Zip Security

SMBs are the backbone of the global economy, and they deserve the same standard of protection as the world's largest enterprises. AI has made this a must-act moment, and for the first time, it has also given SMBs the means to act: automation that delivers enterprise-grade defense without an enterprise security team. That's what Zip Security was built to do. Proud to join CrowdStrike's Project QuiltWorks and bring frontier AI risk protection to SMBs: deployed, configured, and managed by the platform that keeps them continuously secure. 

Every major security standard tells you to layer your controls. None of them say how many layers is enough. Too few, and one bad click becomes a full breach. Too many, and misconfiguration and alert fatigue quietly cause the same damage from the other direction. For a lean, cloud-first team, we landed on five: identity, device, endpoint, browser, and data. Here's what each layer stops, where it runs out, and what has to pick up next. Read the full breakdown: https://bit.ly/4yOhdB8

A healthcare-adjacent customer sends over a Business Associate Agreement. Nobody on your team can confirm the controls it assumes are running, so you start looking for part-time security leadership. The proposals that come back all use different language for what turns out to be the same arrangement. The label tells you less than the contract does. We broke down what actually varies between engagements, plus eight questions that work regardless of what the provider calls themselves. Check out the full piece in the comments below. Or, if you're looking for specific help, let us know and we can connect you with one of our incredible partners.

Introducing AI Visibility, free for every existing Zip customer: https://lnkd.in/g4euSW9w AI is helping teams move faster than ever, drafting in seconds, automating the tedious parts of the job, shipping things that used to take weeks. That momentum is a good thing. But security leaders need a way to govern it, and right now most are asked to sign off on tools they can't even see. Zip already runs your identity, device, and browser management, so we turned on AI Visibility using data we already had. No new agents, no rollout, and it's free for every existing customer starting today. One dashboard shows every AI tool touching your company, who's using it, and what it can access. Visibility is what lets a company say yes to AI fast instead of slow.

Join Zip's AI Visibility Summit today! https://lnkd.in/dCdd86Bu Panel 1: The Risk and Reward of AI Adoption: https://lnkd.in/d_rj5Nec Josh Zweig, Ryan Winkler of 360 Advanced, and Michael Markulec of Harbor Technology Group on capturing the upside of AI adoption without giving up the compliance and security ground you've already built. Panel 2: Beyond the Model: AI Risk, Human Judgment, and Who's Accountable: https://lnkd.in/dWbpb5Pe Josh Zweig, John Kwarsick of Kwarsick Consulting, and Ayman Elsawah ☕👋🏼 on what real human oversight looks like once AI adoption is moving faster than most review processes can keep up with. Two conversations, two angles, one real look at how to move fast on AI without losing the thread on security and compliance. #aigovernance #cybersecurity

Antivirus blocks known malware files. EDR watches behavior on every endpoint, which is the difference that matters once an attacker isn't using a known file at all. We broke down what each one actually catches, what auditors and insurers expect to see, and how to choose for a lean team. Read the comparison: https://lnkd.in/g2y8jfv5

Enterprise security checklists don't translate to a 30-person company. Too many controls, no prioritization, no sense of what actually stops a breach versus what just looks thorough. We mapped 11 controls to CIS Controls v8.1 IG1, the baseline built specifically for lean teams, and included enforcement guidance for each one. → What to deploy first → What auditors and insurers actually check → How to enforce it, not just document it Full checklist: https://lnkd.in/gCysBbbV

Join Zip's AI Visibility Summit August 5th Everyone's talking about what AI can do. Next week, we're talking about whether the humans steering it can keep pace with it. Panel two of The AI Visibility Summit drops August 5. Joshua Zweig is joined by John Kwarsick of Kwarsick Consulting and Ayman Elsawah ☕👋🏼, a security and IT leader at an AI tech startup, to get into what real human oversight of AI adoption actually looks like inside a growing company. → What accountability looks like once AI is moving faster than your review process → Why getting oversight right is what lets teams move faster, not slower Keep an eye on this page for both panels: https://lnkd.in/d_rj5Nec

Every company is trying to move fast on AI right now. Fewer are asking what happens to their SOC 2 or HIPAA posture while they do it. On August 5, we're dropping The AI Visibility Summit. First up: Joshua Zweig sits down with Ryan Winkler of 360 Advanced and Michael Markulec of Harbor Technology Group to talk about how they help clients capture the upside of AI adoption without giving up the compliance and security ground they've already built. We'll cover: → How to move fast on AI without losing sight of what SOC 2 and HIPAA require → What it actually takes to keep clients audit-ready while their teams adopt new tools in real time Keep an eye on this page for both panels next week: https://lnkd.in/d_rj5Nec

We recently identified fake Claude installers being distributed through paid search ads, using real claude.ai links. Here's how it works: Anthropic's public artifact hosting can be used to publish content under the claude.ai domain, and attackers are taking advantage of that to host malicious installers, then promoting them through search ads. The link looks legitimate because, technically, it is. This bypasses standard defenses like domain allowlisting. The good news: this is a solvable problem with the right layers in place. When we caught this, CrowdStrike's Falcon Complete detected the threat and stopped the exfiltration before any data left the network, even after the malware attempted to add itself to Windows Defender's exclusion list. A few things that help close this gap: 💻 Full device enrollment across your fleet 🛡️ CrowdStrike deployed on every endpoint 💪 Prevention policies actively enforced If you're not sure where your coverage stands, that's a quick and worthwhile check this week. We wrote up the full technical breakdown, including what to look for and how to verify your own setup: https://lnkd.in/g-EcUbXX