DNSFilter Taps Justin Foster as CTO to Tackle the Shadow AI Crisis

WASHINGTON – November 04, 2026 – The rapid consumerization of generative artificial intelligence has created a massive blind spot for corporate IT departments. Employees are adopting AI tools at a breakneck pace, often bypassing official procurement channels to summarize documents, write code, or draft emails. This phenomenon, known as "Shadow AI," has quickly escalated from a minor IT headache to a board-level liability. Now, cybersecurity vendors are racing to provide the governance frameworks necessary to rein in this unsanctioned activity.

In a strategic move to capture this burgeoning market, DNSFilter today announced the appointment of cybersecurity veteran Justin Foster as its new Chief Technology Officer. The addition of Foster, who previously served as CTO at device visibility leader Forescout, signals a critical maturation phase for the Washington-based company. As organizations increasingly look to the foundational layers of their network infrastructure to enforce AI compliance, DNSFilter is positioning its newly launched LUMINATE platform as the enterprise standard for governing artificial intelligence at the point of origin.

“Justin has built security companies from the ground up - he co-founded Cysiv, then ran R&D at Forescout,” said Ken Carnesi, CEO of DNSFilter. “We just launched LUMINATE by DNSFilter at Nasdaq and opened the platform up to a much bigger market, and Justin is the right leader to scale it. Our customers are going to see the impact in the product quickly.”

The Executive Overhaul and Enterprise Ambitions

Foster’s appointment is not an isolated leadership change; it is the capstone of a broader executive overhaul designed to propel DNSFilter upmarket. The company recently brought on Rich Scott as Chief Revenue Officer and Conor Coughlan as Chief Marketing Officer. Together, this newly minted C-suite is tasked with transitioning the company from its roots as a highly effective, MSP-friendly web filter into a comprehensive, enterprise-grade threat analytics and governance platform.

Foster brings over 25 years of information security experience, with a resume that aligns perfectly with DNSFilter’s current trajectory. Before his tenure at Forescout, he co-founded and served as CTO of Cysiv, a cloud-native security operations company that Forescout acquired in 2021. His background at Cysiv and earlier roles at Trend Micro demonstrate a deep expertise in operationalizing security intelligence, building scalable cloud architectures, and leveraging machine learning for advanced threat detection.

“Shadow AI is one of the biggest gaps security teams face today, and it starts with the first connection a user makes,” Foster said in a statement regarding his new role. “I’m joining DNSFilter at a strategically important time. The new platform LUMINATE by DNSFilter extends our DNS-first protection capabilities to include AI governance and controls, behavior analytics, and threat intelligence for the first time. I look forward to working with Ken and the team to build on that amazing foundation and scaling it for all our customers and partners.”

The challenge Foster inherits is substantial but lucrative. DNSFilter currently protects over 100 million users across 57,000 customer organizations worldwide. Scaling the LUMINATE platform to handle the behavioral analytics required to differentiate between benign web traffic and risky AI interactions across that massive user base will require significant architectural finesse.

The First Line of Defense: Why DNS Matters for AI

The battle for AI security control is currently defined by an architectural debate: should organizations inspect traffic at the application layer, or block it at the infrastructure layer?

Historically, enterprises have relied on Cloud Access Security Brokers (CASBs) and Secure Web Gateways (SWGs) for deep, application-level inspection. These tools are highly granular, capable of monitoring specific API calls and preventing sensitive data payloads from being uploaded to public large language models. However, they are also notoriously complex to deploy, can introduce network latency, and often struggle to keep pace with the sheer volume of new, unsanctioned AI applications popping up daily.

This is where DNSFilter’s approach offers a compelling business case. The Domain Name System (DNS) is the internet’s phonebook; every digital interaction begins with a DNS lookup. By operating at this foundational layer, DNSFilter can identify and block access to unauthorized AI services before a connection is ever established, let alone before a data payload is transferred.

Industry data underscores the urgency of this "first click" visibility. Recent surveys indicate that 68 percent of employees use generative AI tools at work, with more than half doing so without company approval. Consequently, 70 percent of organizations report having experienced data leakage through these unsanctioned channels. Even more alarming for risk officers is that 43 percent of organizations only learn an AI tool has access to their systems after the fact—or sometimes never at all.

"When you are dealing with hundreds of new AI wrappers and shadow applications launching every week, trying to manage them all with heavy proxy inspections is a losing game of whack-a-mole," noted one enterprise security architect familiar with the platform's deployment. "Pushing that governance down to the DNS layer gives you a ubiquitous, low-latency choke point. It might not read the contents of the prompt, but it stops the prompt from ever being sent to an unvetted server."

While DNS filtering lacks the granular content inspection of a CASB, it serves as an incredibly efficient, easily deployable first line of defense. Foster’s background in encryption and network security will be vital in enhancing LUMINATE’s behavioral analytics engine, allowing the platform to better identify anomalous patterns that suggest Shadow AI usage, even as the landscape of AI tools continues to fragment.

The Bottom Line: Capitalizing on the AI Security Boom

From a financial and market strategy perspective, DNSFilter is striking while the iron is hot. Corporate budgets are rapidly shifting to address the vulnerabilities introduced by artificial intelligence. Current market intelligence reveals that 40.3 percent of organizations plan to allocate their next marginal security dollar specifically to AI security and governance. Furthermore, Gartner predicts that by 2026, organizations integrating AI into their security operations will see a 40 percent reduction in breaches.

To capture this spend, DNSFilter must navigate a fiercely competitive landscape. Legacy giants like Cisco Umbrella, Cloudflare Gateway, and Zscaler all offer robust DNS and web security solutions. However, DNSFilter is betting that its specialized focus on AI governance through LUMINATE, combined with its proprietary AI-driven threat intelligence engine, will carve out a distinct competitive advantage.

The company's channel strategy will be instrumental in this fight. DNSFilter goes to market through a formidable global partner ecosystem that includes CrowdStrike, Amazon, GuidePoint Security, and Pax8. Leveraging these partnerships—particularly with enterprise heavyweights like CrowdStrike and GuidePoint—will be essential for getting LUMINATE in front of Fortune 500 CISOs who are currently losing sleep over Shadow AI.

Justin Foster’s mandate is clear: ensure the technology scales to meet the marketing promise. If DNSFilter can successfully position its DNS-first approach not just as a web filter, but as the foundational layer of corporate AI governance, the company stands to capture a significant share of the next great cybersecurity spending wave. The appointment of a seasoned CTO to guide this technical evolution suggests that DNSFilter is not just participating in the AI security conversation, but actively attempting to rewrite its rules.