In this episode, Jeroen, Dario Salice, and Dana Kaufman dive deep into the challenges of building secure products in a world obsessed with perfection. The hosts discuss the recent debate around synced passkeys and whether synchronizing credentials across devices truly undermines security. They break down sensational headlines, explore the real risks versus perceived threats, and share practical strategies for product managers to create clarity amid crisis and confusion.Listeners will learn:

• What passkeys are and how syncing works across platforms like Apple Keychain and Google Password Manager
• Why clarity is essential in responding to security escalations and sensational claims
• How to balance innovation with realistic risk management, and avoid letting edge cases stymie progress
• The importance of consistency, communication, and ecosystem thinking in product security

Whether you’re a security PM, engineer, or just curious about how tech leaders handle the pressure of keeping products safe, this episode offers actionable insights and real-world stories. Tune in for a candid conversation about clarity, risk, and the journey to better security.Connect with the hosts and guests on LinkedIn to continue the conversation!🎧Listen, learn, and join the conversation!🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio, and leave a message with your thoughts or questions. ✅  Subscribe for more deep dives into the world of inverted product management!✅ 

🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/

#SecurityPM #ProductManagement #riskmanagement #risk #Cybersecurity #InvertedPM #TrustAndSafety #security #abuseprevention #userexperience Spotify: https://open.spotify.com/episode/4Cq1VFUSnGxAP12rrGzSJDMusic by: BensoundLicense code: KQNVJHTWQEBEDSEA

In this episode, the hosts and guests explore the challenges and strategies of risk quantification in security and product management. The conversation covers why traditional risk labels like “low, medium, high” often fall short, and emphasizes the importance of defining exactly what risk is being measured. The panel discusses practical approaches to mapping business dependencies, understanding disruption impact, and making risk actionable for organizations.

Key topics include:

• The limitations of abstract risk ratings
• How to define and communicate risk in clear terms
• Building dependency maps to identify critical assets and processes
• The role of risk appetite and organizational culture in decision-making
• Strategies for bridging the gap between technical and business teams
• Making risk quantification actionable for leaders and operational teams

Whether you’re a security professional, product manager, or business leader, this episode offers practical insights on how to make risk management meaningful and effective.

Connect with the hosts and guests on LinkedIn to continue the conversation!

🎧Listen, learn, and join the conversation!🎧

Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio, and leave a message with your thoughts or questions.

✅  Subscribe for more deep dives into the world of inverted product management!✅ 

🔗 Join the conversation in the Inverted Product Management community on LinkedIn.

Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/

#SecurityPM #ProductManagement #riskmanagement #risk #Cybersecurity #InvertedPM #TrustAndSafety #security #abuseprevention #userexperience

Music by: Bensound

License code: KQNVJHTWQEBEDSEA

🎙️The Inverted Podcast #11: AI and Security🎙️In this episode of the Inverted Product Management podcast, the hosts and guests dive deep into the evolving landscape of AI risk and security. The discussion covers how AI is transforming both the tactics of attackers and the strategies defenders must use to keep organizations safe. The panel explores real-world examples of phishing, the challenges of integrating AI into products, and the complexities of governing AI use within enterprises.Key topics include:

• How AI is enabling more sophisticated and scalable attacks
• The rise of creative phishing and malware campaigns powered by AI
• The importance of AI governance, policy, and shadow AI in organizations
• Balancing transparency and explainability in AI-driven security decisions
• The impact of AI on physical systems, such as autonomous vehicles and manufacturing
• Strategies for choosing secure and trustworthy AI solutions
• The ongoing challenge of measuring and communicating security value

Whether you’re a product manager, security professional, or tech enthusiast, this episode offers actionable insights on navigating the risks and opportunities of AI in today’s digital world.Connect with the hosts and guests on LinkedIn to continue the conversation!🎧Listen, learn, and join the conversation!🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, and leave a message with your thoughts or questions. ✅  Subscribe for more deep dives into the world of inverted product management!✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/#SecurityPM #ProductManagement #WebScraping #BrowserExtensions #Cybersecurity #InvertedPM #TrustAndSafety #ThreatModeling #abuseprevention #userexperience Music by: BensoundLicense code: KQNVJHTWQEBEDSEA

🎙️Inverted Product Management Podcast #10: Building security products for small vs large businesses with Tim Ehrhart 🎙️In this episode of the Inverted Product Management podcast, Tim Ehrhart CISO at F. Hoffmann-La Roche Ltd joins the panel to explore the unique challenges and strategies involved in building and selling security products for both small businesses (SMBs) and large enterprises. The discussion dives into how expectations, resources, and risks differ dramatically between these customer segments, and what that means for product managers, engineers, and security leaders.Key topics include:

• The fundamental differences between SMBs and enterprises in security needs and expectations
• How attackers target small businesses versus large organizations
• The importance of secure defaults and flexible configuration in security products
• Real-world stories of security failures and successes
• The role of automation, outsourcing, and managed services for SMBs
• The complexity tax and operational challenges faced by enterprises
• How to measure success and set actionable goals for security teams
• The impact of supply chain and third-party risks
• Practical advice for designing fraud detection and security features that work for both small and large customers

Whether you’re building security features, managing risk, or just want to understand how security products are shaped by business realities, this episode offers actionable insights and candid perspectives from industry experts.Connect with the hosts and guests on LinkedIn to continue the conversation!🎧Listen, learn, and join the conversation!🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, and leave a message with your thoughts or questions. ✅  Subscribe for more deep dives into the world of inverted product management!✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/#SecurityPM #ProductManagement #WebScraping #BrowserExtensions #Cybersecurity #InvertedPM #TrustAndSafety #ThreatModeling #abuseprevention #userexperience Music by: BensoundLicense code: KQNVJHTWQEBEDSEA

🎙️Inverted Product Management Podcast #9: User-Centric Security – Making Security Work for Real People🎙️In this episode of the Inverted Product Management podcast, host Jeroen Kemperman is joined by Dario Salice, Tom Williamson, Dana Kaufman, and special guest Cristina Vintila, an expert in security operations and cryptosystems. Together, they dive deep into the concept of user-centric security—exploring how product teams can design secure systems that truly support users, rather than frustrate them.The panel shares real-world stories of security gone wrong, like confusing account suspensions and overly complex authentication flows, and discusses how these experiences can drive users away. They highlight the importance of understanding user journeys, reducing unnecessary decisions, and minimizing user fatigue. The conversation also covers practical strategies for building security features that are intuitive, explainable, and aligned with business goals.Key topics:

• What is user-centric security?
• Common pitfalls in security design
• Real examples from Meta, Microsoft, and more
• Measuring and reducing user fatigue
• The role of automation and default settings
• Communicating security value to leadership

Whether you’re a product manager, designer, or engineer, this episode offers actionable insights on how to balance robust security with great user experience. Tune in to learn how to make security a seamless part of your product—and why sometimes, success means users barely notice it’s there.🎧Listen, learn, and join the conversation!🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, and leave a message with your thoughts or questions. ✅  Subscribe for more deep dives into the world of inverted product management!✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/#SecurityPM #ProductManagement #WebScraping #BrowserExtensions #Cybersecurity #InvertedPM #TrustAndSafety #ThreatModeling #abuseprevention #userexperience Music by: BensoundLicense code: KQNVJHTWQEBEDSEA

🎙️Inverted Product Management Podcast #8: Social Engineering – The Human Factor in Security🎙️

In this episode of the Inverted Product Management Podcast, hosts Jeroen Kemperman, Dana Kaufman, Dario Salice, and Tom Williamson dive deep into the world of social engineering and its impact on modern security practices. The panel shares real-world stories—from SIM swap scams to high-profile breaches—illustrating how attackers exploit human vulnerabilities rather than technical flaws. Key topics include:

• What social engineering is and why it’s so effective
• How attackers use urgency, pressure, and personal interaction to bypass security
• The importance of defense-in-depth and minimizing human decision points in critical flows
• Strategies for organizations to educate employees and build resilience against social engineering
• The evolving role of AI in both defending and attacking security systems

Whether you’re a product manager, security professional, or just curious about the human side of cybersecurity, this episode offers practical insights and actionable advice to help you protect your organization from the weakest link: people.🎧Listen, learn, and join the conversation!🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, and leave a message with your thoughts or questions.

✅  Subscribe for more deep dives into the world of inverted product management!✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/

Music by: BensoundLicense code: KQNVJHTWQEBEDSEA

🎙️ Episode 7: Scraping, Extensions & the Shifting Threat Landscape – What Inverted PMs Need to Know 🎙️In this episode of the Inverted Product Management Podcast, hosts Dario, Dana, and Tom tackle the evolving world of web scraping and the surprising role browser extensions play in enabling abuse. Inspired by a recent discovery of a botnet embedded in Chrome extensions, the team explores: ✅ How attackers embed scraping into legitimate user traffic ✅ Why traditional anti-scraping defenses are no longer enough ✅ The importance of understanding attacker business models ✅ How to impose cost and disrupt adversary infrastructure ✅ The role of threat sharing and platform accountability ✅ Why security PMs must assume breach and plan for evolution

This episode references an interesting article you can find here on an innovative scraping attack vector: ⁠https://secureannex.com/blog/mellow-drama/

Whether you're defending a consumer app, managing enterprise risk, or building trust and safety tools, this episode offers practical insights and strategic frameworks for staying ahead of attacker innovation. 🎙️ Subscribe for more deep dives into the world of inverted product management!🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/#SecurityPM #ProductManagement #WebScraping #BrowserExtensions #Cybersecurity #InvertedPM #TrustAndSafety #ThreatModeling #abuseprevention Music by: BensoundLicense code: KQNVJHTWQEBEDSEA

🎙️ Episode 6: Using Cost to Defend Against Abuse – Strategic Friction in Security Product Management🎙️In this episode of Inverted Product Management Podcast, hosts Jeroen, Dario, and Dana explore how injecting cost into attacker journeys can disrupt abuse at scale—without alienating legitimate users.

From fake accounts to hijacked credentials, the team breaks down: ✅ How attackers operate like businesses—and how to break their margins ✅ Creative ways to impose cost: throttling, device locks, time delays, and more ✅ Balancing friction: minimizing impact on real users while maximizing pain for abusers ✅ Real-world examples of phone farms, crypto mining, and call center scams ✅ Why understanding attacker ROI is key to effective defenses ✅ How threat sharing and infrastructure disruption create durable protection Whether you're a security PM, fraud analyst, or product leader, this episode offers practical frameworks and fresh insights  into how cost-based thinking can reshape your defenses. 🎙️ Subscribe for more deep dives into the world of inverted product management!🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/#SecurityPM #ProductManagement #FraudPrevention #Cybersecurity #InvertedPM #ThreatModeling #TrustAndSafety #AbusePrevention #IdentityProtection Music by: BensoundLicense code: KQNVJHTWQEBEDSEA