Least privilege
An agent only gets the permissions strictly required for its task, on a dedicated service account. Never your personal credentials.
AI automation · MCP · Cybersecurity
Your processesfinally runwithout you
PL Studio plugs artificial intelligence into your business tools through the MCP protocol, automates what costs you hours every week, and builds the websites and interfaces that carry that machine. All of it designed, from the first line, by a cybersecurity engineer.
- 12 h
- recovered per week per team, on average
- MCP
- agents wired into your tools, no copy-paste
- 0
- data exposed: security by design
Stack in hand
- Claude / MCP
- OpenAI
- n8n
- Make
- Next.js
- TypeScript
- Supabase
- PostgreSQL
- Docker
- Notion API
- HubSpot
- Slack
- Google Workspace
- Stripe
- Python
What the studio does
Four levers, one goal: let the machine do the repetitive work.
Every engagement starts from a real process, timed and costed. No demo that shines and dies three weeks later.
01
Process automation
Quotes, follow-ups, invoicing, reporting, client onboarding, triage of inbound requests. We map the flow, remove the dead steps, then automate the rest with n8n, Make or custom code.
- Mapping and quantified savings
- Multi-tool orchestration
- Error recovery and alerting
02
AI agents wired through MCP
The Model Context Protocol gives an agent direct, controlled and traceable access to your tools: CRM, database, drive, ticketing. The agent reads, writes, acts. You keep control of every permission.
- Custom MCP servers
- Granular scope and rights
- Every action logged
03
Websites and interfaces
A website is not a brochure: it is the entry point of your automations. Forms that trigger workflows, client portals, dashboards, internal tools. Performance and search visibility included.
- Next.js, instant rendering
- Technical SEO and Core Web Vitals
- Custom design, never a template
04
Security and digital image
Attack surface audit, hardening, GDPR compliance, monitoring of what the web says about you. An automated company without security is a company that has simply automated its own data leak.
- Technical and OSINT audit
- Hardening and remediation
- Online reputation monitoring
Method
Four weeks to move from “we'll see” to “it is in production”.
A short framework, dated deliverables, and one single contact from the first call to go-live.
Diagnostic
Days 1 to 3We time your processes, identify the three that cost the most and quantify the expected gain. You leave with the map, even if we stop there.
Design
Week 1Solution architecture, tool selection, permission model and human control points. Nothing goes live without a fallback plan.
Build
Weeks 2 and 3Development, tool connection, testing on real data, error handling. Every automation is versioned and documented.
Operate
OngoingProgressive rollout, dashboard of the real gains, team training and maintenance. We measure, adjust, then extend.
How it works
MCP, explained without jargon.
Connecting an AI to your tools used to require a custom integration per tool. The Model Context Protocol changes that: one shared language between the agent and your systems. Pick a step.
01 / 05
Trigger
An email arrives, a form is submitted, a row appears in your CRM, a schedule fires. The workflow starts without anyone clicking.
Paul Lazaro
PL Studio · pl-studio.fr
- Background
- Software engineering degree
- Specialty
- Offensive and defensive cybersecurity
- Field
- Automation, applied AI, MCP
- Based in
- France · remote engagements
$ pl-studio --audit
scanning processes ......... 3 bottlenecks
estimating time lost ....... 12h / week
checking exposure .......... 2 findings
ready to automate ▍
The story
Software engineer, specialised in cybersecurity. And tired of watching brilliant teams copy and paste.
My name is Paul Lazaro. I spent my engineering years looking closely at how systems break: a bad configuration, a leaking dataset, an improvised procedure repeated a thousand times because “that's how we've always done it”.
Cybersecurity taught me one thing that reaches far beyond it: a system nobody understands is a system nobody controls. That is true of a firewall. It is just as true of a sales process held together by five spreadsheets and one person's memory.
PL Studio came out of that. Automate, yes, but by building systems that are readable, documented, reversible and safe. And because a company is also judged on what the web says about it, I handle its digital image in the same move: website, search visibility, exposed surface, reputation.
One single contact, from the security audit to the automation going live. Simpler for you, and far more coherent technically.
Paul Lazaro — Founder, PL Studio
Security
Automate without opening the door.
Every automation multiplies the access paths between your tools. That is exactly where incidents happen. Here is what is non-negotiable in a PL Studio engagement.
Full traceability
Every automated action is logged: what, when, triggered by whom, with what result. An audit is still possible six months later.
Isolated secrets
API keys and tokens stored in an encrypted vault, scheduled rotation, no sensitive value hardcoded in a workflow.
Human in the loop
For irreversible or financially significant actions, human approval stays mandatory. The AI proposes, you decide.
GDPR compliance
Mapping of processed data, minimisation, retention periods, European hosting when the context requires it.
Fallback plan
Any automation can be switched off in one action, with a documented manual mode. You are never locked into the system.
Plans
Three ways to start.
Every engagement is quoted after the diagnostic, based on the real measured gain. No blind package.
Diagnostic
Find out where time is lost
A short, concrete audit of your processes and your online exposure.
- Mapping of 3 key processes
- Cost of lost time and possible savings
- Attack surface and reputation scan
- Prioritised roadmap
- One-hour debrief over video
Automation
The core of the work
Design and go-live of the automations with the highest return, MCP agents included.
- Everything in Diagnostic
- Custom workflows and connected AI agents
- MCP server dedicated to your tools
- Testing on real data and error handling
- Documentation and team training
- 30 days of support after go-live
Full studio
Automation and image
The automation, plus the website and the hardening of your online presence, under one roof.
- Everything in Automation
- Custom website or web application
- Technical SEO and performance
- Security hardening and remediation
- Dashboard of the gains
- Monthly support
Priced per engagement or as a monthly retainer. Firm quote within 72 hours of the diagnostic.
Questions
What people ask before signing.
No, and the method is the opposite of that. We plug into what exists: your CRM, your drive, your mailbox, your ERP. A tool change is only proposed when it is the single viable option, and it is then quoted separately.
The Model Context Protocol is an open standard that lets an AI use your software in a controlled way, like a colleague with their own credentials. Instead of pasting text into a chat, the agent reads and writes directly in your tools, with defined permissions and a full log.
Only what is strictly necessary, and according to your rules. Depending on sensitivity, we filter upstream, pseudonymise, choose European hosting, or move to a self-hosted model. That is settled during the diagnostic, not afterwards.
The first automation is usually in production two to four weeks after the diagnostic. We deliberately start with a high-gain, low-risk process, to build trust before expanding.
Every workflow has error handling, an alert and a documented manual mode. You are warned before your customers are. Post-launch support covers fixes, and a maintenance contract can take over.
Yes. A three-person team spending ten hours a week on repetitive tasks often has more to gain than a large group. The diagnostic format is identical, the scope adapts.
Contact
Let's talk about the two hours you lose every day.
Describe your situation in a few lines. You get a first written analysis within two business days, no strings attached.
- contact@pl-studio.fr
- Reply
- Within 2 business days
- Area
- France and remote