Episode Title (chosen – 88 characters)

SecureAuth CPO Brook Lovatt: Passwordless Future, AI Agents & Surviving a Tsunami

One-Line Summary (for SEO & social)

From surviving the 2004 tsunami to leading identity security at SecureAuth, Brook Lovatt shares insights on phishing-resistant auth, AI risks, and hands-on leadership in cybersecurity.

Full Episode Summary / Show Notes

Brook Lovatt, Chief Product Officer at SecureAuth, brings over two decades of experience in identity and access management (IAM). From co-founding startups to leading IBM's Cloud Identity division and serving as CEO of Cloudentity (acquired by SecureAuth), Brook bridges deep technical expertise with executive leadership.

In this wide-ranging conversation, Brook discusses:

• Balancing rock-solid security with seamless user experience (why passwords are dead and passkeys/FIDO2 are the future)
• His tactile, hands-on journey from engineer to CPO
• The wild cycle of startups, acquisitions, and big tech (including leaving IBM, traveling, and getting pulled back in)
• A gripping firsthand account of surviving the 2004 Indian Ocean tsunami in Thailand
• Leadership philosophy: "Leading from the front" – rolling up sleeves, transparency on runway, and earning team respect
• Preventing burnout in high-pressure startups
• AI's dual role: Enhancing risk-based auth today... and the terrifying frontier of rogue agents tomorrow
• Why global digital passports and trust anchors are needed for agentic AI
• Optimism amid risks: "If Skynet attacks in two days, I want to have a good time first"
• Advice for CISOs evaluating auth solutions: Flexibility, modularity, and elastic scale

A blend of technical depth, personal stories, and forward-thinking on the AI-identity collision.

Connect with Brook: LinkedIn: linkedin.com/in/brook-lovatt SecureAuth: secureauth.com

expertinsights.com

theorg.com

youtube.com

Chapters (with timestamps)

00:00 – Welcome & Intro to Brook Lovatt (SecureAuth CPO) 00:47 – Security vs. UX: Why painful auth leads to risky workarounds 03:05 – Brook's hands-on journey from engineer to executive 06:04 – The IBM startup-acquisition cycle (and post-tsunami travels) 09:23 – Firsthand survival story: 2004 Thailand tsunami 12:23 – Core leadership principle: Leading from the front 14:50 – Earning respect from high-performing tech teams 17:58 – Avoiding burnout in the startup pressure cooker 20:52 – AI in security today: Risk engines & tomorrow's agent threats 24:49 – Excitement vs. caution: The wild west of agentic AI 28:37 – 2-3 years out: Global digital passports & centralized trust 32:47 – SecureAuth's focus: AI agents, frictionless CIAM 35:30 – How soon until AI agents are ubiquitous? 39:30 – Advice for CISOs evaluating auth solutions 42:36 – As a consumer: Frozen credit & assuming breaches 44:09 – Staying optimistic in cybersecurity 44:49 – Security philosophy: Zero trust, least privilege, proactive testing 48:45 – Book recs: Crossing the Chasm & AI Agents in Action 51:38 – What "Getting Real" means to Brook 52:45 – How to connect 53:02 – Outro