# Justin Foster

Justin Foster writes about cybersecurity, AI, cloud technology, and security operations. Foster's posts explain how security teams can use data and AI to investigate threats, prioritize action, and manage costs.

- Profile: https://b2binfluencer.marketing/creators/justin-foster/
- LinkedIn: https://www.linkedin.com/in/justinafoster
- LinkedIn followers: 3,999
- Topics: artificial-intelligence, cybersecurity, agentic-ai, vulnerability-management, post-quantum-cryptography
- Based on 11 dated posts, latest 2026-10-10

## Summary

Most useful as a speaker and co-created editorial partner who explains AI, cloud security data, and security operations to enterprise buyers.

- Best for: A cybersecurity vendor booking a webinar, panel, or co-authored explainer for security practitioners and decision makers.
- Not for: Paid sponsored social posts bought mainly for reach, impressions, follower growth, and engagement rate.
- Check first: Ask for audience job-title, seniority, industry, location data, media kit, and commercial terms.

### Takeaways

- Security AI needs trustworthy context, not just a capable model
- Choose cloud or on-premises based on the security problem
- Token limits expose design and cost problems

## Main ideas

- **Security AI needs trustworthy context, not just a capable model**: Foster argues that confidently wrong AI in cybersecurity is often a data problem: information is stale, fragmented, or trapped in disconnected tools. Security teams need enough history and context to investigate events and distinguish actionable exposure from theoretical risk.
- **Choose cloud or on-premises based on the security problem**: Rather than treating cloud and on-premises as opposing camps, Foster asks what the team needs to accomplish. They argue for matching each environment to its strengths: retain historical data and analyze it at scale in the cloud, while using on-premises sensors where they can see devices or network traffic that cloud services cannot directly observe.
- **Token limits expose design and cost problems**: Foster treats running out of tokens as a signal to examine how an AI task was designed, not as an unavoidable excuse. Retrieval, summarization, task decomposition, and limits on repeated tool calls all affect whether an agent can finish its work. Usage costs and latency can also compound in production.
- **Plan for future security risks before the technology arrives**: Foster presents post-quantum security as a planning concern rather than something to ignore until a machine capable of breaking current encryption exists.

## Work to read

- [Why cloud-versus-on-premises is the wrong security question](https://www.linkedin.com/posts/justinafoster_cybersecurity-agenticai-ai-activity-7454523183438835712-GnQ3)
- [Token limits are a design problem, not an excuse](https://www.linkedin.com/posts/justinafoster_agenticai-cybersecurity-ai-activity-7457051309490348032-quRq)
- [Mapping the vulnerability landscape after frontier LLMs](https://www.linkedin.com/posts/justinafoster_cybersecurity-agenticai-ai-activity-7462120931612737536-sZhp)
- [The model is not the moat; context is](https://www.linkedin.com/posts/justinafoster_cybersecurity-agenticai-ai-activity-7469731334177980416-ZNhv)
- [The encryption deadline before quantum computers arrive](https://www.linkedin.com/posts/justinafoster_cybersecurity-quantumcomputing-postquantum-activity-7474794043391242240-dl_v)

## Brand relationships

- **Forescout** (employment)

## Partnerships

Across five LinkedIn posts published between late April and late June 2026, Justin Foster shares commentary and product explanations, not partnership formats or sponsored-content offers. Several posts reference Forescout and Forescout Cloud, establishing a recurring commercial context, but the posts do not say whether any arrangement is paid. They include no media kit, rate card, audience specification, sponsorship policy, or inquiry form. A cybersecurity vendor considering Foster as a speaker or thought-leadership partner would need to contact them through LinkedIn and ask about available formats, rates, and audience details.

## Alternatives

- Deepen Desai: Choose Deepen Desai when the vendor wants a speaker who can describe a security-operations platform from the inside: unified exposure management, inline telemetry across network, identity, endpoint, cloud, AI, and deception, and closed-loop remediation through a zero trust architecture. The posts frame the AI shift as a race between attackers automating more attack stages and SOCs constrained by fragmented tools, incomplete visibility, and high data-ingestion costs—the argument a vendor selling a consolidated SecOps platform wants on stage.
- Ido Geffen: Choose Ido Geffen when the vendor wants an urgent, attacker-first thesis that can hold a security audience: AI is creating a bug-pocalypse; AI agents can collaborate through a shared memory system and chain exploits into zero-days; and hiring more CISOs alone cannot match a machine-speed offense. Ido Geffen is a stronger choice than Justin Foster when the session is meant to provoke debate about autonomous offense and defense rather than explain cloud data context and production discipline.
- Jim Manico: Choose Jim Manico when the vendor needs a speaker who can connect AI in security to software engineering practice and standards: secure SDLC, independent verification, deterministic testing, and frameworks such as OWASP ASVS and AISVS. Jim Manico argues that AI is collapsing the economics of vulnerability discovery and remediation, shifting competitive advantage from finding vulnerabilities to continuously eliminating exploitable risk in live systems. They are a better fit than Justin Foster when the audience is AppSec and engineering leaders rather than security operations buyers, or when the campaign needs an explicit standards and verification argument.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/