Why I'm Backing Mallory

Today, I am excited to announce my involvement as an investor and advisor with Mallory. I started working with the team at Mallory mid 2025 and since that time, the progress has been incredible.

The Mallory team has built a modern cyber-security platform that sits at the intersection of AI-Native Operations and Exposure Management. Mallory's agentic capabilities serve several use cases, builders, and operators alike.

I was introduced to JCran, the founder and CEO, almost a year ago as he was ruminating on how and why all things security intel are so difficult to operationalize and how a new service could emerge as a leader on the heels of the AI revolution. I was immediately interested.

As I regularly do, I started scribbling out why I was excited and how the future could play out, and how Mallory could be positioned to put Intelligence at the center of modern security programs.

We enumerated pain points across several areas of security experts and our original ideas started sounding similar to a "Perplexity for Cybersecurity". The team got to work and the world's first agentic analysis and research pipeline for cyber intelligence was born.

Little did I know, that was just the beginning. Mallory was becoming so much more.

Launch and momentum

Mallory launched publicly on April 9th, and the velocity coming out of launch has been remarkable. In just a few weeks, the team has shipped a platform that already supports a wide range of intelligence and security operations capabilities:

• Near real-time access to the most relevant indicators, TTPs, actors, CVEs, and cyber security current events.
• Create your own intelligence analysis agents that interpret your organization's stack to deliver customized, relevant details.
• Operationalize hunts and investigations based on the intel — combine external intelligence with the internal intelligence from your corporation, resulting in truly impactful and, dare I say it, actionable and automateable information.
• Available via the most modern interfaces for what you need, including Claude Code integration for builders and engineers alike.

My takeaway — Mallory is the next great cyber threat intelligence and exposure management platform. In the coming months you'll see even more from the team, but it's already shifting the model of how intelligence is collected, consumed and operationalized in both mid-size enterprises that have never had a dedicated CTI person and fully operationalized F100s with large teams.

A broader shift

Following up on my post about how companies will evolve their orgs to support AI across every function, I've been thinking about the themes that show up over and over. A lot of people compare this shift to cloud. That's directionally right — but cloud didn't touch every role in the company. AI will.

We are not just adding AI into existing orgs, we are re-designing how work gets done.

A few top-of-mind themes:

More agents than people

This isn't about job elimination — it's about leverage. The highest-performing teams will be those that know how to deploy and manage fleets of agents alongside humans.

Execution over coordination

We're moving out of the "meeting culture" era. Less alignment theater, more direct action. People with tools will just go build.

Adaptability becomes the core skill

The advantage is no longer what you know — it's how fast you can learn and apply new tools. Training and enablement won't be a support function — they'll be mission-critical.

Starts at the top

If leadership isn't hands-on with AI — tools, workflows, tradeoffs — the company won't move. This is not a delegatable transformation.

Operate with acceleration + restraint

There is real risk (security, accuracy, trust). The best companies will move fast and build strong guardrails — not one or the other.

Communication changes completely

Information flow gets faster, broader, and less hierarchical. The orgs that win will rethink how decisions are shared, not just how they're made.

Flatter orgs, wider spans

The classic org chart breaks. Fewer layers, more direct ownership, and managers supporting far more reports. Decision-making moves closer to the edge.

Mallory maps cleanly onto this. It's built for a world where small, leveraged security teams deploy agents to do the work of large CTI organizations — where hunts, investigations, and prioritization happen at the edge rather than through coordination meetings, and where the ability to learn and apply new tools quickly beats institutional knowledge. It's not intel as a report; it's intel as an operational tool, built for the way security is actually going to be run.

But, don't just take my word for it, sign up for a free trial and get access to the platform at www.mallory.ai.