About The Krolik Institute

The Krolik Institute is an independent research house founded by Javvad Malik and Erich Kron, producing research and insight on security and human risk.

Our job is simple: say what we think is true, put our names on it, and let the work speak for itself.

Javvad Malik

Javvad Malik has spent over twenty years in cybersecurity, as a practitioner, consultant, analyst, and advocate, and still finds it fascinating. Based in London, he’s Lead CISO Advisor at KnowBe4 by day, and holds a Guinness World Record for the most-watched cybersecurity lesson on YouTube in 24 hours (he will bring this up unprompted). Most of what he does comes down to one thing: making security make sense to actual humans.

Erich Kron

Erich Kron has spent more than thirty years in information security, across medical, aerospace, manufacturing, and defense, including a stint as security manager for the US Army’s 2nd Regional Cyber Center. He’s now a CISO Advisor at KnowBe4, an author, a podcast host, and a man with strong, well-earned opinions about social engineering, AI, and why deepfakes are only going to get worse.

The two of them also co-wrote 50 Ways to Survive and Thrive in Cybersecurity: deadpan, occasionally furious, mostly true. Get it on Amazon →

How we work

Still taking shape. See the Research page for where we’re at.

Contact

[Add contact email here.]