✦ Zenity Named a Market Shaper in Gartner's AI Application Security Report
Author

Rock Lambros

Kyriakos “Rock” Lambros has roughly 30 years of cybersecurity and IT experience, now serving as the Director of AI Standards and Governance at Zenity. A recovering CISO who has built and led security programs for multibillion dollar organizations across energy, eCommerce, government, banking, and manufacturing, Rock has built a career coupling deep security operations with measurable business outcomes.

Rock also serves as a core team member of the OWASP Agentic Security Initiative, a co-lead of the OWASP Top 10 for LLMs, a reviewer of the OWASP Top 10 for Agentic Applications, and a project author for the OWASP AI Exchange. He is a contributor to CoSAI and AIUC-1 and holds a Distinguished Fellow position with the Enterprise Risk Quantification Institute (ERQI).

Enthusiastic about contributing back to the community, Rock is the co-author of The CISO Evolution: Business Knowledge for Cybersecurity Executives and publishes RockCyber Musings, a bi-weekly newsletter distilling AI security developments for executive leaders. Rock is a frequent keynote speaker, panelist, and industry commentator on topics related to agentic AI security, AI governance, and enterprise risk.

Rock holds an MBA in Finance and Entrepreneurship from Arizona State University, a B.S. in Management Information Systems from the University of Nevada Las Vegas, and is currently pursuing an M.S. in Applied Data Science and AI at the University of Denver. He is a certified AI Governance Professional (AIGP) and Qualified Technology Expert (QTE).

Rock Lambros

Posts by Rock Lambros

Building the Business Case for Agentic AI Security Investment
Rock Lambros

Building the Business Case for Agentic AI Security Investment

Security investment decisions are always, at some level, conversations about risk quantification: how much exposure...

AI Security
When Agents Trust Each Other, One Compromised MCP Server Is Enough
Rock Lambros

When Agents Trust Each Other, One Compromised MCP Server Is Enough

The agentic AI security conversation has, for good reason, spent most of its energy on the agents an organization...

AI Security
Five Ways AI Agents Actually Fail, and Why Most Security Programs Are Only Built for Two of Them
Rock Lambros

Five Ways AI Agents Actually Fail, and Why Most Security Programs Are Only Built for Two of Them

Most of the industry discourse on agentic AI risk has settled into a comfortable framing: agents get attacked the...

AI Security
The Authorization Trap: Why "No Evidence of Manipulation" Doesn't Mean "No Incident"
Rock Lambros

The Authorization Trap: Why "No Evidence of Manipulation" Doesn't Mean "No Incident"

Many conversations about AI agent risk over the past year start from the same unspoken assumption: something bad...

AI Security
How Zenity Implements the 2026 OWASP Top 10 for LLM Applications
Rock Lambros

How Zenity Implements the 2026 OWASP Top 10 for LLM Applications

Every AI security framework names the risks you have to control. Zenity is built to implement those controls at...

AI Security
Refused at the Worst Moment: Guardrail Asymmetry and the Trajectory Problem Behind the Hugging Face Breach
Rock Lambros

Refused at the Worst Moment: Guardrail Asymmetry and the Trajectory Problem Behind the Hugging Face Breach

When Hugging Face's security team sat down to reconstruct what had torn through their production infrastructure...

Industry News
Five Signals, One Answer: Why Single-Signal AI Security Always Fails
Rock Lambros

Five Signals, One Answer: Why Single-Signal AI Security Always Fails

The security industry hasn’t been wrong about agentic AI risk. It’s been incomplete. There’s no shortage of single-signal...

AI Security
Zenity Joins CoSAI: Why Agentic AI Standards Need Practitioners at the Table
Rock Lambros

Zenity Joins CoSAI: Why Agentic AI Standards Need Practitioners at the Table

The agentic AI security standards your enterprise will adopt in the next 18 months are being written right now,...

Company Announcements
Context Engineering Is Security Engineering. RSA 2026 Made the Case.
Rock Lambros

Context Engineering Is Security Engineering. RSA 2026 Made the Case.

The Model Isn't the Problem Anymore Cisco polled its major enterprise customers before RSA 2026 and found something...

AI SecurityConferences

Secure Your Agents

We’d love to chat with you about how your team can secure and govern AI Agents everywhere.

Get a Demo