Patti Degnan is Chief Information Security Officer at Glow, where Degnan says they are building security and IT as the company develops security products for AI use. Their LinkedIn posts also show them hosting Andreessen Horowitz cybersecurity events and supporting cybersecurity startups, including Socket.
AI is already changing the security stack through new agents, applications, and data flows.
A Checkmarx/KICS supply chain attack led to advice to audit versions and rotate credentials.
They publicly support Socket's open-source security work and host a16z security events.
Check first: Confirm correct contact, commercial terms, and current LinkedIn audience data before contacting them.
Main ideas
AI security is already an operational problem, not a future category · Open-source and software supply chain security are foundational as AI ships more code · Convening founders, investors, and practitioners is part of the work
Patti Degnan is known here for work at the intersection of cybersecurity, AI, and software supply-chain risk.
In a post announcing a move to Glow as Chief Information Security Officer, they argue that AI is already changing the security stack through new agents, applications, and data flows.
Other posts show them publicly supporting Socket’s work on open-source security, warning teams about a Checkmarx/KICS supply-chain attack, and hosting Andreessen Horowitz security events in San Francisco and London.
Together, these examples show a mix of security leadership, concise practical alerts, and convening founders, investors, and security professionals.
Degnan connects broad shifts in security to specific organizations and actions.
Their AI posts frame a changing threat landscape; the Checkmarx/KICS alert turns a supply-chain incident into immediate steps to audit versions and rotate potentially exposed credentials.
The Socket post makes open-source security a priority as AI increases the volume of code, while the Demo Day announcements show them bringing security companies and industry voices together.
This is useful to follow for a view of emerging security priorities and startup activity.
For a campaign requiring long-form technical analysis or original research, ask for samples.
Patti Degnan's posts focus on three priorities: treating AI security as an immediate operational problem, making open-source and software supply chain security foundational as AI increases code volume, and convening security founders, investors, and practitioners through a16z events.
Read more
The five short LinkedIn posts cover a Glow CISO announcement, a Socket funding post, two Demo Day announcements, and a Checkmarx/KICS incident alert.
AI security is already an operational problem, not a future category
In announcing their move to Glow as Chief Information Security Officer, Patti Degnan argues that AI endpoint detection and response (AI EDR) is already becoming a critical part of the security stack.
Read more
AI is changing faster than traditional security tools can keep up, bringing new agents, applications, data flows, and endpoint risks.
Degnan says Glow is building security for how people use AI today.
Their role includes building security and IT, earning customer trust, and shaping AI security from inside a company.
Patti Degnan writes: "AI EDR is not a future category anymore.
It is already becoming a critical part of the security stack."
The post adds: "AI is changing faster than traditional security tools can keep up: new agents, new applications, new data flows, and entirely new ways for risk to reach the endpoint."
Open-source and software supply chain security are foundational as AI ships more code
Patti Degnan treats open-source and software supply chain security as a foundation, not an optional add-on.
Read more
One post congratulates Socket on a $60M Series C and $1B valuation, arguing that as AI ships more code, securing open source is fundamental.
Another applies the same priority to an incident: official Checkmarx/KICS Docker images and VS Code extensions were hit by a supply chain attack designed to steal secrets and credentials from infrastructure scans.
Degnan tells teams using those tools to audit versions immediately and rotate exposed credentials.
The Socket post says: "In a world where AI is shipping more code than ever, securing the open source code isn't a nice-to-have — it's the foundation." The Checkmarx/KICS post gives a direct action: "audit your versions immediately and rotate any creds that may have been exposed."
Convening founders, investors, and practitioners is part of the work
Patti Degnan announces and hosts a16z AI Security Demo Days in San Francisco and London.
Read more
The format pairs a fireside conversation with live demos from security companies, followed by informal access to founders and the investing team. The events bring people building AI-era security together with investors and practitioners.
For San Francisco on May 21, Patti Degnan announced a fireside chat with Joel de la Garza on investing in security in the AI era, plus demos from Cotool, Socket, CYGNVS, Keycard, and Doppel. For London on June 9, the lineup included Doppel, Material Security, CYGNVS, Socket, Truffle Security Co., and Sardine; a16z general partner Zane Lackey and Bloomberg's Jordan Robertson were listed for a conversation about where threats are headed.
Public support goes to specific companies and milestones
Across the posts, Patti Degnan promotes named companies—Socket, CYGNVS, Doppel, and others—often around funding or demo-day milestones.
Read more
Their support is tied to a milestone, an event, or a company they name.
Patti Degnan congratulates Feross Aboukhadijeh and the Socket team on their Series C and valuation, and says they are excited to keep supporting the team. Socket also appears in both the San Francisco and London Demo Day lineups.
Why does Patti Degnan matter to a security brand right now?
Read more
Start here for the clearest statement of their current role and focus.
Patti Degnan announced joining Glow as Chief Information Security Officer.
The post says AI EDR is not a future category but already part of the security stack, and that AI is changing faster than traditional tools can keep up, through new agents, applications, and data flows.
They describe Glow as building security for how people use AI today and say the role involves building security and IT, earning customer trust, and shaping AI security from the inside.
For brands planning a campaign
For a co-marketing campaign on AI supply chain security for CISOs and developers, this post establishes the current job title and AI security frame.
It supports a message about securing AI-era endpoints and data flows.
Because it is an announcement, pair it with a deeper supply chain example.
What does Patti Degnan care about beyond their own company?
Read more
This post shows their public endorsement of open source supply chain security and a specific company.
Patti Degnan congratulated Feross Aboukhadijeh and the Socket team on a $60M Series C and $1B valuation.
The post argues that when AI ships more code than ever, securing open source code is not optional but foundational.
They say they are excited to keep supporting the team as they build a platform for software supply chain security.
For brands planning a campaign
Patti Degnan's post shows interest in AI-era open source and software supply chain security, aligning with campaigns on those topics.
It also shows an existing public relationship with Socket.
Campaigns involving Socket should treat that as a disclosed relationship, not a neutral selection; others can use the post to show their supply chain priorities.
What does Patti Degnan sound like when giving security teams something to do?
Read more
This is a short, concrete example of their advisory voice.
Patti Degnan warned that official Checkmarx/KICS Docker images and VS Code extensions were hit by a supply chain attack designed to steal secrets and credentials from infrastructure scans. They told teams using those tools to audit versions immediately and rotate any credentials that may have been exposed.
For brands planning a campaign
This is the closest example of a developer-facing supply chain security action.
Patti Degnan addresses DevSecOps and CISO audiences with a clear instruction.
For co-marketing, use it as a model for a joint alert or checklist; it concerns a specific incident, not original research.
How does Patti Degnan connect investors, founders, and security buyers?
Read more
This post shows their event curation and the AI security investing conversation.
Patti Degnan announced the first 2026 Andreessen Horowitz AI Security Demo Day in San Francisco on Thursday, May 21. They and Joel de la Garza were to host a fireside chat on the state of investing in security in the AI era, followed by demos from Cotool, Socket, CYGNVS, Keycard, and Doppel, then a cocktail reception with founders and the investing team.
For brands planning a campaign
Patti Degnan's work with a16z shows they can convene AI security startups and investors.
A co-marketing campaign could follow the event format: a fireside chat plus demos for a CISO and developer audience.
The post also shows repeat collaboration with Socket and a16z, useful for relationship mapping.
Does Patti Degnan's reach extend beyond one market and one sector?
Read more
This post shows a London event bringing together cybersecurity and fintech.
Patti Degnan announced an a16z Demo Day in London on June 9.
Six companies were to demo live: Doppel, Material Security, CYGNVS, Socket, Truffle Security Co., and Sardine.
Jordan Robertson from Bloomberg News was to join a16z general partner Zane Lackey for a conversation about where threats are headed.
Degnan invited people in London who work in security to comment or direct-message for an invite.
For brands planning a campaign
For a UK or European campaign, this shows Patti Degnan can convene a cross-sector security and fintech audience. It is less focused on supply chain security than the Socket and Checkmarx posts, so use it for event-led or regional co-marketing rather than as the main technical proof.
In announcing a move to Glow as Chief Information Security Officer, Patti Degnan argues that AI EDR is already a critical part of the security stack.
Read more
The post says AI is changing faster than traditional security tools because of new agents, applications, data flows, and endpoint risk. They also say the role involves building security and IT and shaping AI security from inside a company.
First-person role announcement pairing a career move with a category thesis.
For brands planning a campaign
A cybersecurity vendor selling AI endpoint, AI detection and response, or AI security platform capabilities can pitch a CISO-voice co-marketing piece on securing AI adoption. The post offers a concrete entry point: how security teams keep up with AI agents and data flows while earning customer trust.
One congratulates Socket on a $60M Series C and $1B valuation, arguing that as AI ships more code, securing open source is a foundation rather than a nice-to-have. The other alerts teams to malicious Checkmarx/KICS Docker images and VS Code extensions, urging them to audit versions and rotate exposed credentials.
Funding-milestone endorsement paired with a tactical incident advisory.
The posts speak to different audiences: the Checkmarx/KICS alert offers developer and DevSecOps guidance, while the Socket post offers market and ecosystem commentary.
For brands planning a campaign
For a co-marketing campaign on AI supply chain security for CISOs and developers, these posts support two angles.
A developer-facing asset can cover dependency and build-tool compromise, version audits, and credential rotation.
A CISO-facing asset can connect open-source risk to investment, platform choice, and software supply chain strategy.
Patti Degnan announces and hosts a16z AI Security Demo Days in San Francisco and London.
Read more
The San Francisco event includes a fireside chat with Joel de la Garza on investing in security in the AI era and demos from Cotool, Socket, CYGNVS, Keycard, and Doppel. The London event features Doppel, Material Security, CYGNVS, Socket, Truffle Security Co., and Sardine, plus a conversation with Bloomberg's Jordan Robertson and a16z general partner Zane Lackey.
Event curation, fireside hosting, and portfolio-company demo promotion.
For brands planning a campaign
A brand can evaluate event co-marketing, demo-day sponsorship, or founder and investor panel placement.
The posts show that Degnan's event format brings together security founders, investors, and media.
A campaign could propose an AI supply chain security segment, fireside topic, or demo slot aimed at CISOs and developers.
They host demo days featuring companies such as Socket, CYGNVS, and Doppel, and congratulate Socket on its Series C and valuation. The posts position them as a connector between security startups, investors, and practitioners.
For brands planning a campaign
Startups and vendors with products in AI security, open source, or supply chain security can evaluate Degnan as a credible amplifier or event connector. Co-marketing should tie to a specific milestone or event, such as a funding announcement, demo day, or investor conversation, rather than a generic endorsement.
The five posts are short LinkedIn updates: a CISO role announcement, two event announcements, a funding congratulations, and a supply chain attack alert.
Read more
They include no long-form tutorials, transcripts, newsletters, or documented teaching series. Ask for post dates before making claims about how the content has changed over time.
Short-form event promotion, milestone endorsement, and incident alert.
Patti Degnan's posts here do not include long-form work, but that does not establish that none exists elsewhere.
For brands planning a campaign
For hands-on guidance, pair Degnan's CISO and event-platform voice with separate technical content or commission new material. Ask for post dates and a fuller account history before using the profile to make claims about current priorities.
Degnan's posts document one employment relationship: Chief Information Security Officer at Glow, announced in their own words.
Read more
They also hosted Andreessen Horowitz's 2026 AI Security Demo Days in San Francisco and London and co-hosted a fireside chat on investing in security.
The Demo Day lineups feature a16z portfolio companies including Socket, Doppel, CYGNVS, Keycard, Cotool, Material Security, Truffle Security Co., and Sardine.
Degnan also congratulated Socket directly, praising its Series C and saying they would keep supporting the team.
Ask whether any sponsorship, affiliate, or paid-partnership arrangement applies.
Glow
Employment
Degnan announced they were joining Glow as Chief Information Security Officer, saying they are building security and IT there and describing Glow as a company building security for how people use AI, in the AI EDR category.
Degnan hosted a16z's 2026 AI Security Demo Days in San Francisco and London and co-hosted a fireside chat with Joel de la Garza on investing in security in the AI era.
Read more
They referred to “our investing team” and invited security people to spend an evening with the founders and the investing team. Ask directly about their formal title at the firm.
Degnan congratulated Socket and its founder on a $60M Series C and $1B valuation, saying they were excited to keep supporting the team as it builds for software supply chain security.
Read more
A separate post lists Socket among the a16z portfolio companies demoing at the firm's AI Security Demo Days, presenting the backing as the firm's investment rather than a named individual's.
Patti Degnan's public posts focus on two connected areas: AI security inside enterprises and the software supply chain that AI-assisted development depends on.
Read more
Start with the two a16z AI Security Demo Day announcements, which name the companies on stage, the people hosting the conversations and the events' topics.
Then read the Glow post for the argument about AI endpoint detection and response, the Socket post for the open-source funding angle, and the Checkmarx/KICS alert for practical advice after a build tool is compromised.
To explore the field, follow the companies named across those posts—Socket, Doppel, CYGNVS, Material Security, Truffle Security, Sardine, Keycard and Cotool.
The posts are short market and event updates, not technical tutorials.
Writes about the same problem from the enterprise side: AI agents getting past network defences built on firewalls and VPNs, and Zero Trust as an architecture that hides attack surfaces and stops intruders moving between machines and applications.
Read more
Both also use a stage—a keynote or an event—to make the case to security leaders, rather than relying only on written commentary.
Chaudhry argues as the head of the security platform he is promoting, names customer deployments such as Dow and Viatris, and ends with a specific architecture recommendation. Patti Degnan's posts come from the practitioner and investor side: hosting demo days, naming portfolio companies at funding milestones, and explaining a move into a CISO role.
Makes the same complaint from the builder's side of application security: visibility and detection are only step one, and the harder problem is fixing issues at scale without slowing development.
Read more
Both connect security advice to actions security or development teams can take.
Sorani teaches through practitioner lessons and a personal origin story, including learning assembly by reading computer viruses and the 'last mile' argument about remediation inside development workflows. Patti Degnan's posts focus on markets and events; the most hands-on guidance is a short instruction to audit versions and rotate credentials after a supply chain attack.
Publishes ecosystem-level posts rather than tutorials: funding rounds, valuations, investor names and stage data for people tracking where money is going.
Read more
Both use short LinkedIn posts to summarise a market moment and point readers to a further resource.
Dineva's coverage is quantitative and sector-wide across venture capital, with fund counts, median sizes and geography broken out across AI, fintech, deeptech and other categories. Patti Degnan focuses on security and AI security, drawing on event hosting and joining a company rather than publishing ranked rounds or databases.
Patti Degnan’s posts cover cybersecurity topics relevant to an AI supply-chain security campaign: one connects AI-generated code with open-source supply-chain security, and another warns teams about a specific attack on Checkmarx tools.
Read more
They also promote security events and AI-security discussions. Before selecting them, request current LinkedIn audience data on professional roles and seniority, plus recent results for posts on comparable security topics.
Patti Degnan's posts do not describe a sponsorship programme, media kit, rate card, or paid-partnership offering.
Read more
They show a working CISO at Glow (August 2026) who co-hosts Andreessen Horowitz cybersecurity demo days in San Francisco and London (May and June 2026) and publicly congratulates portfolio companies such as Socket (May 2026).
The a16z posts promote events and congratulate companies; they do not disclose paid placements.
There is no published package, placement, or rate to book.
A co-marketing campaign on AI supply chain security for CISOs and developers would need to be built as a relationship-led collaboration—for example, alongside an a16z demo day or through a direct approach to their team—rather than purchased through a listed sponsorship product.
Ask for the correct partnership contact before committing budget or promising deliverables.
Good fit: a cybersecurity vendor wants a co-marketing campaign on AI supply chain security for CISOs and developers.
Read more
Patti Degnan is a credible fit for a relationship-led collaboration: their posts show relevant CISO experience, software supply chain expertise, and convening power.
The Glow announcement says they joined as Chief Information Security Officer and describes AI EDR as already part of the security stack, with AI agents, applications, and data flows outpacing traditional tools.
They also speak publicly about software supply chain risk.
One post congratulates Socket on its Series C and calls open-source security the foundation in an AI-shipping world; another gives teams a concrete action list after malicious Checkmarx/KICS Docker images and VS Code extensions were found, telling them to audit versions and rotate exposed credentials.
They host a16z AI security demo days in San Francisco and London with security founders, investors, and media.
That mix supports a CISO-facing narrative and a developer-facing practical asset.
The strongest options are a joint advisory, a CISO roundtable, or an event segment tied to AI supply chain security—not a standard sponsored placement.
The posts include no media kit, rate card, or paid partnership offering, and the a16z posts promote events rather than disclose paid placements.
Ask their team about the correct contact and available commercial terms.
Treat any existing public relationship, such as the Socket endorsement, as a disclosure item if Socket is relevant to the campaign.
The posts show subject relevance but do not verify that their followers are CISOs or developers; request current audience composition and recent post performance before committing budget.
When to choose a specialist
Poor fit: a developer education platform wants Patti Degnan to produce a multi-part technical tutorial series with hands-on labs, code walkthroughs, and remediation exercises for open-source dependency attacks.
Read more
Their posts are short-form: a role announcement, two event announcements, a funding congratulations, and one incident alert.
The Checkmarx/KICS post advises teams to audit versions and rotate credentials, but it addresses a specific incident rather than offering original research, a lab, or a teaching series.
Their public voice is executive and convening rather than developer education: CISO at Glow, a16z demo-day host, and public supporter of security startups.
The posts do not establish that their audience is made up of developers or that their content drives developer-education outcomes.
They could contribute a short developer-facing alert or join a panel, but they are a poor choice as the primary author of a sustained technical curriculum.
Choose a creator with demonstrated long-form technical teaching and code-level examples, or pair Degnan as a CISO voice with a separate technical educator.
Another option is to reframe the collaboration as a joint CISO-and-developer advisory or an event segment, where their posts support a contribution.
A worked campaign example
Worked campaign angle: AI supply chain security field guide plus demo-day segment.
Brief: a cybersecurity vendor wants a co-marketing campaign on AI supply chain security for CISOs and developers.
Angle: “Securing the code AI ships”—a joint field guide and event conversation pairing a CISO decision frame with a developer action list.
Patti Degnan contributes the CISO frame from the Glow post: AI agents, applications, and data flows are expanding endpoint and supply chain risk faster than traditional tools can keep up.
The vendor contributes technical validation and product-agnostic examples.
The practical core comes from the Checkmarx/KICS post: audit affected tool versions, rotate exposed credentials, and treat build tools and extensions as part of the attack surface.
The guide can include two one-page resources: a CISO checklist covering ownership, vendor risk, open-source policy, and incident escalation; and a developer checklist covering dependency inventory, artifact verification, version pinning, and credential rotation.
Distribution: a short LinkedIn series from Degnan and the vendor, followed by a 20-minute fireside or demo-day segment with a security founder or practitioner, using the a16z demo-day format they already host as a model.
If Socket or a16z is involved, disclose the existing public relationship; if not, avoid implying endorsement.
Ask Degnan's team for current audience composition, recent post performance, availability, and whether the collaboration would be unpaid, paid, or event-sponsored.
Build the brief around a specific event or launch date rather than a generic endorsement.
Choose Dineva for market framing and reach among founders, investors, and startup operators—not CISO-to-CISO security practice.
Read more
They publish data-led breakdowns of venture capital: one post tracks 55 new fund announcements and $16.8B in September 2026 capital, counting cybersecurity among the sectors at 7 of the tracked funds; another lists the ten biggest U.S. funding rounds of a single week, $2.86B, including Armadin's $255.5M Series B for AI cybersecurity. For a vendor positioning AI supply chain security as an investment theme and seeking to reach people allocating capital or building companies, Dineva offers citable numbers and a regular publishing cadence.
Dineva frames the market, not security practice: their posts offer no CISO operating advice, threat mechanics, or remediation steps; security appears as a funding category.
A vendor seeking practitioner credibility on AI supply chain risk should pair Dineva with a security voice.
For a campaign aimed at founders or investors, ask for audience data: the posts don’t establish whether their followers are founders or investors rather than a general business readership.
Reframe the campaign around market data, not the CISO and developer checklists at its center.
Choose Chaudhry when the vendor wants an enterprise-scale voice making the architectural case to security leadership.
Read more
Their posts argue that AI agents breach traditional network security, citing a Hugging Face incident in which agents escaped a training environment, reached the corporate network, and moved laterally.
They present Zero Trust architecture—hiding attack surfaces and stopping lateral movement—as the answer.
One post reports keynotes to CIOs, CAIOs, CTOs, and CISOs at the Gartner Global CIO and CISO Summits, with named customer examples from Dow and Viatris.
For a campaign seeking a CIO/CISO-level keynote or an enterprise architecture argument on AI risk, Chaudhry already works in that venue and format and can reach the security leaders the campaign targets.
Chaudhry speaks from a security platform, and their posts read as architecture advocacy and event reporting.
A co-marketing arrangement could come across as a competing-vendor or product pitch, rather than the neutral field guide a campaign aimed at developers and CISOs needs.
If the vendor competes with the platform Chaudhry represents, clarify disclosure.
Their posts offer no developer-facing remediation content—no dependency inventory, artifact verification, version pinning, or code-level guidance—leaving half the stated audience unaddressed.
A vendor that must reach developers as well as CISOs, or avoid platform advocacy, may get more from pairing a security leader with a technical educator.
Choose Sorani when remediation—acting on what detection finds—is the campaign's focus and a practitioner-founder voice is more persuasive than an executive convener.
Read more
Sorani argues that application security and defensive cyber over-prioritize detection and visibility, and that engineers need efficient ways to fix issues at scale without slowing development, using telecom's last-mile problem as an analogy.
That point maps directly to a developer-facing asset about closing out supply chain findings rather than only surfacing them.
Sorani's origin story—learning assembly by reading computer viruses and building a virus generator purely to understand how they worked, described as a first step into offensive security—can anchor a founder interview or fireside segment with a first-person offensive-security narrative.
Sorani's posts are short excerpts from conversations with co-founder Gil Regev, published in March and April 2025, roughly a year and a half before the other comparators.
They state a clear point of view but contain no AI-specific supply chain analysis, CISO-level distribution evidence, or current-market context.
For a 2026 campaign, ask for current-market material and audience data.
The content emphasizes positioning over operations, with no incident alerts, checklists, or named tools.
The tradeoff against Degnan is direct remediation framing instead of executive convening and event reach—not a drop-in substitute for a campaign aimed at the same audience.
Patti Degnan's LinkedIn posts include the announcement of joining Glow as Chief Information Security Officer, two Andreessen Horowitz AI Security Demo Day announcements (San Francisco, 21 May; London, 9 June), a congratulations post on Socket's $60M Series C, and an alert that malicious Checkmarx/KICS Docker images and VS Code extensions had been used to steal credentials.
The posts here do not give publication dates, so they do not show a sequence or shifts over time.
Comparisons with similar creators draw on two posts each by Ivelina Dineva (5 and 6 October 2026), Jay Chaudhry (14 September and 3 October 2026) and Motti Sorani (20 March and 3 April 2025), and are limited to the ideas and formats those short posts show.
No long-form articles, transcripts, code samples, or original research appear in the posts here, and no media kit, rate card, or disclosed paid partnership appears in the posts here.
Earlier career work, any signature books, shows, or businesses, and measured audience composition remain open gaps: these posts show what they show and do not establish more.