Ivan Pointer

Here’s a pattern I’m seeing more often: More sites. More assessments. More reporting expectations. Same headcount. Security teams are being asked to scale output without scaling structure. So what happens? Assessments become episodic. Reporting takes too long. Prioritization becomes subjective. And leaders spend more time translating risk than reducing it. This isn’t a capability issue. It’s an architecture issue. At some point, physical security has to operate with the same operational discipline as finance and IT. Otherwise it stays in permanent catch-up mode. For security people overseeing medium to large portfolios (20+ sites): What’s currently your biggest bottleneck volume, visibility, or validation? And why do you think this is?

5

1 Comment

Exciting milestone at Qualys! 🚀 With our CEO Sumedh Thakar's at ROCon'25 (Risk Operations Conference) keynote we launched the ETM platform now supercharged with Trulens (for industry based adversary-based risk prioritization & remediation—stay ahead of trending threats), TruConfirm (to validate exposures and confirm exploitation to accelerate remediation for the proven exposures using attacker techniques), ETM Identity(Secure human and non-human Identity exposures and risk management) and Agentic AI orchestration embedded in our product workflow. This is more than an upgrade—it's a fundamental shift from traditional cybersecurity toward a holistic, risk-focused security paradigm. By integrating Agentic AI workflows, our team and key stakeholders have enabled customers to harness ETM for dynamic prioritization of business entities—driving the most meaningful impact at machine speed and enterprise scale. The platform empowers organizations to make smarter decisions, maximize efficiency, and stay ahead of threats with intelligent automation and real-time risk visibility. This achievement stands as a testament to the vision, collaboration, and relentless pursuit of excellence across Qualys enabled by visionary leadership of Sumedh Thakar, Dilip Bachwani, Shailesh Athalye, Jonathan Trull, Mayuresh Ektare Many thanks and congratulations to April Lenhard, Bhagyashree Thorat, Snehal Mandavkar,Ishani Ghosh,Bharat Jogi, Saeed Abbasi, Balaji Venkatesan, Kedar Phadnis, Sonal Thakkar, Nitin Maini, Amol Sonawane, Nibin Geevarghese, Jimit Thobhani, Namrata Raheja, Ramesh Wodaiyar, Vivek Nighojkar, Kawita Lanjewar and many more to make this happen. Thank you to everyone involved—your innovation is propelling a new era in risk management and security. #RiskManagement #AgenticAI #Cybersecurity #ThreatIntelligence #Innovation #Qualys #ProductLeadership #CustomerImpact #ROCon

26

For years, the Security Awareness Proficiency Assessment (SAPA) has been the gold standard for benchmarking human risk. But as security programs mature, "standard" isn't always enough. Today, KnowBe4 unveiled the new Custom SAPA Agent within the AIDA suite. We’ve taken the data from over 5 million completions and combined it with adaptive AI to create something truly environment-aware. It’s not just a test; it’s an intelligent agent that: ✅ Understands your unique security stack and industry context. ✅ Curates questions based on your specific internal policies. ✅ Pinpoints high-priority risk areas with granular, per-question analytics. Helping customers move from generalized data to pinpoint accuracy is exactly what AIDA is all about. Get more details here: https://bit.ly/4biXSx4 #HumanRisk #AgenticAI #KnowBe4

3

There's a new supply chain attack in town, and this one propagates using a worm...inside npm. Charlie Eriksen joins me in this video to discuss how this happened, how bad it is, and what we can do to prevent it in the future. https://lnkd.in/d9fhE34i

82

4 Comments

How One Maintainer Rage-Quit and Broke 100,000 Projects When One Developer Pulled the Plug — and Thousands of Builds Exploded Overnight. https://lnkd.in/d_GA7Ns9

1

Manual compliance work doesn’t just slow your team down, it drains your budget. Writing SBOMs and audit notes by hand takes hours of engineering time and leaves room for costly errors. Missed artifacts and inconsistent documentation can lead to fines ranging from thousands to over a million dollars each year. SmoothDev automates compliance documentation in real time, generating accurate release notes, SBOMs, and logs directly from your workflow. No scrambling before audits, no wasted hours — just instant, reliable compliance at scale. #ComplianceAutomation #EngineeringProductivity #SoftwareDevelopment #AuditReady #SmoothDev #DevTools #Automation #AIforDevelopers #CodeSmarter

6

🔐 "Single sign-on" might be one of the most deceptively named features out there Don't get me wrong, SSO is essential. Security alone makes it non-negotiable. I just wish it was actually SINGLE sign-on. Even when I’m already logged into my identity provider, every time I click a link: a Figma file, a Miro board, a Confluence page - I’m greeted with another login prompt. Sure, often all I have to do is enter my email or click the SSO button again. But why should that step even exist? In a sane world, if I’m authenticated, any link I open should just… open. No interruptions, no redundant handshakes, no friction. Total first-world problem of course, a minor nuisance at best. Still...

18

8 Comments