Jack Poller
Jack Poller is VP of Product Marketing at NetFoundry, a Zero Trust connectivity company built on the open source OpenZiti platform. He brings over 35 years of experience in security, networking, and cloud strategy, including work as founder of Paradigm Technica and as a Principal Analyst covering AI, identity, and data security. Jack holds degrees in Applied Math and Computer Science from Carnegie Mellon University, and an MBA from Santa Clara University.
Posts by Jack Poller
- Jack Poller
- Updated: October 29, 2026
Every AI agent the business buys becomes a firewall ticket. Outbound-only connectors give vendor agents access with no inbound ports, DMZ, or public DNS.
- Jack Poller
- Updated: October 27, 2026
A critical out-of-bounds write in the Brotli decoder (CVE-2026-111497) hits .NET, Node.js, and Python at once. Patch it, then shrink what an attacker can actually reach.
- Jack Poller
- Updated: October 27, 2026
PHP2Shell runs before your login does. See why an exposed port lets attackers break a service without valid credentials, and how closing inbound ports removes the attack surface.
- Jack Poller
- Updated: October 21, 2026
Every familiar way to let a vendor's AI agent reach your internal systems carries a cost. Here is the trade each one makes, and where NetFoundry Frontdoor wins.
- Jack Poller
- Updated: October 21, 2026
MCP shipped with no auth in 2024. Here’s where its authentication and authorization stand now, what good looks like, and where real deployments still fall short.
- Jack Poller
- Updated: October 21, 2026
Vendor-hosted AI agents call inbound into your ERP, databases, and MCP servers. See how that flips your attack surface and how Zero Trust closes it.
- Jack Poller
- Updated: October 14, 2026
Legacy multi-cloud microsegmentation means a different agent in every cloud. See how one identity-first fabric enforces the same policy across cloud and edge.
- Jack Poller
- Updated: October 6, 2026
Vulnerability cloaking removes an unpatched service's open ports. See how outbound-only, identity-based connections leave attackers nothing to scan or exploit.
