Real-Time threat intelligence at the speed of AI: Meet Immersive’s Container 7 team

Immersive was born in a real shipping container — Container 7 — in Bristol: small, scrappy and ambitious. That container launched everything we've built since and gave us the name for our threat analysis unit – Container 7. 

The “C7” team carries that name forward as both a tribute and a statement of intent. This is our engine room — constantly tracking emerging threats and technologies and sharing what we find with our customers through research, thought leadership, responsible disclosure and threat intelligence as we help the world's largest organisations understand their cyber and AI resilience. 

That same intelligence also fuels what we build: the team turns its research into the content that powers the Immersive platform, helping organizations prove and improve their cyber preparedness through Dynamic Threat Ranges, Cyber Range exercises, Crisis Sim scenarios and hands-on labs.

From a shipping container to the engine behind our platform — the name has changed roles, but not our spirit. Our team draws on deep expertise across every cyber domain, from Cyber Threat Intelligence, AppSec, Cloud and Red and Blue teaming to a growing focus on the threats AI itself introduces. 

As AI reshapes the attack surface, C7 is on the front line, uncovering how adversaries are weaponizing AI, exposing the vulnerabilities emerging in AI systems and building the content that helps customers close those gaps before attackers find them. We build for everyone in the business of resilience: security practitioners sharpening their craft, engineers hardening what they build, and the wider workforce learning to spot and stop threats (from humans or AI) before they land.

Every exercise, range and lab we ship starts with the people behind it. C7 is a mix of practitioners, researchers and builders, many of whom have worked on both sides — compromising systems as red teamers and penetration testers, or defending and securing them as blue teamers. We have security engineers and Cloud and AppSec practitioners all with years of experience helping to identify, mitigate and prepare organizations for all types of threats. That firsthand experience across attack and defense shapes everything we create. 

Over the coming weeks, we're pulling back the curtain on the team, so you can meet the people shaping the content you use to test and grow your own resilience in an AI-dominated world. First up is Rob Klentzeris, our Lead Cyber Engineer.

Rob has spent years building out Immersive's AppSec content, giving security teams and engineers realistic, hands-on ways to find and fix vulnerabilities before attackers do. More recently, he's taken the reins on our AI content, leading the charge as we expand the catalog to cover the new risks and skills AI brings to the table.

That work goes beyond security teams. Rob has built organization-wide AI content designed to enable practitioners at every level — regardless of role — to use AI capabilities effectively and securely, from developers embedding it into their workflows to the wider workforce adopting it day to day.

The combination of his deep roots in application security and his vision for where the industry is heading makes Rob's work the standard of what Container 7 is all about: content built on real expertise, aimed squarely at the threats our customers face today and tomorrow.

We’re also kicking off a “get to know the team” series with some questions for each member of C7, starting with Rob.

What's the biggest shift in the cyber threat landscape that defenders aren't paying enough attention to?

Everyone’s talking about AI accelerating exploitation of zero-days and fresh CVEs, and rightly so. What’s getting far less attention is the backlog. Most organizations carry a long tail of risk-accepted findings: low-severity issues deprioritized because no attacker would reasonably bother with them. That judgment quietly assumed attacker time was expensive. It isn’t anymore. When an adversary can point hundreds of agents at every surface of your estate, a verbose error message or a loosely scoped permission stops being noise and becomes a link in a chain that ends somewhere high-impact. Meanwhile, teams are flat out securing the flood of new code from coding agents, so nobody is revisiting old decisions. Re-triage your accepted risk as if every finding will be chained, because increasingly it will be.

What's one lesson you've learned from studying attackers that every security team should know?

Attackers are economists. They’ll keep developing novel techniques, but they won’t burn one when a proven, cheap method still works. The new stuff gets saved for targets that demand it. If your agent is overprovisioned with tools and permissions it doesn’t need, nobody’s going to risk a novel frontier-model jailbreak ending up in your SIEM. A basic prompt injection will do the job. So raise your baseline before investing in defenses against attacks nobody needs to use on you. The fundamentals aren’t glamorous, but they’re exactly what attackers are counting on you to skip.

What excites you most about what C7 is building, and what impact do you hope the team will have?

What excites me most is the thread running through everything we build: proving readiness instead of assuming it. That’s especially true for AI. We have programs where people across the workforce demonstrate they can use AI safely before their organization gives them access, which flips the usual deploy-first, train-later approach. Around that, we’re building labs on securing AI agents from governance through to the supply chain, threat ranges that will challenge even seasoned security teams, a steady stream of CTI labs tracking what’s happening in the wild, and crisis simulations that test everyone from the boardroom to the SOC. Brought together in Immersive One, that gives organizations a clear picture of where their gaps are. The impact I hope we have is simple: when an organization says it’s ready for AI, or for its next incident, it can show the evidence.

If you weren't working in cybersecurity, what would you be doing instead?

I’m a huge basketball fan. Unfortunately, I’m not seven feet tall or anywhere near athletic enough to make the league. But I think I’d thrive as a data analyst, helping the Toronto Raptors (the best team ever) find that 0.001% edge over the competition. Honestly, it’s not that different from what I do now: finding the weakness everyone else decided wasn’t worth worrying about.

‍