About
Builder and problem solver who loves working with others to create strong organizations.
Activity
20K followers
-
Corey Thomas reposted thisCorey Thomas reposted thisAppSec remediation and endpoint remediation are not the same problem. That distinction matters more now because much of the conversation about AI remediation has centered on code. Understand the dependency chain. Determine whether a vulnerable component is reachable. Identify whether the exploitable condition exists. Propose a workaround. Open a PR. Refactor the code. That is valuable work. It is not what we do at furl. We focus on autonomous endpoint remediation: changing the state of systems already running across an enterprise. Sometimes that means installing a vendor patch. Other times it means upgrading or uninstalling software, changing a configuration, applying a hardening control, or mitigating risk when no immediate fix exists. Then you have to verify that the change worked, confirm the exposure actually closed, and roll back safely if it didn't. Doing that autonomously absolutely requires context. You need to understand the endpoint, its software and configuration, dependencies, ownership, prior state, maintenance windows, approval requirements, and the boundaries within which the system is allowed to act. Building and maintaining that understanding is a prerequisite for safe autonomous remediation. But it isn't the remediation itself. Knowing that an endpoint is vulnerable is not fixing it. Understanding why it's vulnerable is not fixing it. Knowing how its components relate is not fixing it. Determining that it's exploitable is not fixing it. Eventually, something has to change on the system. That's the execution problem. And I think security has historically invested much more heavily in understanding, detecting, and prioritizing risk than in increasing our capacity to actually eliminate it. AppSec and endpoint remediation are parts of the same larger problem, but they operate at different layers. Code gets compiled, packaged, and deployed onto IT systems. Those systems accumulate vulnerable software, misconfigurations, legacy components, and hardening gaps that still have to be addressed. AI has enormous potential across that entire stack. No one company is going to solve every layer. We chose to go very deep on endpoints. Because knowing exactly what's wrong is necessary. Actually fixing it is a different problem.
-
Corey Thomas posted thisI’ve had the extreme privilege of leading Rapid7 for over 13 years, and today I am thrilled to welcome Wael Mohamed to the company as our new CEO, as I transition into my new role as Executive Chairman. Rapid7 is home to some of the most curious, brilliant, and compassionate people in cybersecurity. I am confident in Wael’s ability to continue driving our preemptive security strategy — effectively integrating MDR and exposure management into AI-led security operations to preempt attackers at machine speed. It has been an honor to lead Rapid7 through significant milestones: shaping cybersecurity research policy, leading the shift from traditional vulnerabilty management to threat aware exposure mangement, going from launching our MDR business to becoming one of the top MDR vendors in the world— to name just a few — and through it all, helping customers and business leaders navigate the constantly shifting technology landscape. As Executive Chairman, I look forward to focusing on our technology vision, the AI landscape and strategy, and continuing to drive momentum around policy that will help our customers stay secure. As it has been from the Metasploit days, I remain deeply passionate about community-focus and industry engagement as the two most important forces to drive meaningful change in cybersecurity. This marks an important moment for Rapid7 as we continue strengthening our position as a leader in the emerging AI-SOC market, and I couldn't be more excited for the chapter ahead. Please join me in giving Wael a warm welcome to the Rapid7 team!
-
Corey Thomas shared thisYou can't build trust in AI without transparency, and as AI gets embedded in security operations, leaders expect to understand how decisions are made. Thank you, Craig Adams for a great conversation - the future of MDR is bright.Corey Thomas shared this⏱️ AI is accelerating everything in cybersecurity. The question now is whether our defenders are accelerating with it. Rapid7's 'Experts on Experts' video series is back! To kick off Season 2, Chief Product Officer Craig Adams sat down with our CEO, Corey Thomas, to talk about what AI is changing inside security operations – and what it isn’t. 🧵 Set the stage with a quick companion blog: r-7.co/3PFVGbQ ▶️ Or jump right into the full conversation on YouTube: r-7.co/4v2Iiyw
-
Corey Thomas shared thisWhen I talk with security leaders, something I often hear is that they’re chasing measurable impact. At Rapid7, our mission is to simplify access to security outcomes from risk to response. We built the Command Platform to unify all your data, not just what we collect, so your organization gets the facts of your environment from the beginning. This week, we took another leap toward our mission with the launch of Incident Command, our upgraded next-gen SIEM. Incident Command delivers all the benefits of the Command Platform plus broadened access to our decades of SOC expertise, with agentic AI built into the workflows security teams use every day. We have seen the incredible value of these features at work in our own SOC, and now we’re bringing that same value to our customers directly within the tools they use. Proud of the Rapid7 team that brought this to life. Excited for what this means for security leaders everywhere: https://r-7.co/4o2cKp0Press Release: Rapid7 Launches Incident Command: AI-Native SIEM Empowers Analysts to Act with Speed and Precision from Risk to Response - Rapid7Press Release: Rapid7 Launches Incident Command: AI-Native SIEM Empowers Analysts to Act with Speed and Precision from Risk to Response - Rapid7
-
Corey Thomas reposted thisCorey Thomas reposted this🚨🚨 Introducing Intelligence Hub, Rapid7’s integrated threat intelligence solution available via our Command Platform. 🚨🚨 Intelligence Hub was designed to empower security teams with curated, actionable insights to help teams confidently answer two pressing questions from their Leadership Teams and CISO's: 1. What do we know about the threat group and the associated IOCs, CVEs, or TTPs? 2. Are we currently impacted or at risk, and what is our coverage status (including estimated time to detection or mitigation)? No more noise—just the intel you need to act fast and stay ahead. Check out Craig Adams & Raj Samani's blog or the Official Rapid7 Press Release below. Blog: https://lnkd.in/eiKZMrSF Press Release: https://lnkd.in/eaXWvzJf #ThreatIntelligence #CyberSecurity #InfoSec #SecurityOperations #CyberThreats #RSAC
-
Corey Thomas reposted thisCorey Thomas reposted thisIntroducing Rapid7 MDR for Enterprise, built specifically for large, complex organizations spanning the cloud, on-premises, legacy systems & proprietary applications. Expert-led, deeply customized, and fully aligned with your environment. Take command of your enterprise-scale risk: https://r-7.co/42ZgVJM. Innovation is on fire at Rapid7!
-
Corey Thomas reposted thisCorey Thomas reposted thisA statement from Rapid7 and CEO Corey Thomas: Much of the world awoke to the shocking news coming out of Israel this morning. We condemn this act of terrorism and our thoughts are with our Israeli employees and the people of Israel as we watch the events with a great deal of sadness. We are in contact with our team on the ground and working to provide support to them, their families, and those employees who’ve already been called into service. We will continue to watch the situation carefully so that we can best support our team’s safety and well-being.
-
Corey Thomas shared thisAmazing mission, company and founders.Corey Thomas shared thisGrowing up, my family was poor. I mean, poor, poor. Everyday was an exercise in survival, and, as a young person, that has a profound impact on how you view yourself and the world around you. For me that has meant knowing (1) that I am blessed to live the life I do today, and (2) that so many others do not have the same opportunities. One of the most devastating ways I see this disparity play out is in the space of health and wellness. Even as a “successful person” by most standards of the world, I have watched the destructive legacies of health inequity impact my own family. Which is why my dear friend Carmichael Roberts and I co-founded WellWithAll, a health and wellness company built on the premise that we all deserve healthy lives and the opportunity to thrive. Starting with our initial line of vitamins and supplements aimed at improving everyday health, we hope to empower folks with the tools they need to create healthier outcomes for themselves and their families. Beyond the products we make, we are committing 20% of our profits to the communities we serve, with a goal of investing $300 million over 10 years in Black, Brown, and low-income communities, where the brunt of health inequity is felt hardest. We look forward to having you on this journey with us! Visit WellWithAll.com to learn more about our story, and become part of our growing community on Instagram @wellwithall_.
-
Corey Thomas posted thisI’m deeply saddened by the loss of Philippe Courtot. He was not just a pioneer in the tech industry, but also a man I profoundly respected. I will always recall with fondness our dinners together spent in conversation on technology, business, and life.
-
Corey Thomas reacted on thisAfter an incredible 6 year journey scaling Rapid7, I’m extremely excited to share that I've joined PolyAI as CFO. Over the past 20 years of both scaling and investing in software companies, I’ve been deeply focused on answering one critical question: how do companies drive durable growth and impact? For most enterprises today, a huge part of the answer lies in how they engage with and delight their customers. That is why I’m joining PolyAI. The emergence of dialog AI, pioneered by PolyAI, is rapidly becoming part of our everyday lives. It will force every company to rethink customer engagement, and PolyAI’s Agentic Dialogue Platform is built for any builder to start with, and strong enough for any enterprise to run on. Our proprietary model, Dialog-RSN-1, is the world’s fastest reasoning model built for real-time, complex conversations, and unlike any other platform, our Wren in-platform agent works on behalf of our customers to continuously improve their dialog agents so their performance compounds over time. This combination has created one of the most scalable dialog platforms, built to help companies delight their customers. My first priority is to invest in our Agentic Dialog Platform to ensure it is as accessible as possible to every customer, from a first-time builder to a global enterprise. Huge thanks to Nikola Mrkšić, Shawn Wen, Eddy Su and the whole PolyAI team for the warm welcome. I’m excited to get going, and if you want to learn more about how PolyAI can help your team, just reach out.Corey Thomas reacted on thisPlease help us welcome Sunil Shah as Chief Financial Officer at PolyAI. Sunil joins at a pivotal moment as we open up our Agentic Dialog Platform to more enterprises and AI builders. He brings 20 years of experience growing software businesses. He has led global finance organizations through periods of massive growth, supported a company through its acquisition, and spent nearly a decade as a technology investor before moving into operating roles. Welcome to the team, Sunil! Read more about this exciting addition through the link in the comments. 👇
-
Corey Thomas liked thisCorey Thomas liked thisA Common September Topic: What did you do for vacation this summer? Our family went to Hawaii for the first time in August. While the vacation was about fun and relaxing; my wife and I felt it important to take our kids to Pearl Harbor as their Great Grandfather, Jack Larkin, served in the Pacific during WWII on the USS Wisconsin; and then lived to 96 years old and got to know his great-grand kids. On my side of the family, my Grandfather, John Palm, served in France during WWII. Before the trip, I took the pictures off the wall of both Jack, getting ready for War in the Navy, and John while in France in the Army. I also have a newspaper that my family saved from Monday December 8th, 1941 the day after Pearl Harbor. We looked at all three: The photos faded, the news paper smells and looks it's 85 years old age. I told them this is all part of your family history. When we visited Pearl Harbor visiting both the Arizona and the men entombed there; and the USS Missouri, a ship of the era that their Great-Grandfather Jack served: This is how your great-grandfather slept, ate, and prepared to fight. We live in a time with technology, that what is real, can feel transitory. I didn't want them to read about their family history on screen: I wanted them to feel and smell the 85 year old newspaper, see the rusted and sunken Arizona on a humid day in Hawaii, feel the steel on the USS Missouri: To understand both the sacrifices made for them to be here and the importance of experiencing their lives through touch, smell, and sight: It's Real.
-
Corey Thomas reacted on thisCorey Thomas reacted on thisI'm thrilled to share that I've joined Gradient AI as Chief Product Officer. I've spent my career building technology products that solve complex problems, and I can't think of a more exciting one to tackle next. Insurance is fundamentally a data and decision business. Every day, insurers make millions of decisions about which risks to take, how to price them, how to manage claims, and where to focus their resources. The quality of those decisions directly impacts both financial performance and the people they serve. AI is going to revolutionize how all of it gets done. What drew me to Gradient AI is the combination of deep insurance expertise, proprietary data, and AI purpose-built for the industry. The result is technology that goes beyond automating workflows - it improves the quality and economics of insurance decisions and, ultimately, patient lives. Gradient AI is already working with hundreds of insurance organizations across health, property & casualty, and workers' compensation. I'm excited to join Stan Smith and the entire Gradient AI team at this point in the company's journey. My focus will be on building on the strong foundation the team has created, accelerating product innovation, and helping our customers operate at speed — so consumers can get the care they need, affordably. The opportunity ahead is enormous, and we are just getting started. 🔗 https://www.gradientai.com #GradientAI #Insurance #AI #ProductLeadership #InsurTech #NewRoleAI-Powered Intelligence for Insurance | Gradient AIAI-Powered Intelligence for Insurance | Gradient AI
-
Corey Thomas liked thisCorey Thomas liked thisAppSec remediation and endpoint remediation are not the same problem. That distinction matters more now because much of the conversation about AI remediation has centered on code. Understand the dependency chain. Determine whether a vulnerable component is reachable. Identify whether the exploitable condition exists. Propose a workaround. Open a PR. Refactor the code. That is valuable work. It is not what we do at furl. We focus on autonomous endpoint remediation: changing the state of systems already running across an enterprise. Sometimes that means installing a vendor patch. Other times it means upgrading or uninstalling software, changing a configuration, applying a hardening control, or mitigating risk when no immediate fix exists. Then you have to verify that the change worked, confirm the exposure actually closed, and roll back safely if it didn't. Doing that autonomously absolutely requires context. You need to understand the endpoint, its software and configuration, dependencies, ownership, prior state, maintenance windows, approval requirements, and the boundaries within which the system is allowed to act. Building and maintaining that understanding is a prerequisite for safe autonomous remediation. But it isn't the remediation itself. Knowing that an endpoint is vulnerable is not fixing it. Understanding why it's vulnerable is not fixing it. Knowing how its components relate is not fixing it. Determining that it's exploitable is not fixing it. Eventually, something has to change on the system. That's the execution problem. And I think security has historically invested much more heavily in understanding, detecting, and prioritizing risk than in increasing our capacity to actually eliminate it. AppSec and endpoint remediation are parts of the same larger problem, but they operate at different layers. Code gets compiled, packaged, and deployed onto IT systems. Those systems accumulate vulnerable software, misconfigurations, legacy components, and hardening gaps that still have to be addressed. AI has enormous potential across that entire stack. No one company is going to solve every layer. We chose to go very deep on endpoints. Because knowing exactly what's wrong is necessary. Actually fixing it is a different problem.
-
Corey Thomas liked thisCorey Thomas liked thisAt our 2026 #AnnualMeeting, Chamber President & CEO Jim Rooney reminded us why Greater Boston has always been — and continues to be — a place where bold ideas, business leadership, and civic purpose come together. He began by congratulating our newest Distinguished Bostonians — Kevin Churchwell, Catherine D'Amato, and Paul Ayoub — whose leadership and impact exemplify the very best of our region and its business community. Jim also reflected on the importance of strong, values-driven leadership, thanking Chamber Board Chair Corey Thomas for two years of visionary, collaborative leadership that strengthened our advocacy, sharpened our focus on emerging issues, and deepened the Chamber’s impact across the region. He then welcomed incoming Board Chair Miceal Chamberlain, praising his longstanding commitment to community, economic growth, and inclusive prosperity and expressing confidence in his ability to lead the Chamber into its next chapter. Throughout his remarks, Jim brought the evening’s theme — Revolutionary Past. Visionary Future. — to life by reflecting on Boston’s central role in America’s founding. He drew a powerful connection between the entrepreneurs, thinkers, and businesses that helped spark a revolution 250 years ago and today’s business leaders who are shaping what comes next. Looking ahead, Jim struck a note of optimism and responsibility, acknowledging the very real challenges facing our region while reinforcing the Chamber’s role as a convener, connector, and champion of growth: “We know that what happens in Boston changes the world. We know that the next era of success for this region and this country can be built today, right here in Massachusetts.” With gratitude for our past, confidence in our leadership, and belief in the power of business to drive progress, his message was clear: Greater Boston’s best days are ahead — and we will shape that future together.
-
Corey Thomas liked thisCorey Thomas liked thisThe security industry has spent two decades getting brilliant at finding risk. More signals. A lot of dashboards. Multiple scanners. Almost nothing on the other half: fixing the risk. The time to remediate used to be measured in days and weeks. That window has collapsed, attackers move in hours. There needs to be a shift in remediation culture. We believe Furl is the catalyst for that change. One of the main reasons I partnered with Derek Abdine is his conviction on the Rubik's Cube of remediation. Not just patching an exploitable CVE, but hygiene, compliance, configuration management, and much more. The long tail of work that makes an environment safe instead of just observed. Remediation is the work no one wants to touch. It's messy. It crosses teams. It breaks things. So vendors stayed upstream, the commodity side of the problem. At Furl, we wanted to be the team that takes the hard half. Today, Furl is generally available. We've built something to deliver real value to our customers and we have the team to back it up. With incredible partners, investors, and customers furl is moving into the next chapter. cc: Christina Luconi Ten Eleven Ventures Open Opportunity Fund Mark H. Paul Judge Corey Thomas
Volunteer Experience
Patents
-
Methods and systems for testing and analyzing vulnerabilities of computing systems based on exploits of the vulnerabilities
Filed US US 20110191854 A1
A security tool can identify vulnerabilities in a computing system and determine a risk level of the vulnerabilities. The security tool can determine the risk level based on exploits associated with the vulnerabilities. The security tool can determine the risk level based on factors associated with the exploits such as whether an exploit exists, a rank of the exploit, a number of exploits that exist for the vulnerability, a difficulty to identify whether the exploit exists, and an effect of the…
A security tool can identify vulnerabilities in a computing system and determine a risk level of the vulnerabilities. The security tool can determine the risk level based on exploits associated with the vulnerabilities. The security tool can determine the risk level based on factors associated with the exploits such as whether an exploit exists, a rank of the exploit, a number of exploits that exist for the vulnerability, a difficulty to identify whether the exploit exists, and an effect of the exploit on the vulnerability. The security tool can a report identifying the vulnerabilities of the computing system, the exploits associated with the vulnerabilities, and the risk level of the vulnerabilities. The report can also include links to information about the exploits.
Other inventorsSee patent
Languages
-
Spanish
-
Recommendations received
4 people have recommended Corey
Join now to viewOther similar profiles
Explore more posts
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top contentOthers named Corey Thomas in United States
569 others named Corey Thomas in United States are on LinkedIn
See others named Corey Thomas