Josh Botz

I'm a cloud security practitioner. I work in cloud security and compliance — FedRAMP, continuous monitoring, and GRC — and I write and consult on AI agent security for the leaders responsible for shipping it: the acceptable-use policies, governance, and threat models behind the agentic stack.

I've had the opportunity to do security work across Fortune 500 companies and branches of the U.S. Intelligence Community. I build in the open, too — runnable security labs, working tools, and briefings, not 5,000-word think pieces.

Pillar Security LLC is my consulting practice and the name on contracts and invoices. The writing, the labs, and the deeper work live at joshbotz.com.

Ready to get your AI policy audit-ready? That's what PolicyReady does.