Zach Brattain

Cost savings. Reduced security incidents. Revenue growth. The financial and operational benefits of smart, automated certificate management through DigiCert ONE.  In the recent Forrester TEI Report, we dive into how organizations are modernizing PKI with DigiCert® ONE, gaining speed, control, and measurable value. This is what strategic advantage looks like. Explore the full report for more insights. 👇 https://lnkd.in/gXhED6ff

1,150

5 Comments

🔥 Over 50% of Wiz customers have reached ZERO Critical Issues. Here’s how CISOs and DevOps teams are transforming cloud security — and what you can learn from them 👇 For CISOs, it’s about measurable risk reduction and board-level outcomes. For DevOps teams, it’s about speed, ownership, and operational excellence. For both? It’s about reaching and maintaining Zero Critical Issues. That’s why we created the Wiz All-Stars Club, recognizing organizations that consistently deliver exceptional security outcomes across their cloud environments. 🏅 Vulnerability Vanquisher – No critical vulnerabilities 🔐 Identity Investigator – No excessive admin privileges ⚡️ #MTTR Streaks – Track how quickly new critical risks are resolved #MTTR (Mean Time to Resolution) is now the north star ⭐ . It reflects how fast teams react, adapt, and protect — keeping cloud risk low and confidence high. 🙌 Huge kudos to Eden Naftali and Guy Mast for leading the charge in building this into our product platform domain. They’re enabling security and DevOps teams to act fast, stay ahead, and keep security a shared goal. 📣 Want to see how top teams are doing it? Check out the customer stories in the first comment by Eden Naftali and Shashank Golla 👇 #CISO #DevOps #CloudSecurity #ZeroCritical #MTTR #Wiz #SecurityOwnership

208

3 Comments

An AI-powered #SecOps platform designed to unify and accelerate threat detection, investigation, and response? That's Splunk Enterprise Security 8.2 in a nutshell. Get the inside scoop on the latest #SplunkSecurity capabilities that were created to align with how security teams *actually* work - more from today's #splunkconf25 announcement right here. 👉 https://splk.it/3V6oABt

98

Unnecessary escalations drain resources, slow resolution, and increase SLA breach risk. But, this human-centric bottleneck is avoidable. The new BigPanda Triage Agent feature streamlines triage by correlating observability events, service desk tickets, historical incidents, and external factors in one AI-powered summary. See how AI-driven triage helps eliminate investigation toil. 👉 https://bit.ly/4rLhJwg #BigPanda #AIOps #IncidentResponse #ITOps #ServiceDesk #AIForIT #OperationalEfficiency

12

“An absolute must.” That's how CIO Brian Atkinson (of Idaho College of Osteopathic Medicine) described Island during a recent discussion with Reworked. Let's take a step back. ICOM encountered a challenging situation: → Entirely SaaS-based operations → Various compliance requirements (HIPAA, GLBA, etc.) → A diverse user group (students, physicians, faculty, & staff) This complex environment led them - like many organizations today - to adopt legacy solutions (such as VDI), resulting in slow and awkward browser experiences. Not ideal. Then Brian found Island. And things started to improve. However, this story goes beyond just problem-solving. We didn't simply deliver a product and vanish. We were on-site twice weekly, offering best practices and continuous support to help ICOM maximize the Enterprise Browser's benefits. Our goal has always been to create an environment where organizations don't have to choose between productivity and security. An approach that clearly “delights both users and IT teams because it finally gives them what they've both been wanting: security without sacrificing usability.” Read more about ICOM’s journey via the link in the comments. ↓ Virginia Backaitis Gartner

10

Is culture important? Prove it. At Costco Wholesale , it’s a big deal. At my local Costco in Tucson, I saw this board full of Culture Coaches. It immediately grabbed my interest. I asked about it. These aren’t posters or slogans, they’re real team members responsible for training, reinforcing, and strengthening culture across the organization. I’m impressed! Many organizations do not invest in reinforcing or changing culture. In fact, I tend to roll my eyes when leaders talk about “changing the culture.” Because most people have no idea how hard that actually is. Culture will outlast directives, memorandums, and crisis. What actually changes culture is dedicated, invested, competent, and empathetic leaders, people in the trenches, every day, shaping behaviors and expectations with their teams. I think this is fantastic. Have you seen a successful approach to changing organizational culture? #culture #costco #change #coach

62

21 Comments

What can I say? I got a potty mouth 🤷‍♂️ A few weeks ago I posted about how I set expectations with new hires. The post contained language that was a little too spicy for some. I removed it and moved on. But then something unexpected happened: I got dozens of requests for the text. They said I clearly and directly articulated their expectations for their teams with no room for misunderstanding. So here it is again, rated PG instead of R. --- I never really wanted to manage people. That was never a goal for me, and for a long time, I avoided it. But a few years ago, I realized I need help if I want to scale the value I aim to deliver to the company. So when I hire, I give people a simple set of rules - so we both know what’s going to happen: 1️⃣ I’m not a 🦆ing proxy. I don’t want to be involved in your daily tasks, I don’t need constant updates, and I don’t want to waste time in meetings I don’t contribute to. If I need to know, I’ll ask. Tell me if you need help - otherwise, it’s yours. You own your projects. And to be clear: you alone own success, but we share failure. 2️⃣ Shoot first, ask questions last. You were hired because I trust you and you know what’s right. Do what you think best serves the business and its goals. Move fast. If you 🦆 up, I’ve got your back. Don’t wait for approvals. Don’t overthink it. Just go. 3️⃣ I’ll rarely tell you what to do. Much of what you’ll do will happen because you generate your own work. Talk to people, see what they need, spot gaps, get 💩 done. If no one else is solving a problem - it's yours to solve. 4️⃣ Effort doesn’t mean 💩 - ONLY outcomes and results matter. If you deliver value working fewer hours or find ways to be more effective, great. There’s no pride in 70-hour weeks with nothing to show for it. If you’re working hard but not getting results, stop and reevaluate. Let's change something. 5️⃣ Say NO - often, if you need to. Even (especially) to me. If something doesn’t make sense, if it can’t be done this way, if the ask and the outcome don’t align - say no. Some people won’t like it. 🦆 it. You’re not here to win popularity contests, you’re here to drive results. Please the business, not the crowd. We’ll handle the fallout together. 6️⃣ There’s no such thing as "we succeeded but the company failed". Our job isn’t to complete projects. 🦆 our projects. Our job is to move the company forward. A project is only a success if it drives real, tangible impact. If we did everything "right" but the business didn’t benefit - we didn’t win. This approach doesn’t work for everyone. You need to be comfortable in gray areas, proactive, confident. I’ve passed on a lot of great people because they felt this wasn’t right for them - and that’s okay. I don’t have all the answers. But here’s what I do know: You can’t scale by holding on too tight. Managing isn’t about control - it’s about hiring right and letting go. And honestly, that’s the hardest part. --- Got your own version of this? Let’s hear it!

292

18 Comments

🚀 Inside the SaaS Security Workflows that Scale At Obsidian Security, we’re proud to partner with security teams redefining what modern SaaS defense looks like. One standout: Gabe Bello’s team, who used Obsidian’s APIs to build automated workflows that deliver visibility, accountability, and scale. From real-time OKR tracking to webhook-powered Jira automation, their approach is a masterclass in scaling SaaS security. Here’s what they built: 1️⃣ API-powered metrics that connect SaaS risk to leadership goals 2️⃣ Automated Jira workflows that close tickets the moment issues resolve 3️⃣ Scalable tagging that makes security operationally seamless 🔗 Read the story here https://lnkd.in/eVvF-Dxq

23

🔐 Want to make your #DevSecOps pipeline bulletproof? JFrog's SVP Security, Asaf Karas, covers how you’ll discover how to: • Embed #security into your #SoftwareSupplyChain with tools like #Curation and Transitive Contextual Analysis • Focus on the #CVEs that are critical, exploitable, and already running in production • Automate trust & attestation without slowing development • Build defense mechanisms that scale with your team like #AgenticRemediation 👉 Watch now and level up your #security game: https://bit.ly/4nHlfVX #CyberSecurityAwarenessMonth

34

🔍 Adaptive Exposure Management (AEM) shifts the paradigm in cyber defense - from visibility to elimination of attacker opportunities. With AEM, your team gains: - Prioritized insights into the exposures that matter most - Continuous monitoring of misconfigurations and control gaps - Automated protection via AMTD for systems you can’t patch right away This datasheet explains how Morphisec turns exposure into defense. Want to learn more? Check out our platform overview: https://hubs.ly/Q03LwhVp0 Follow Alexei Rubinstein, Brad LaPorte, Jayakumar Kurup, CISSP, Michael Gorelik, Richard Benigno, and Ron Reinfeld for more cyber updates!

19

Threat modeling platforms can often look strong in early demos—fast setup, clean workflows, bold AI claims. What’s harder to assess upfront is whether those platforms will scale as architectures grow, teams expand, and threat modeling becomes an operational practice. The 2026 Threat Modeling Buyer’s Guide helps threat modeling teams evaluate solutions based on long-term fit. If you’re evaluating platforms, this guide is for you. 👉 Get the guide: https://lnkd.in/e55dsxnh 

24