Ivan Tsarynny

Ivan Tsarynny is the CEO and Co-Founder of Feroot Security, a recognized leader in AI-driven cybersecurity and governance, risk, and compliance (GRC) solutions that safeguard healthcare organizations' websites and patient portals. In February 2025, he led Feroot's groundbreaking discovery of hidden code in DeepSeek designed to covertly transmit data to China Mobile. Mr. Tsarynny provided testimony before a U.S. Congressional committee on national security risks of data collection by China's big tech sector. He has been featured on CNBC, ABC's Good Morning America, CNN's Anderson Cooper 360, and numerous other programs. His expertise is widely recognized in interviews and cited by publications including The Wall Street Journal, Bloomberg, Associated Press, and many others.

Blog
News & Press
Education Center

Sort by:

HIPAA

HIPAA Compliance

What’s the Cheapest Way to Comply with HIPAA Online Tracking Technology Rules?

Avoid HIPAA fines for online tracking. Feroot helps security teams comply with 2025 regulations around pixels, scripts, and analytics—affordably.

July 14, 2025

Magecart and Other Skimming Attacks

Web Application Security

Everything You Need to Know About Magecart and Other Skimming Attacks

TL;DR Magecart attacks inject malicious JavaScript into websites to steal sensitive data like credit card numbers, PII, and login credentials — often…

July 11, 2025

PCI DSS Compliance

Solving PCI DSS 6.4.3 and 11.6.1 Compliance with Feroot’s Client-Side Security Platform

Feroot helps CISOs meet PCI DSS 6.4.3 and 11.6.1 compliance with real-time client-side security monitoring and audit-ready evidence.

July 11, 2025

NIST SP 800-53

Compliance

How Feroot Helps Security Teams Meet NIST SP 800-53 Controls for Web Application Protection

Meet NIST SP 800-53 web app controls with client-side monitoring, continuous compliance, and audit-ready reporting for CISOs by Feroot.

July 7, 2025

pci dss 6 4 3

PCI DSS Compliance

Ensuring PCI DSS 4.0 Compliance: A Deep Dive into Requirement 6.4.3

TL;DR PCI DSS 4.0 Compliance with Requirement 6.4.3 mandates strict controls over scripts that run on payment pages. It aims to stop…

July 4, 2025

PCI DSS

PCI DSS Compliance

What Is the Lowest Cost Way to Comply with PCI DSS Requirements 6.4.3 and 11.6.1?

Find the most budget-friendly way to meet PCI DSS 6.4.3 & 11.6.1. Learn how to secure online payments while minimizing compliance costs.

July 4, 2025

PCI-DSS-4.0-Compliance

PCI DSS Compliance

PCI DSS 4.0.1: A Comprehensive Guide to Successfully Meeting Requirements 6.4.3 and 11.6.1

To address stakeholder feedback and questions received since PCI DSS v4.0 was published, the PCI Security Standards Council (PCI SSC) has published…

July 4, 2025

hipaa compliance in digital marketing

HIPAA Compliance

What Are the Biggest HIPAA Compliance Risks in Retargeting and Digital Marketing for Healthcare Organizations?

Healthcare marketers face rising HIPAA compliance complications from retargeting and tracking tools. Learn from those mistakes and protect PHI.

July 4, 2025

PCI DSS 4.0 Compliance

PCI DSS Compliance

PCI DSS 4.0 Compliance: A Guide to Requirements 6 & 11

In this blog, we'll unpack the latest iteration of PCI, what it means for client-side security, & what to do to ensure PCI DSS 4.0 compliance.

July 3, 2025