Watchfire Security LLC.
A defender’s perspective
on AI risk.

Defensive operations.
Threat-hunting research.
A practical view of AI.

Dr. Jonathan Hammitt brings together defensive cyber operations, threat-hunting research, and extensive hands-on cybersecurity experience across public- and private-sector environments. His work spans enterprise security operations, incident response, digital forensics, vulnerability management, and military cyber defense. He founded Watchfire Security LLC to translate that experience into clear findings, practical recommendations, and informed security decisions.

His professional background includes information protection, cybersecurity engineering, and IT security, as well as defensive cyber operations in the Air National Guard. Earlier in his career, his service in the U.S. Air Force included work on F-22 avionics and electronic warfare systems.

Across these environments, Dr. Hammitt has conducted endpoint investigations, threat hunting, SIEM engineering and migration, ransomware response, and Windows and Linux host forensics. This operational experience shapes the way he approaches security challenges: determine what happened, identify the evidence supporting that conclusion, understand what remains unknown, and determine the appropriate course of action.

His research into threat hunting across the public and private sectors builds on that experience by examining how organizations identify threats, interpret evidence, and translate findings into action. His work across both sectors has also provided him with a practical understanding of how mission requirements, business priorities, and operational constraints influence security decision-making.

That same perspective informs Dr. Hammitt’s approach to artificial intelligence and its expanding role in the security landscape. AI can help organizations improve productivity, streamline operations, enhance customer experiences, and develop new products and services. At the same time, the increasing adoption of AI tools and autonomous agents introduces new forms of exposure. Systems with access to corporate data, applications, credentials, and workflows can inadvertently expose sensitive information, expand an organization’s attack surface, disrupt operations, and create new risks to customer trust.

AISpy was developed to provide organizations with a clearer understanding of that exposure. Drawing on Dr. Hammitt’s research and operational experience, AISpy identifies AI activity at the endpoint, provides visibility into associated capabilities and access, and evaluates risk based on the evidence it discovers. The goal is to help organizations make informed decisions about AI adoption, prioritize the exposures that matter most, and realize the benefits of AI with a clearer understanding of the associated risks.