Corvo Security

Call Directions Website

Corvo Security Defend every surface. Cyber, physical, personal. Managed SOC (IT + OT) from Texas. corvosec.com

10/16/2026

Corvo Security produces PrOTect IT All, hosted by our founder Aaron Crow. Five takeaways from the latest episode, with Ben Wilcox, CTO and CISO at ProArch:

1. Know your agent count. If you would have to go find out, that is the finding.

2. Agent requests now come from the business, not from engineering. Build the sanctioned path before the tickets arrive.

3. Fork the MCP server. Keep the tools you use, drop the ones you do not, and treat the delete tools as a decision rather than a default.

4. Audit the credentials you handed to vendors. Who can read them, and can you get the logs if you ever need them.

5. Put the guardrails around the environment. Identity, data scope, logging and ownership are the controls that survive whichever model you pick.

Full episode: https://protectitall.co/

10/15/2026

"You look at the MCP server and you might say, hey, there's a hundred and seven different tools here. But guess what? We're not gonna use all a hundred and seven. We're gonna use twenty of them."

Ben Wilcox, CTO and CISO at ProArch, PrOTect IT All Ep 127

The scoping rule, stated plainly. Host Aaron Crow supplies the blunt version on the same episode: he is not pointing an MCP server at Active Directory, full stop.

If you are approving agent tooling this quarter, the tool count is the number to ask about. Every tool left enabled is reachable on your worst day, and Ben's own example is the one nobody wants to explain afterward: a delete tool aimed at your ERP.

Corvo Security produces PrOTect IT All, hosted by our founder Aaron Crow.

Listen: https://protectitall.co/

10/15/2026

"It was the HVAC vendor who originally got compromised."

Scott McNeil on PrOTect IT All, produced by Corvo Security and hosted by our founder Aaron Crow. Your vendor's vendor is part of your attack surface: know who has remote access into the process, and on whose terms.

Full conversation: https://protectitall.co/

"The business needs to be able to do AI securely. They don't need someone to say stop. They need someone to put the guar...
10/14/2026

"The business needs to be able to do AI securely. They don't need someone to say stop. They need someone to put the guardrails in place."

Ben Wilcox, CTO and CISO at ProArch, PrOTect IT All Ep 127

If you are writing the AI policy this quarter, start here.

A policy that only says no produces shadow AI, not safety. A policy that says here is the sanctioned path, here is the identity your agent runs as, here is what that identity can reach, and here is where its actions get logged, produces something you can actually audit.

On the episode Ben makes the practical version concrete: fork the MCP server, keep the twenty tools you need, drop the eighty seven you do not.

Corvo Security produces PrOTect IT All, hosted by our founder Aaron Crow.

Listen: https://protectitall.co/

10/13/2026

"I've been kind of following the trends of agents deployed in our environment. And like three months ago, I think there was roughly like 200 agents. I just looked yesterday and we are at 900 agents."

Ben Wilcox, CTO and CISO at ProArch, PrOTect IT All Ep 127

Worth checking your own number before you read anyone else's report. Ben is quoting his own environment.

If your agent count is something you would have to go find out, that is the finding. Every agent runs as an identity, holds a permission set, and belongs to somebody who may not work there next year. Ownership, lifecycle and permission review are the three that get skipped, and they are the three that turn a useful tool into an inherited liability.

Corvo Security produces PrOTect IT All, hosted by our founder Aaron Crow.

Listen: https://protectitall.co/

10/13/2026

A zip tie in a fan, and a redundant switch that had already failed without anyone noticing.

Aaron Crow, founder of Corvo Security, on PrOTect IT All: redundancy you have never tested is not redundancy. Turn the monitoring on and go look.

Full conversation: https://protectitall.co/

Corvo Security produces PrOTect IT All, hosted by our founder Aaron Crow. In the latest episode, Aaron sits down with Be...
10/12/2026

Corvo Security produces PrOTect IT All, hosted by our founder Aaron Crow. In the latest episode, Aaron sits down with Ben Wilcox, CTO and CISO at ProArch.

If you are the person approving AI tooling this quarter, this episode is about the gap between the model everyone is evaluating and the environment nobody is. Ben's own agent count went from roughly 200 to 900 in three months. None of that growth arrived through a review board.

The questions that decide your exposure are not questions about the model. What identity does the agent run as. What can that identity reach. And does anything it touches land in a log a human would actually see.

Listen: https://protectitall.co/

10/11/2026

Which OT switch do you actually need?

It is the wrong first question. The right one is which features the site needs, because that answer drives cost, supportability and how far a problem can spread. Layer 2 or layer 3. Where NAT and firewalls belong. VLAN or physical segmentation.

Corvo Security founder Aaron Crow walked the hardware tables at TracerouteCon 2026, Josh Varghese's OT networking training, to talk it through.

Watch: https://youtu.be/vW_muUhNO9A
Training details: https://www.traceroutellc.com/training

Corvo Security produces PrOTect IT All, hosted by our founder Aaron Crow.

Address

200 University Boulevard
Dallas, TX
78665

Telephone

+12142718441

Website

Alerts

Be the first to know and let us send you an email when Corvo Security posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share