Sunil Gentyala
Sunil Gentyala is Lead Cybersecurity and AI Security Consultant at HCLTech, where he leads an 11-person security team serving Fortune 500 clients including Uber, Disney, and Royal Caribbean. He serves as HCLTech's designated expert representative to the Cloud Security Alliance.
He is the creator of ContextGuard, a zero-trust middleware framework for Model Context Protocol (MCP) security, and the GSH Framework (Gentyala-Sovereign Hunt), an agentic AI threat hunting framework mapped to MITRE ATLAS and NIST CSF 2.0.
His research spans adversarial machine learning, MCP vulnerability analysis, post-quantum cryptography, and agentic AI governance. He holds over 20 years of enterprise PKI and security architecture experience and has published across CSO Online, Dark Reading, SC World, Cyber Defense Magazine, and BiometricUpdate.com. He holds a #FoundryExpert designation across IDG/Foundry publications (CSO Online, CIO.com, Computerworld) and has been featured on Decoded: The Cybersecurity Podcast.
He is an IEEE Senior Member (No. 101760715, ORCID: 0009-0005-2642-3479), active ISACA Professional Member (ID: 2297870), and is pursuing IET Fellowship (FIET).
Timeline
2026 May
2026 May
Quoted in Non-Stop Agentic AI Action Has Teams Assembling to Face the Threat — BiometricUpdate.com, on enterprise AI agent infrastructure security gaps
2026 April
🥉 Bronze — Cybersecurity Professional of the Year at the 2026 Cybersecurity Excellence Awards
2026 April
Shortlisted for Cyber Security Influencer of the Year at the Cyber Security Awards 2026
2026 April
Nominated for the Alan Turing Cyber Leadership Award at the National Cyber Awards — under expert judging panel review
2026 April
Published MCP security analysis at SC World on Model Context Protocol attack vectors and zero-trust mitigations
2026 April
Submitted multi-venue paper package — A Post-Quantum Migration Taxonomy for Model Context Protocol — to IEEE TIFS, ACM QSec, and Elsevier FGCS
2026 March
Expert commentary cited in Zscaler-SquareX Deal Boosts Zero Trust, Secure Browsing Capabilities — Dark Reading, on browser-centric zero-trust enforcement architecture
2026 March
CSA Peer Review completed — MLOps Key Activities, Cloud Security Alliance
2026 March
Published LLM Jailbreak Survey to Zenodo (DOI: 10.5281/zenodo.19241166) and SSRN
2026 March
GSH Framework reached v1.0.0-beta with full playbook set and CI workflow
2026 February
Published The Sentinel Intelligence: A CISO's Guide to Sovereign Security in the Age of AGI — Cyber Defense Magazine, introducing the SI architectural framework
2026 February
Published Why 2025's Agentic AI Boom Is a CISO's Worst Nightmare — CSO Online, on indirect prompt injection, memory poisoning, and agentic denial-of-service exploits
2026 February
CSA Peer Review completed — IAM Standards and Protocols
2026 February
CSA Peer Review completed — Post-Quantum Cryptography Key Management
2026 February
ContextGuard published at GitHub with v1.0.0-ieee-submission release tag
2026 April
Invited as peer reviewer at the Cyber Defense Review — peer-reviewed scholarly journal of the U.S. Army Cyber Institute at West Point
2026 January
Submitted paper to IEEE SmartNets 2026 — Identity 3.0 and Zero-Trust for Critical Infrastructure, introducing the IMM-CI maturity model (EDAS ID 69662X)
2025 December
Featured on Decoded: The Cybersecurity Podcast — Browser Zero Trust: Hardening Security Controls (41 min); also on Apple Podcasts
2025 December
Published Hardening Browser Security with Zero-Trust Controls — CSO Online, six-principle browser zero-trust framework with NIST SP 800-207 and CISA Maturity Model alignment
2025 December
Completed peer review for EJCSI-2026-03-024; registered on Web of Science / Publons
2025 December
Completed BCS Fellowship application (Experiential route)
2025 November
Published Beyond Silos: How DDI-AI Integration Is Redefining Cyber Resilience — CSO Online, on AI-driven predictive threat detection via DDI integration
2025 November
Submitted paper to IEEE QCE26 — Post-Quantum Zero-Trust Migration Framework (QZTMF), co-author John Martin (HCLTech Auckland), QNET track
2025 October
ISACA Journal article — Governing Agentic AI via MCP and COBIT 2019 / NIST CSF 2.0, co-authored with Praveen Kumar Mannam (Salesforce)
2025 September
Zero-trust data pipelines paper submitted to JRTCSE, co-authored with Sunil Kumar Mudusu (Church Mutual Insurance)
2025 August
Elevated to IEEE Senior Member — No. 101760715
2025 July
Appointed as HCLTech designated expert representative to the Cloud Security Alliance
Publications
A Post-Quantum Migration Taxonomy for Model Context Protocol: Applying RFC 9794 PQ/T Hybrid Constructs to Agentic AI Infrastructure
Under review — IEEE TIFS / ACM QSec / Elsevier FGCS, 2026
Post-Quantum Cryptography
MCP Security
Agentic AI
LLM Jailbreak Survey: Adversarial Prompting, Attack Taxonomies, and Defense Frameworks
Zenodo, DOI: 10.5281/zenodo.19241166; SSRN, 2026
Governing Agentic AI via Model Context Protocol and COBIT 2019 / NIST CSF 2.0
ISACA Journal, 2026
AI Governance
COBIT 2019
NIST CSF 2.0
Hardware-Enforced Runtime Containment for Agentic AI Systems
IEEE TEMSCON Global 2026 / ACM CCS 2026 / USENIX Security 2026
Hardware Security
Agentic AI
Identity 3.0 and Zero-Trust for Critical Infrastructure: The IMM-CI Maturity Model
IEEE SmartNets 2026 (EDAS ID 69662X)
Zero Trust
Critical Infrastructure
Identity
Post-Quantum Zero-Trust Migration Framework (QZTMF)
IEEE QCE26 — QNET Track, 2026
Post-Quantum
Zero Trust
Zero-Trust Data Pipelines for Enterprise Security Architecture
Journal of Research in Technology, Computers, and Security Engineering (JRTCSE), 2025
Zero Trust
Data Security
ContextGuard: Zero-Trust Middleware for Model Context Protocol Security
IEEE S&P 2027 target — github.com/sunilgentyala/contextguard
Industry Articles
1,800+ MCP Servers Exposed Without Authentication: How Zero Trust Can Secure the AI Agent Revolution
CSO Online, May 2026
MCP Security
Zero Trust
SC World, March 2026
MCP Security
Zero Trust
Cyber Defense Magazine, February 2026
Agentic AI
CISO Strategy
CSO Online, February 2026
Agentic AI
Prompt Injection
CSO Online, December 2025
Browser Security
Zero Trust
CSO Online, November 2025
DDI
AI Security
Media Coverage & Podcast Features
Dark Reading — expert commentary on browser-centric zero-trust enforcement architecture
Cited
Browser Security
BiometricUpdate.com, May 2026 — quoted on enterprise AI agent infrastructure security gaps and deployment risks
Quoted
Agentic AI
Decoded: The Cybersecurity Podcast, December 2025 (41 min) — full episode based on CSO Online article • Apple Podcasts
Podcast Feature
Zero Trust