 14:32:08–14:32:11 secured

How a frame becomes an alert

  1. CameraExisting CCTV, any brand, thermal or night vision
  2. Secure ingestStreams stay on-site, encrypted in transit
  3. Vision modelsDetect and track people, objects, events
  4. Event enginePatterns over time, zones and context
  5. OperatorAlert with the evidence clip attached

The teams I led

Multidisciplinary teams across 4 disciplines:

Computer visionInfrastructureCCTV integrationSecurity operations

Cortex41 and bespoke deployments built around it.

Built for

  • ReliabilityRuns around the clock, in harsh environments
  • ScalabilityFrom one site to a network of them
  • Data protectionFootage stays local; access is restricted
OmniClouds

Jan 2024 — Mar 2024 · Dubai

Lead Systems Architect · Distributed & Secure Infrastructure

Servers taken mid-attack. Recovered in an hour.

Led the response to a major security incident: physical servers removed without authorisation during an active attack. Services restored, data intact, no demands conceded.

Incident responseRecoveryData integrity

Incident replay · illustrative

REMOVEDREMOVEDISNDPORTALUPAPIUPSTORAGEUPBACK OFFICEUPDATA CENTRE · RACK B● LIVE⚠ Demand: pay to restoreAll services up

1 week unresolved outside · 1 hour once the team stepped in

The calls I made

  1. Keep waiting on the outside firm?No. I asked to step in.
  2. Concede to the demands?Never.
  3. Restore first, or contain first?Contain, then restore.
  4. Back online when?Once integrity is verified.

The recovery team

Assembled and coordinated a dedicated team, and defined the containment and recovery strategies.

InfrastructureSecurityNetworkingData recovery

The difference

1 weekAn outside risk-mitigation firm. Still unresolved.

1 hourThe team I assembled. Assets recovered.

0Demands conceded

As lead architect

  • System-wide architectureOwned it end to end
  • Critical decisionsMade the calls that couldn't wait
  • Technical leadershipAcross multiple enterprise projects
OmniClouds

Feb 2022 — Jan 2024 · Dubai

Senior Software Architect · Distributed Infrastructure

A data centre burned. I didn't rebuild it. I distributed it.

A fire severely damaged a client's data centre. Instead of a traditional centralised rebuild, I led the redesign: secure, distributed storage built on encrypted fragments across private, IPFS-inspired networks.

Data-centre recoveryDistributed storageEnterprise

Fire drill · illustrative

DATA CENTREHQONOPERATIONSONFINANCEONPLANTSONBEFORE · ONE DATA CENTRE● ONLINE⚠ Data centre downAll services running from one building

One building, one point of failure

How the storage works

  1. FragmentEvery file split into pieces
  2. EncryptEach piece sealed; no site holds readable data
  3. AddressPieces found by content hash, not location
  4. DistributeSpread across a private network of sites
  5. RebuildAny file reassembled from surviving pieces

The client

Al Kharafi GroupLinkedIn ↗Industrial SectorOne of the major industrial groups in Egypt: aluminium, paper, brake systems, foam and packaging.
5,000+ peopleFactories across EgyptM. A. Kharafi & Sons · Kuwait, 1956

Promoted to Senior Software Architect after taking ownership of complex infrastructure challenges for enterprise clients.

The result

  • Infrastructure cost reduced
  • Operational cost reduced
  • Resilience improved
  • Fault tolerance improved

The decision

Rebuild

  • One site again
  • Same single point of failure
  • Full data-centre cost

DistributeChosen

  • Encrypted fragments, many sites
  • No single place to lose
  • Lower infrastructure and running cost
OmniClouds

Dec 2021 — Dec 2022 · Dubai

Software Architect

Where it started: architecture, next to the CEO.

Hired as much for my training as an architect as for software. Worked directly with the founder & CEO, designing secure, scalable cloud systems for enterprise clients running mission-critical services.

SecureScalableMission-critical

Blueprint · illustrative

GATEWAYZONE 1APPAPIAUTHDB · PRIMARYZONE 2APPAPIAUTHDB · REPLICAREPLICATIONSECURITY PERIMETERAPPROVEDENTERPRISE CLOUDDRAWN · R. LAGOSREV A01/03SHEET 01 · SYSTEM

A blank sheet and a brief: enterprise, mission-critical

What the role covered

  • 01System architectureHow the pieces fit together, and how they fail
  • 02Infrastructure designWhere it runs and how it grows
  • 03Early decisionsThe calls that are expensive to change later

Where it led

Four roles at OmniClouds, from here:

Worked directly with

Amr A. EidFounder & CEO, OmniCloudsLinkedIn ↗

OmniClouds · “A platform to transform”. Cloud and connectivity as a service, delivered with telecom operators: pay as you go, no upfront investment.

Hired for the overlap

ARCHITECTURESOFTWARECYBERSECURITY

Hired for my architect's training as much as for code: one person holding physical architecture, software and cybersecurity in the same design.

Rabid DAO

2020 · Portugal

Invited in · Tech & Teams

Extreme sports, owned by their community.

Two skater friends had athletes who wanted in, and they invited me to help build it: a DAO around an NFT marketplace and extreme-sports betting, where the NFT holders decided. The point was awareness for extreme sports and everyone around them.

DAONFT marketplaceBetting poolsExtreme sports

The platform · illustrative

SKATE#0740 MATICBMX#1240 MATICSURF#0340 MATICCOLLECTWALLET · BMX #12= 1 VOTE IN THE DAOMARKETPLACE

The marketplace

How it started

  1. Two skater friendsClose to the scene, with the idea
  2. Their athletesRiders who wanted to be part of it
  3. They invited me inThe technical side and the teams
  4. One goalAwareness for extreme sports and their community

How far it got

  • Architected
  • Built
  • Marketplace out
  • Full launch
bear market ↘

Then the bear market started. A platform whose economy runs on people wanting to hold, trade and bet never reached the finish line.

Timing is part of the architecture.

Owned by the DAO

MarketplaceNFTsBettingPools on eventsDAONFT holders decide · pool profits shared in the DAO

Neither belonged to a company. Both belonged to the DAO, and the holders of the platform's NFTs made the decisions.

Blenso

Jan 2019 — Jan 2020 · Lisbon

Founder

Architected in Lisbon. Built by teams in Brazil.

A software company for blockchain, data decentralisation and security projects: each one architected with the client, then built by outsourced teams, mainly in Brazil, run as one distributed network.

BlockchainData decentralisationCybersecurity

How we delivered · illustrative

LISBONBRAZILATLANTIC · DELIVERY NETWORKLisbon: architecture with the client

Architecture stays with the client; building scales with the network

How a project ran

  1. ArchitectDesigned with the client, in Lisbon
  2. AllocateA team matched to the project, mainly in Brazil
  3. BuildOutsourced development, coordinated as one team
  4. ReviewArchitecture and security checked before hand-off
  5. DeliverShipped to the client

As founder

Built the company and its delivery network, and architected the projects with each client.

The network

  • PTLisbonArchitecture with the client, coordination
  • BRBrazilThe core development teams
  • +Other continentsA freelance network on demand

What we built

  • BlockchainSmart contracts and on-chain systems
  • Data decentralisationData that doesn't live in one place
  • CybersecuritySecurity designed in, not bolted on

Wood Houses Projects

2017 — Oct 2019 · Lisbon

Co-Founder & Architect

Houses designed in Lisbon, built in factories.

Prefabricated homes. I designed the models, the construction systems and the wall typologies, then found the factories to build them, in Porto, Braga and Spain.

PrefabricatedModularArchitecture

Where they were made

LISBONDesignPORTOFactory partnersBRAGAFactory partnersSPAINManufacturers

Designed in Lisbon

From drawing to house

  1. DesignThe model, the system, the wall typology
  2. SpecifyMaterials, methods and technical standards
  3. FactoryBuilt by partners in Porto, Braga and Spain
  4. LogisticsFrom the factory floor to the site
  5. AssemblyPut together on site, quickly

Started with builders who already did it. The plan was a factory of our own.

What you could order

Model housePick a ready design
ProjectDesigned for your site
Wood frameSteel frameLight frame

Wall typology

CLADDINGMEMBRANETIMBER STUDS + INSULATIONBOARDINTERIOR FINISH

Wood frame · Timber studs, warm and quick to build

Duarte Caldeira

Jul — Aug 2018 · Funchal, Madeira

Architecture intern

Where I learned what an architecture office really takes.

A summer internship offered by the Regional Government of Madeira. My first real look at how a project is prepared and handed over to construction.

Project phaseClientsMaterials

The building · Estrada Monumental 268, Funchal

The plot, before the project

I worked on the project phase. The build came after: it was a summer internship. Imagery: Google Street View.

From project to site

  1. ClientBrought into the design, in direct contact
  2. DesignThe building takes shape
  3. MaterialsResearched and chosen for the project
  4. DrawingsDetailed enough to build from
  5. HandoverEverything the site needs, before it starts

What an office really takes

  • ClientsIn the room, all the way through
  • MaterialsResearched, chosen, justified
  • PreparationMost of the work happens before the site
Coat of arms: Região Autónoma da MadeiraCoat of arms: Funchal

A summer internship offered by the Regional Government of Madeira, in Funchal.

Arms: Wikimedia Commons (CC BY-SA)

Faculdade de Arquitetura · Lisbon School of Architecture · Universidade de Lisboa

2014 — 2019 · Lisbon

Integrated Master in Architecture

Trained as an architect: five years, one integrated master's.

Architecture at the University of Lisbon: bachelor's and master's in one five-year degree. Where I learned to design under constraints, and to think in systems.

ArchitectureIntegrated master'sLisbon

The studio · illustrative

first idea…FAUL · STUDIO · SHEET 1/3

A blank sheet

At the same time

2005200920132017C.D. NacionalGame serversFAULWood HousesDuarte Caldeira

Football, servers, a prefab start-up and an internship, alongside the degree.

What carried over into software

  • Designing under constraintsSite, budget, rules and people, all at once
  • Thinking in systemsA building is a system of systems
  • Drawing to explainOne good drawing beats a page of text
1st cycle3 yearsFoundations: studio, drawing, construction
2nd cycle2 yearsMaster's: design, research, dissertation

One degree · 300 ECTS

Five years of

Design studioConstructionStructuresUrbanismHistory & theoryDrawing & geometry

Private Game Servers

2013 — 2017 · Online

Builder & Operator

Where infrastructure started: game servers.

From 2013 I set up and deployed private servers for Minecraft, Counter-Strike, ARK and FiveM. From 2015 it was mostly FiveM: my own servers, and servers I helped build for others.

Self-hostedDeploymentCommunities

Server console · illustrative

root@vps-01● SSH
  1. $ ssh root@vps-01

From a bare VPS to players connecting

2013 → 2017

  1. 2013Minecraft and Counter-Strike: the first servers
  2. 2015ARK, then FiveM
  3. 2015–17Mostly FiveM: my own servers, and servers for others

Built for others

Besides my own, I helped other communities build their servers, end to end:

SetupCustom resourcesConfigurationHand-over

The servers

  • Minecraft:25565Where it started
  • Counter-Strike:27015Dedicated servers
  • ARK:7777Survival worlds
  • FiveM:30120GTA V roleplay, from 2015 the main one

What real players teach you

  • UptimePlayers notice every minute it's down
  • PerformanceLag is a bug report from everyone at once
  • SecurityAdmin access, cheaters, attacks: all day

Cybersecurity, since 2009

2009 — present

Self-taught, and still learning

2009: the year curiosity got me.

Something small made me want to know how it actually worked. Pulling that thread showed me security isn't one skill, it's an ocean of them, and I have been swimming in it ever since.

Curiosity firstSelf-taughtStill learning

One thing I got curious about · illustrative

FIVEM · ADMINuserpasswordSIGN IN✕ wrong password⚠ signed in without a passwordI WANTEDTHE WHYMY OWN SERVER · ADMIN PANEL

My own game server's panel

How I learn

↻ still

  1. AskWhy does this work?The question comes before the tool
  2. UnderstandFind the real causeThe reason, not the symptom
  3. FixClose it properlyOn my own systems first
  4. Keep goingThere's always another layerWhich is the fun part

Where curiosity took me first

  1. FirstItem duplicationA game's economy, racing itself
  2. ThenSQL injectionInput that becomes instructions
  3. ThenDDoSExhausting a service instead of entering it
  4. ThenNetworksPorts, routing, VPNs, VPSs: the ground it sits on

An ocean of categories

2009 → 2026

  • Web
  • Networks
  • Infrastructure
  • Game servers
  • Cryptography
  • Reverse engineering
  • Malware
  • Forensics
  • Social engineering
  • Hardware
  • Cloud
  • OT / ICS
  • Mobile
  • Identity
  • AI systems

Fifteen years in and it's still mostly unexplored. That's why it never got boring.

Same curiosity, bigger systems

All of it came from learning communities. There weren't many back then, and they taught everything: code, concepts, and why a thing works before how to do it.

LAN parties, MMOs & bots

2005 — 2013

Player, then tinkerer

It started at a LAN party.

A bar LAN party my cousins went to, with Counter-Strike 1.6 on every screen. Then MMORPGs, and friends of my cousins with IT and security backgrounds who showed me bots. It looked like magic.

Counter-Strike 1.6MMORPGsBots

Where it began · illustrative

BARMEde_dust2✚100 $800CT 7 : 5 TCOUNTER-TERRORISTS WIN

A bar, a room full of PCs

Who showed me

  • My cousinsTook me to the LAN party
  • Their friendsIT and security backgrounds: they showed me bots

What came next

In the order they came

  1. Counter-Strike 1.6
  2. Tibia
  3. RuneScape
  4. Dekaron
  5. World of Warcraft
  6. Guild Wars
  7. League of Legends

Full circle

Bots were the first software I saw act on its own. Today, at Humanos, I build the checks for what AI agents are allowed to do.

Clube Desportivo Nacional · Madeira

C.D. Nacional

2005 — 2014 · Funchal, Madeira

Striker

Before code: nine years as a striker.

It started at ESFUMA, Madeira's football school. A Nacional coach brought me to C.D. Nacional, where I played mostly as a striker, in the first division.

Striker · #9C.D. NacionalFirst division

The pitch · illustrative

9GOAL!NACIONAL 0 – 0

Kick-off

The path

  1. 2005ESFUMAEscola de Futebol da Madeira: where it started
  2. ScoutedA Nacional coachBrought me to C.D. Nacional
  3. C.D. NacionalFirst divisionMostly as a striker, the #9
  4. 2014Last seasonThen architecture, full time

Where the journey starts

Discipline on the pitch, then architecture, servers, distributed systems and security. All the way to Humanos.

ESFUMA, Escola de Futebol da MadeiraESFUMAEscola de Futebol da Madeira
Clube Desportivo Nacional · MadeiraC.D. NacionalFirst division

What football taught me

  • DisciplineIt shaped me into a disciplined person
  • ResilienceLose on Sunday, train on Monday
  • TacticsReading the game, not just playing it
  • TeamI thrived in a team environment

Rui Lagos

01 / 16