About
Currently, I’m working with enterprise customers across the UK&I at Axonius but I’ve…
Articles by Ben
Activity
6K followers
-
Ben Crowhurst shared thisI apologies for my awful acting but hopefully you get a giggle out of it! 🙈 🎬 If Leonardo DiCaprio is onboard with looking at Axonius, then surely you should be chatting to us too? #axonius #assetintelligence #comedy #rubbishacting
-
Ben Crowhurst shared this𝐍𝐨𝐭 𝐞𝐯𝐞𝐫𝐲 𝐜𝐫𝐢𝐭𝐢𝐜𝐚𝐥 𝐯𝐮𝐥𝐧𝐞𝐫𝐚𝐛𝐢𝐥𝐢𝐭𝐲 𝐢𝐬 𝐚𝐜𝐭𝐮𝐚𝐥𝐥𝐲 𝐜𝐫𝐢𝐭𝐢𝐜𝐚𝐥 𝐭𝐨 𝐲𝐨𝐮𝐫 𝐛𝐮𝐬𝐢𝐧𝐞𝐬𝐬. That's a statement that still makes some security leaders uncomfortable but it's the truth that the best programmes are being built around. Here's the problem with CVSS-first thinking: A 9.8 CVSS score tells you a vulnerability is severe. It tells you nothing about whether it matters to your business. Is the affected device externally facing? Is it a domain controller or a decommissioned test machine? Is the vulnerability actually exploitable in your environment? Who owns it and is it even in policy? Without answers to these questions, security teams aren't managing risk, they're managing a queue. Patching everything critical without context isn't rigour, it's noise. Expensive, slow and ultimately it doesn't move the needle on actual exposure. The reason most organisations haven't made this shift isn't lack of awareness, it's lack of context. That information exists but it lives in silos. Stitching it together manually is time-consuming and the moment you're done, it's already out of date. This is exactly what I'm working through with a number of organisations right now, helping them define what risk actually means for their business and building that into a model that's always current, not a point-in-time spreadsheet. When you can automatically map ownership, policy compliance, exploitability, and business impact across your entire technology estate, something shifts. You stop chasing CVEs and start reducing risk. You can report to the board with confidence, not because you patched 94% of criticals, but because you demonstrably reduced exposure where it counts. If your vulnerability programme is still driven purely by CVSS scores, you're not alone but there is a better way and the gap between those who've made the shift and those who haven't is only going to widen. Context isn't a nice-to-have. It's the foundation of a mature security programme. #CyberSecurity #VulnerabilityManagement #RiskManagement #CISO #SecurityLeadership
-
Ben Crowhurst reacted on thisWho's got ideas for the next event, are there any big/ cool shows on through September tat we can squeeze in before the weather inevitably turns?? Put your suggestions in the comments and we can take them to poll! 👇
-
Ben Crowhurst shared this🔒 Attending Gartner Security & Risk Management Summit in London next month? Let's talk. I'll be at #GartnerSRM (22–24 September, ExCel London) and would love to connect with security peers who are wrestling with a challenge that's becoming impossible to ignore: your tools tell you one thing, and reality tells you another. Research shows that 56% of security teams struggle to prioritise effectively. Not because they lack tools, but because they lack context. More dashboards. More findings. More noise. And still, the hardest question in security remains unanswered: what do I actually fix first? At Axonius, we're built to answer exactly that. We're the asset intelligence platform for unified security operations and exposure management and here's what that means in practice: 🔍 Know every asset. Really. Every security and IT leader we speak to has the same story about their asset data: a tool says one thing and reality says another. Axonius reconciles that — giving you a verified, deduplicated source of truth across your entire environment, including IT, cloud, IoT and OT. Axonius ⚠️ Manage exposure, not just vulnerability. Axonius Exposures consolidates vulnerabilities, misconfigurations, policy violations, and posture gaps from all your security tools into one contextual view tied to the assets they impact — so you can operationalise a true CTEM programme, not just run scans. ⚡ Act, don't just analyse. Security environments have grown more distributed, more dynamic, and more complex — and when teams can't fully understand their environment, they simply cannot act. That's why we've built AI-powered remediation directly into the platform, so intelligence becomes action, automatically. Axonius This is the complete picture: Asset Intelligence → Exposure Management → Automated Action. One platform. One source of truth. Continuous threat exposure management is expected to dominate Gartner's research agenda through 2027 and we're already there. If you're a CISO, security architect, or risk leader attending Gartner SRM London and want to see how leading organisations are closing the gap between security investment and security action, I'd love 20 minutes. 👇 Drop a comment, send me a DM, or book time directly, let's make the most of London. #GartnerSRM #Axonius #ExposureManagement #AssetIntelligence #CTEM #CyberSecurity #CISO #SecurityOperation
-
Ben Crowhurst shared thisMost vulnerability programmes aren't failing because of bad tools or bad teams. They're failing because CVSS scores were never designed to answer the question security leaders actually need to answer: what is the real risk to my business? A critical vulnerability on an air-gapped, policy-covered internal asset is not the same risk as a medium vulnerability on an internet-facing device with no owner, no EDR, and 90 days since its last scan. But most programmes treat them that way. In this article you'll read about why traditional vulnerability management is falling short and what a more contextual approach looks like across four areas: - Knowing what you actually have (visibility) - Understanding the risk in context, not just the CVSS score - Who owns the asset and why that's the hidden bottleneck in remediation speed - Why automation is no longer optional given the volume of new risk There are also four questions in there worth putting to your own programme if you want a quick sense of where the gaps might be. #Axonius #ExposureManagment #VulnerabilityManagment #Context #Exposure #CyberSecurity #SecurityAutomationYour vulnerability programme isn't broken. Your definition of risk is.Your vulnerability programme isn't broken. Your definition of risk is.
-
Ben Crowhurst reacted on thisGreat to see a few of you this morning at Podium in Newbury. Definitely realised I won’t be the biggest car nut in this group with Oliver Leyfield here, his car knowledge showed me up today 😅 Good to see you all and looking forward to the next one! 🫡
-
Ben Crowhurst reacted on this❗️❗️Final reminder❗️❗️ Tomorrow there are a handful of us from the group (around 5 currently) meeting at Podium Place in Newbury for some breakfast and a coffee. If your local or can make it the details are below: Location: Podium Place, Newbury Time: 9am onwards Date: Saturday 15th August Let me know if you do plan on attending so I can keep an eye out for you and we can introduce the group. Hopefully see a few of you there tomorrow and if you have suggestions for the next one then let me know! ☀️🚗
-
Ben Crowhurst reposted thisBen Crowhurst reposted thisThink your EDR is deployed on every asset? Think again. Watch what happens when we ask the Axonius AI Agent for a security coverage report. It flags an 11,000+ device gap in need of remediation. This is what asset intelligence looks like. Book a demo: https://lnkd.in/gQCj3-Hg
Ben Crowhurst commented on a post
17h
😊🫣 I think I’ll stick to Axonius, not sure Hollywood will be calling yet 😂
-
Ben Crowhurst liked thisBen Crowhurst liked thisI had an incredible time at Cohesity’s SKO in Las Vegas last week! It was brilliant to meet my team and so many of the people I’ll be working with across the business. 🙌 There’s a huge amount of energy around what Cohesity is building. Excited to hit the road in the coming months to drive the message in our partners. 🔐 A huge thank you to everyone who made SKO such a welcoming and memorable experience 💚
-
Ben Crowhurst liked thisBen Crowhurst liked thisRed-eye or early-morning ? I like both, and you? Tell me On the road this week - next Vienna 🇦🇹 Looking forward to meeting our valuable customers
-
Ben Crowhurst liked thisBen Crowhurst liked thisReporting from Dublin! 🇮🇪 Great to have our international BD team together on-site for exams, QBRs and training. Having a fully remote team is incredibly dynamic, but there’s nothing quite like getting together in person to collaborate, reconnect and build momentum! A huge thank you to Iconic Offices for hosting us in such a stunning space!
-
Ben Crowhurst reacted on thisWe need to go deeper into your asset inventory. 🎬 Thanks for the cameo, Ben Crowhurst.
-
Ben Crowhurst liked thisRob really knows his stuff and his message is totally clear. The risk and consequences of OT attacks are profound and it’s essential that we as an industry keep pushing to do better and better in defence. This isn’t just about more tools, or about AI (for offence and defence) but it’s about how business chose to operate, where money is spent and the decisions that are taken for strategy and technology. There’s a lot of good in progress with NIS2/Cyber Resilience Bill and improvements to corporate codes of governance. Never been more pressure on blue teams and never been a better time to step up and shine. Keep at it defenders!Ben Crowhurst liked thisI’m really just exhausted and done by the anti-OT cybersecurity crowd. Or the OT cyber folks who want to not advocate for doing more than preventive measures. I never say IT security shouldn’t exist, I’m tired of the IT folks and others who say it’s “all T” like OT security shouldn’t exist. Let me explain. People are going to die. And yet we talk about risk, and frequency, and try to weasel our ways out of the reality. The water gets hotter and we pretend it won’t boil soon. There are over 80 water utilities that were hit by cyber attacks in one campaign this past month. The number is higher and many undisclosed - and it’s too many. And it didn’t just happen in the U.S. but the others are undisclosed right now. Over the years every single attack and event people have said somehow made it down. It wasn’t enough. But it didn’t REALLY do ENOUGH damage to take it seriously. I mean 300m in damages and someone tried to kill people at that oil refinery but come on how often will that really happen? I’m sorry but it matters. Our local communities are at risk. Our kids. We know what to do. We don’t do it. Exhausted amazing citizens working in government see the issues, they warn, and we all say ok maybe next year we’ll get it right. We have to have a fundamental step change. Major shifts. Not incremental discussions. But I am so done being involved in so many incidents non-publicly and so many threats that we track and being told by anyone not on the front lines of it that we should do the same or less. I’m done arguing about “well how many incidents do you track” “what’s the real impact here” “can’t we just be “resilient”” Kids are going to die. 1 is unacceptable. Screw your profits and debates - every single loss of life is unacceptable if we can avoid it. And if we know how? And don’t? Shame on all of us We must act. I’m going to work on something new - I’ll do my best to make it worth your time. Thanks for reading. Stay tuned.
Experience & Education
Recommendations received
4 people have recommended Ben
Join now to viewOther similar profiles
Explore more posts
-
Cyberseer
Cyber attackers don’t stand still, and neither do the behaviours our SOC uncovers. If you’re looking for real‑world insight into how threats actually slip past preventative controls, our Cyberseer SOC Threat Findings Report remains one of the clearest breakdowns of: • How credential theft plays out in practice • The subtle behaviours that precede execution • Where attackers “blend in” using legitimate tools • The early‑stage signals our analysts rely on Still highly relevant for anyone shaping detection strategy this year. 📘 Download the report: https://lnkd.in/eF96M-rq #cybersecurity #ThreatDetection
-
Dharmesh Vashi
MDR demand has surged 18% in the UK. That’s because “more alerts” isn’t the answer, better outcomes are. CIOS’s want outcomes they can defend in the boardroom: ✔ Immediate answers, not noise ✔ Containment when minutes matter ✔ Proof of resilience, not promises That’s exactly what our MD, Martin Jakobsen explores in this piece: 🔹 How AI is transforming detection and response 🔹 Why MDR has shifted from “optional” to “essential” 🔹 What businesses must do to stay ahead of attackers This is where the market is heading & the organisations moving first will be the ones still standing. Read the full article here: https://lnkd.in/eNpbaqCz Do you see MDR as essential or still optional in your strategy? #CyberSecurity #MDR #CISO #UKCyber #Cybanetix
1 Comment
Explore collaborative articles
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
Explore More