About Tom
Tom Eston is a cybersecurity leader, consultant, and educator with more than 20 years of experience helping organizations improve their security programs, reduce risk, and strengthen resilience against real-world threats. He has led and built professional services, penetration testing, application security, and offensive security teams across consulting and product organizations, with prior leadership roles at Snyk, Bishop Fox, Veracode, and SecureState. Tom’s expertise spans penetration testing, red teaming, application security, vulnerability management, security awareness, social engineering, and executive cybersecurity strategy. He has advised organizations across industries on building practical, risk-based security programs that align technical findings with business priorities. In addition to his consulting work, Tom is an IANS Faculty member and the host of the Shared Security Podcast, a long-running cybersecurity podcast focused on the intersection of people, technology, and privacy. He has spoken at major industry events including Black Hat, DEF CON, DerbyCon, SANS, InfoSec World, OWASP AppSec, and ShmooCon.
You can find his podcast here: https://sharedsecurity.net/
Slides and Materials
The Phillip Wylie Show:
A Journey From Offensive Security to Leadership with Tom Eston
Cyber Empathy Podcast:
Ethical hackers and the legacy of the Hacker Manifesto
Posts by Tom
With Halloween right around the corner, let’s talk about your dark secret from the distant past that could really come back to haunt you: that...
October means Fall, arguably the best season of the year, because it means cooler weather, scary movies, Halloween, and more than a few tricks and...
Scheduling a penetration test means you are not waiting around for a breach to tell you where security gaps might exist within your environment. However,...
Message Tom
Have a question about an engagement, a conference talk, or just want to say hello?
This goes directly to Tom, not a general inbox.