At UC Irvine’s Digital Leadership Agenda 2026, moderated by Nicole Perlroth, Garrett Hamilton illustrates what those blind spots can look like: “We believed it was deployed.” “It was turned on.” “It should have stopped this.” Except one exception, one policy gap, one control not applied at scale — and assumptions replace reality. The real problem isn’t visibility. It’s continuously validating intent against execution. Learn more about Reach → reach.security/ Shift thinking left of boom → reach.security/blog/security… #Cybersecurity #ExposureManagement #SecurityLeadership

Every security team eventually has to answer the same question: are the controls we already own doing their job? Sebastian Goodwin, Chief Trust Officer at Autodesk, on how his team answers it with Reach: “Trust is built on evidence, not assumptions. With AI accelerating attack and defense alike, we need continuous proof that our controls are doing their job. Reach is our source of truth. Our team gets its time back by working only on the exposures our controls aren’t already covering. If an attacker gets in, we can close the path they used with defenses we already own. And because Reach uses AI to continuously review and tune every control, we keep pace with rising attack volume without adding headcount.” Hear from our customers: bit.ly/4iM33KE  #Cybersecurity #ReachSecurity #ExposureManagement

We're at the Cleveland Information Security Summit today. Scott Welch and Rick Rutledge are at the booth. Stop by, learn how Reach is autonomously finding and closing defensive gaps before attackers exploit them, and enter to win a prize. And hey, grab a Snickers bar. #Cybersecurity #ReachSecurity #InfoSec

Defensive gaps can open anywhere. Reach helps close them everywhere, before attackers exploit them. ◦ An MFA policy gets disabled.  ◦ A firewall rule becomes too permissive.  ◦ An endpoint exclusion weakens ransomware protection.  ◦ An unpatched vulnerability leaves a system exposed. Across every security tool and every security control, these openings emerge constantly, giving AI-powered attackers new opportunities to strike. Reach provides a continuously validated source of truth for security controls across every facet of your defenses - every tool and every control, everwhere. It identifies misconfigurations and drift, prioritizes exposures, automatically remediates defensive gaps, and finds compensating controls to mitigate unpatched vulnerabilities. And with Reach everywhere, that intelligence and expertise are available wherever security work happens: ◦ Across your security stack: Find and close defensive gaps before attackers exploit them. ◦ In your SOC: Enrich investigations with security control context to identify and fix underlying weaknesses. ◦ In your AI: Give frontier AI models and agents the specialized security controls expertise and validated intelligence to make better security decisions. One source of truth for security controls. Stronger defenses everywhere. Security teams can outpace and outsmart AI-powered attackers with Reach. See it in action: bit.ly/4Boxo9v  #Cybersecurity #ReachSecurity #ExposureManagement

Much of security work happens at runtime, finding issues after a change has already shipped. Garrett explains how Reach is opening its agents through the MCP server so teams can ask “what if” before a rule or change goes out. The goal is to give the engineers and change control boards reviewing those changes more confidence before they sign off.  In the full episode: ⇢ Why Reach starts from the controls a team already owns instead of working backward from the attack ⇢ How protection can disappear with no one touching it, like a new rule shadowing an old one or a server moving out of a group ⇢ What security could borrow from DevOps, including testing a change before it ships and rolling it back when it fails ⇢ Three ways to prioritize fixes: compliance goals, threat-informed exposure, and drift from your own baseline ⇢ Why security vendors should supply the data and let teams build their own executive reporting ⇢ What’s next for Reach, from compensating-control context in exposure management to asking “what if” before a change goes out Full episode: f.mtr.cool/bb7r3sf841

Golden Golf Challenge with Armature on Thursday. Reach sponsored the hole-in-one. Matt McLarty played. The sign held up to the Californian inclement weather. Grateful to Armature for always putting on a great day, and to everyone who came out for Valley Health Foundation. Big thank you to Melissa Mayle for ensuring a smooth day on the links. #Cybersecurity #ReachSecurity

You have more open vulnerabilities than your team can patch this quarter, and the list grew again today. ▻ AI-powered discovery keeps making the backlog grow faster. ▻ Attackers exploit new vulnerabilities in days, while patch cycles often take weeks. ▻ Most prioritization ranks by risk and skips whether a control you already own can stop the exploit. Reach puts those existing controls to work as compensating controls, keeping exploits out until patches go in. Patching then focuses on what’s still exposed. How many of your open vulnerabilities are already blocked by a control you own? Could you prove it? Start here: f.mtr.cool/jqsgscm2s1 #Cybersecurity #ReachSecurity #VulnerabilityManagement

Garrett Hamilton, co-founder and CEO of Reach Security, joined Jonathan Brucato, Vice President of Cyber Defense at ECI. In this clip, Garrett walks through Reach Everywhere and why the current state of your controls belongs next to every detection in the SIEM. In the full episode: ⇢ Why Reach starts from the controls a team already owns instead of working backward from the attack ⇢ How protection can disappear with no one touching it, like a new rule shadowing an old one or a server moving out of a group ⇢ What security could borrow from DevOps, including testing a change before it ships and rolling it back when it fails ⇢ Three ways to prioritize fixes: compliance goals, threat-informed exposure, and drift from your own baseline ⇢ Why security vendors should supply the data and let teams build their own executive reporting ⇢ What’s next for Reach, from compensating-control context in exposure management to asking “what if” before a change goes out Full episode: f.mtr.cool/fyq5viywt9 #Cybersecurity #ReachSecurity #SecurityOperations

Garth Timoll of TopTier Capital Partners on why the firm backed Reach: "Reach is creating a trusted source of truth for security controls, giving organizations the confidence to deploy AI-driven security workflows at scale." AI security decisions are only as good as the control data underneath them. If that data is outdated or inferred, AI gives confident, wrong answers faster. #Cybersecurity #ReachSecurity #AISecurity

*that sweet scream of 2 x 17,700lb thrust General Electric turbofans* A clear afternoon on the San Francisco Bay with EVOTEK for Fleet Week. Brendan Toy, Denise Tcheng, and Matthew McLarty joined on Reach’s behalf. Out on the water, Golden Gate in view, and some beautiful noise in the sky. Name a better way to spend the day... Thanks to EVOTEK for having us aboard. #Cybersecurity #ReachSecurity #FleetWeek

Every security team has a source of truth for its assets and its identities. Very few have one for how those assets are protected. Here Garrett explains what that source of truth has to look like and why it has to be deterministic. Garrett joined Ed Amoroso of TAG Infosphere for a wider conversation on AI, security controls, and assurance. The full interview covers: › Why AI-driven scanning surfaces missed basics faster, from forgotten exceptions to MFA left on a departed user’s VPN account › Why determinism matters when the question is whether you can keep an attacker out › Prioritizing vulnerabilities by whether your controls mitigate the techniques used to exploit them › Taking the fear out of security changes by giving teams visibility into their impact first › Why staying one version behind on patching no longer holds up Full interview: f.mtr.cool/oytzvlfdlk #Cybersecurity #ReachSecurity #ExposureManagement

Reach brings autonomous defense to the security controls organizations already own. AI-powered attackers can find and exploit misconfigured controls, configuration drift, and unpatched vulnerabilities in minutes. Reach helps defenders find and close those gaps first. It mitigates vulnerabilities with compensating controls, autonomously finds and fixes misconfigured security controls, and stops configuration drift. All of it is powered by Reach’s security controls source of truth, and it works wherever your team does: in the SOC and SIEM, in frontier AI models, and in the Reach user interface. Learn more: f.mtr.cool/7aj1n99ruf #Cybersecurity #ReachSecurity #CompensatingControls

Reach Security has raised more than $50 million in Series B funding, led by Top Tier Capital Partners, with participation from Ballistic Ventures, In-Q-Tel, M12 (Microsoft’s venture fund), Artisanal Ventures, and existing investors. Adversaries now use AI to find misconfigurations and unpatched vulnerabilities at a volume and pace security teams have never seen. Reach brings autonomous defense to the security controls organizations already own. Its AI agents deploy compensating controls that keep unpatched vulnerabilities unreachable until the patch lands, and find and fix misconfigurations and drift to close gaps before AI attackers can rush in. And now, Reach’s source of truth for security controls, its AI agents, and its AI capabilities live inside the security operations workflows and AI tools that teams use every day. This funding will support product innovation, deeper integration partnerships, international expansion, and continued growth in US enterprise and federal markets. Learn more about what we're building: f.mtr.cool/d0kvioo097 #Cybersecurity #ReachSecurity

Harry, I'm droppin' the hammer. Rally racing with Fulcrum on Friday. Dominick Conte and Jonathan Wachsmann went on Reach’s behalf.  Ride-alongs, helicopters, and good times with security leaders from Austin and San Antonio. Thanks to Fulcrum for putting it together. #Cybersecurity #ReachSecurity

Nick was in Tulsa for Reach on Thursday night, alongside Intezer and a group of security leaders, for Journey at the BOK Center. Thanks to Trace and the Intezer team, and to everyone who made the time. Any way you want it. #Cybersecurity #ReachSecurity

Uptown and funky. Spent the evening with Tevora and friends at SoFi Stadium on Wednesday. Cain joined on Reach’s behalf for dinner, conversation, and Bruno Mars from the suite. Grateful to Tevora for always putting on awesome events and to everyone who made the time to be there. A big thank you to Eric Spitz for making sure everything ran smoothly. #Cybersecurity #ReachSecurity

Your SIEM can tell you a lot about an alert. What happened, who was involved, which detection fired. What it usually can't tell you is why the event was possible in the first place. Was the control that should have stopped it actually enforcing? Did the right policy apply? Did an exception or a configuration change create the opening? Without those answers, analysts end up jumping between consoles and chasing control owners to piece it together. Even after the incident is contained, the weakness behind it can stay in place, and that's the next alert waiting to fire. 10 Questions Your SIEM Must Answer to Outpace AI-Powered Attacks: f.mtr.cool/xcslbi74yn What You'll Learn: ☑︎ The 10 questions every SIEM alert should be able to answer, from "what happened?" to "is the weakness actually gone?" ☑︎ How to trace an alert back to the control failure, misconfiguration, or drift that allowed it ☑︎ Why fixing root causes instead of symptoms reduces repeat events and future alert volume #Cybersecurity #ReachSecurity #SecOps

Tim Schippmann and Joel Williams spent Monday morning at the Reach table during the technology showcase at GuidePoint Security's first Nashville golf tournament, held at Foxland Links in Gallatin. Grateful to be part of its first year. Thanks to GuidePoint and our fellow sponsors for building a great event. #Cybersecurity #ReachSecurity #GuidePoint

Reach Security is a Silver sponsor of CISO XC Dallas on January 14 at the Renaissance Dallas at Plano Legacy West. Dom Conte and Nick Lerach will be at the Reach table throughout the day. Misconfigured security controls leave gaps that attackers can find and exploit. Stop by to see how Reach serves as your source of truth for security posture, keeping controls aligned to policy and fixing weaknesses before attackers find them. #Cybersecurity #ReachSecurity #CISO

Joel Williams and Tyler Robinson held down the Reach booth from breakfast to the closing reception at Cyber Summit USA in Atlanta on Wednesday. Always a good time with these folks. Thanks to Cyber Summit for having us. #Cybersecurity #ReachSecurity