At UC Irvine’s Digital Leadership Agenda 2026, moderated by Nicole Perlroth, Garrett Hamilton illustrates what those blind spots can look like: “We believed it was deployed.” “It was turned on.” “It should have stopped this.” Except one exception, one policy gap, one control not applied at scale — and assumptions replace reality. The real problem isn’t visibility. It’s continuously validating intent against execution. Learn more about Reach → reach.security/ Shift thinking left of boom → reach.security/blog/security… #Cybersecurity #ExposureManagement #SecurityLeadership

You have more open vulnerabilities than your team can patch this quarter, and the list grew again today. ▻ AI-powered discovery keeps making the backlog grow faster. ▻ Attackers exploit new vulnerabilities in days, while patch cycles often take weeks. ▻ Most prioritization ranks by risk and skips whether a control you already own can stop the exploit. Reach puts those existing controls to work as compensating controls, keeping exploits out until patches go in. Patching then focuses on what’s still exposed. How many of your open vulnerabilities are already blocked by a control you own? Could you prove it? Start here: f.mtr.cool/jqsgscm2s1 #Cybersecurity #ReachSecurity #VulnerabilityManagement

Garrett Hamilton, co-founder and CEO of Reach Security, joined Jonathan Brucato, Vice President of Cyber Defense at ECI. In this clip, Garrett walks through Reach Everywhere and why the current state of your controls belongs next to every detection in the SIEM. In the full episode: ⇢ Why Reach starts from the controls a team already owns instead of working backward from the attack ⇢ How protection can disappear with no one touching it, like a new rule shadowing an old one or a server moving out of a group ⇢ What security could borrow from DevOps, including testing a change before it ships and rolling it back when it fails ⇢ Three ways to prioritize fixes: compliance goals, threat-informed exposure, and drift from your own baseline ⇢ Why security vendors should supply the data and let teams build their own executive reporting ⇢ What’s next for Reach, from compensating-control context in exposure management to asking “what if” before a change goes out Full episode: f.mtr.cool/fyq5viywt9 #Cybersecurity #ReachSecurity #SecurityOperations

Garth Timoll of TopTier Capital Partners on why the firm backed Reach: "Reach is creating a trusted source of truth for security controls, giving organizations the confidence to deploy AI-driven security workflows at scale." AI security decisions are only as good as the control data underneath them. If that data is outdated or inferred, AI gives confident, wrong answers faster. #Cybersecurity #ReachSecurity #AISecurity

*that sweet scream of 2 x 17,700lb thrust General Electric turbofans* A clear afternoon on the San Francisco Bay with EVOTEK for Fleet Week. Brendan Toy, Denise Tcheng, and Matthew McLarty joined on Reach’s behalf. Out on the water, Golden Gate in view, and some beautiful noise in the sky. Name a better way to spend the day... Thanks to EVOTEK for having us aboard. #Cybersecurity #ReachSecurity #FleetWeek

Every security team has a source of truth for its assets and its identities. Very few have one for how those assets are protected. Here Garrett explains what that source of truth has to look like and why it has to be deterministic. Garrett joined Ed Amoroso of TAG Infosphere for a wider conversation on AI, security controls, and assurance. The full interview covers: › Why AI-driven scanning surfaces missed basics faster, from forgotten exceptions to MFA left on a departed user’s VPN account › Why determinism matters when the question is whether you can keep an attacker out › Prioritizing vulnerabilities by whether your controls mitigate the techniques used to exploit them › Taking the fear out of security changes by giving teams visibility into their impact first › Why staying one version behind on patching no longer holds up Full interview: f.mtr.cool/oytzvlfdlk #Cybersecurity #ReachSecurity #ExposureManagement

Reach brings autonomous defense to the security controls organizations already own. AI-powered attackers can find and exploit misconfigured controls, configuration drift, and unpatched vulnerabilities in minutes. Reach helps defenders find and close those gaps first. It mitigates vulnerabilities with compensating controls, autonomously finds and fixes misconfigured security controls, and stops configuration drift. All of it is powered by Reach’s security controls source of truth, and it works wherever your team does: in the SOC and SIEM, in frontier AI models, and in the Reach user interface. Learn more: f.mtr.cool/7aj1n99ruf #Cybersecurity #ReachSecurity #CompensatingControls

Reach Security has raised more than $50 million in Series B funding, led by Top Tier Capital Partners, with participation from Ballistic Ventures, In-Q-Tel, M12 (Microsoft’s venture fund), Artisanal Ventures, and existing investors. Adversaries now use AI to find misconfigurations and unpatched vulnerabilities at a volume and pace security teams have never seen. Reach brings autonomous defense to the security controls organizations already own. Its AI agents deploy compensating controls that keep unpatched vulnerabilities unreachable until the patch lands, and find and fix misconfigurations and drift to close gaps before AI attackers can rush in. And now, Reach’s source of truth for security controls, its AI agents, and its AI capabilities live inside the security operations workflows and AI tools that teams use every day. This funding will support product innovation, deeper integration partnerships, international expansion, and continued growth in US enterprise and federal markets. Learn more about what we're building: f.mtr.cool/d0kvioo097 #Cybersecurity #ReachSecurity

Harry, I'm droppin' the hammer. Rally racing with Fulcrum on Friday. Dominick Conte and Jonathan Wachsmann went on Reach’s behalf.  Ride-alongs, helicopters, and good times with security leaders from Austin and San Antonio. Thanks to Fulcrum for putting it together. #Cybersecurity #ReachSecurity

Nick was in Tulsa for Reach on Thursday night, alongside Intezer and a group of security leaders, for Journey at the BOK Center. Thanks to Trace and the Intezer team, and to everyone who made the time. Any way you want it. #Cybersecurity #ReachSecurity

Uptown and funky. Spent the evening with Tevora and friends at SoFi Stadium on Wednesday. Cain joined on Reach’s behalf for dinner, conversation, and Bruno Mars from the suite. Grateful to Tevora for always putting on awesome events and to everyone who made the time to be there. A big thank you to Eric Spitz for making sure everything ran smoothly. #Cybersecurity #ReachSecurity

Your SIEM can tell you a lot about an alert. What happened, who was involved, which detection fired. What it usually can't tell you is why the event was possible in the first place. Was the control that should have stopped it actually enforcing? Did the right policy apply? Did an exception or a configuration change create the opening? Without those answers, analysts end up jumping between consoles and chasing control owners to piece it together. Even after the incident is contained, the weakness behind it can stay in place, and that's the next alert waiting to fire. 10 Questions Your SIEM Must Answer to Outpace AI-Powered Attacks: f.mtr.cool/xcslbi74yn What You'll Learn: ☑︎ The 10 questions every SIEM alert should be able to answer, from "what happened?" to "is the weakness actually gone?" ☑︎ How to trace an alert back to the control failure, misconfiguration, or drift that allowed it ☑︎ Why fixing root causes instead of symptoms reduces repeat events and future alert volume #Cybersecurity #ReachSecurity #SecOps

Tim Schippmann and Joel Williams spent Monday morning at the Reach table during the technology showcase at GuidePoint Security's first Nashville golf tournament, held at Foxland Links in Gallatin. Grateful to be part of its first year. Thanks to GuidePoint and our fellow sponsors for building a great event. #Cybersecurity #ReachSecurity #GuidePoint

Reach Security is a Silver sponsor of CISO XC Dallas on January 14 at the Renaissance Dallas at Plano Legacy West. Dom Conte and Nick Lerach will be at the Reach table throughout the day. Misconfigured security controls leave gaps that attackers can find and exploit. Stop by to see how Reach serves as your source of truth for security posture, keeping controls aligned to policy and fixing weaknesses before attackers find them. #Cybersecurity #ReachSecurity #CISO

Joel Williams and Tyler Robinson held down the Reach booth from breakfast to the closing reception at Cyber Summit USA in Atlanta on Wednesday. Always a good time with these folks. Thanks to Cyber Summit for having us. #Cybersecurity #ReachSecurity

Congratulations to @Huy Ly, Head of IT Infrastructure & Security at @Monolithic Power Systems, a Super Global finalist at the 2026 @BayAreaCISO ORBIE Awards in Santa Clara last night. At MPS, Huy built the AI organization from the ground up, deployed a private AI platform, and stood up an AI-powered SOC that lets a lean team protect more than 4,000 employees. We've learned a lot working alongside him and his team. He shared the Super Global shortlist with @Hilik Kotler, @Hemanta Swain, @Hanan Szwarcbord, and @Friedrich Wetschnig. Congratulations to the whole group. #Cybersecurity #CISO

Reach's configuration drift report pairs a year of telemetry from more than 50 production environments with a survey of 250 security professionals. What did the report surface? ⚙︎ Where drift starts, by control type. Firewalls account for 47% of drift alerts. ⚙︎ How long fixes take. Remediation averages 8.3 days once an issue is found. ⚙︎ Five drift danger zones, from vendor updates to holiday change windows. ⚙︎ A set of questions for testing your own configuration assurance program. Security Intent vs. Security Reality | Configuration Drift in the Age of AI: f.mtr.cool/g8sbtmr2dc #Cybersecurity #ConfigurationDrift

Reach Security is in Dallas this week for AT&T Secure Connections. Garrett Hamilton and Mike Baker are on site through Thursday's networking reception. If you're attending, we'd love to sync up. #Cybersecurity #ReachSecurity #SecurityInMotion

Point an AI model at a security stack it doesn't fully understand and you get confident, wrong answers faster. Reach gives your AI a source of truth for security controls. The MCP Server connects MCP-compatible AI tools directly to Reach. The Public API brings Reach findings and evidence into SIEM, ticketing, and GRC workflows. The MCP Server is intentionally read-only, so your team decides when recommendations become actions. Get the solution guide: f.mtr.cool/jiqolfvc3z #Cybersecurity #ReachSecurity #AI

Luggage at Away, then dinner at Zazil. Reach co-sponsored the evening last Thursday in San Jose with WitnessAI, BreachRx, and Bedrock Data. Thank you to everyone who spent the night with us, and to our co-hosts for making it easy. #Cybersecurity #ReachSecurity #AISecurity