Javier Garza is a staff developer advocate at Snyk and co-author of Learning HTTP/2. His teaching spans web performance, application security and the practical security problems introduced by AI agents.[1]
Start with Learning HTTP/2 →
Links
Javier Garza: speaker profile
X LinkedIn Staff Developer Advocate · Snyk
Career
Garza’s professional speaker profile identifies his Snyk role and describes writing and presenting on HTTP/2, security and web performance. He also hosts the San Francisco Bay Area chapter of AI Security Engineers. His work uses talks and workshops to translate infrastructure and security topics into practices developers can apply. The profile links his X and LinkedIn accounts under the same professional identity.[1]
Contributions
Understand the protocol before optimizing around it
Learning HTTP/2, co-written with Stephen Ludin, explains the protocol and its performance implications. The book follows the transition from HTTP/1.1 through frames, streams, flow control and header compression, then examines implementations and debugging. A useful theme is that an optimization built around the old protocol can become a poor fit for the new one. Its tools and case studies give developers a way to measure behavior rather than rely on protocol-version labels alone. The book is a 2017 technical reference, so present-day deployment choices still need current documentation.[2]
A foundation for agent security
Garza’s AI Security Engineer Foundations workshop brings together threat modeling, shadow AI, LLM application risks, agent and MCP security, red teaming and AI-assisted coding. Its scope treats AI security as an engineering discipline with concrete systems to inspect, rather than a single prompt-filtering feature. The workshop description is a teaching plan, not evidence that a particular defense eliminates all agent risks.[3]
Tools, writing & talks
Writing, research & talks
Start here
Learning HTTP/2oreilly.comA practical protocol and performance guide covering HTTP/2 operation, transition, measurement and debugging.
Start with Learning HTTP/2 if you know the basics of HTTP requests and responses. Read the evolution and protocol chapters first, then use the debugging chapters to connect the mechanics to observable browser and server behavior.
Co-author with Stephen Ludin[2]Snyk's workshop covers AI bills of materials, shadow AI, prompt injection and excessive agency, scanning MCP servers and skills, and agent-rule-driven scan, fix and rescan loops for secure AI development.
Catalog workOriginal source- AI Security Engineer Foundationssessionize.com
A workshop covering threat models, AI application risks, agent/MCP security and red teaming.
Workshop instructor[3]