Lenny Zeltser

An AI agent can amplify a malware analyst's skills, but the analyst must direct it and verify its findings.

Over 300 security professionals told Sounil Yu and me how their organizations secure AI.

A puppet theater at 338 Sixth Avenue in Park Slope, Brooklyn, took down its sign in 2026.

The Security Autonomy Matrix is a framework for deciding how much authority to grant your security AI agents, one kind of action at a time.

In the young security-for-AI market, what a product protects and how it ships can differ from what its label promises.

The market for products that secure AI is crowded and hard to read, with overlapping categories and products that each do many jobs.

Judging a security vendor from its own materials tells you little about how it compares to the rest.

The security-for-AI market is young and lopsided.

Answer ten questions about how your organization secures AI, and you get a peer benchmark in return.

A malware report is only as useful as readers' ability to find in it what they need.

In an effective executive brief, you lead with the bottom line and what a finding means for your organization.

Every dev tool you grant API access to, AI assistants included, can read the keys within its reach.

When a high-profile vulnerability surfaces, executives and customers want to know whether it affects you.