Most cybersecurity strategies rely on the "trust but verify" model, which allows applications to run unless they are known to be malicious. Rob Allen spent nearly two decades cleaning up the wreckage of that approach while working for a Managed Service Provider in Ireland. After witnessing a "double extortion" attack that changed the stakes of ransomware forever, he joined ThreatLocker to help organisations move toward a philosophy of deny by default.

ThreatLocker now protects 65,000 companies globally by ensuring that only approved applications can run, effectively neutralising zero-day threats and unknown malware. In this conversation, Rob shares the internal mechanics that power this growth, including the legendary 60-second support response time and the "pitch off" culture that ensures every employee understands the mission.

He also provides a grounded perspective on AI, explaining why a 15% error rate in security decisions is catastrophic and how ringfencing provides the necessary guardrails for the rise of agentic AI.

What You'll Learn:

Why the move from "trust but verify" to "deny by default" is the only way to stop unknown malware
How the "double extortion" ransomware model changed the recovery landscape for businesses
Why AI should be used for categorisation but never for final security allow or deny decisions
The internal culture of ThreatLocker, including the 60-second support alarm and random pitch-offs
How ringfencing technology allows organisations to adopt agentic AI safely
Why even the most highly trained security engineers fall victim to AI-crafted phishing attacks
The benefits of moving toward Zero Trust Network Access to close vulnerable ports

Episode Resources:

Rob Allen on LinkedIn
Phill Keaney-Bolland on LinkedIn
Yaya’s Website

Cult Products Podcast is handcrafted by our friends over at: fame.so