Sagetap

🚨 Scott D. Applegate has spent 30 years in cybersecurity, including running the Army's global security operations center and advising the Joint Chiefs of Staff. His take on what the industry is getting wrong right now is worth hearing. Scott shares why automating away Tier 1 analysts is creating a serious skills gap, how he evaluates vendors across 200 offices in 90 countries, and how Sagetap changed the top of his funnel by turning 20 anonymous pitches into 4 proofs of value and 2 purchases. Congrats to KnowBe4 for standing out as a trusted partner at Dentons! 🎥 𝗪𝗮𝘁𝗰𝗵 𝘁𝗵𝗲 𝗳𝘂𝗹𝗹 𝗰𝗼𝗻𝘃𝗲𝗿𝘀𝗮𝘁𝗶𝗼𝗻 𝗵𝗲𝗿𝗲: https://lnkd.in/eewDzDnT Sagetap is where tech executives anonymously evaluate emerging tech, validate priorities with peer intelligence, and guide founder roadmaps toward real-world enterprise needs, all with zero spam and total control. #Cybersecurity #SecurityLeaders #VendorDiscovery #SecOps #InfoSec

We are FASTLY approaching BlackHat USA 2026! Join Conceal and Sagetap for an evening at Tailgate Beach Club Tuesday, August 4th 6:00 PM - 10:00 PM. Live DJ. Cold drinks. Great people. No slides. No demos. No sales pitch. Just security professionals enjoying the best networking event of the week. Space is limited so register now: https://lnkd.in/eV8QZz7S

The best conversations at Black Hat almost never happen on the conference floor, but instead in the smaller rooms, with people doing the same work you are. That's the idea behind the evening Sagetap and Conceal are cohosting on Tuesday (8/4). We're taking over Tailgate Beach Club, right by the convention center, for a few hours of food, drinks, and good conversation with fellow security leaders. Black Hat is where you go for scale, but this will be a smaller room of security leaders and peers, away from the expo floor, with an open bar and light bites by the pool. Drop by anytime between 6 and 10pm and stay as long as you like. It's a great way to step out of the noise for a while and meet your peers. 🗓️ Tuesday, August 4 | 6–10pm 📍 Tailgate Beach Club at Mandalay Bay RSVP in the comments 👇 #BlackHat2026 #BHUSA #Cybersecurity #SecurityLeadership

I'll be at Black Hat Tuesday through Thursday next week. If you're going to be there, I'd love to connect! Much of what we focus on at Sagetap is how enterprise security and AI leaders decide where to focus amid endless noise and conflicting market signals. Executives use the Sagetap network to leverage peer intelligence and make high-stakes decisions with speed and confidence, bypassing the sales spam entirely. If you're on this journey and want to connect at Black Hat, drop me a DM and let's find time to meet!

🌴 Let us buy you a drink at Black Hat. Black Hat has a way of filling every hour with briefings, booths, and crowds. Sagetap and Conceal are cohosting a poolside evening for security leaders and founders next Tuesday, August 4, at Tailgate Beach Club at Mandalay Bay, a private cabana party steps from the convention center. There's no agenda or formal pitch, just CISOs, security executives, founders, and industry peers unwinding and networking by the pool. Come meet the kind of people you want to compare notes with, over food, drinks, and a good atmosphere. Stay for a few conversations or the whole evening. 🗓️ Tuesday, August 4 | 6–10pm 📍 Tailgate Beach Club at Mandalay Bay RSVP link in the comments 👇 #BlackHat2026 #BHUSA #Cybersecurity #SecurityLeadership #AI

🚨 Daniel M.'s organization is growing fast, and so is the interest from bad actors targeting it. Daniel shares how he approaches cybersecurity and vendor discovery at a nonprofit where the team relies on external security expertise, why the traditional discovery process left too much to chance, and how an early Sagetap demo with Material Security turned into a promising DLP proof of concept for FIRE. Kudos to Material Security for impressing Daniel and his team throughout the evaluation process! 🎥 𝗪𝗮𝘁𝗰𝗵 𝘁𝗵𝗲 𝗳𝘂𝗹𝗹 𝗰𝗼𝗻𝘃𝗲𝗿𝘀𝗮𝘁𝗶𝗼𝗻 𝗵𝗲𝗿𝗲: https://lnkd.in/dYnracMi Sagetap is where tech executives discover the industry's most credible, next-gen vendors — vetted by peers, matched by AI, and free of sales pressure. #Cybersecurity #VendorDiscovery #TechLeadership #DataSecurity #InfoSec

Cybersecurity Training has been one of the more active areas on Sagetap over the past year, so we took a closer look at where the demand is going and what's closing. More than a quarter of initiatives were launched to replace an incumbent, and Sages are writing "human risk management" rather than "security awareness training" in their requirements now. They're prioritizing AI-driven, behavior-focused platforms in particular. Some of the Cybersecurity Training deals we've seen: → Jericho Security was purchased by a computer software company for continuous awareness training, and by a mid-market insurance company to replace their current platform with updated phishing campaigns and training modules. → KnowBe4 was purchased by a computer and network security company to replace Wizer with more engaging micro-learning and phishing drills. → Amplifier Security was purchased by a mid-market healthcare company to improve security compliance across employee-owned devices without impacting productivity. → Cyberbit was purchased by an enterprise healthcare company to upskill and exercise a lean SOC team. → Frame Security was purchased by an enterprise broadcast media company for personalized training and simulations, and it entered POC at a mid-market technology company for role-tailored awareness content. → Fable Security advanced to POC at an enterprise healthcare company exploring innovative approaches to human risk and security awareness. → Anagram Security is in POC at a mid-market fintech company to build role-tailored awareness content that tracks knowledge retention over time. Check out the full Sage Signal here: https://lnkd.in/geAJHDXY #SageSignal #Cybersecurity #CISO #SecurityAwareness #HumanRiskManagement

This week, we looked at a full year of AppSec initiatives on Sagetap. Pentesting led, and buyers split their AI demand between automating testing and testing AI systems themselves. Purchases generally went to expert-led services, while buyers evaluated AI-native options for future cycles via POCs. Notable closes from the year: → Praetorian was purchased by an enterprise insurance company for risk management and offensive security work, and by an enterprise environmental services company for attack surface management, automated red teaming, and continuous security validation. → Sprocket Security was purchased by a mid-market law firm moving from annual to continuous testing, and by a mid-market computer software company replacing periodic testing and a bug bounty program with a continuous model. → NetSPI was purchased by a financial services company for pentesting and attack surface management. Most notable POCs: → ManticoreAI progressed to POC at a mid-market computer software company for continuous, 24/7 automated pentesting. → Specular advanced to POC at an enterprise computer software company to close gaps in exploitability prioritization across a complex multi-tenant environment. → Red Sentry moved into POC at an enterprise broadcast media company for attack-path validation alongside continuous vulnerability scanning. Zooming out to this week's most notable activity, an enterprise broadcast media company replaced Microsoft Defender with SentinelOne for EDR, an enterprise computer software company purchased Arpio for disaster recovery automation in AWS, and an enterprise insurance company opened a search focused specifically on securing autonomous AI agents. More in this week's Sage Signal: https://lnkd.in/geAJHDXY #SageSignal #AppSec #Cybersecurity #PenTesting #EnterpriseSecurity #AISecurity #CISO #InfoSec

In Q2, the systems you're defending started acting on their own. The threats coming for them aren't waiting for your next review cycle. Each quarter, we invite top security leaders to share what they're seeing up close: market shifts, challenges they've tackled firsthand, and trends they think deserve more attention. Sages and vendors contributed a wide range of perspectives in Q2, and their answers landed on three themes: 𝟭. 𝗚𝗼𝘃𝗲𝗿𝗻𝗶𝗻𝗴 𝗔𝗜 𝗢𝗻𝗰𝗲 𝗜𝘁'𝘀 𝗜𝗻𝘀𝗶𝗱𝗲 𝘁𝗵𝗲 𝗘𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 AI has quietly acquired access inside most enterprises, but governance hasn't caught up. Who owns the agents, and what are they actually doing? 💡 Insights from Maor Saubron, Viswanath S Chirravuri, Paolo D., Kevin Magee, Greg Martin, and Matthew Mudry. 𝟮. 𝗧𝗿𝗮𝗱𝗶𝗻𝗴 𝗣𝗼𝗶𝗻𝘁-𝗶𝗻-𝗧𝗶𝗺𝗲 𝗖𝗵𝗲𝗰𝗸𝘀 𝗳𝗼𝗿 𝗖𝗼𝗻𝘁𝗶𝗻𝘂𝗼𝘂𝘀 𝗩𝗲𝗿𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻 A questionnaire captures a single moment. Your vendors can change their infrastructure, add an AI feature, or get breached the next day. What does a program built for that reality look like? 💡 Insights from Matt Hillary, Bob Maley, Harshal Mehta, and Sawan Joshi CISSP CISM CIPPE CRISC CDMP AIGP TOGAF FIP. 𝟯. 𝗣𝗿𝗶𝗼𝗿𝗶𝘁𝗶𝘇𝗶𝗻𝗴 𝗥𝗲𝗮𝗹-𝗪𝗼𝗿𝗹𝗱 𝗧𝗵𝗿𝗲𝗮𝘁𝘀 𝗢𝘃𝗲𝗿 𝗡𝗼𝗶𝘀𝗲 AI-assisted discovery is flooding teams with more vulnerabilities than they can triage. Severity scores don't tell you which threats are targeting your sector. What does? 💡 Insights from Steven Gerry, Scott D. Applegate, Scott McCrady, and Aaron Rice. 👇 𝗥𝗲𝗮𝗱 𝘁𝗵𝗲 𝗳𝘂𝗹𝗹 𝗤𝟮 𝗿𝗼𝘂𝗻𝗱𝘂𝗽 𝗶𝗻 𝘁𝗵𝗲 𝗰𝗼𝗺𝗺𝗲𝗻𝘁𝘀. #Cybersecurity #CISO #InfoSec #AISecurity

The path of least resistance in vendor selection has a cost. CTO Kevin Magee shares how peer validation changed the way he vets and trusts the companies he buys from. 👇