Every AI · Every API · Every Connection — Secured. Stop managing your attack surface. Eliminate it—with the only identity-first Zero Trust fabric for every mach
Charlotte, NC
Joined January 2017
- Tweets3.6K
- Following3.2K
- Followers1.5K
- Likes2.3K
PHP2Shell runs before your application wakes up. The two critical PHP flaws (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2) fire in PHP’s request parser. That parsing happens before your login, your middleware or any access rule you’ve written.
Omdia put NetFoundry's identity-based microsegmentation through a live demo across Google Cloud and AWS. No open ports. No firewall rewrites. No downtime.
Get the free Technical First Look: info.netfoundry.io/lp-omdia-…
AI agents reversed the SaaS model. Vendor agents now call into your ERP, databases and MCP servers, so you own the public front door and the job of defending it.
Part 1 of our Zero Trust for AI Agents series: netfoundry.io/ai/ai-agent-at… View article
88% of organizations run more than one cloud. Most of them also run more than one segmentation policy model, and that’s where the trouble starts.
Your host firewall can’t tell your AI agent apart from the legitimate service running next to it.
We built a different model.
Every AI agent pilot starts as "just a test." Then it gets wired into a real tool, a real database, a real API key, and nobody remembers to turn it off.
That's the pattern our CMO Mark Jaffe flagged in this week's Reachability Watch: protections that technically exist but only switch on if someone configures them. A fresh install doesn't know it's about to become production.
Our take: you shouldn't have to win the defaults lottery to stay safe. When identity decides who can reach a service at the network layer, an auth setting left off doesn't leave the door open to the whole internet.
Worth a quick audit this Friday: how many agent pilots are running in your cloud right now, and who can reach them?
#ZeroTrust #AISecurity #MCP #IdentityFirstReachability
lnkd.in/p/e9BS3U7a
99% of organizations are implementing or planning microsegmentation.
Only 9% have actually protected more than 80% of their critical systems.
That gap is the whole story. And it's not a tooling problem — it's a sequencing problem.
An AI agent doing damage under a shared credential is invisible in your logs. One of the most capable AI labs in the world spent over a week unable to answer "which agent did this" — because the agents involved didn't have identities of their own.
Our new guide breaks down why that changes everything: netfoundry.io/resources/the-…
🥇 OpenZiti just landed the #1 spot on @startidentity's Top 7 Open-Source Zero Trust Tools for 2026 — beating Pomerium, Teleport, Headscale, NetBird, Boundary & Authelia.
Called "the most complete open-source zero trust networking platform," Apache 2.0 top to bottom.
startwithidentity.com/articl…
#ZeroTrust #OpenSource
For 19 years, "attackers don't hack in, they log in" was the industry's most reliable cliché. The 2026 Verizon DBIR just retired it.
Post-quantum cryptography is coming, but most organizations are stuck rebuilding their infrastructure to get there.
That single task fans out into calls to a search tool, a drafting sub-agent, a file-system connector — three new connections, none of them crossing your network's edge, none of them showing up in a firewall rule or a VPC flow log.
Non-human identity just became the #1 named AI security concern among CISOs and CTOs — ahead of phishing, credential theft, and endpoint compromise.
Most breaches don't stop at the front door. They spread. Legacy microsegmentation was built for a world of static IPs and flat networks. It wasn't built for cloud, OT, or AI agents. NetFoundry replaces IP-based segmentation with an identity-first overlay. Every workload authenticates before a connection ever exists — no VLAN redesign, no firewall rewrites, no waiting months to see results. One workload protected in a day. Every workload — VM, container, IoT device, or AI agent — under one policy model.
See how > netfoundry.io/microsegmentat…
#ZeroTrust #Microsegmentation #CyberSecurity #NetworkSecurity