Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Sean Blanton
Design together with code layers on the canvas
Designing with code lets you see how an experience feels and behaves, from micro interactions to complete flows. But when everyone is working separately in their own coding tools, it can feel like you’re designing in isolation, making it harder to share work or compare alternatives. That’s why we introduced code layers earlier this year With code layers in Figma Design, you can explore multiple directions with code, side by side with your team. , bringing code onto the shared Figma canvas.
Build by design: New workflows for new ways of building
For a long time, coding was expensive. Every change would cost money and time, and you planned carefully before you committed anything to code. Today, as AI has made coding cheap, building something has never been easier. More teams are building as a way to expand their thinking. They’re building first, using it as a jumping off point to untangle a problem and test whether ideas hold up.
Introducing Specs: Markdown as a medium
Turn existing Markdown into a spec by dragging and dropping any .md file onto the canvas. Today, more and more product builders are working in Markdown, as collaborating with agents becomes more standard. It’s the de facto format for sharing context. But for all the context Markdown helps us express, it’s missing a lot of context, too. Markdown files tend to be single player on local computers, with brittle relationships to each other, and little tying them to the projects that spawned them.
Create, ship, and manage data-backed websites with Payload in Figma
Payload joined Figma last year. In the past 12 months, Payload downloads have grown 6x. It’s now the fastest growing open source CMS on NPM. Learn more, including how to self-host or extend it, at Payload.org. Websites and apps need to store and manage data, from published content to information visitors submit. With Payload We're thrilled to announce that the team behind Payload, a leading open-source headless content management system (CMS) and application framework, has joined Figma.
Sean Blanton Sends a Greeting on 09/02/2026
Beginning of dialog window. Escape will cancel and close the window.
Cisco Meraki SM vs JumpCloud: The Upgrade Guide
Updated on May 19, 2026 Summary: Cisco announced the End-of-Sale for Meraki Systems Manager (SM) on December 3, 2025, with full support ending June 3, 2029. Transitioning to JumpCloud replaces profile-based Mobile Device Management with Identity-Centric Unified Endpoint Management, unifying directory services, Cloud RADIUS, and agent-based Linux lifecycle control into a single cloud platform.
How JumpCloud HRIS Features Integration Breathes Life into Employee Lifecycle
Editor’s Note: This article was originally published at Cloudfresh, which you can read here. The collaboration between HR (Human Resources) and IAM (Identity & Access Management) has moved far beyond an IT side project. It’s now a critical piece of business strategy. The shift comes from three big forces: the rapid growth of generative AI, the spread of hybrid and distributed work, and the tightening web of global data privacy rules.
Shadow IT: When What’s Hidden Becomes Advantageous
Editor’s Note: This article was originally published at CloudFresh, which you can read here. Let’s be honest. Shadow IT isn’t going anywhere. Teams move fast. SaaS tools are easy to buy. Remote work is normal. Waiting weeks for approval feels outdated. So people solve their own problems. That doesn’t make them reckless. It makes them resourceful. The real question is this: What if you could keep that speed and still stay in control? And today, it is answered by a Platinum-tier JumpCloud Partner.
Can You DIY SOC 2 Compliance?
Updated on April 6, 2026 Every startup founder and IT pro has wondered, “Can we manage SOC 2 compliance ourselves?” It makes sense. You could save on consulting fees and maintain control over your security program. However, the reality is clear: while you can prepare for a SOC 2 audit on your own, a third-party auditor must conduct the final assessment. This is non-negotiable. This guide outlines what you can do yourself and what requires expert help.
The conversation around artificial intelligence has moved from the theoretical to the practical. For IT and security professionals, this shift has brought a familiar challenge back into the spotlight: shadow IT. Now, it has a new form. Shadow AI — the unsanctioned use of AI tools by employees — is a daily reality. Understanding the scale of this phenomenon is the first step toward building a strategy that balances innovation with security.
Small Business Cybersecurity Checklist: Essential Steps for 2026
Small businesses face an uphill battle when it comes to cybersecurity. Unlike large enterprises with dedicated security teams and substantial budgets, most small and medium-sized enterprises (SMEs) must protect themselves with limited resources and expertise. Yet cybercriminals increasingly target these organizations, recognizing them as easier entry points to valuable data and larger networks.
Why Your "Working" Productivity Suite is Costing You Time and Security
In IT, there is a dangerous gap between “working” and “working well.” If you ask someone in IT if their productivity suite works, they will likely say yes. Emails are flowing, files are sharing, and meetings are happening. But if you ask them how hard it is to keep it working—to manage identities across devices, secure endpoints, and enforce compliance—the answer changes. A system that requires constant manual syncing, custom scripts, and third-party connectors isn’t truly working.
From Shadow to Sight: How to Use AI SaaS Management to Discover Rogue AI in 24 Hours
Employees are using unapproved AI and uploading proprietary data. There’s no use putting your head in the sand on this one. But this isn’t new, right? We all know that shadow IT is a challenge. But the trick to keeping shadow IT at bay is not to just “clamp it down.” It has always been to help employees find the right apps and devices to use, and create a workable process to vet new additions. Shadow AI is no different. Which means the start of your shadow AI journey must begin with a single question.
Your First Incident Response Plan: Quick Security Steps for Small Teams
Updated on December 9, 2025 What would you do if your top engineer’s account was compromised right now? For many small teams, the answer is a frantic scramble. Without a plan, a simple phishing attack can escalate into a full-blown crisis in minutes. Small businesses are attractive targets for cybercriminals. They often lack the robust security infrastructure of larger enterprises, making them vulnerable to common attacks like phishing and account takeovers.
Why Your Small IT Team Needs Unified Endpoint Management (UEM)
Updated on December 9, 2025 Remember when IT management meant fixing the printer down the hall? Those days are gone. Your employees are working from coffee shops, kitchen tables, and airport terminals. They are using their own phones and laptops to access critical company data. This freedom is great for productivity, but it is a nightmare for security. You need a way to manage this chaos without hiring a dozen new technicians. You need Unified Endpoint Management, or UEM.
Managing 50 Tenants with 5 Engineers: The Power of the Multi-Tenant Console
Updated on December 8, 2025 Can you really manage 50 tenants with just five engineers? The answer is yes, but not with the traditional toolkit most Managed Service Providers (MSPs) use. The old way of doing things, juggling dozens of separate management consoles, simply won’t cut it. This approach creates immense operational friction. Switching between different client environments is a huge time drain. It’s not just inefficient; it’s a direct barrier to growth.
Don't See The Cloud As A Destination; It's A Powerful Engine Of Freedom
For many IT leaders, cloud migration feels like a massive, expensive project with a finish line somewhere in the distant future. This view often paralyzes organizations, keeping them anchored to legacy systems that stifle growth. But what if we shifted our thinking? What if we saw the cloud not as a final destination, but as a continuous engine of freedom? This mindset change is the key to unlocking true agility and innovation.
The Hidden Costs of PAM: Why Smaller Companies Are Struggling
When it comes to implementing and managing privileged access management (PAM) solutions, small- to medium-sized businesses (SMBs) face a unique set of challenges. Unlike large enterprises with dedicated security teams and extensive budgets, SMBs often struggle with issues like costs, complexity and resource constraints, maintaining the right security posture, and scalability. For many SMBs, the perception of traditional PAM solutions is a major barrier.
BetterCloud vs. Lumos: Which SaaS Management Platform is Right for Your Organization?
You’re managing 200+ applications across your organization. Users are signing up for new tools daily. Shadow IT is spreading faster than you can track it. Your CFO wants to know why software spending jumped 40% last quarter, and compliance is asking for an access review that would take weeks to complete manually. This scenario plays out in organizations worldwide as SaaS adoption accelerates. The solution?
What Is an Intrusion Prevention System (IPS)?
Updated on June 30, 2025 An intrusion prevention system (IPS) is a key tool for proactive defense, detecting and blocking cyberattacks before they cause harm. This article explains what an IPS is, how it works, and why it’s essential for network security. We’ll also compare it to an intrusion detection system (IDS) to highlight the differences and help you strengthen your organization’s defenses.
IGA vs IAM: Understanding the Key Differences
Updated on June 30, 2025 Managing digital identities and access within an organization often involves two key frameworks: identity governance and administration (IGA) and identity and access management (IAM). Both are critical for maintaining security, compliance, and efficiency, but they’re often misunderstood or confused with one another.
Updated on June 30, 2025 Managing digital identities and securing access are critical in today’s cybersecurity landscape. Organizations face a multitude of challenges, including regulatory compliance, minimizing insider threats, and defending against external attacks. Within this ecosystem, two major tools play pivotal yet distinct roles under the umbrella of Identity and Access Management (IAM): Identity Governance and Administration (IGA) and Privileged Access Management (PAM).
Best Practices for Privileged Access Management (PAM)
Updated on June 30, 2025 Privileged access management (PAM) is essential for keeping sensitive accounts safe from cyber threats. Since privileged accounts are often targeted, strong PAM practices help reduce risks and maintain compliance. This guide explains key PAM strategies, practical tips, and how to maintain them to protect your organization effectively. The first step in any PAM strategy is a thorough discovery process.
What Is Identity Threat Detection and Response (ITDR)?
Updated on June 30, 2025 With traditional security boundaries changing, identities, whether human, machine, or service accounts, are now major targets for attackers. That’s where identity threat detection and response (ITDR) comes in. ITDR is a modern cybersecurity approach that protects an organization’s identity systems, access controls, and user privileges from advanced threats.
Comparing the Best IAM Solutions for Enterprises in 2025
Updated on June 30, 2025 This comprehensive guide offers IT leaders an in-depth comparison of the leading Identity and Access Management (IAM) solutions available for enterprises in 2025. This document evaluates platforms like JumpCloud, Okta, Microsoft Entra ID, Ping Identity, and ForgeRock, detailing their core strengths, key features, and optimal use cases.
What Is Identity Governance and Administration (IGA)?
Updated on June 30, 2025 Managing digital identities and access rights across an organization is becoming more challenging. The rise of cloud-based solutions, hybrid IT setups, and stricter compliance rules have increased the need for strong identity governance and administration (IGA) solutions. This guide simplifies IGA by explaining its key components, features, and real-world examples to show why it’s essential.
The Best Apple MDM Solutions in 2025: Comprehensive Guide
Updated on June 30, 2025 MDM has evolved into UEM, covering comprehensive security, deployment, and management of all organizational endpoints. Apple devices (macOS, iOS, iPadOS, tvOS) are crucial for many businesses. Effective management requires specialized tools integrated with Apple frameworks, embracing DDM and ADE.
The 5 Most Popular Linux Distros: 2025 Guide
Updated on June 30, 2025 Linux has come a long way since its humble beginnings. Today, it powers everything from supercomputers to smartphones, making it a critical part of the tech ecosystem. For individuals and businesses alike, choosing the right Linux distribution (or “distro”) can make all the difference. Whether you’re a developer, IT professional, or a curious beginner, understanding the popularity and strengths of different Linux distros is key to finding the one that suits your needs.
The Growing Security Demands on Linux in IoT and Edge Computing
Updated on June 30, 2025 With the rise of IoT and edge computing, Linux has become the go-to operating system. Its flexibility, reliability, and open-source nature make it a top choice for developers and organizations. But as Linux is increasingly used in IoT devices like smart cameras, industrial controllers, and medical equipment, security risks have also grown. This blog breaks down these challenges and provides practical solutions to strengthen security in resource-limited environments.
Understanding Biometric Authentication Standards and Protocols
Biometrics are everywhere now. You use your face to unlock your phone, your fingerprint to log in at work, maybe even your voice to access secure apps. It feels smooth, simple, and quick on the surface but behind the scenes, there’s a lot going on. For all these systems to work well together, they need to follow the same rules. That’s where standards and protocols come in.
Best Practices for Testing LDAP Queries
Testing LDAP queries is not something you can just skip and hope for the best. A bad query can slow down your whole system, pull the wrong data, or even break your apps when you least expect it. If you want your setup to stay clean, fast, and safe, you need to test properly before anything goes live. Smart testing helps you catch problems early, so you are not stuck fixing big messes later. It keeps your systems running smooth, your users happy, and your IT team out of firefighting mode.
Empower Your MSP With Authentic Strategies From Hyper-Growth Leaders
When your clients show up with all kinds of devices, ask about SaaS apps, or want help managing AI tools, it can feel like you’re always playing catch-up. But what if, instead of distractions or headaches, these challenges were opportunities to grow? Let’s look at a (not so) hypothetical situation: After years of hard work, your managed service provider (MSP) business has built a solid client base, reliable tech stack, and a strong reputation as a technology leader.
5 (All Too) Common Headaches of IT Solutions
Dealing with vendor restrictions, siloed devices, security risks, or unexpected hidden costs in your IT processes? It’s like asking if you had a cup of coffee this morning. These (all too) common challenges can leave IT teams feeling frustrated and overwhelmed. They can certainly lead to existential issues, but more often they simply impact your regular operations, weekly plans, and daily focus… slowing you down at the most inconvenient moments and forcing you to scramble to get by.
Are You Prepared for the NIS2 Directive?
Organizations around the world face huge security risks. Cyber threats are becoming more advanced and widespread. The latest SME IT Trends report shows that 68% of small and medium enterprises faced at least one cyberattack last year. Ransomware was one of the most reported sources, but AI-generated attacks are also rising quickly. Security concerns span an ever-widening group of attack vectors. These statistics show how vulnerable organizations of all sizes are.
What Are NIST’s Mobile Device Management Guidelines?
Mobile devices play a crucial role in today’s business world. They support remote work, boost productivity, and provide 24/7 access to vital business tools. But with this convenience comes challenges for IT teams, like data breaches, malware, and unauthorized access. To address these risks, the National Institute of Standards and Technology (NIST) has released detailed guidelines for effective Mobile Device Management (MDM).
Why AD Security Logs Aren’t Enough
Active Directory (AD) is a key part of many enterprises, managing authentication and authorization for millions of users every day. While AD security logs are often used to monitor activity, detect threats, and maintain compliance, they are just one part of the security picture. Relying on these logs alone doesn’t provide the full visibility or threat detection that modern organizations need.
When to Merge vs. Maintain AD Forests and Domains
It’s 2025, but somehow companies are still stuck in the same Active Directory (AD) forest and domain debates from twenty years ago. Merging them should be easy, but security concerns and compliance rules make it complicated. Keeping them separate can work, but that often leads to higher costs, inconsistent policies, and an IT team that spends half its time dealing with cross-domain headaches. So what’s the smarter approach? Some companies choose to consolidate AD and simplify everything.
How to Implement Zero Trust on Linux Systems
A developer at a fast-growing startup remotes into a Linux server to check a production database. Nothing unusual, except he’s doing it from a coffee shop Wi-Fi on an unpatched laptop. In the background, a silent observer captures his credentials. A few days later, the company notices files are missing, CPU usage spikes, and unauthorized processes are running. They’ve just been cryptojacked. And their cloud bill is through the roof. And what of the incident response team? Scrambling.
Hybrid AD Security: Federated or Decentralized Identity?
Think about your house keys. If you have one key that works for your front door, back door, and garage, that’s federated identity. One login unlocks multiple services. Now imagine if you didn’t need keys at all because your face, fingerprint, or a secret handshake got you in. That’s decentralized identity. It lets you access without a central authority keeping track. Hybrid Active Directory (AD) environments need a clear approach to identity management.
Public vs. Private Certs: What's the Difference?
Digital certificates play a key role in securing modern IT systems. They are the foundation of Public Key Infrastructure (PKI), making secure communication, authentication, and data integrity possible. However, not all certificates work the same way. IT professionals often need to decide whether to use public or private certificates for their security requirements.
What Can IT Do About Shadow AI?
Shadow AI is a growing issue that puts data privacy, efficiency, and security at risk. When employees use unauthorized AI tools for their work, it creates blind spots that can lead to unexpected problems for your organization. The real question isn’t if shadow AI is present in your workplace—it’s what you’re doing to manage it.
Voice Phishing Is Increasing. Here’s How to Combat It
Between the first and second half of 2024, voice phishing (vishing) surged by 442%, according to a recent CrowdStrike report. Attackers are increasingly targeting businesses, impersonating help desks or infiltrating them under false pretenses. For IT and security professionals, the message is clear—vishing is a growing threat that demands urgent action. But how do companies address this growing concern effectively?
Protecting Users Against Mobile Phishing Threats
While it isn’t new, a recent blog from Johannes B. Ullrich, Ph.D. , Dean of Research at SANS.edu, notes that cybercriminals are once again using “com” prefix domains to trick users into visiting malicious websites. For example: “paypal.com-login.something.com.” At a quick glance, especially on mobile devices, these can appear legitimate. This method works so well today because it takes advantage of how URLs appear on mobile devices.
Proactive Password Management: Still Critical in 2025
Recent events show how important it is for organizations to manage passwords proactively, especially as cyber threats grow more frequent and complex. Cybercriminals continue to take advantage of weak or default passwords, as seen in recent brute-force attacks against over 4,000 IP addresses in China and the U.S. west coast. These attacks highlight that even advanced systems are at risk without strong passwords and multi-factor authentication (MFA).
The Impact of Shadow IT on Startup Security
It starts small. A developer downloads an app to speed up testing. A sales rep signs up for a free CRM without telling IT. The marketing team drops company files into an unapproved cloud drive. No big deal, right? Except now, your data is scattered across platforms no one is tracking. No security controls, no oversight, no clue who has access. Welcome to shadow IT—the Wild West of cybersecurity. Over 80% of employees admit they use unauthorized apps at work.
Evolving Threats, Expanding Solutions: Look For Opportunities To Stay Secure
Editor’s note: This article makes reference to a recent IT Security panel held at the 2025 JumpCloudLand virtual user conference. Robert Phan, Chief Information Security Officer at JumpCloud, led a discussion with Abhra Sinha, Senior Solutions Architect at AWS, and Dylan Souvage, Partner Solutions Architect at AWS, to bring together insights across industries on how to implement secure authentication across all resources. You can watch the entire panel discussion at the end of this article.
What's the Future of Active Directory in Hybrid Environments?
The IT world has a way of hanging onto old habits. And if there’s one habit enterprises can’t seem to break, it’s Active Directory (AD). It’s been around for decades, deeply embedded in how companies manage access, users, and devices. But here’s the catch: IT isn’t the same beast it was when AD ruled the world. Cloud-first infrastructure is taking over, and Microsoft isn’t exactly waving the AD flag anymore.
Ransomware Loves Active Directory-Here’s How to Harden Yours
Ransomware gangs don’t break in like old-school burglars. They don’t tiptoe around alarms or pry open doors. They walk right in through Active Directory (AD), grab the master key, and take over everything. AD runs the show. It manages user access, permissions, and security policies. If attackers seize control, they can shut down defenses, spread ransomware across every machine, and lock admins out of their own systems. No files, no backups, no way to fight back. This isn’t some theoretical risk.
MSPs and SaaS Management in 2025: From Chaos to Control
Managing SaaS sprawl is no longer optional for growing businesses—it’s imperative. For managed service providers (MSPs), the ability to tackle this pervasive issue offers not just a challenge… it’s an incredible opportunity to elevate your service offerings, grow client trust, and secure a competitive advantage in a crowded marketplace.
Addressing Cybersecurity Skill Gaps in Startup Environments
Everyone knows startups move fast. What of security, though? Not so much. And that’s exactly why attackers love targeting them. They know most startups are held together with duct tape and hope when it comes to cybersecurity. No full-time security team. No airtight policies. Just a handful of IT folks (if that) juggling a dozen other things. Hiring security pros is another mess altogether.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Sean
Contact Sean, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack