Our Analysts.

Founder and Chief Research Analyst at IT-Harvest, tracking thousands of cybersecurity vendors across 31 countries and six continents.

Former Gartner VP for Emerging Technology Threat Management. Regular keynote, prolific author on market trends, and one of the most widely cited analysts in the industry.

Senior Security Advisor inside the Google Cloud CISO Office. Former Distinguished VP Analyst at Gartner running the SIEM, log management, and SOC research.

Author of the long-running "Security Warrior" blog and co-host of the Cloud Security Podcast by Google — required listening for anyone modernizing the SOC.

Former Principal Analyst at Forrester where he led Zero Trust research. Twenty-plus years of operational experience at the US Navy, NSA, CIA, and FBI.

PhD from Colorado Tech; master's from American Military University. Author, podcaster, and one of the most pragmatic voices on practitioner-grade Zero Trust.

The person who created the Zero Trust Model of Cybersecurity in 2010 while a Principal Analyst at Forrester — now the reference architecture cited by executive orders and national strategies.

Featured in The New York Times and Forbes. Named Cybersecurity Person of the Year by CISO Magazine in 2021.

Keynote speaker, author, and CISO advisor focused on identity and access management — human, machine, and everything in between.

Host of the "Week in Identity" podcast, delivering a weekly practitioner's lens on IAM, CIAM, and emerging identity threats.

Two decades across threat management, security analytics, SOAR, and incident response. Former Gartner analyst covering detection and response tooling.

Strategic advisor to Picus Security, Adversa AI, and Dark Defense AI — where he helps shape the next generation of detection engineering.

Former VP Analyst at Gartner. Founded the Machine Identity Management research category that now shapes how organizations manage secrets, certificates, and workloads.

Board member for several identity and cryptography organizations — connecting the dots between cryptographic agility, PQC readiness, and operational IAM.