We solved the blank canvas problem | Tom Occhino from Vercel

The prototype is the new PRD. In 2013, Facebook’s development of React changed the way software engineers build and write code. Today, LLMs are transforming that process again. This episode features Tom Occhino, React co-creator and current CPO at Vercel, whose work sits at the center of both shifts. In conversation with 1Password CTO Nancy Wang and Google’s Dev Tagare, Tom explores the platform changes driven by AI-written code, builds a full-stack app in real time, and sets up a deeper discussion on the security risks of agents building software.

Sedara: Inside the Attack Surface - What to Expect in Your First 30 Days

What to Expect in Your First 30 Days: See what actually happens after deploying Attack Surface Management. In this first session of Sedara: Inside the Attack Surface, we walk through what organizations typically experience during the first 30 days of ASM deployment, from integrations and asset discovery to early detections, identity exposure, and remediation priorities. Learn how teams improve visibility, reduce exposure, and take a more proactive approach to cybersecurity.

Vercel's Tom Occhino on why access control is product architecture

Zero-Shot Learning is a podcast about how AI gets built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google, it's a builder's view of the architecture and the complex choices it takes to ship with AI.

How OEMs can deliver safer, recoveryready systems in an evolving OT landscape

OEM expectations have shifted. High performance is no longer enough, and systems must stay resilient for years or even decades across complex environments. Evolving cyberthreats and stricter regulations are increasing complexity. With legacy systems lasting longer and frameworks like the EU Cyber Resilience Act and IEC 62443 raising the bar, prevention alone no longer cuts it. Recovery readiness ensures fast, predictable restoration with minimal disruption.

Why EDR and proxy won't save you from supply chain malware

Most security teams check the EDR box, check the proxy box, and move on. Against supply chain malware, neither provides meaningful protection because they were built for a different problem. Traditional malware has a way of sneaking onto a machine, whereas supply chain malware gets invited. The developer runs npm install, and the malicious code lands with full permission to execute. That inversion breaks both tools at the design level. ‍

Offense Is Running on AI. Is Your Defense? | AI, Configuration Drift & Prevention

Offense is running on AI. Defense has to as well. That's the throughline of Garrett Hamilton's conversation with Jay Wilson, CIO and CISO at Insurity, on The Security Strategist, hosted by Shubhangi Dua at EM360Tech. What they get into.

DPDPA Series Part 2: Security & Access Control (Live DPDP Webinar)

DPDP Act Stage 2 webinar moved beyond the fundamentals of India’s DPDP Act and focused on the practical side of implementation. The session explored the technical, operational, and governance layers organizations need to operationalize compliance at scale. Key highlights from the session: If you're leading privacy, security, compliance, or engineering initiatives, this session provides actionable guidance to help translate DPDP requirements into executable systems and processes.

Allowed Is Not Aligned: Why Retrofitted Tools Can't Secure AI Agents

Gartner named Zenity the Company to Beat in AI Agent Governance on April 17, 2026. That recognition, grounded in technical capabilities, customer implementations, ecosystem breadth, and business model, isn't a marketing award. To us, it's the analyst community confirming that purpose-built architecture for agentic AI is winning. The recognition didn't come in isolation. Gartner's own language captures the stakes.