Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The AI buzzword trap in compliance tools | Heard in the founder chat ft. Inflo's Tom Skelton

“AI-powered.” “AI-native.” “End-to-end AI.” At some point, it all sounds the same—but it’s not. In this “Heard in the Founder Group Chat” episode, Tom Skelton, Information Security and Technology Lead at Inflo, shares how to spot real AI that saves time (and risk)—and how to avoid platforms that just rebrand old features.

Fintech compliance: A guide to risks and regulations in 2025

While fintech has helped streamline operations for financial institutions and everyday consumers, it has also introduced new risks that you must account for. According to the CyberCube Global Threat Outlook H1-2024, fintech is one of the top five sectors with the highest exposure to cybersecurity threats.

What is TISAX certification? A 101 guide to compliance

With the rapid adoption of AI and automation technologies, the automotive industry is experiencing a massive transformation. From autonomous driving tech to vehicles connected with cloud-based services, these innovations are reshaping how automakers and suppliers operate globally. However, these shifts have introduced new vulnerabilities, especially cyber risks, that need to be addressed.

Vanta State of Trust 2025: AI Threats Outpace Security Expertise

7 in 10 organisations say the security risks for their company have never been higher. For the majority of companies, AI threats have outpaced their team's expertise to combat them. 8 in 10 are adopting agentic AI to help-but fewer than half have frameworks in place to control it. 78% of security and compliance teams are seeing a reduction in employee burnout thanks to AI and automation tools.

New data: Security's communication gap with leadership (cost vs. value)

Security leaders often face challenges that extend beyond the firewall: a major gap in communication between the security function and executive leadership. This misalignment can have severe consequences, including stalling deals, increasing organizational risk, and preventing security from being recognized as a key driver of business growth.

How SaaS companies can achieve ISO 27001 certification

There’s a growing sense of risk awareness in the SaaS space as companies face increasing scrutiny over information security. According to Vanta’s State of Trust report, nearly two-thirds of organizations report that their stakeholders expect proof of a robust security posture and alignment with popular cybersecurity standards. ‍ ISO 27001 is one of the most widely recognized frameworks for demonstrating a strong security posture.

30+ due diligence questions to ask AI vendors in a security review

Introducing third-party AI into your systems can be a milestone for productivity and growth, but it also expands your attack surface in unpredictable ways. If your AI vendors have weak controls, threats like data poisoning and algorithm failure can ripple through your systems.

Why auditor choice matters more than you think | Heard in the founder chat

Some things in startup life are just for show—job titles, swag drops, maybe even your first “launch.” Your auditor? Not one of them. In this episode of Heard in the Founder Group Chat, Jadee Hanson, Vanta’s CISO, breaks down why your auditor is more than a checkbox — they’re your external seal of trust.

How to demonstrate your AI security posture: A step-by-step guide

As organizations integrate AI into their everyday systems and operations, the scrutiny on the risks it introduces is higher than ever. According to Vanta’s State of Trust Report 2024, more than half of organizations express concerns over security risks compounded by AI. ‍ The growing unease highlights a new business expectation: you must be able to prove your organization is using AI securely and responsibly.