Chase Norlin

Each major technology wave has produced a new $10B - $20B+ identity company—and with it, an explosion in both the number and complexity of digital identities. CyberArk and SailPoint defined the on-premise era. Okta became the leader in the cloud era. Now, we’re entering the age of AI. At Felicis, we believe ConductorOne is THE defining identity security company for this new era. But the shift to AI isn’t just about scale—it’s about stakes. Identity is no longer a provisioning or IT issue; it has become the core of enterprise security. Palo Alto Networks’ $25 billion acquisition of CyberArk—the largest in its history—underscores this transformation. Today, over 60% of all cyberattacks involve identity-based compromise, making identity the #1 security priority for modern enterprises. We’re proud to have partnered with ConductorOne since early 2023. From day one, Alex Bovee and Paul Querna have executed relentlessly toward a single vision: automating security across every identity, at every scale. That vision is now resonating with some of the most forward-thinking companies in the world—including Zscaler, Brex, Ramp, Instacart, Klaviyo, Qualtrics, and many others. Congratulations to Alex, Paul, and the entire C1 team as they continue to lead the charge in securing identity for the AI era. ——— Read more here: https://lnkd.in/ghT4ri5w

91

4 Comments

🚨 A bit of our own breaking news. At RAMP yesterday we launched something for the community we are calling r/PACS50 r/PACS50 is in partnership with AccessGrid (Auston Bunsen, thank you). How many of you use Reddit, Inc. personally? How about for work? Specifically, r/accesscontrol? If you’re not familiar, r/accesscontrol is one of the most authentic, unfiltered conversations happening in our industry. It’s where installers, integrators, industry and end users share real feedback, reviews, and opinions about what’s working, what’s not, and what the community really values. It’s a goldmine of insight, but it’s also chaotic, hard to track, and nearly impossible to interpret at scale. And let’s be honest, most management teams in our space aren’t exactly scrolling Reddit every day. That’s what we set out to fix. Introducing r/PACS50 a new web-based analytics tool that turns Reddit into clear, actionable intelligence. Think of it as a sentiment report for the access control industry, built from real, organic conversations on Reddit’s r/accesscontrol channel. Here’s how it works: over a rolling six-month period, we collect and analyze Reddit data using our proprietary weighting algorithm. The result is a clean, visual dashboard that shows how your company, products, and competitors are performing in public conversation. You can dig into details like: 👉 What people are saying 👉 When they’re saying it 👉 What’s driving positive or negative sentiment This is insight your product teams can use to spot opportunities, marketing teams can use to shape messaging, and customer service teams can use to understand who’s happy, who’s not, and why. It also gives you a data point for leadership conversations that’s been missing until now. Reddit has quietly become a real-time sentiment engine for nearly every major industry. Now, with r/PACS50, we’re bringing that same thing to the physical security community. Check it out and AMA. We plan to build from here but excited to launch this today with AccessGrid. The Access Control Executive Brief The Access Control Collective

57

10 Comments

With seamless integration through the NameBlock AbuseShield API, your registrar can unlock new revenue opportunities while giving registrants real protection against impersonation threats. Offered at the point of registration or renewal, #AbuseShield adds immediate, visible value—without cutting into your standard or premium domain sales. AbuseShield.com I created a short video to demonstrate how this is deployed at Dynadot, a registrar that manages over 7 million domain names for more than 100,000 customers in 108 countries.   #NameBlock #domainindustry #Registrars #PreventDNSAbuse #ICANN

26

Cyabra today announced a rebrand marking an important evolution, and a necessary one. As information environments grow more complex and coordinated manipulation becomes more sophisticated, the ability to distinguish authentic activity from manufactured influence is no longer optional. It’s foundational. Cyabra’s mission to restore trust and authenticity through evidence-led intelligence reflects where the market is headed: from monitoring noise to delivering clarity, context, and actionable insight. Excited to see under Dan Brahmy's leadership, Cyabra helping enterprises and governments navigate this new reality. #Disinformation #Trust #AI #Reputation

73

3 Comments

The California Privacy Protection Agency (CalPrivacy) Board has issued a decision requiring Tractor Supply Company, the nation’s largest rural lifestyle retailer with more than 2,500 stores in 49 states, to change its business practices and pay a $1,350,000 fine to resolve claims that the company violated the California Consumer Privacy Act (CCPA). The fine is the largest in CalPrivacy’s history, and the decision is the first to address the importance of CCPA privacy notices and privacy rights of job applicants. https://lnkd.in/gGZarzUt

26

California just passed the AI safety law we wish existed for social media in 2011. Governor Newsom signed SB 53, California’s first frontier-AI safety law. It doesn’t tell OpenAI, Anthropic, or Google what to build. It simply requires them to disclose safety incidents, report problems, and protect whistleblowers. That’s the lesson we missed with social media. In 2011, Facebook’s internal teams saw warning signs — from algorithmic manipulation to teen mental-health harms — but there was no framework to surface them until years later. By then, the damage was done. Today, AI poses similar risks: chatbots shaping behavior, data flowing invisibly, harms emerging only after tragedy. SB 53 creates the transparency infrastructure markets need to self-correct. The next step: Visibility into how AI is actually being used — in companies, classrooms, and homes. Because innovation doesn’t die from oversight; it dies from mistrust. California got the first half right. Now it’s on the rest of us to finish the job. What do you think? Does California’s bill go far enough? #AIsafety #aiobservability 

74

12 Comments

We are thrilled to partner with authID to protect our clients and infrastructure. AuthID has industry leading technology that is second to none.

25

2 Comments

I spend a lot of time in the remote guarding space so I figured I'd share what I'm actually seeing in 2026. The video surveillance market hit $71.6B globally this year. Growing at 10.6% CAGR. The remote video monitoring segment alone is on pace to reach $8.2B by 2033 at a 13.2% clip. The broader manned guarding market? It jumped $6.5B in a single year from 2025 to 2026. But the growth isn't coming from hiring more guards. Guard turnover still sits between 100% and 300% annually. The BLS projects 162,000 openings every year and almost all of that is replacement. People leave. Constantly. That's the tailwind for remote guarding. One operator with AI-powered analytics can monitor 30+ sites at once. Edge cameras now run 30 trillion operations per second on the device itself. Bandwidth drops 70%. The big money is moving. GardaWorld closed on Stealth Monitoring. Folded it into ECAM. That's a $100M+ recurring revenue business built entirely on watching other people's cameras. SMEs are the fastest-growing adopter segment at 12.8% CAGR as cloud platforms kill the upfront hardware cost. Now the headwinds. Customer trust in "no boots on the ground" is still a problem. Internet reliability at remote sites kills the model before it starts. Response time without physical presence is a real concern for high-risk sites. And regulatory frameworks haven't caught up to the tech. This market doubled in value in under 5 years. If you're an integrator or operator and you haven't figured out where remote guarding fits in your business, someone else in your market already has. What are you seeing? Growing demand or still a tough sell locally? #RemoteGuarding #SecurityIndustry #PhysicalSecurity #VideoSurveillance #MindfulCapital

8

LinkedIn Verification Funnels User Biometrics to Government Agencies, AI Labs, and Credit Bureaus. LinkedIn users attempting identity verification may be unknowingly handing sensitive personal data to Persona Identities Inc., a company that distributes information to government agencies, credit bureaus, utilities, and mobile providers. The issue came to light last week when a Zurich-based privacy researcher known as “Rogi,” who covers surveillance capitalism on his blog The Local Stack, published his findings.  Rogi made the discovery after completing LinkedIn’s identity verification process, earning the platform’s coveted blue checkmark in just three minutes. “Then I did what apparently nobody does,” he said. “I went and read the privacy policy and terms of service”—only to discover those 34 pages of disclosures didn’t stem from LinkedIn.” It turns out that users seeking verification are redirected to Persona Identities Inc., a San Francisco-based tech company that provides customized identity verification platforms for businesses and organizations, helping them combat fraud, stay compliant, and manage user onboarding. In the article, Rogi highlighted the extensive range of personal data Persona can access.  According to him, the company collects users’ full names, passport photos, selfies, facial biometric data, NFC chip information from passports, nationality, sex, birthday, age, email, phone number, physical address, IP address, geolocation, device type, MAC address, browser and OS version, and preferred language. Persona reportedly shares this data with 17 subprocessors and a network of partners, including AI companies such as Anthropic, OpenAI, and Groqcloud. Rogi also claims that the platform uses uploaded identity documents, including passports, to train AI systems. “They use uploaded images of identity documents — that’s my passport — to train their AI. They’re teaching their system to recognize what passports look like in different countries,” he said. “They also use your selfie to ‘identify improvements in the Service.’ The legal basis? Not consent. Legitimate interest. Meaning they decided on their own that it’s fine.”  After Rogi’s The Local Stack post on LinkedIn and Persona went viral, Persona co-founder and CEO Rick Song addressed the report in a LinkedIn comment. “No personal data processed is used for AI/model training,” Song said. “Data is exclusively used to confirm your identity.” He also noted that all biometric data is deleted immediately after processing, and all other personal data is deleted within 30 days.  Song denied that AI companies such as OpenAI and Anthropic are subprocessors used to verify a user’s identity, even though those companies appear on a Persona webpage listing the company’s subprocessors. Read more: https://lnkd.in/daTuY_55 Credits: https://www.sofx.com/

3