The Logic of Deny by Default: Building the Ultimate Security Guardrail

Rob Allen, CPO at @ThreatLocker , discusses ransomware prevention, zero trust security, and why deny-by-default application control is essential for modern business protection. Most security tools focus on detection, but Rob explains why a control-based approach is the only way to neutralise zero-day threats and AI-crafted attacks. We dive into the culture of ThreatLocker, the reality of phishing in the age of AI, and how to build products that people actually trust.

YouTube Chapters:
0:00 Introduction and Welcome
1:08 From MSP cleanup to ransomware prevention
2:32 The double extortion attack that changed everything
5:12 Why "trust but verify" is a broken model
8:18 The 60-second support response rule
11:35 How @ThreatLocker maintains startup speed at scale
14:10 The "pitch off" and company alignment
19:20 Why AI cannot be trusted with security decisions
22:00 Securing agentic AI with ringfencing
27:34 Closing the VPN gap with ZTNA
30:47 The phishing test that caught the experts
32:02 Rob's advice for his younger self

Episode Resources:
Rob Allen on LinkedIn: https://www.linkedin.com/in/threatlockerrob/
Phill Keaney-Bolland on LinkedIn: https://uk.linkedin.com/in/phillbolland
Yaya’s Website: https://www.yaya.co/cult-products-podcast

Видео The Logic of Deny by Default: Building the Ultimate Security Guardrail канала Yaya