In this episode, Ashu Savani, co-founder of TryHackMe, explains how the company's Live Breach product puts teams inside fully-executed, realistic breach simulations built around the threat actors and tech stacks they face, building the reflexes and reporting security leaders need before a real incident hits. Joining him are Roland Toussaint, Senior Director of Incident Response and Security Engineering at ChenMed, and Heather Hinton, CISO at Sitecore.

• How can a simulated environment realistically reflect a security team's actual tech stack and the threat actors they care about?
• Can TryHackMe's reporting help security leaders prove upskilling progress to auditors and cyber insurance carriers?
• How does TryHackMe help teams train for incidents caused by their own people, not just outside attackers?
• How granular can training get: can a team run a meaningful exercise in just 15 to 20 minutes?
• How are TryHackMe's custom exercises tiered and packaged across its plans?
• What's TryHackMe's track record getting cyber insurance carriers to accept its exercises as sufficient proof of readiness?
• Does TryHackMe offer anything built specifically around HIPAA for healthcare organizations?
• Why is crisis communication often more under-rehearsed than technical response, and how does TryHackMe help teams practice it?

Check out the episode for the answers you need.

In this episode, Joseph Perla, founder and CEO at TrustedRouter, explains how his company's confidential-computing-based LLM router lets teams send prompts to hundreds of AI models while cryptographically verifying, rather than simply trusting, that no one, including TrustedRouter itself, can see the data passing through. Joining him are TC Niedzialkowski, former head of IT & security at Opendoor, and Keith McCartney, svp of security and IT at DNAnexus.

• Why hasn't the AI privacy problem already been solved, given how many tools and architectures already exist?
• What's wrong with the "zero data retention" promises most AI providers offer today?
• How does a confidential virtual machine let a company verify, instead of just trust, that its own router isn't looking at its prompts?
• For a use case like HIPAA-covered medical data, does TrustedRouter provide one complete, auditable path from a user's machine to the model and back?
• How does remote attestation confirm end-to-end encryption down to the chip level?
• Does TrustedRouter's SOC 2 Type 2 attestation cover the AI workload itself, or just its own SaaS interface?
• Can customers restrict which data centers or jurisdictions their AI workloads run in?
• What happens to a company's existing AI usage monitoring once it starts routing through TrustedRouter?

Check out the episode for the answers you need.

TrustedRouter is the open-source AI gateway for teams that need privacy with proof. It routes hundreds of models through attested confidential compute, keeps prompts and outputs out of logs, verifies the code handling each request, and adds provider failover, spend controls, and OpenAI-compatible APIs for production AI systems.

In this episode, Dean Shroll, senior director of sales engineering at ThreatDown, explains how the company's Nebula and OneView consoles simplify protection across Mac, Linux, and Windows endpoints while its managed detection and response team absorbs the 24/7 monitoring that resource-constrained teams can't staff on their own. Joining him are Jonathan Waldrop, CISO at Acoustic, and Arif Hameed, CISO at C&R Software.

• Why is managing security for resource-constrained organizations suddenly getting more attention?
• How does ThreatDown keep its console simple without sacrificing depth across Windows, Mac, Linux, and cloud environments?
• Where does ThreatDown draw the line between what it automates and what still needs a human analyst?
• How does the platform distinguish suspicious behavior from normal DevOps activity without drowning teams in false positives?
• What guardrails exist to stop overly broad exclusions from opening up a device?
• Who owns what when an MDR provider is involved, and where does that responsibility actually end?
• How should a CISO justify an MDR investment to the board when nothing bad happens?

Check out the episode for the answers you need.

Huge thanks to our sponsor, ThreatDown

ThreatDown delivers elite Managed Detection and Response purpose-built for resource-constrained teams with high-efficacy protection without complexity. Combining artificial intelligence and expert analyst judgment, ThreatDown intercepts sophisticated attacks with speed and accuracy, scaling security effortlessly. Recognized by MRG Effitas, AVLab, and G2, ditch fragmented tools for fast, 24/7 protection without overhead.