My Writing

I write about security leadership and technology, sharing strategies, practical frameworks, and field notes. My goal is to capture what I've learned and contribute to conversations in our community.

• Artificial Intelligence Five Questions to Answer Before Buying an AI Security Product
  In the young security-for-AI market, what a product protects and how it ships can differ from what its label promises. With five questions drawn from the AI Defense Matrix Catalog work, you'll know...
• Artificial Intelligence A Field Guide to the AI Security Market
  The market for products that secure AI is crowded and hard to read, with overlapping categories and products that each do many jobs. With the AI Defense Matrix, you can ask the right questions, tell...
• Product Management Cyber Company Profiles: Independent Analysis of Security Vendors
  Judging a security vendor from its own materials tells you little about how it compares to the rest. Cyber Company Profiles scores hundreds of cybersecurity companies from public sources.
• Artificial Intelligence What 239 Products Reveal About the Shape of AI Security
  The security-for-AI market is young and lopsided. Incumbents quickly extended their products into the AI versions of assets they already secured, while the more distinct AI assets drew startups and...
• Artificial Intelligence Benchmark Your AI Security Decisions: A Five-Minute Survey
  Answer ten questions about how your organization secures AI, and you get a peer benchmark in return. Sounil Yu and I will publish findings on which AI assets peers protect, who decides, and where...
• Malware Analysis A Report Template for Malware Analysis
  A malware report is only as useful as readers' ability to find in it what they need. This customizable template organizes the findings into a coherent structure, so a responder, a manager, or a...