Insights at the intersection of cybersecurity, strategy, and innovation.
In the last two MDR posts, I looked at how MDR has to move beyond alert triage. First, the natural MDR extensions: asset and control coverage, exposure management, SIEM and data quality, cloud and identity posture, response orchestration, and proof that risk actually went down. Then, the deeper architecture: next-gen MDR as an AI-native SecOps […] The post MSPs Become The AI Operations Layer For…
MDR is not going away, but the old model is. The old model was service-first: collect alerts, have analysts investigate them, escalate what matters, and report what happened. That still solves a real problem, but it is not where the market is going. The future MDR has to become product-first, AI-native, and action-oriented. It cannot […] The post Next-Gen MDR Has To Become An AI-Native SecOps…
In a previous post about the adjacencies to the MDR market, I laid out a framework for how MDR needs to evolve beyond alert triage. The basic idea was that future MDR should not just be “EDR alerts plus analysts.” It should become the control plane for cybersecurity operations and cyber risk reduction. This post […] The post The Natural MDR Extensions first appeared on Future of Tech and Security:…
MDR started as a practical answer to a very real problem: customers had too many security alerts, too few security operators, and no realistic way to staff a strong 24/7 security operations center (SOC). That problem still exists. Fast investigation and response are still table stakes. But the category has to move beyond “EDR alerts […] The post The Future of MDR (Managed Detection and Response)…
I had a few conversations over the past days that all pointed to the same conclusion: many technology companies are still being built like old SaaS companies. That is a mistake. If you are building a technology product now, the priority is not a polished frontend. It is the backend: the data layer, the ontology, […] The post How to Build an AI Company Now first appeared on Future of Tech and…
One of the more interesting messages going into RSA was not just that AI is reshaping security. It was that the market is changing what it rewards. I had the pleasure of attending the Piper Sandler investment day on Monday at RSA, one of my favorite events where I get to catch up with many […] The post AI SOC and SIEM Are Being Repriced first appeared on Future of Tech and Security: Strategy &…
During my engagements with various Private Equity and Venture Capital outlets, I see a clear shift. The questions that is showing up more and more in due diligence is no longer, “What is your AI strategy?” It is: “How far along are you in rebuilding the company around AI?” That is a different question. It […] The post AI Is Becoming a Company Operating System Layer first appeared on Future of Tech…
RSAC 2026 made one thing very clear to me: the market is moving fast, but it is still deeply confused. The big announcements from Google, Splunk, and Databricks all point in the same direction. Security operations are becoming more agentic, more API-driven, and more automated. But most of the category still looks crowded, early, and […] The post If AI Becomes the User, What Happens to the SIEM?…
“AI lowers execution cost, not accountability. SMBs outsource accountability.” It will affect SMB customers, the MSPs serving them, and the software vendors selling into the channel. Those are three different layers, and the impact on each one is different. SMBs Still Do Not Want To Own the Problem One concern is that AI makes knowledge […] The post How AI Will Reshape the MSP Market first…
I recently joined Tim Peacock and Anton Chuvakin on the Google Cloud Security Podcast to talk about SIEM, AI SOC, pricing, federated architecture, detection engineering, and why network telemetry is quietly becoming important again. The short version is simple: SIEM is not dead. Calling it obsolete makes for good marketing, but it is not a […] The post SIEM Is Not Dead. It Just Stopped Moving Fast…