Writing
Long-form essays on identity, AI security, CIAM, Generative Engine Optimization, and the practice of building software. 611 pieces, newest first.
Latest essay
Finding out your password was in a data leak is unsettling, but panic is not the right response and neither is ignoring it. Here is exactly what to do, in priority order, and an honest answer to how worried you should actually be.
Read the article
Which is the No. 1 secure browser?" is the wrong question. Security depends on your threat model, not a leaderboard. Here is an honest comparison of Chrome, Firefox, Brave, and Safari in 2026, and how to actually choose.
When you name a feature something clever that no buyer would ever type into ChatGPT, you make your product harder to surface for the exact question it answers. Feature naming has always been positioning. Now it is discoverability, and product managers own it.
Traditional impressions on our properties fell 10-20% this year. AI search visibility rose 35%. That inversion is not a problem to fix; it is the new shape of B2B discovery, and the AI channel brings better-qualified buyers. Here is the data and what it means.
Eleven sub-portals plus the apex blog. Here is how they interlink for AI search, what each surface owns, the editorial architecture, and the practical stack I run them on.
Business books optimise for shareable takeaways. Biographies preserve the messy situations the takeaways came from. Here is why the latter teaches more, and the 14 biographies I recommend instead.
You can check whether ChatGPT, Perplexity, Gemini, and Google AI Overviews mention your brand for free, in your browser, in about a minute. Here are the free AEO/GEO visibility checkers and Chrome extensions worth using in 2026, what each measures, and how to turn a score into a plan.
SEO became a craft because you could reverse-engineer one ranking function. GEO can't work that way: you're optimizing against many non-deterministic models with probabilistic citation behavior. That makes GEO experimental science, and it should be run like a product team runs experiments.
When I founded LoginRadius in 2013, there was no cybersecurity-founder playbook. I wrote 11 e-books to be what I wish I had. Here's each one and the lesson it captures.
Crawl budget is no longer a technical SEO footnote. Google's AI surfaces draw from the same Search index as the blue links, so whether you appear in an AI answer reduces to whether Google crawled, indexed, and kept your pages fresh.
I audited 200+ tech predictions over 10 years. 87% failed for one of four reasons. Here are the four failure modes with named examples, and how to spot them in any prediction you're tempted to make.
Apple Podcasts and Spotify recommend the same 10 shows to everyone. The "best tech podcasts" lists are SEO chaff. Here is why discovery broke and the editorial-curation alternative.
The entire GEO industry treats AI visibility as a marketing problem: track citations, optimize content, report share of voice. That framing is why most GEO programs plateau. The deeper truth is that GEO is a product discipline, and the teams winning at it have figured that out.
MQL-driven gated content is still the B2B SaaS orthodoxy. I un-gated every e-book in 2025. Here are the actual numbers on pipeline, AI citation share, and brand authority 12 months later.
Founders rebuild MongoDB-as-default, Google Reader, Microsoft Bob without knowing why each one failed. Seven recurring failure patterns, with named examples and how to spot them in your stack.
The leading non-human identity (NHI) management tools for 2026, compared by job: discovery and posture, secrets management, machine identity, and workload identity.
AI doesn't move outsourced work back to the US, it shrinks how much human work the task needed at all. What that means for jobs and economies through 2035.
The leading CNAPP tools for 2026, compared by collection model and breadth: agentless-first platforms, broad full platforms, agent-led tools, and cloud-native specialists.
Vanta, Drata, Sprinto, Secureframe, Scytale, Thoropass, Scrut, Hyperproof, Delve, and TryComp AI compared by frameworks, integrations, auditor network, and best-fit company size.
The leading external attack surface management (EASM) tools for 2026, compared by job: automated asset discovery, attribution, risk scoring, and continuous monitoring.
The "free Gartner alternative" framing hides a structural conflict: every "free" platform monetises by selling to the vendors it ranks. Here is why that breaks B2B buying, and what works instead.
A practical AEO playbook for 2026: how Answer Engine Optimization differs from SEO and GEO, the homepage and entity schema that makes a brand citable, the content patterns AI answer engines quote, and an experimentation roadmap to measure citation share.
B2B SaaS founders over-buy on 8 overlapping security tool categories and miss 4 that actually matter. Here's the stage-ranked shortlist of what to evaluate.
The three big cloud credits programs look interchangeable on marketing pages. They aren't. Each suits a different stack, stage, and growth pattern. Here is the actual comparison.
JWT versus opaque tokens for API authentication: statelessness versus revocation, latency at global scale, blast radius, and the hybrid pattern most large deployments use.
"Is eSIM safer than a physical SIM?" has a more interesting answer than most articles give. Each SIM type, physical, eSIM, and iSIM, has a different architecture and a different attack surface. Here is how they actually work and which is genuinely more secure.
Auth0 (Okta) versus ForgeRock (Ping Identity), compared on developer experience, CIAM versus workforce IAM, deployment models, extensibility, standards, and pricing.
Eighteen vendors all claim to track AI engine visibility in 2026. Their methodologies differ enough that cross-vendor numbers don't compare. Here is how to actually evaluate them.
Large language models get the headlines, but small language models are quietly winning most real enterprise workloads on cost, speed, and privacy. Here is what SLMs actually are, how they work, and a clear framework for choosing between an SLM and an LLM.
The leading AI Security Posture Management (AI-SPM) tools for 2026, compared by job: AI asset discovery and posture, model supply chain security, runtime protection, and governance.
Most CIAM selection decisions get made on features at evaluation time. Six-figure migration projects 18 months later are the result. Here's the stage-fit framework that prevents it.
