Roy Zur is a cybersecurity and fraud-prevention entrepreneur building AI tools at Charm Security to help teams detect and respond to scams and social engineering.
Roy Zur is most useful for explaining human-centered fraud prevention and AI agents that engage scammers.
Best for
A fraud-prevention technology company seeking an advisor or speaker on human-centric fraud prevention.
Not for
A consumer brand-awareness campaign seeking sponsored content, fixed deliverables, rate card, or verified audience composition.
Key takeaways
HVE framework classifies and assesses human vulnerabilities scammers exploit, while supporting human judgment.
HoneyBot AI agent engaged a scammer, gathered identifying information and patterns, and shared them.
Charm Security was selected for FinTech Innovation Lab and RSAC 2026 Innovation Sandbox.
Check first: Confirm audience demographics and comparable results from fraud-prevention talks or campaigns before contacting them.
Main ideas
Fraud starts with a human vulnerability, so it needs its own classification standard · Detection alone is not enough; prevention means acting in the moments that matter · AI agents should engage scammers, not just flag them
Roy Zur is a cybersecurity and fraud-prevention entrepreneur whose posts focus on Charm Security’s efforts to use AI against scams and social engineering.
They explain the Human Vulnerabilities & Exploits (HVE) framework and describe HoneyBot, an AI agent that engages scammers and gathers intelligence.
Their work offers a view of fraud prevention that looks beyond alerts to the human tactics behind attacks and the interventions that may stop them.
Zur connects a clear model of social engineering to a concrete example of action.
They describe HVE as a way to classify and assess the human vulnerabilities scammers exploit, while stressing that it should help—not replace—human judgment.
In the HoneyBot post, they show how Charm applied that approach: an agent kept a scammer engaged, gathered identifying information and patterns, and shared them with relevant parties.
Together, the posts are useful to readers interested in how human-centered fraud risk can be understood and how AI might be used to respond.
They also signal a focus on financial-services and cybersecurity audiences, with Charm’s FinTech Innovation Lab selection and RSAC 2026 Innovation Sandbox recognition.
Roy Zur's public writing centers on one argument: most fraud, scams, and cybercrime begin with a human vulnerability rather than a software flaw, so prevention needs a standard way to name and score those vulnerabilities and AI agents that can act on them in real time.
Read more
Roy Zur describes Charm Security's Human Vulnerabilities & Exploits framework as that standard and its HoneyBot agent as a working example. Alongside the technical case, Roy Zur treats industry recognition and in-person conference work as part of how the approach gets validated and adopted.
Fraud starts with a human vulnerability, so it needs its own classification standard
Roy Zur argues that most fraud, scams, and cybercrime begin when attackers exploit human traits such as urgency, fear, trust, authority, shame, confusion, loneliness, greed, and pressure through repeatable social engineering.
Read more
Software flaws have CVE, CVSS, and CWE to classify and score them, but social engineering has no equivalent.
Zur and a team of AI, behavioral science, fraud, criminology, and cybersecurity researchers built the Human Vulnerabilities & Exploits framework (HVE) to identify, classify, score, and mitigate the human vulnerabilities exploited in fraud and cybercrime.
The goal is not to replace human judgment but to give fraud, security, and frontline teams faster answers: whether a person is being manipulated or doing the manipulating, which tactic is in play, which vulnerability is being exploited, and which intervention is most likely to work.
In a LinkedIn post, Roy Zur asks whether AI can tell if someone is lying, manipulated, or malicious. The post lists HVE's functions, compares the framework to the MITRE standards for software vulnerabilities, and offers the full paper to readers who comment "HVE."
The framework is the most developed argument in this material.
A later HoneyBot post refers to an agent trained on the HVE model, showing the framework carried into product work.
The posts provide no dates to establish the sequence.
Detection alone is not enough; prevention means acting in the moments that matter
Roy Zur argues that identifying fraud is insufficient.
Read more
The goal is to understand the human exploit and act in the moments that matter, moving teams from reactive alerts to prevention, intervention, and resolution. Zur frames fraud, cybercrime, and financial crime as human-centric from the first signal and says defenses need to evolve as scams and social engineering do.
Charm Security's Agentic AI Workforce combines fraud operations expertise, behavioral psychology, and an understanding of human vulnerabilities to guide fraud, financial crime, and security teams toward real-time prevention, intervention, and resolution.
There is a tension between the aim of not replacing human judgment and the product's emphasis on AI agents that intervene automatically. Ask how the product handles that balance.
AI agents should engage scammers, not just flag them
Charm Security's HoneyBot is an AI agent that takes on the role of a victim, sustains a conversation, observes, and quietly collects intelligence while the attacker believes the target is a real person.
Read more
Roy Zur presents it as a shift from reactive alerts to proactive defense by an agentic fraud workforce.
A scammer impersonated media figure Tom Orbach and tried to exploit his audience.
According to the post, the agent trained on the HVE model played the victim, kept the conversation going, and identified dozens of bank accounts, phone numbers, emails, and operational patterns, which were shared with the relevant parties.
The post says this disrupted the scam without the attacker realizing what happened.
Orbach is referenced as the person being impersonated; the post does not include his own quoted view.
Ask how intelligence is validated, how the agent avoids tipping off attackers, and how effectiveness was measured; the post offers only one narrated example.
Industry recognition and conference work are part of the fraud-prevention argument
Roy Zur treats selection by industry programs and in-person events as validation for the work and a way to build the ecosystem around human-centric fraud prevention.
Read more
The posts publicize Charm Security's selection for the RSAC 2026 Innovation Sandbox and the FinTech Innovation Lab 2026, and list a multi-city conference schedule. The invitation is to connect in person with AI, fraud, cybersecurity, and fintech leaders, using the phrase "break the scam spell" as a shared slogan with partners and organizers.
The events listed include RSAC in San Francisco, Fintech Meetup in Las Vegas, HumanX in San Francisco, Fraud Fight Club in Charlotte, NACUSO ReImagine2026 in Orlando, and the Fintech Security Summit in New York. The RSAC post names Crosspoint Capital Partners as joining the journey and thanks Team8, board members, customers, partners, and event leaders.
The recognition posts and event schedule are separate pieces. Ask for publication dates to establish which came first and how these priorities shifted over time.
This post offers the clearest explanation of the HVE framework and what Zur means by human-centric fraud prevention, before introducing a product pitch.
Read more
Roy Zur asks whether AI can tell if someone is lying, manipulated or malicious, then argues that most fraud, scams and cybercrime begin with an exploited human vulnerability.
The post says Charm Security developed the Human Vulnerabilities & Exploits framework with researchers in AI, behavioral science, fraud, criminology and cybersecurity.
It compares HVE to CVE, CVSS and CWE, the standards used to classify and score software vulnerabilities, and describes HVE as a standard way to identify, classify, score and mitigate the human vulnerabilities exploited in fraud and cybercrime.
Zur says the goal is not to replace human judgment but to help fraud, security and frontline teams understand the human context faster, including whether a person is being manipulated, what tactic is being used and what intervention is likely to work.
Detection alone is not enough, the post concludes; prevention depends on acting in the moments that matter.
For brands planning a campaign
For a fraud-prevention technology company evaluating Roy Zur as an advisor or speaker, the HVE framework offers a natural anchor for a session or advisory relationship: it gives the audience a shared vocabulary for human-centric fraud and a clear bridge from detection to intervention.
This post gives a concrete operational example of the HVE model, showing newcomers how Charm Security's claims translate to a real scam attempt.
Read more
Roy Zur describes a scammer who impersonated Tom Orbach and tried to exploit his audience.
According to the post, the scammer was interacting with an AI agent trained on Charm Security's Human Vulnerabilities & Exploits model.
The agent played a victim, kept the conversation going and collected intelligence; Charm calls the capability HoneyBot.
Zur says the operation identified dozens of bank accounts, phone numbers, emails and operational patterns and shared them with the relevant parties, disrupting the scam without the attacker realizing what happened.
The post presents this as a shift from reactive alerts to proactive defense by what it calls an agentic fraud workforce.
For brands planning a campaign
This is a strong fit for a live product demonstration or a speaker segment about AI-driven scam disruption. It lays out a specific sequence—engagement, observation, intelligence collection and disruption—that a fraud-prevention company can evaluate against its own intervention model.
This post details the industry recognition for Charm Security and provides outside validation of Zur's current work.
Read more
Roy Zur writes that Charm Security was selected as one of the best cybersecurity companies in the world by the RSAC 2026 Innovation Sandbox.
The post describes the company's Agentic AI Workforce as combining fraud operations expertise, behavioral psychology and an understanding of human vulnerabilities to help fraud, financial crime and security teams prevent, intervene and resolve in real time.
It also names Crosspoint Capital Partners as an investor and thanks cofounder Avichai Ben, the Charm team, customers, partners, Team8, board members and RSAC leaders.
For brands planning a campaign
For an advisor or speaker brief, this post positions Roy Zur as a recognized voice in fraud prevention, with recent industry backing and an investor relationship. It provides useful credibility context; ask for a detailed explanation of how the technology works.
This post shows how Roy Zur frames Charm Security inside the financial-services ecosystem, which is directly relevant to a fraud-prevention company considering Roy Zur for an advisory or speaking role.
Read more
Roy Zur announces that Charm Security was selected for FinTech Innovation Lab 2026, run by Accenture and the Partnership Fund for New York City in collaboration with leading financial institutions.
He says the company will engage with the ecosystem and help shape the future of financial services at the intersection of cybersecurity, AI and fraud prevention.
The post thanks Yoav Koren, Avichai Ben and Team8.
For brands planning a campaign
This item suits a campaign aimed at banks, payment companies or fintech partnerships. It shows Charm Security positioning itself for enterprise financial-services relationships, rather than only broad cybersecurity awareness, and can inform a partnership angle around pilot programs or industry working sessions.
This post maps where Roy Zur spends time with fraud, fintech and cybersecurity buyers, which helps a reader judge how accessible and current Roy Zur's industry presence is.
Read more
Roy Zur lists a run of events: RSAC in San Francisco, Fintech Meetup in Las Vegas, HumanX in San Francisco, Fraud Fight Club in Charlotte, NACUSO ReImagine2026 in Orlando and the Fintech Security Summit in New York City.
He says fraud, scams and social engineering are evolving faster than defenses and that Charm Security is building AI agents that intervene, resolve and disrupt attacks in real time.
The post invites people attending to connect and uses the phrase 'break the scam spell.' It thanks organizers and partners.
For brands planning a campaign
For a company considering Roy Zur as a speaker or advisor, this schedule suggests a practical path to an in-person meeting or event collaboration, particularly around fraud and fintech audiences. It also shows the language Roy Zur uses in market - intervention, resolution and disruption in real time - which can be tested in a proposed session description.
A standard vocabulary for human vulnerabilities in fraud
Roy Zur's central public argument is that most fraud, scams, and cybercrime begin with human vulnerability rather than a technical flaw.
Read more
Attackers, in this account, exploit urgency, fear, trust, authority, shame, confusion, loneliness, greed, and pressure through repeatable social engineering techniques.
Because software flaws have CVE, CVSS, and CWE to classify and score them, while social engineering has no equivalent, they and a team of AI, behavioral science, fraud, criminology, and cybersecurity researchers built the Human Vulnerabilities & Exploits framework (HVE) to identify, classify, score, and mitigate the human weaknesses being exploited.
The stated goal is to give fraud, security, and frontline teams faster answers to practical questions: whether a person is being manipulated or doing the manipulating, which tactic is in play, which vulnerability is being exploited, and which intervention is most likely to work.
Research collaboration across AI, behavioral science, fraud, criminology, and cybersecurity, producing a named framework and a paper offered to readers who comment on the post.
For brands planning a campaign
This is the most transferable subject Roy Zur speaks and writes about: a named, teachable framework that a fraud prevention company could use as the spine of a webinar, co-authored explainer, or conference talk. A partner should expect to discuss classification and scoring, not just general awareness messaging.
Human-centric fraud prevention as the organizing thesis
Roy Zur frames fraud, cybercrime, and financial crime as human-centric from the first signal, arguing that detection alone is no longer sufficient.
Read more
The stated direction is to understand the human exploit and act in the moments that matter, moving teams from reactive alerts to prevention, intervention, and resolution. This thesis ties together the framework work, product work, and public speaking themes.
For brands planning a campaign
Useful for briefs aimed at fraud operations, financial crime, and frontline staff, where the value proposition is faster human-context judgment rather than another detection layer. The awareness-to-action framing gives a partner a natural narrative arc.
AI agents that engage scammers rather than only flag them
Charm Security's described capability is an agentic AI workforce combining fraud operations expertise, behavioral psychology, and an understanding of human vulnerabilities.
Read more
The concrete example is HoneyBot, an AI agent trained on the HVE model that posed as a victim in a conversation with a scammer impersonating a media figure, kept the conversation going, and collected intelligence as it unfolded. According to the post, the exercise identified dozens of bank accounts, phone numbers, emails, and operational patterns that were shared with the relevant parties, disrupting the scam without the attacker realizing what had happened.
Honeypot-style engagement: an AI agent sustains a conversation, observes, and gathers intelligence while the attacker believes the target is a real person.
The post does not explain how intelligence is validated, how the agent avoids tipping off attackers, or how results are measured. Ask for validation and outcome data before making effectiveness claims based on this single narrated example.
For brands planning a campaign
A strong demonstration subject for a fraud or security audience because it is concrete and story-led. Before making operational claims, ask Roy Zur to substantiate the approach and its outcomes.
Two recognition events appear in the material: selection for the FinTech Innovation Lab 2026, run by Accenture and the Partnership Fund for New York City with financial institutions, and selection as one of the best cybersecurity companies in the world by the RSAC 2026 Innovation Sandbox.
Read more
The RSAC post also notes Crosspoint Capital Partners joining the company's journey and thanks Team8, board members, customers, and partners. Roy Zur describes the RSAC selection as one of the biggest milestones so far.
For brands planning a campaign
These recognition events can support positioning Roy Zur as a speaker or advisor and point to a network of financial institutions, investors, and industry organizers to approach. Interest is likely to be highest around the linked event windows.
Conference circuit and practitioner-facing engagement
Roy Zur publicly plans a multi-city run of industry events: RSAC in San Francisco, Fintech Meetup in Las Vegas, HumanX in San Francisco, Fraud Fight Club in Charlotte, NACUSO ReImagine2026 in Orlando, and the Fintech Security Summit in New York, among others.
Read more
They invite people to connect in person, naming AI, fraud, cybersecurity, and fintech leaders as the audience. The recurring line "break the scam spell" serves as a shared slogan with partners and event organizers.
For brands planning a campaign
Event-linked content and in-person meeting slots are natural partnership formats, since Roy Zur already treats conferences as places to build industry relationships. A campaign built around a specific event date and a meeting or session would fit their existing approach.
Roy Zur’s posts point to one company they co-founded: Charm Security, where they lead fraud-prevention research and an AI agent product.
Read more
Outside organizations appear in a backer role: Crosspoint Capital Partners is welcomed as joining Charm, Team8 is thanked alongside its leadership and board, and Charm was selected for a fintech program run by Accenture and the Partnership Fund for New York City. The posts state no rates, contract terms or deal details, and none carries a paid-partnership disclosure.
Charm Security
Owned business
Roy Zur presents Charm Security as the company behind these posts, including the Human Vulnerabilities & Exploits framework and HoneyBot, an agent that engages scammers.
Read more
In the RSAC post, they call Avichai Ben “my cofounder” and refer to “our amazing team at Charm,” placing them among Charm’s founders.
The RSAC post says Charm Security is “proud to have Crosspoint Capital Partners join us on the journey to Break the Scam Spell,” presenting the firm as joining Charm.
Read more
A later events post also thanks Crosspoint. Ask for the investment’s scale and structure; the posts don’t specify either.
Charm's RSAC post thanks "Team8 - Yuval Shachar, Israel Grimberg, Liran Grinberg, Asaf Azulay and our board members," and Team8 is also tagged on the FinTech Innovation Lab post and on the HoneyBot post.
Read more
The posts do not say whether Team8 is an investor, incubator, or other partner, so the nature of the relationship is unstated.
Roy Zur’s post announces that Charm Security was selected for FinTech Innovation Lab 2026, described as run by Accenture and the Partnership Fund for New York City with leading financial institutions.
Read more
They say Charm will engage with that ecosystem on cybersecurity, AI and fraud prevention. Ask what Charm receives from the program and whether it involves commercial terms; the post doesn’t say.
Roy Zur’s public writing examines fraud and scams that exploit people rather than software.
Read more
Start with the Human Vulnerabilities & Exploits framework, which names the human traits attackers use — urgency, fear, trust, authority, shame, confusion, loneliness, greed, and pressure — and argues that social engineering needs its own classification standard, as software flaws have CVE and CVSS.
The HoneyBot post applies the same idea: an AI agent plays a victim and gathers intelligence from a scammer.
Other posts cover selection for the RSAC 2026 Innovation Sandbox and the FinTech Innovation Lab 2026, as well as a multi-city conference schedule.
Read the framework and HoneyBot posts for the argument; start with the recognition and event posts for current activity.
Both write about impersonation as a human-trust problem and turn specific attack patterns into practical steps for organizations.
Read more
Salman Hussain’s posts on executive impersonation and CEO fraud in the Gulf describe attackers using AI, deepfake voice and video, social engineering, and public business information to bypass normal controls.
They recommend independent-channel verification of financial requests, dual approvals and segregation of duties, employee training, and executive fraud simulations.
Roy Zur makes the same connection between human exploitation and prevention.
Salman Hussain writes about advisory and awareness, offering a practical control checklist and commentary on platform privacy questions, including AI models installed on user devices without clear consent. Roy Zur’s material centers on a named classification framework and product capability for standardizing and scoring human vulnerabilities, rather than issuing control advice.
Both explain fraud to business readers in plain language and argue that attackers exploit people, not the network perimeter.
Read more
Swati Gupta’s posts call trust the new attack vector: attackers can convincingly impersonate a CFO approving a wire, a vendor sending an invoice, or an employee resetting a password rather than breaching a network. Both point to specific defenses rather than general warnings: offline tested backups, strong identity controls, and phishing-resistant authentication in Gupta’s posts; classification, scoring, and intervention in Roy Zur’s.
Swati Gupta writes for small-business owners, using statistics, rhetorical hooks, and a question-and-answer structure to build urgency around identity and ransomware. Roy Zur writes for fraud, security, and financial-crime teams at larger organizations, using a framework-and-product approach rather than addressing business owners directly.
Both cover the same underlying failure: the person contacting you may not be who they claim to be.
Read more
Landon Winkelvoss writes about a man accused of posing as a professional athlete to defraud more than two dozen women, and separately about a victim who lost seven figures to government impersonation over seven months.
They also map the pattern to fake executives requesting wires, vendors changing payment instructions, and impersonated customers.
Both treat these non-technical, purely social-engineering attacks as a recurring problem and connect them to defenses.
Landon Winkelvoss writes for individuals and small businesses, offering a simple consumer rule — hang up, look up the agency’s real number, and call back — alongside named products designed to address impersonation. Roy Zur’s material targets enterprise fraud and security functions and promotes a classification standard, rather than offering an equivalent consumer-facing rule.
For a fraud-prevention company evaluating Roy Zur as an advisor or speaker, the available figures support a LinkedIn-focused placement: their account had 22,178 followers as observed on 8 October 2026, and their posts consistently address AI, fraud prevention, social engineering, human vulnerabilities, and industry events.
Read more
Selected examples include a Human Vulnerabilities & Exploits framework post explaining a standard for classifying human exploits, a HoneyBot post describing an AI agent engaging scammers, and an RSAC Innovation Sandbox post showing industry recognition. Ask for recent audience survey results or documented demographics, plus comparable results from fraud-prevention talks or campaigns—such as registration lists, attendance, or campaign metrics—to assess whether the audience includes the buyer's target roles.
The posts document partnerships held by Charm Security, the company Roy Zur is building, rather than a personal sponsorship or creator-partnership program.
Read more
Charm Security is working with Team8 and Crosspoint Capital Partners, was selected for the Accenture and Partnership Fund for New York City FinTech Innovation Lab 2026, and was named to the RSAC 2026 Innovation Sandbox.
None of these is described as paid media or as an offer they make to brands.
The posts show them on an active conference circuit—RSAC in San Francisco, Fintech Meetup in Las Vegas, HumanX in San Francisco, Fraud Fight Club in Charlotte, NACUSO ReImagine2026 in Orlando and the Fintech Security Summit in New York City—and using direct-response distribution, offering the Human Vulnerabilities & Exploits research paper to anyone who comments the keyword.
The posts list no terms, deliverables, rates or booking route.
Buyers interested in an advisory or speaking engagement should contact them directly through LinkedIn and ask about scope.
A fraud-prevention technology company seeking an advisor or speaker on human-centric fraud prevention is a strong fit.
Read more
Roy Zur’s public argument directly supports that need: most fraud, scams and cybercrime start with an exploited human vulnerability; attackers reuse a short list of tactics, such as urgency, fear, authority and shame; and the field lacked a standard way to name and score those weaknesses until the Human Vulnerabilities & Exploits framework.
That framework gives an advisory engagement or session a spine that a generic awareness talk lacks: a vocabulary, a set of questions (is the person being manipulated or doing the manipulating, which tactic is in play, which vulnerability is exploited, and which intervention is likely to work) and a direct comparison to the CVE and CVSS model a security audience already knows.
The practitioner audience fits too: the posts address fraud, security, financial crime and frontline teams—the same groups the buyer is trying to reach.
Zur also offers useful credibility anchors for a partner to reference: selection for the RSAC 2026 Innovation Sandbox, selection for the Accenture and Partnership Fund for New York City FinTech Innovation Lab 2026, and an investor relationship with Crosspoint Capital Partners.
Their active conference circuit across RSAC, Fintech Meetup, HumanX, Fraud Fight Club, NACUSO ReImagine2026 and the Fintech Security Summit also makes an in-person meeting or event-linked session practical.
The posts do not publish advisory or speaking terms, rates or a booking route, so the buyer should agree on scope, deliverables and ownership of recorded output directly with Zur.
When to choose a specialist
A consumer or brand-awareness campaign seeking a sponsored content package with fixed deliverables, a published rate card and verified audience composition is a weak fit.
Read more
The posts list no sponsorship formats or terms offered to brands; the partnership information concerns Charm Security’s own company recognition, investors and conference schedule, not purchasable placements.
The only audience figure is a LinkedIn follower count observed on 8 October 2026.
The posts give no information about those followers’ occupations, seniority, geography or buying authority, so a campaign promising reach to a defined consumer segment cannot be supported.
The content points elsewhere: classification frameworks, an agentic anti-fraud capability and conference scheduling are enterprise fraud-ops material, not lifestyle or product-review content.
A campaign that needs performance claims treated as established would also be a poor match: the HoneyBot result rests on a single narrated example, and the posts give no detail on how the intelligence was validated or outcomes measured.
Buyers should ask directly whether Zur offers sponsorships; these posts do not describe one.
A worked campaign example
A worked angle for the good-fit brief: a co-hosted working session on human-centric fraud, built around the HVE questions rather than a product demo.
The format could be a 45-minute slot at one of the events already on Zur’s circuit, or a standalone webinar using the same structure.
Open with roughly ten minutes from Zur on why scams lack a CVE-style standard and how HVE names and scores the exploited vulnerability.
Then spend fifteen minutes applying the framework to four scam interactions the buyer selects in advance from its own case queue.
Zur narrates the tactic and vulnerability in each, while the buyer’s fraud-ops lead explains the intervention the team actually used.
Close with twenty minutes in which attendees score a live scenario against HVE and choose an intervention, so they leave having run the method rather than merely heard it described.
Support materials: a short co-authored explainer that mirrors the four HVE questions and lets readers apply them to a recent incident, plus a one-page worksheet the buyer’s team completes internally.
The buyer should set the measurement in advance—session sign-ups, qualified follow-up meetings or worksheet completion by its own analysts—and own the recording and post-event write-up.
Before committing, agree directly with Zur on three things: engagement terms, ownership of the recorded output and how the HoneyBot story will be presented.
Treat it as Zur’s account of one operation, not independently verified proof, unless the buyer has seen the underlying detail.
Choose Salman Hussain when the buyer sells into enterprise security leadership, especially in the Gulf and wider Middle East, and wants an advisor or speaker focused on defending the executive layer.
Read more
Their posts treat executive and CEO impersonation as a business-process and trust-verification problem, not an email-filter problem.
They name the actions a security organisation needs to take: establish independent callback channels for financial requests, require dual approvals and segregation of duties, train employees on executive impersonation and AI-enabled fraud, assess executives' public digital exposure, and run BEC simulations.
A second post extends the discussion to governance of AI features deployed on user devices, covering consent and transparency, local AI processing, supply-chain trust, resource consumption and endpoint visibility.
For a session with security leaders responsible for implementing controls, that checklist framing is more directly usable than a classification framework: it ends in decisions the audience can act on the following week.
The strength is also the limit.
Roy Zur's posts give practical control guidance but name no method, leaving no framework an advisor engagement could license, teach repeatedly or map to a CVE-style scoring model, as Roy Zur's Human Vulnerabilities & Exploits material does.
The posts stay at the level of recommended actions; neither contains a worked incident teardown a buyer could inspect.
They give no advisory or speaking terms, rates or booking route, so buyers would need to agree scope, deliverables and ownership of any recorded output directly.
A buyer seeking proprietary vocabulary to anchor a multi-session programme trades that away for immediate control guidance.
Choose Swati Gupta when the buyer's product targets small and medium businesses and the campaign or session needs to reach owners rather than security teams.
Read more
Their posts argue that identity is the new front door for SMBs, cite the prevalence of compromised credentials in small-business systems, and reframe ransomware as a volume-based business-pressure attack: automated campaigns scan and exploit 30- to 50-person companies for smaller ransoms.
They close with a concrete pre-incident list: offline tested backups, strong identity controls, phishing-resistant authentication, incident response planning and executive crisis playbooks.
The delivery is deliberately plain and numbered, written for an owner with no security team.
It suits an SMB-facing webinar or workshop where the audience needs a short action list rather than adversary detail.
The style is rhetorical and list-driven, with heavy repetition.
Buyers seeking detection mechanics, adversary tradecraft or a technical deep dive will find less here than in Roy Zur's four HVE questions or Salman Hussain's control checklist.
There is no named framework for a repeated programme, and several of the strongest figures (compromised-credential rates, 2026 ransomware behaviour) are asserted with sources pointed to in comments rather than shown in the post.
Buyers should verify those numbers against primary reporting before an advisory engagement.
Choose Landon Winkelvoss when the campaign is consumer-facing or runs through managed service providers, and the buyer wants a speaker who can discuss building anti-impersonation products as well as the scam problem.
Read more
Their posts tell impersonation stories in human terms, including a man accused of posing as a San Francisco 49ers player, with an accomplice posing as the man's financial adviser, to defraud more than two dozen women of roughly $1.3 million; and a victim who lost $1M over seven months to a caller claiming to be a federal investigator.
Each post ends with a rule an ordinary person can apply, such as hanging up, looking up the agency's real number and calling back.
The posts also explain that Backgrounder and Ask Carmen were built to close the gap between people holding profiles across many services and companies detecting impersonation only after the fact.
They name MSP channel exposure explicitly, useful for buyers reaching small businesses through partners.
Swati Gupta's posts offer short problem statements that stop at the product mention, without explaining method, measurement or results.
They support a story-led session better than a teaching engagement.
Because the products belong to Gupta, the material reads as a first-person account, and a co-hosted buyer session would need to manage the product angle alongside the fraud-prevention message.
Buyers should ask for audience evidence and published advisory or speaking terms to assess reach and commercial availability.
Against Roy Zur, the buyer trades a documented framework and an event circuit for stronger consumer narratives and a provider channel.
This page is based on five full LinkedIn posts by Roy Zur about Charm Security: the Human Vulnerabilities & Exploits framework, the HoneyBot agent that engages scammers, selection for the RSAC 2026 Innovation Sandbox and the FinTech Innovation Lab 2026, and a planned conference circuit.
The posts here do not include publication dates, so the order and pace of those themes cannot be established.
No other channels, articles, talks, transcripts, or the underlying HVE paper appear here.
Details about HoneyBot's outcomes are reported as Roy Zur described them, without independent verification.
The LinkedIn follower count observed on 8 October 2026 is public profile information only; no audience demographics or engagement data were available.