# Vikramaditya Narayan

Vikramaditya Narayan builds and presents Precogly, an open-source platform for threat modeling that helps security teams map systems, identify threats, and work across teams without commercial-tool licensing costs.

- Profile: https://b2binfluencer.marketing/creators/vikramaditya-narayan/
- LinkedIn: https://www.linkedin.com/in/vikramadityanarayan
- LinkedIn followers: 5,506
- YouTube: https://www.youtube.com/channel/UCu7UMGxBpru1IU5qWDqkU2g
- Topics: artificial-intelligence, application-security
- Based on 9 dated posts, latest 2026-10-20

## Summary

Vikramaditya Narayan is most useful for technical webinars on open-source threat modeling for enterprise AppSec teams.

- Best for: A cloud security vendor planning a technical webinar on scaling open-source threat modeling.
- Not for: Beginner coding courses, career-change advice, or YouTube pre-roll endorsement campaigns.
- Check first: Confirm sponsorship terms, rate card, partnership contact, and recent webinar or talk results.

### Takeaways

- Threat modeling can stall as neglected diagrams and threat lists.
- Precogly is open source and supports visual data-flow diagrams, threat libraries, compliance traceability, collaboration, import/export.
- Presented OWASP Precogly at Arsenal BlackHat and selected for VulnCon Bangalore.

## Main ideas

- **Threat modeling fails in the gap between enterprise-priced tools and simple open-source ones**: Narayan argues that AppSec leads genuinely want continuous threat modeling and want AI to help scale it, but the available options push them back to square one. Commercial platforms are priced for organizations with six-figure security budgets, so teams hit a paywall; open-source alternatives are too simple to scale across an organization; and building in-house, even with AI coding assistants, would take months. The result, they say, is that threat modeling either does not happen or happens badly, leaving stale hand-drawn diagrams and AI-generated threat lists nobody acts on. Precogly is presented as the tool they wanted to exist, not a compromise between the two bad options.
- **Software should be shaped by the practitioners who live with the problem**: Narayan attributes Precogly's design to the people who described the problem first. The launch post says more than 100 practitioners shared their time and frustrations, including many threat modeling leaders from OWASP, and credits them with shaping every design decision. This is a stated priority: the tool's feature set reflects operational complaints drawn out through direct conversations. The post closes by asking security architects and threat modeling practitioners who have been "making do" to try it and report back.
- **A threat model should sit alongside frameworks, compliance requirements, and other tools**: Narayan treats threat modeling as something that has to connect to the rest of a security program rather than end as a diagram. The Precogly post describes library packs mapped to MITRE ATT&CK, STRIDE, CAPEC, and CWE, plus compliance traceability to DORA, NIST CSF, SOC 2 and others. It also highlights TM-BOM import and export for interoperability, and describes the platform as AI-ready. The underlying argument is that models should be portable and reusable across the frameworks and reporting obligations teams already work in, with open exchange formats reducing vendor lock-in.
- **In-person conferences are valuable for people and ideas, not just presentations**: After presenting OWASP Precogly at the Black Hat Arsenal in 2026, Narayan argues that physical conferences are an opportunity to connect with other people and exchange ideas, and describes the conversations as the memorable part of the event. The post highlights adjacent work by naming practitioners and the specific themes they were working on: AI-powered threat modeling workshops, an announced taxonomy for agentic threats, open-source release governance, AI-powered pentesting, macOS data theft, JavaScript malware detection, and post-quantum readiness. It also thanks the event organizer for running it.
- **Regional security communities deserve the same visibility as flagship events**: Narayan's VulnCon post makes a case for the Asian security community as a serious venue rather than a minor stopover. They describe VULNCON as one of the top emerging security events in the region, note support from recognized practitioners, and treat selection to present Precogly in its Arsenal section as a significant milestone. The post credits the event's co-founders for building a platform for the regional community and invites readers to join a set of named practitioners for two days of learning and networking. The argument is that emerging regional events are where the community grows, and presenting there is part of the same work as presenting at Black Hat.

## Work to read

- [Precogly launch: an open-source threat modeling platform for enterprise AppSec](https://www.linkedin.com/posts/vikramadityanarayan_i-feel-relieved-after-a-few-months-of-activity-7440286651588960256-O9hk)
- [Presenting OWASP Precogly at Arsenal BlackHat 2026 and mapping the threat modeling community](https://www.linkedin.com/posts/vikramadityanarayan_presenting-owasp-precogly-at-arsenal-blackhat-activity-7491286245973803008-jkNq)
- [Selected for the Arsenal at VulnCon in Bangalore](https://www.linkedin.com/posts/vikramadityanarayan_vulncon-is-one-of-the-top-emerging-security-activity-7469009370639384576-qVhq)

## Brand relationships

- **Precogly** (owned_business)
- **OWASP** (mention)
- **MITRE** (mention)
- **Black Hat** (mention)
- **VULNCON** (mention)

## Partnerships

Vikramaditya Narayan’s posts focus on building and presenting Precogly, an open-source threat modeling platform, and on conference appearances. They don’t describe sponsorships, advertising, paid partnerships, a rate card, media kit, sponsored formats, sponsor policy, or partnership contact route. For a cloud security vendor planning a technical webinar, the posts point to a direct professional approach around Precogly and threat modeling, not a paid placement. Ask directly whether they accept sponsorship and confirm terms before budgeting.

## Alternatives

- David Meece: Choose Meece for a community and careers session rather than a deep technical one—for example, reaching people entering cybersecurity and the hiring managers who recruit them. The posts point in two directions: a co-curated book, Stronger Together: Women in Cybersecurity, with more than 100 contributors and proceeds donated to WiCyS scholarships; and a networking post that opens Meece's connections to job seekers and names professionals and hiring managers worth following. A session on breaking into the field, male allyship, or using LinkedIn for a security job search fits the posts.
- Sherif Eldeeb: Choose Eldeeb when the webinar belongs at the governance and risk layer rather than the tooling layer—quantum-safe migration, crypto-agility, supply chain exposure, data sovereignty, or compliance burden across national and regional enterprises. The AmCham Egypt panel post examines the quantum threat to current cryptography, the case for cryptographic asset inventories, risk assessment, and crypto-agility, and cites Microsoft material on quantum-safe preparation and AI governance. The OWASP Cairo post covers supply chain risk, dependence on global providers, national sovereignty over data, compliance complexity, and exposure to geopolitical change. A vendor selling crypto-agility, risk inventory, or governance tooling would get more from Eldeeb's framing than from a threat-modeling demo.
- Dario Salice: Choose Salice for a hosted conversation rather than a presented demo—an episode on how identity, permissions, and security change when AI agents act autonomously, or on which pieces of security advice should be retired. The Inverted Podcast post with an OpenAI guest frames agentic AI security questions for listeners and argues that vendors and standards bodies are already investing in making AI systems easier to control. The Hacklore episode with Bob Lord shows Salice can draw a senior guest and turn a thesis—that outdated security myths are dangerous—into an episode. A vendor focused on emerging risk and identity would find the interview format a natural fit.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/