Founder, Strike48Three decades in enterprise technologyPhilosophy graduateFrom BindView to agentic securityAustin, Texas

Profile / Cybersecurity / The long game

Ken Naumann Has Spent 30 Years Reading the Warning Signs

The philosophy graduate turned cybersecurity operator has made a career of entering complicated rooms, finding the signal, and moving the company toward its next act. Now he is betting that AI agents can do something similar for overwhelmed security teams.

In August 2011, Ken Naumann sat down with an executive from Nuance Communications for what the official record calls an informal informational meeting. They discussed voice quality, voice-to-text and the telecommunications market. They agreed to stay in touch. There are careers made from knowing when “stay in touch” is a pleasantry and when it is the first sentence of a transaction. This one became a transaction.

Within three months, the companies had signed a nondisclosure agreement. By spring, Nuance had offered to buy Ditech Networks, where Naumann was chief executive. Ditech's representatives said the proposed $1.30 a share was too low. The number moved to $1.45. In September 2012, the deal was announced at an enterprise value of about $22.5 million.

The merger filing is a wonderfully unromantic document. It records calls, information requests, board meetings and due diligence. It also catches Naumann in his natural habitat: the awkward middle, after a company has recognized that its present is insufficient but before its next act has become obvious. Corporate biographies prefer the polished verbs - built, transformed, delivered. Naumann's record is better understood through the messier ones: entered, listened, negotiated, moved.

30+years in enterprise technology
7chief executive chapters
4companies in his orbit acquired

A philosopher walks into a server room

Naumann earned a Bachelor of Arts in philosophy from Hampden-Sydney College. It is tempting to play the credential for charm, as though Aristotle accidentally wandered into a security operations center. But philosophy and cybersecurity share an obsession: how do you know what you think you know? A log is a fact only in the narrowest sense. Someone must still decide what it means, whether it belongs with another fact and what action the evidence justifies.

His commercial education began at BindView Development in 1993. Over the next decade, he held senior management roles in the enterprise security, compliance and network-management business, including leadership of sales in the Americas and worldwide. He then led worldwide sales at Guidance Software, whose products sat closer to digital investigations, followed by sales and marketing at secure-payments company Paymetric.

By 2008, he was running Scarab Consulting, an approximately 100-person computer-forensics, electronic-discovery and data-hosting firm. Two years later he joined Ditech as vice president of worldwide sales. He became president in March 2011 and CEO that May. Six months from sales chief to the corner office is less a promotion ladder than an elevator with a worried board inside.

Ken Naumann in a professional press portrait from his NetWitness period
The operator between chapters: Naumann during his NetWitness period, before Devo and Strike48 put log intelligence at the center of his work.

Ditech was not an isolated exit. Naumann became CEO of Austin-based Socialware in December 2013, leading software that helped regulated industries manage social-media risk. Proofpoint acquired the company in November 2015 for a reported $9 million. He later chaired and led AccessData, a veteran name in digital forensics, before Exterro acquired it. BindView, the company where he had spent a formative decade, had already gone to Symantec.

Those jobs also placed him inside three very different kinds of corporate patience. Ditech traded publicly, which made strategy answerable to a share price and a filing calendar. Socialware was venture-backed, where expansion is expected before the organization feels entirely ready for it. AccessData operated with private-equity ownership, where improvement has a timetable and every comfortable assumption eventually receives a spreadsheet. Devo brought another venture-backed company with global ambitions. Moving among those structures is its own executive craft. The vocabulary changes, the meetings acquire different snacks, and cash remains stubbornly literal.

Naumann's recurring subject, meanwhile, has been trust. BindView sold tools for security and compliance. Paymetric protected payment information through tokenization. Socialware helped financial firms use public social networks without forgetting their regulated obligations. AccessData preserved and examined evidence. NetWitness hunted threats. These were distinct businesses, but each sat where a customer's desire to move quickly collided with a duty to know what had happened. That tension is not solved by asking people to be more careful. It is solved by designing systems that make care possible at speed.

This helps explain why “customer success” appears so often in accounts of his leadership. In security software, the phrase is not merely a department beside sales. A product can pass a demonstration and still fail the exhausted analyst at 2 a.m. The customer discovers the difference at exactly the wrong moment. For an operator, listening to that customer is less an exercise in politeness than a form of product intelligence.

“AI can help augment skills of the practitioner.”Ken Naumann at RSAC 2026

A list of acquisitions can make an executive look like a collector of closing dinners. The human version is less tidy. A former Socialware engineer wrote that Naumann restored focus to the executive team, helped customer satisfaction reach a high point and continued checking on employees after the transition. A Ditech colleague remembered high expectations, rewards for delivery and genuine care for staff. Recommendations are not audited accounts, but these two agree on the interesting point: his concern for people showed up when the organization was under pressure.

The arithmetic stopped working

After AccessData, Naumann served as an executive in residence at Avathon Capital and then, beginning in 2022, led NetWitness. The product categories had evolved from vulnerability assessment and forensics to extended detection and response. The operating problem had not. Security teams were collecting more evidence than they could sensibly review.

Devo Technology appointed him CEO and a board member in March 2025. The company's specialty was security data analytics: collecting and searching enormous volumes of machine data quickly enough to be useful. In his appointment statement, Naumann said the company would keep advancing products that help enterprises become data-driven organizations. It was a safe corporate sentence. What followed was a riskier idea.

In early 2026, Naumann and Tim Leehealey launched Strike48, a new product brand from Devo. They began with an irritating observation. Companies pay to store the same logs in a SIEM, an observability product and compliance tools, yet still retain blind spots. Each system sees its own portion of reality. AI assistants attached to those silos merely become articulate specialists in partial information.

Strike48 proposes a collection of narrowly scoped agents that investigate, correlate and hand work to one another. The architecture begins with Devo's history of managing petabyte-scale logs, an inheritance that separates the project from a clean-sheet AI startup. Its name nods to 1848, the year of the California gold rush and revolutionary upheaval in Europe. The metaphor is shameless, but at least the ore in question is already sitting on the customer's servers.

Naumann's public case for AI is notably practical. At the 2026 RSA Conference, he offered three effects: augment the skills of security practitioners, increase the speed at which they identify and respond to threats, and give them agency beyond the “four walls” of an individual platform. Another Strike48 discussion made the boundary clear: an agent might triage 200 alerts, while a consequential containment action still calls for a human decision.

This is a more credible ambition than the empty security operations center that AI marketing occasionally conjures. The people responsible for protecting a company are not short of buttons. They are short of hours and complete context. Automation is valuable when it returns attention to them, not when it merely creates a quicker route to an unexamined answer.

“AI provides the practitioner with agency.”Naumann on breaking past the four walls of a single platform

The next act is built on the last one

Strike48 presents Naumann as founder and CEO; Devo still presents him as its CEO and board member. The overlap is part of the design. Strike48 is new in name and product direction, but it rests on Devo's infrastructure, customers and years of operational experience. Naumann described Devo as the foundation and Strike48 as the extension. It is an entrepreneurial chapter with a balance sheet in the basement.

That arrangement suits his career. He has rarely operated on an empty stage. Ditech needed a path through a difficult transition. Socialware had customers and capital but needed its next growth chapter. AccessData carried a long history in forensics into a combination with Exterro. At each stop, the material already existed. The job was to read it correctly.

There is also a pleasing continuity in the technologies. BindView managed networks and compliance. Guidance and AccessData helped investigators understand digital evidence. NetWitness looked for threats across networks, endpoints and logs. Devo made great quantities of data searchable. Strike48 asks software agents to perform more of the searching, connecting and preliminary deciding. The nouns keep changing. The central question does not: what deserves attention now?

The answer will not come from a slogan. Autonomous systems must prove that their scope, verification and economics work in live enterprises, where legacy software is immortal and a false positive can ruin an afternoon. Naumann appears comfortable with this sort of unglamorous test. His career was built less on prophecy than on operating through consequences.

In the old Ditech filing, the acquisition begins with two executives talking about a market and promising to keep in touch. The eventual agreement required months of calls, negotiation and board direction. That is how futures generally arrive: first as a conversation, then as paperwork, and finally as somebody's Tuesday morning. Naumann has spent three decades in that interval. Strike48 is simply the latest warning sign he has chosen to read.