Ivan Tsarynny

Ivan Tsarynny is the CEO and Co-Founder of Feroot Security, a recognized leader in AI-driven cybersecurity and governance, risk, and compliance (GRC) solutions that safeguard healthcare organizations' websites and patient portals. In February 2025, he led Feroot's groundbreaking discovery of hidden code in DeepSeek designed to covertly transmit data to China Mobile. Mr. Tsarynny provided testimony before a U.S. Congressional committee on national security risks of data collection by China's big tech sector. He has been featured on CNBC, ABC's Good Morning America, CNN's Anderson Cooper 360, and numerous other programs. His expertise is widely recognized in interviews and cited by publications including The Wall Street Journal, Bloomberg, Associated Press, and many others.

Blog
News & Press
Education Center

Sort by:

Feroot's PaymentGuard AI helps automate PCI DSS compliance.

PCI DSS Compliance

Set It and Forget It: How Feroot’s PaymentGuard AI Automates PCI 6.4.3 & 11.6.1 With Zero Dev Effort

Feroot automates PCI DSS 6.4.3 and 11.6.1 compliance with zero dev effort—client-side monitoring, real-time tamper alerts, and audit-ready reports for CISOs.

July 29, 2025

HIPAA security rule

HIPAA Compliance

What’s Changing in the HIPAA Security Rule—and How to Prepare Your Security Stack

Feroot’s HealthData Shield AI helps CISOs meet 2025 HIPAA Security Rule updates with automated script monitoring, PHI data-flow mapping, etc.

July 25, 2025

Feroot PaymentGuard AI vs CSP

PCI DSS Compliance

Feroot PaymentGuard AI vs CSP: Which Script Security Tool Best Protects Payment Pages for PCI DSS 4.0?

TL;DR Feroot's PaymentGuard AI provides real-time monitoring of script changes on payment pages CSP relies on static policies, which are often bypassed…

July 21, 2025

JavaScript Security

Thousands of WordPress Sites at Risk After Gravity Forms Breach

Thousands of WordPress sites were compromised through a Gravity Forms plugin exploit. Learn how CISOs can detect malware and prevent client-side attacks.

July 18, 2025

PCI DSS Compliance

What Qualifies as a Script Change Under PCI DSS 11.6.1 — and How to Detect It

Feroot helps CISOs detect unauthorized JavaScript script changes for PCI DSS 11.6.1 compliance with real-time monitoring, automated alerts, and audit-ready evidence.

July 16, 2025

HIPAA

HIPAA Compliance

What’s the Cheapest Way to Comply with HIPAA Online Tracking Technology Rules?

Avoid HIPAA fines for online tracking. Feroot helps security teams comply with 2025 regulations around pixels, scripts, and analytics—affordably.

July 14, 2025

Magecart and Other Skimming Attacks

Web Application Security

Everything You Need to Know About Magecart and Other Skimming Attacks

TL;DR Magecart attacks inject malicious JavaScript into websites to steal sensitive data like credit card numbers, PII, and login credentials — often…

July 11, 2025

PCI DSS Compliance

Solving PCI DSS 6.4.3 and 11.6.1 Compliance with Feroot’s Client-Side Security Platform

Feroot helps CISOs meet PCI DSS 6.4.3 and 11.6.1 compliance with real-time client-side security monitoring and audit-ready evidence.

July 11, 2025

NIST SP 800-53

Compliance

How Feroot Helps Security Teams Meet NIST SP 800-53 Controls for Web Application Protection

Meet NIST SP 800-53 web app controls with client-side monitoring, continuous compliance, and audit-ready reporting for CISOs by Feroot.

July 7, 2025