Over the last two decades, I’ve helped make hundreds of organizations more secure.

My mission is to leave the Internet a more secure place than I found it.

I’m helping organizations handle billions of users' information securely and increasing brand’s trust among their customers.

I run a cybersecurity media brand called Vulnerable U. We run a popular cybersecurity newsletter along with daily social media video content across platforms.

We've also built a team @ Vulnerable U to help YOUR company with its tech marketing needs. The team is staffed with experts who can create content for you without the marketing cringe factor. You don't need to teach us to spell Kubernetes. (I'm hiring content creators here if you're looking)

My portfolio:

→ I was the head of Software Security at Reddit where I help design security into all facets of the business for the 4th largest social network in the US and a top 20 most visited website globally
→ I teach company’s how to protect against cyber attacks and save tens of millions of dollars in losses.
→ I coach entrepreneurs and CISOs that need help with infrastructure, application, cloud, and security policies.
→ I advise early-stage companies in cyber security best practices and help pass technical due diligence from investors and potential acquirers.
→ I invest in early-stage private technology companies focusing on cybersecurity, software infrastructure, employee productivity, and B2B/SaaS.
→ I volunteer for a selection of non-profits who’s missions I connect with who wouldn’t otherwise be able to afford technical and specifically security consulting services..

If you want to work with me, get in touch

Matt Johansen

Daniel Kennedy

Information security manager with an understanding of the business, application development, and information security. Possesses progressive experience in financial services technology. 

Managed 20+ associates with cross functional offshore/onsite engineering teams. Possesses relevant certifications, including NASD Series 7, NYU Web Development, CISSP, and Certified Ethical Hacker (C|EH). 

Hands on program manager recognized for leadership in planning, scheduling, crisis/risk management, and definition of scope for information technology and security projects. A proven track record developing technical solutions that align to business needs, delivering on budget and on schedule.

Specialties: Technology risk assessment, information security, physical security, business continuity / disaster recovery planning...

Research Director, Information Security & Networking

Manage all phases of the user driven analyst research for information security and networking. Offer coverage of and insights in the application security space.

AI will eat most of the jobs in the next 2-5 years,

𝗥𝗼𝗹𝗲𝘀 𝗮𝘁 𝗵𝗶𝗴𝗵 𝗿𝗶𝘀𝗸:
 • Professional fax cover-sheet designer
 • VHS rewinder
 • Medieval town crier
 • Mall ninja sword tester
 • Radio Shack manager
 • “Have you tried turning it off and on?” Tier-1 specialist
 • Blockbuster late-fee negotiator
 • Corporate synergy translator
 • Elevator button pusher
 • Clippy emotional support specialist
 • MFA enrollment apology specialist
 • Dot-matrix printer paper separator
 • Video store genre re-shelving specialist
 • AOL trial CD distributor
 • Zoom waiting-room DJ
 • Hashtag optimization intern
 • Office “reply-all” damage control analyst
 • Legacy VPN appliance babysitter

𝗥𝗼𝗹𝗲𝘀 𝘁𝗵𝗮𝘁 𝗮𝗿𝗲 𝘀𝗮𝗳𝗲:
 • Executive apology speechwriter
 • Incident response finger-pointing coordinator
 • Professional conference badge collector
 • Lunch-and-learn sandwich reviewer
 • Nation-state attribution enthusiast
 • Guy who says “let’s take this offline”
 • Slack status philosopher
 • Office thermostat warlord
 • Chief Culture Evangelist
 • Professional podcast guest who “loves what you guys are doing”
 • Professional mic-not-working guy on webinars
 • Office fridge passive-aggressive note author
 • PowerPoint slide transition critic
 • Corporate offsite trust-fall facilitator
 • Professional “per my last email” drafter
 • Strategic pause facilitator
 • Guy who says “that’s not how attackers think” in every meeting
 • AI ethics panel moderator

CISO Whisperer | Former Financial Services CISO & Security Research Authority

Please, no more superficial application security takes on the Claude Code Security announcement. My feed can't take it. We need to be able to distinguish between a meteor strike and the continuation of decade-long trend lines.

• It's not a drop-in replacement.
• It's not a substitute for runtime security.
• It's not the first AI code security tool from an AI provider (examples: CodeMender, Aardvark), and there are many other examples of automated code security remediation using AI.
• It's not Anthropic's first foray or announcement in this arena (see Claude Code Security Reviewer).
• The scanner hasn't been the point of differentiation in application security testing (AST) for a while now, it's about developer workflow and noise reduction.
• Developers have been handling the tactical side of this for a long time. 'Traditional appsec boundaries', if they ever existed, eroded a long time ago. It's been a team sport, most appsec professionals are consumed with architecture and process validation.
• Vulnerabilities != incidents: if you waved a magic wand and solved every code vulnerability tomorrow (you can't), there would still be security incidents an enterprise needs tooling to manage. 
• The stock market is a voting machine, not a weighing one. It reacts to narratives and sentiment in the short term, the original 'vibes', not necessarily the fundamental utility of a tool.

The hard problems in AppSec haven't been about "the scan" since shift-left made speed a priority over depth, so AST could fit within dev lifecycles.

This vendor is removing inhibitors to the use of their primary product, and it has been an area of focus for a while now. 

𝐒𝐡𝐨𝐮𝐥𝐝 𝐲𝐨𝐮 𝐭𝐫𝐚𝐜𝐤 𝐢𝐭?

Absolutely. AppSec is the most resource-strained area in InfoSec. In a time where code creation is becoming exponential, we need tools that accelerate resolution and pay down technical debt. Time will tell.

taplio

The Battle

Matt Johansen

Daniel Kennedy

Followers

Posts

Engagements

Likes

Performance ScoreDaniel Kennedy's LinkedIn Performance

Ready to grow your LinkedIn presence?

taplio

The Battle

Matt Johansen

Daniel Kennedy

Followers

Posts

Engagements

Likes

Performance Score.css-goub6s{font-size:var(--chakra-fontSizes-md);font-weight:500;color:var(--chakra-colors-gray-600);display:block;margin-top:var(--chakra-space-1);}Daniel Kennedy's LinkedIn Performance

Ready to grow your LinkedIn presence?

Performance ScoreDaniel Kennedy's LinkedIn Performance