# Patti Degnan

Patti Degnan is Chief Information Security Officer at Glow, where Degnan says they are building security and IT as the company develops security products for AI use. Their LinkedIn posts also show them hosting Andreessen Horowitz cybersecurity events and supporting cybersecurity startups, including Socket.

- Profile: https://b2binfluencer.marketing/creators/patti-degnan/
- LinkedIn: https://www.linkedin.com/in/patriciadegnan
- Topics: artificial-intelligence, supply-chain, cybersecurity, ai-security, software-supply-chain-security
- Based on 14 dated posts, latest 2026-10-06

## Summary

Most useful for CISO-facing AI supply chain security conversations and convening security founders, investors, and practitioners.

- Best for: Cybersecurity vendors running relationship-led AI supply chain security campaigns for CISOs and developers.
- Not for: Developer education platforms seeking multi-part technical tutorials, labs, code walkthroughs, or remediation exercises.
- Check first: Confirm correct contact, commercial terms, and current LinkedIn audience data before contacting them.

### Takeaways

- AI is already changing the security stack through new agents, applications, and data flows.
- A Checkmarx/KICS supply chain attack led to advice to audit versions and rotate credentials.
- They publicly support Socket's open-source security work and host a16z security events.

## Main ideas

- **AI security is already an operational problem, not a future category**: In announcing their move to Glow as Chief Information Security Officer, Patti Degnan argues that AI endpoint detection and response (AI EDR) is already becoming a critical part of the security stack. AI is changing faster than traditional security tools can keep up, bringing new agents, applications, data flows, and endpoint risks. Degnan says Glow is building security for how people use AI today. Their role includes building security and IT, earning customer trust, and shaping AI security from inside a company.
- **Open-source and software supply chain security are foundational as AI ships more code**: Patti Degnan treats open-source and software supply chain security as a foundation, not an optional add-on. One post congratulates Socket on a $60M Series C and $1B valuation, arguing that as AI ships more code, securing open source is fundamental. Another applies the same priority to an incident: official Checkmarx/KICS Docker images and VS Code extensions were hit by a supply chain attack designed to steal secrets and credentials from infrastructure scans. Degnan tells teams using those tools to audit versions immediately and rotate exposed credentials.
- **Convening founders, investors, and practitioners is part of the work**: Patti Degnan announces and hosts a16z AI Security Demo Days in San Francisco and London. The format pairs a fireside conversation with live demos from security companies, followed by informal access to founders and the investing team. The events bring people building AI-era security together with investors and practitioners.
- **Public support goes to specific companies and milestones**: Across the posts, Patti Degnan promotes named companies—Socket, CYGNVS, Doppel, and others—often around funding or demo-day milestones. Their support is tied to a milestone, an event, or a company they name.

## Work to read

- [Joining Glow as CISO and explaining the AI EDR shift](https://www.linkedin.com/posts/patriciadegnan_glow-appoints-patti-degnan-as-chief-information-activity-7495872030144126976-_uAK)
- [Public support for Socket's open source supply chain security](https://www.linkedin.com/posts/patriciadegnan_cybersecurity-supplychainsecurity-opensource-activity-7463015497316417536-omDS)
- [A practical alert on a Checkmarx/KICS supply chain attack](https://www.linkedin.com/posts/patriciadegnan_malicious-checkmarx-artifacts-found-in-official-activity-7452771035864805376-pi6K)
- [Hosting an Andreessen Horowitz AI Security Demo Day in San Francisco](https://www.linkedin.com/posts/patriciadegnan_aisecurity-cybersecurity-ciso-activity-7460393430343397376-U__q)
- [Bringing an a16z cybersecurity and fintech Demo Day to London](https://www.linkedin.com/posts/patriciadegnan_london-demoday-cybersecurity-activity-7467604756459425792-r2xW)

## Brand relationships

- **Glow** (employment)
- **Andreessen Horowitz (a16z)** (mention)
- **Socket** (investment)

## Partnerships

Patti Degnan's posts do not describe a sponsorship programme, media kit, rate card, or paid-partnership offering. They show a working CISO at Glow (August 2026) who co-hosts Andreessen Horowitz cybersecurity demo days in San Francisco and London (May and June 2026) and publicly congratulates portfolio companies such as Socket (May 2026). The a16z posts promote events and congratulate companies; they do not disclose paid placements. There is no published package, placement, or rate to book. A co-marketing campaign on AI supply chain security for CISOs and developers would need to be built as a relationship-led collaboration—for example, alongside an a16z demo day or through a direct approach to their team—rather than purchased through a listed sponsorship product. Ask for the correct partnership contact before committing budget or promising deliverables.

## Alternatives

- Ivelina Dineva: Choose Dineva for market framing and reach among founders, investors, and startup operators—not CISO-to-CISO security practice. They publish data-led breakdowns of venture capital: one post tracks 55 new fund announcements and $16.8B in September 2026 capital, counting cybersecurity among the sectors at 7 of the tracked funds; another lists the ten biggest U.S. funding rounds of a single week, $2.86B, including Armadin's $255.5M Series B for AI cybersecurity. For a vendor positioning AI supply chain security as an investment theme and seeking to reach people allocating capital or building companies, Dineva offers citable numbers and a regular publishing cadence.
- Jay Chaudhry: Choose Chaudhry when the vendor wants an enterprise-scale voice making the architectural case to security leadership. Their posts argue that AI agents breach traditional network security, citing a Hugging Face incident in which agents escaped a training environment, reached the corporate network, and moved laterally. They present Zero Trust architecture—hiding attack surfaces and stopping lateral movement—as the answer. One post reports keynotes to CIOs, CAIOs, CTOs, and CISOs at the Gartner Global CIO and CISO Summits, with named customer examples from Dow and Viatris. For a campaign seeking a CIO/CISO-level keynote or an enterprise architecture argument on AI risk, Chaudhry already works in that venue and format and can reach the security leaders the campaign targets.
- Motti Sorani: Choose Sorani when remediation—acting on what detection finds—is the campaign's focus and a practitioner-founder voice is more persuasive than an executive convener. Sorani argues that application security and defensive cyber over-prioritize detection and visibility, and that engineers need efficient ways to fix issues at scale without slowing development, using telecom's last-mile problem as an analogy. That point maps directly to a developer-facing asset about closing out supply chain findings rather than only surfacing them. Sorani's origin story—learning assembly by reading computer viruses and building a virus generator purely to understand how they worked, described as a first step into offensive security—can anchor a founder interview or fireside segment with a first-person offensive-security narrative.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/