CYGNVS2026.08 · webinar
Are You Ready for Your Next AI Incident?
With CYGNVS founder Arvind Parthasarathi: why cyber incident response falls short for AI failures, and how to build readiness across teams.
Watch online →
CISO · Advisor · Writer
Security leadership for the AI-native enterprise.
Matthew Honea is the Chief Information Security Officer at Hippocratic AI. He has led security at hyper-growth startups, public companies, and the U.S. Department of State, and advises founders and venture firms on building security into AI-native companies.
39published articles and whitepapers
21keynotes, panels, and interviews
5advisory boards
3venture firms advised
session · matthewhonea.com
ask anything about my work
you
› who are you, and what do you work on?
honea
I am Matthew Honea, an AI-native security leader. I am the CISO at Hippocratic AI, a healthcare AI company focused on patient care and safety. I advise Tailscale, CloudFence, Fable, Cygnvs, and the Silicon Valley Japan Platform, serve as a CxO Advisor at Greylock Partners and a Venture Advisor at Glilot Capital and YL Ventures, and have angel-invested in five security companies. My work spans enterprise security, AI safety, and cyber risk quantification across AI, healthcare, insurance, finance, media, and government. Pick a prompt below to keep going.
›
01 · Profile
role, advisory, and focus
Human Model Card
honea-2026
arch: security-leadership
context: enterprise + AI
status: available
- Role
- CISO, Hippocratic AI
- Advisory
- Tailscale · CloudFence · Fable · Cygnvs · Silicon Valley Japan Platform
- Capital
- Greylock Partners CxO Advisor · Glilot Capital Venture Advisor · YL Ventures Venture Advisor · angel investor, 5 security companies
- Focus
- Enterprise security, AI safety, cyber risk quantification
- Sectors
- AI, healthcare, insurance, finance, media, government
- Outputs
- 39 published articles and whitepapers
- Recognition
- 40 Under 40, Silicon Valley Business Journal
human voice
Security professional and industry speaker. My experience spans media, finance, insurance, and government, with emphasis on software products, data science, and enterprise security.
I work directly with customers, vendors, and partners to ensure success, and I write about quantifying individual and aggregated cyber risk for public and private organizations.
In 2019, recognized as one of the most influential young people in Silicon Valley business and named to 40 Under 40.
02 · Writing
39 pieces · 2017 to 2026
Writing & Publications
published & cited by
latest
This Key Will Self-Destruct: An Open Standard for Revocable API Keys
A leaked credential should stop working about a minute after someone finds it. This is a proposal for making that the default.
Read the article →Timeless Compliance: Why Better Questions Beat Bigger Frameworks
Good compliance programs run on a short list of questions you can actually answer, even after the models change.
Read the article →Red Teaming AI: The Build vs Buy Debate
Know where the model runs, what it takes in, and what it puts out. Then test it the way an attacker would.
Read the article →full record
2026.09
2026.07
2025.06
2025.01
2024.10
2024.08
2024.07
2024.01
2023.11
Security WeekNarrowing the Focus of AI in Security →
2023.10
Compliance WeekHow to Prepare for and Prove Network Compliance →
2023.09
Security WeekFinding Your Way in Cloud Security →
2023.08
2023.07
Security WeekVerifying Software Integrity with Sigstore →
2023.06
Security WeekFinding the Golden Container Ship →
2023.06
Cyber Defense MagazineRevisiting and Budgeting Your Network Security Architecture →
2023.05
Security WeekUnpacking the SBOM Bombshell →
2023.03
Forward NetworksJoining Forward Networks to Build Security into Networks →
2022.12
The CISO SeriesWhat Is the Best Way to Gauge a Company's Cyber Health →
2022.02
SmartNews CareersWhat It Takes to Build a World-Class Security Team webinar→
2020.12
Insurance TimesHow Cryptojacking Affects Insurers' Bottom Line →
2020.10
Dark ReadingCryptojacking: The Unseen Threat →
2019.10
2019.06
Tech RepublicWhy Data Breaches Keep Happening →
2019.05
Risk ManagementThe Case for Uniform Data Breach Reporting →
2019.04
2019.03
Risk & InsuranceAs Cyber Crime Intensifies, Focus on Critical Exposures →
2019.03
2018.12
2018.11
Canadian UnderwriterThe Flood Risk That Might Be Unaccounted For →
2018.05
PropertyCasualty360We Can't Fix All the New Vulnerabilities, So Let's Fix the System →
2018.01
Dark ReadingCyber Insurance Builds for Business →
2017.12
Help Net SecurityRethinking Corporate Risk Practices in the Age of Cyber →
2017.12
2017.10
2017.10
Insurance JournalWhy Mandating Cyber Reporting and Basic Coverage Is Right →
2017.07
Lloyd's of LondonTwo Scenarios to Quantify Cyber-Risk Aggregation whitepaper→
2017.04
MIT Tech ReviewInsurers Scramble to Put a Price on a Cyber Catastrophe →
03 · Speaking
21 engagements · keynotes, panels, podcasts
Interviews & Invited Talks
2026.01 · panelSecurityWeek CISO Forum: 2026 Outlook
A CISO's playbook for a smarter, leaner security stack: where AI cuts operational load, where it adds hidden risk, and how to measure its return.
Watch online →
2025.10 · moderatorSVJP Benkyokai: Voice and Human-Centric AI
Moderated a conversation with Dr. Kinuko Masaki of VoiceBrain on voice analytics and real-time decisions in public safety.
More info →Oktane2024.10 · fireside chat
Oktane 2024
Fireside chat at Caesars Forum in Las Vegas on identity, security, and where the technology is heading, with leaders from Okta and Openlane.
More info →
run · keynoteSWISH GIST 24
Practical security applications for attack surface management using digital twin technology.
More info →
run · sessionSecurity Field Day
A sponsored session with specialists worldwide on finding and fixing network device vulnerabilities.
Watch online →earlier runs
webinar
BrightTALKBrightTALK Webinar →
headlines
CISO SeriesCISO Series →
benkyokai
US Japan CouncilUS Japan Council →
panel
The Security SummitThe Security Summit →
podcast
Security ConversationsSecurity Conversations →
conference
Silicon Valley Japan ProjectSilicon Valley Japan Project →
panel
National Cybersecurity AllianceNational Cybersecurity Alliance →
lecture
UC Berkeley HaasHaas Business @ UC Berkeley →
talk
Norcal GroupNorcal Group Connect →
webcast
AdvisenCyber Risks of the IoT →
webcast
Insurance InsiderMitigating Systemic Cyber Risk →
summit
NetDiligenceNetDiligence Cyber Risk Summit →
research
Casualty Actuarial SocietyCasualty Actuarial Society →
conference
keynote
Guidewire ConnectionsGuidewire Connections →
04 · Contact
open to conversations
About & Connect
Security professional and industry speaker working where AI, healthcare, and the enterprise meet.
My experience spans media, finance, insurance, and government, with emphasis on software products, data science, and enterprise security. I work directly with customers, vendors, and partners to ensure success.
roleCISO, Hippocratic AI
advisoryTailscale · CloudFence · Fable · Cygnvs · SV Japan Platform
capitalGreylock · Glilot · YL Ventures · angel (5 cos.)
status● open to conversations
Get in touch
AI lives on the endpoint.
So does the future of security.