---
title: "Blog: Threat Modeling, AI Security & Governance | Clearly AI"
description: "Practical articles on threat modeling, AI security and governance, privacy, vendor risk, and compliance from the team behind the continuous threat modeling platform."
canonical: https://clearly-ai.com/blog
---

# Latest from the Clearly AI blog

How to apply frameworks like STRIDE, MITRE ATT&CK, and MAESTRO to real systems, what good threat modeling looks like in practice, and how to meet regulations like the EU Cyber Resilience Act and NYDFS Part 500 without becoming the bottleneck. Plus product news, customer stories, and more from security teams reviewing everything they ship.

## Company Updates

- [Why I Joined Clearly AI](https://clearly-ai.com/blog/why-vp-marketing-joined-clearly-ai) — May 28, 2026. Choosing what comes after a $740M acquisition isn't a decision you make lightly. Here's what the signals looked like for me.
- [Clearly AI Raises $8.4M Seed Round to Scale Product Security](https://clearly-ai.com/blog/seed-round) — Feb 10, 2026. We are thrilled to announce that we have been selected as a Top 10 Finalist for the RSAC 2026 Innovation Sandbox Contest!
- [Why We Started Clearly AI](https://clearly-ai.com/blog/why-we-started-clearly-ai) — Feb 3, 2026. It’s been almost 2 years since we started Clearly AI, and we’ve never shared the full story and vision publicly. But it starts with a confession about my pre-Clearly AI career…
- [Why We Build in Public](https://clearly-ai.com/blog/why-we-build-in-public) — Jan 14, 2026. This is an exciting new product category. We are all discovering what this product looks like together. In our eyes, we are builders, on your team, on this journey with you.
- [Clearly AI Named Finalist in the 2025 Okta Startup Challenge](https://clearly-ai.com/blog/clearly-ai-named-finalist-in-the-2025-okta-startup-challenge) — Sep 18, 2025. Clearly AI is one of three finalists in the Okta Startup Challenge. We can’t wait to showcase our work at Oktane 2025 in Las Vegas.
- [One Year of Clearly AI](https://clearly-ai.com/blog/one-year-of-clearly-ai) — Jun 25, 2025. As we wrap our first year of Clearly AI, we're reflecting on how it started, what we’ve learned, and the journey of building a company from the ground up.
- [Clearly AI wins the AWS Bedrock Builder's Challenge](https://clearly-ai.com/blog/clearly-ai-wins-the-aws-bedrock-builder-s-challenge) — Mar 11, 2025. Today, AWS Startups announced the 5 winners of the AWS Bedrock Builder's Challenge. Clearly AI won $100,000 in AWS credits for our entry.
- [Halfway through YC](https://clearly-ai.com/blog/halfway-through-yc) — Aug 29, 2024. An overview of our first 6 weeks participating in the most selective startup accelerator program

## Future of Security

- [Skip the Marketing: Clearly AI for Technical People](https://clearly-ai.com/blog/clearly-ai-technical-explanation) — Apr 3, 2026. A technical explanation of Clearly AI for technical buyers.
- [Solving the Threat Modeling Bottleneck with AI Workflows](https://clearly-ai.com/blog/solving-the-threat-modeling-bottleneck-with-ai-workflows) — Dec 8, 2025. AI doesn’t just make threat modeling faster. It can help you scale reviews while improving quality. AI handles the mechanical parts so humans can focus on judgment loop. But it only works if the AI is grounded in real organizational context, not generic threat modeling patterns. That's the split that matters.
- [Security, SOC 2, & Startups](https://clearly-ai.com/blog/security-soc-2-startups) — Aug 15, 2025. SOC 2 for startups: Why timing matters, how to balance compliance with real security, and practical advice from a security engineer’s journey.
- [Navigating EU RED Compliance: Meeting the August 2025 Deadline](https://clearly-ai.com/blog/navigating-eu-red-compliance-meeting-the-august-2025-deadline) — Jun 15, 2025. The European Union’s Radio Equipment Directive (RED) cybersecurity requirements go into effect in August 2025. These requirements mandate that device manufacturers secure network-connected products sold in Europe. This post breaks down what’s in scope, what compliance requires, and how to assess readiness at scale.
- [Intelligent Vendor Risk Assessments](https://clearly-ai.com/blog/intelligent-vendor-risk-assessments) — May 1, 2025. Why questionnaires are holding back your third-party risk program, and how AI tooling can help.
- [Reviews, reviews, reviews!](https://clearly-ai.com/blog/reviews-reviews-reviews) — Aug 30, 2024. Security and privacy reviews come in many different forms. This an introduction to review types across your company's software, corporate posture, and third party vendors.

## Artificial Intelligence

- [How AI is rewiring our product engineering workflow](https://clearly-ai.com/blog/how-ai-is-rewiring-our-product-engineering-workflow) — Jul 14, 2026. We expected AI to help us write code faster. The bigger shift was where engineering work moved.
- [Applying AI to Threat Modeling - Where AI Thrives, Survives, and Dies](https://clearly-ai.com/blog/applying-ai-to-threat-modeling) — Jan 20, 2026. AI isn’t uniformly good or bad at threat modeling. It depends on how you incorporate AI in your workflows, and how you engineer your systems around the AI.
- [Building Reliable AI Systems for Security and Privacy Reviews](https://clearly-ai.com/blog/building-reliable-ai-systems-for-security-and-privacy-reviews) — Jul 28, 2025. AI is transforming security reviews. Learn how to structure prompts, enforce output normalization, and build guardrails that scale security and work in production without compromising trust.
- [How to Automate Security and Privacy Reviews with Clearly AI](https://clearly-ai.com/blog/how-to-automate-security-and-privacy-reviews-with-clearly-ai) — Jul 14, 2025. Security and privacy reviews are time-consuming and often fragmented across tools, teams, and communication channels. Clearly AI can help, automating key steps in your review process for faster, more complete reviews.
- [The AI Engineer Cheat Sheet](https://clearly-ai.com/blog/the-ai-engineer-cheat-sheet) — Jun 9, 2025. All the tools you need to build a great AI-powered application

## Future of Privacy

- [Part 2! Okay, privacy is different from security. Now what?](https://clearly-ai.com/blog/part-2-okay-privacy-is-different-from-security-now-what) — Jul 27, 2026. Practical tips on implementation
- [Good Data Scientists and Bad Outcomes, Part 1: What's the difference between security and privacy work?](https://clearly-ai.com/blog/good-data-scientists-and-bad-outcomes-what-s-the-difference-between-security-and-privacy-work) — Jun 26, 2026. How to excel at data privacy when you're coming from data security

## Learn more

- [Secure everything that ships](https://clearly-ai.com)
- [We built the tool we wished we had](https://clearly-ai.com/about-us)
- [One platform. From intake to remediation.](https://clearly-ai.com/platform)
- [Know everything that needs a review. Skip the 300-question form.](https://clearly-ai.com/platform/security-intake)
- [Ask only what matters. Get it right the first time.](https://clearly-ai.com/platform/conversational-intake)
- [Every finding, tracked to a decision](https://clearly-ai.com/platform/resolve/risk-registry)
- [Show leadership and auditors exactly what security reviewed](https://clearly-ai.com/platform/resolve/reporting)
- [Security reviews you can stand behind, every time](https://clearly-ai.com/platform/quality)
- [Threat models built from the tools you already use](https://clearly-ai.com/integrations)
- [Threat models that know about today's attacks](https://clearly-ai.com/platform/threat-intelligence)
- [Automate every step around the review](https://clearly-ai.com/platform/workflows)
- [Threat models your teams can work on together](https://clearly-ai.com/platform/collaboration)
- [Understand the system before the review starts](https://clearly-ai.com/platform/enterprise-context-graph)
- [Trust, security, and deployment](https://clearly-ai.com/platform/trust-security-and-deployment)
- [Every plan reviewed. Every risky change threat modeled.](https://clearly-ai.com/platform/ide-and-mcp)
- [Verify what actually shipped](https://clearly-ai.com/platform/control-and-remediation-verification)
- [A current threat model for everything that ships](https://clearly-ai.com/solutions/continuous-threat-modeling)
- [Prove every product that ships meets your security bar](https://clearly-ai.com/solutions/product-security-assurance)
- [Privacy reviews your team can stake decisions on](https://clearly-ai.com/solutions/privacy)
- [Every vendor reviewed against your standards](https://clearly-ai.com/solutions/third-party-risk)
- [Review every design before it's built](https://clearly-ai.com/solutions/design-and-architecture-reviews)
- [Secure the AI you build, buy, and code with](https://clearly-ai.com/solutions/ai-agentic-security)
- [Every regulation you answer to. One review process.](https://clearly-ai.com/solutions/compliance)
- [Every product ready for the Cyber Resilience Act without growing your team](https://clearly-ai.com/solutions/compliance/cyber-resilience-act)
- [Build vs. buy for security review automation](https://clearly-ai.com/compare/claude-chatgpt)
- [The ThreatModeler alternative built from your own docs, code, and policies](https://clearly-ai.com/compare/threatmodeler)
- [The Clover Security alternative with findings your team can trust](https://clearly-ai.com/compare/clover)
- [The Prime Security alternative for every review your team runs](https://clearly-ai.com/compare/prime)
- [Security and Privacy](https://clearly-ai.com/trust/security-privacy)
- [Clearly AI Privacy Policy](https://clearly-ai.com/trust/privacy-policy)
- [Clearly AI Subprocessors](https://clearly-ai.com/trust/subprocessors)
- [Contact](https://clearly-ai.com/contact)
- [Contact Enterprise Sales](https://clearly-ai.com/demo)
- [Latest from the Clearly AI blog](https://clearly-ai.com/blog)
- [In the news](https://clearly-ai.com/press)
- [How Ericsson Enterprise Wireless Solutions cut review times by up to 80%](https://clearly-ai.com/customer-stories/ericsson)
- [How HID Global reviews 300+ products for the Radio Equipment Directive with the team it already has](https://clearly-ai.com/customer-stories/hid-global)
- [How Rivian scaled privacy and AI governance reviews 4x without adding headcount](https://clearly-ai.com/customer-stories/rivian)
- [Part 2! Okay, privacy is different from security. Now what?](https://clearly-ai.com/blog/part-2-okay-privacy-is-different-from-security-now-what)
- [How AI is rewiring our product engineering workflow](https://clearly-ai.com/blog/how-ai-is-rewiring-our-product-engineering-workflow)
- [Good Data Scientists and Bad Outcomes, Part 1: What's the difference between security and privacy work?](https://clearly-ai.com/blog/good-data-scientists-and-bad-outcomes-what-s-the-difference-between-security-and-privacy-work)
- [Why I Joined Clearly AI](https://clearly-ai.com/blog/why-vp-marketing-joined-clearly-ai)
- [Skip the Marketing: Clearly AI for Technical People](https://clearly-ai.com/blog/clearly-ai-technical-explanation)
- [Clearly AI Raises $8.4M Seed Round to Scale Product Security](https://clearly-ai.com/blog/seed-round)
- [Why We Started Clearly AI](https://clearly-ai.com/blog/why-we-started-clearly-ai)
- [Applying AI to Threat Modeling - Where AI Thrives, Survives, and Dies](https://clearly-ai.com/blog/applying-ai-to-threat-modeling)
- [Why We Build in Public](https://clearly-ai.com/blog/why-we-build-in-public)
- [Solving the Threat Modeling Bottleneck with AI Workflows](https://clearly-ai.com/blog/solving-the-threat-modeling-bottleneck-with-ai-workflows)
- [Clearly AI Named Finalist in the 2025 Okta Startup Challenge](https://clearly-ai.com/blog/clearly-ai-named-finalist-in-the-2025-okta-startup-challenge)
- [Security, SOC 2, & Startups](https://clearly-ai.com/blog/security-soc-2-startups)
- [Building Reliable AI Systems for Security and Privacy Reviews](https://clearly-ai.com/blog/building-reliable-ai-systems-for-security-and-privacy-reviews)
- [How to Automate Security and Privacy Reviews with Clearly AI](https://clearly-ai.com/blog/how-to-automate-security-and-privacy-reviews-with-clearly-ai)
- [One Year of Clearly AI](https://clearly-ai.com/blog/one-year-of-clearly-ai)
- [Navigating EU RED Compliance: Meeting the August 2025 Deadline](https://clearly-ai.com/blog/navigating-eu-red-compliance-meeting-the-august-2025-deadline)
- [The AI Engineer Cheat Sheet](https://clearly-ai.com/blog/the-ai-engineer-cheat-sheet)
- [Intelligent Vendor Risk Assessments](https://clearly-ai.com/blog/intelligent-vendor-risk-assessments)
- [Clearly AI wins the AWS Bedrock Builder's Challenge](https://clearly-ai.com/blog/clearly-ai-wins-the-aws-bedrock-builder-s-challenge)
- [Reviews, reviews, reviews!](https://clearly-ai.com/blog/reviews-reviews-reviews)
- [Halfway through YC](https://clearly-ai.com/blog/halfway-through-yc)
- [llms.txt — site overview for LLMs](https://clearly-ai.com/llms.txt)
- [llms-full.txt — full site content for LLMs](https://clearly-ai.com/llms-full.txt)
- [sitemap.xml — all public routes](https://clearly-ai.com/sitemap.xml)
- [Documentation](https://docs.clearly-ai.com/docs)

[Canonical page](https://clearly-ai.com/blog)