The sales deck shows one box: a single, unified platform, one login, one view of the enterprise. The order form, by the time procurement is done negotiating, usually shows five to ten line items: a core SIEM license, a SOAR add-on, a user behavior analytics module, a threat intelligence feed subscription, an identity threat detection
Read More
SERIES: “The Death of Compliance Theater” — Part 2 of 3 Part 1 of this series made the case that a passing audit and a secure environment are two different things, answering two different questions. This post is about a specific, well-intentioned attempt to close that gap and why it mostly automated the wrong half of
Read More
SERIES: “The Death of Compliance Theater” — Part 1 of 3 In 2013, Target passed its PCI-DSS assessment. The retailer was, on paper, compliant with the payment card industry’s security standard, the same standard designed specifically to prevent exactly the kind of attack that hit it a few months later, when attackers used stolen vendor
Read More
Shadow AI Security Platforms vs AI SOC Tools Quick answer Shadow AI security platforms protect organizations from unauthorized AI applications, services, models, and agents. AI SOC tools use AI to investigate, correlate, prioritize, and respond to security incidents. The two categories solve different problems, but enterprises increasingly need them connected. Shadow AI creates data-exposure, identity,
Read More