iboss named a Leader in the GigaOm Radar for Zero Trust Network Access. Oct 27, 2026, 09:00 ET Security teams get AI, data, and application control on one Zero Trust SASE platform ORLANDO, Fla., Oct. 27, 2026 /PRNewswire/ - Security teams need AI defenses, data protection, and application control on one platform, with Zero Trust Network Access built into that same stack. GigaOm names iboss a Leader in the GigaOm Radar for Zero Trust Network Access, in the Enduring Innovators quadrant, reflecting fully unified policies and visibility with AI insights, including Policy Tracing that shows operators why each access decision was made. The Radar evaluates Zero Trust Network Access offerings for how they broker application access based on identity and context. The iboss assessment highlights one policy plane across public and private resources, Policy Tracing that surfaces the policy and security-engine logic behind each event, and ZTNA delivered inside the iboss Zero Trust SASE Platform. "Customers need one platform that protects AI use, keeps data under control, and governs application access, with Zero Trust Network Access as part of that same stack, not a bolt-on," said Paul Martini, CEO and Co-Founder of iboss. "Being named a Leader in the GigaOm Radar for Zero Trust Network Access reflects how iboss delivers that access with fully unified policies and visibility with AI insights, including Policy Tracing." The access decisions GigaOm evaluated run on the same platform that secures AI use and sensitive data. In iboss, inline, API, and endpoint signals feed one AI engine, with one console, one policy engine, and one data lake. Security teams set policy once and see AI activity, data movement, application use, and access in one place, whether a person or an agent is behind the activity. AI security and visibility, for people and agents AI use now starts with employees and, more and more, with autonomous agents acting on their behalf. iboss gives security teams the means to see, secure, and govern AI interactions in both cases: * Conversation visibility across ChatGPT, Copilot, Gemini, Claude, and emerging AI services, so teams can see how AI is actually used across the organization. * Signatureless shadow AI discovery that finds new AI services as they appear, without waiting for a signature update. * Real-time data loss prevention that blocks source code, customer data, personal information, and intellectual property before they reach AI platforms. * AI policies by user, group, or department, with a full audit trail. * Governance for autonomous agents: monitoring of autonomous agent activity, control over which AI services, tools, APIs, and applications agents may reach, and retained evidence of what agents did. The result is AI adoption that security teams can approve with confidence, because they can see it and set its limits. Data security and visibility, labeled and unlabeled Data security breaks when each layer works in isolation. iboss secures and tracks data as it moves across web, cloud, AI platforms, and endpoints, whether a person or an agent moves it: * Full SSL/TLS decryption by default across all protocols, so encrypted traffic is inspected rather than passed through unseen. * Deep content inspection with file analysis and optical character recognition (OCR). * Microsoft Purview integration, with Microsoft Information Protection label sync, inline controls, and data discovery for both labeled and unlabeled content. * Data loss risk scoring and one-click compliance reporting for GDPR, HIPAA, PCI-DSS, and SOX. Applications and access on the same platform The same platform discovers and controls applications, including zero-day and vibe-coded apps that no signature database knows. A signatureless, AI-powered CASB scores the risk of both the app and the data, in-app controls can block uploads, remove share buttons, and apply tenant restrictions, and SaaS security posture management continuously checks Microsoft 365, Google, Salesforce, and more. Zero Trust Network Access sits in that same stack, so one policy and one view carry from AI use and data protection through to application access. Because every signal flows into one AI engine, iboss turns activity into written analysis across security posture, data security, threats, and web and network activity. Security leaders get answers, not alerts. iboss protects more than 10 million users in more than 100 countries, delivered through more than 100 global points of presence. Organizations can read the iboss reprint of the GigaOm Radar for Zero Trust Network Access at https://portal.gigaom.com/reprint/gigaom-radar-for-zero-trust-network-access-v5-iboss. About iboss iboss is a unified AI and data security platform that helps organizations secure AI, protect sensitive data, and discover and control applications. Built on a containerized Zero Trust architecture, iboss is trusted by global enterprises and government agencies. Learn more at www.iboss.com. SOURCE iboss

US-based iboss sees wider cloud security adoption in PHL in 2027 as AI threats grow. October 20, 2026 | 10:30 pm Joseph Angelo Tadaya, iboss Senior Solution Engineer and Senior Sales Manager for Asia Pacific. - EDG EVA US-based zero trust secure access service edge (SASE) cloud security platform iboss expects more Philippine organizations to adopt cloud-based security solutions in 2027 as artificial intelligence (AI) makes cyber threats more difficult to detect and prevent. "Since we're in the AI era, we also need our security to keep up with the evolution of AI," Joseph Angelo Tadaya, senior sales manager for Asia Pacific at iboss, told reporters during the first day of VST ECS CXO Tech Summit 2026 in Boracay on Tuesday. Mr. Tadaya said AI allows attackers to create new websites and applications more quickly, which can be used to distribute phishing links and malicious content. This makes it harder for traditional security solutions to keep up, as they often rely on databases of known websites and applications to identify threats, he said. He cited the growing number of newly created websites and applications as a challenge for security teams, which must detect threats that may not yet be listed in their existing databases. A September 2026 report by Google Cloud's Mandiant found that cyberattackers are increasingly using AI to automate reconnaissance, identify vulnerabilities and steal credentials, raising the need for stronger security controls. To address this, iboss uses AI-powered engines to inspect network traffic and identify malicious content, including threats from newly created websites and applications, before users can access them. "We're also leveraging AI to combat AI," Mr. Tadaya said, adding that the platform analyzes user traffic to give IT administrators better visibility and security. The company also uses its platform to monitor employees' use of AI tools and prevent them from uploading sensitive company information, such as employee records, to external systems. Mr. Tadaya said iboss expects Philippine organizations to become more open to cloud-based security solutions in 2027, following increased adoption in the past year. However, some organizations remain reluctant to adopt cloud-based cybersecurity solutions because they continue to rely on traditional security systems, such as on-premises firewalls and proxy servers. Founded in the United States in 2003, iboss entered the Philippine market in 2021. Its platform combines network and security capabilities, including zero trust network access, cloud access security broker, data loss prevention, malware defense, threat intelligence and secure web gateway. Its Philippine clients are mainly in banking, hospitality, casinos and government, particularly organizations with data protection and data sovereignty requirements. Mr. Tadaya said iboss serves more than 20 organizations in the country, including large companies and medium-sized enterprises. - Edg Adrian A. Eva % buffered Powered by GliaStudios

Protecting Public Data in an ai-driven world: key takeaways from the Northern WARP Conference 2026. By Darren Smith, Head of Public Sector, BlueFort Security Cybersecurity is often framed as a technology challenge. New platforms, stronger controls, and better detection capabilities understandably dominate much of the conversation. Ultimately, every security decision is (for the time being at least) still made by people. Whether that's a frontline worker deciding whether to approve an authentication request, a member of staff assessing the legitimacy of an email, or a CISO determining where to invest limited resources, the human factor remains central to cyber resilience. This was one of the key themes running through this year's Northern WARP Conference, held at King's House Conference Centre in Manchester on 3rd July. Bringing together public sector cybersecurity professionals, information governance leaders, and industry experts from across the UK, the event focused on "Protecting Public Data: The Human Factor". Now in its sixth year, the Northern WARP Conference has become an important opportunity for public sector organisations to share experiences, discuss emerging challenges, and learn from each other. What stood out throughout the day was not only the quality of the sessions, but also the collaborative atmosphere. Discussions continued beyond the formal presentations, with delegates openly sharing challenges, approaches, and lessons learned. As always with these events, there were plenty of valuable conversations. These are some of my key takeaways. Takeaway one: The Human Factor remains central to cyber resilience. Despite the rapid evolution of cybersecurity technology, one theme remains consistent: people continue to sit at the centre of both risk and resilience. This was particularly evident given the event's focus on protecting public data. While organisations continue to invest in security controls and technical capabilities, effective cybersecurity still depends on the decisions made by individuals across the organisation. The challenge is only becoming more complex as artificial intelligence (AI) becomes increasingly embedded into both offensive and defensive cybersecurity. One of the recurring themes throughout the day was the dual nature of AI. On one hand, organisations are rightly concerned about how attackers can use AI to increase the speed, scale, and sophistication of cyberattacks. AI-enabled phishing and more convincing social engineering campaigns are all actively increasing pressure on already stretched security teams. And that's before you even mention Claude Mythos... However, there was also recognition that the challenge is not simply the technology itself. The question is how organisations enable people to make better decisions when faced with increasingly sophisticated threats. This was the theme behind BlueFort's session, delivered alongside its partner iboss, entitled "Enhancing Human Decisions with AI-Powered SASE." I presented the session with Simon Eappariello, SVP EMEA & APJ at iboss, and BlueFort Security Ltd looked at how capabilities like AI-powered security, Zero Trust Network Access (ZTNA), cloud-delivered security controls, and continuous monitoring can help organisations strengthen security while enabling users to work effectively. The key message was that technology alone is not the answer. Organisations need the right strategy, processes, and expertise in place to ensure emerging technologies are adopted securely and deliver meaningful outcomes. Takeaway two: AI adoption requires the right foundations. The discussion around AI has understandably moved quickly from "should we use it?" to "how do we use it safely?" This transition introduces a range of considerations for public sector organisations. AI has the potential to transform productivity, service delivery, and decision-making, but it also introduces new risks around data protection, governance, access control, and accountability. One of the challenges highlighted during many of my conversations at Northern WARP was that lots of organisations understand the importance of adopting AI securely but are still working through what that looks like in practice. This is where having the right foundations becomes critical. Many of you will have heard me say that before implementing new technologies, organisations need visibility of their current security posture, an understanding of where risks exist, and a clear roadmap for improvement. This requires more than simply deploying new tools. It requires ongoing assessment, expertise, and the ability to continuously adapt as both threats and technologies evolve. This is one of the principles behind BlueFort Evolve, its outcome-driven cybersecurity services ecosystem. By combining specialist expertise, structured assessments, and continuous improvement activities, Evolve helps organisations identify gaps, validate technology decisions, and maximise the value of their security investments over time. The reality is that cybersecurity teams are being asked to secure increasingly complex environments while managing limited resources. Access to the right expertise, at the right time, is becoming just as important as the technology itself. Takeaway three: governance and compliance continue to shape cyber priorities. Unsurprisingly, governance and compliance remained a significant topic throughout the conference. For many public sector organisations, the National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) continues to provide an important structure for improving cyber resilience. However, one of the strongest messages from the discussions was that compliance cannot simply become a tick-box exercise. Frameworks such as CAF provide valuable guidance, but effective cyber resilience requires embedding security into organisational culture. This means recognising that cybersecurity is not solely the responsibility of IT and security teams. Every employee who accesses systems, handles information or makes decisions that affect risk has a role to play. The upcoming Cyber Security and Resilience Bill was also part of wider conversations around the increasing expectations being placed on organisations to demonstrate stronger resilience and accountability. The road ahead is clear: organisations will increasingly need to demonstrate not only that they have security controls in place, but that those controls are effective, understood and continuously improved. Takeaway four: SASE is becoming the direction of travel, but complexity remains a barrier. Another recurring theme throughout the day was the evolution of network security. Most public sector technology leaders recognise that traditional security models built around fixed networks and perimeter-based controls no longer reflect how their organisation now operates. Users are distributed, applications are increasingly cloud-based, and access needs to be secured regardless of location. This is driving greater interest in Secure Access Service Edge (SASE), which brings networking and security capabilities together through a cloud-native architecture. However, while the strategic direction is increasingly understood, implementation remains a challenge. Conversations with delegates highlighted common concerns around replacing legacy infrastructure, managing migration complexity and ensuring that security improvements do not disrupt critical services. The challenge is therefore not necessarily recognising the need for change, but understanding how to make that transition effectively, reducing complexity while improving security outcomes. Collaboration remains the foundation of cyber resilience. If there was one overarching theme from Northern WARP, it was collaboration. The event itself demonstrated the value of bringing together public sector organisations, security professionals, and technology experts to share experiences and learn from each other. Cyber threats are evolving rapidly, and no organisation can realistically address every challenge alone. Building resilience requires collaboration, knowledge sharing, and access to the right expertise. Technology will continue to advance, and AI will undoubtedly play an increasing role in both cybersecurity and the wider public sector landscape. But the fundamentals remain the same: understanding risk, making informed decisions, and ensuring that people, processes, and technology work in lockstep. For public sector organisations protecting sensitive information and essential services, that combination will remain critical. BlueFort Security is committed to helping public sector organisations strengthen cyber resilience through leading security technologies, specialist expertise, and outcome-driven services. Its work with organisations across the sector is focused on reducing risk, improving security maturity, and helping teams navigate an increasingly complex threat landscape. If BlueFort Security Ltd didn't get a chance to chat during the conference, or you weren't able to attend, drop me or Jamie Craggs a message or call BlueFort Security Ltd on 01252 917000.