OPSWAT names Jan Miller CTO to lead new Technology Centre

OPSWAT has appointed Jan Miller as Chief Technology Officer and created a new Technology Centre that he will lead.

The expanded CTO role spans research, engineering, and product development. Miller will also lead perimeter-based threat detection, focusing on combining sandbox analysis and threat intelligence at the point where files enter an organisation's environment.

Perimeter controls remain a priority for many organisations handling large volumes of inbound files and data, including operators of critical national infrastructure. Security teams are also seeing more malware designed to evade analysis through environment checks, delayed execution, and other techniques that conceal behaviour.

OPSWAT positions its products around protecting critical infrastructure across IT and operational technology. It sells into industrial and government sectors, where file transfers, removable media, and third-party access can introduce risk into segmented networks.

Technology Centre

Miller will lead the Technology Centre, a new organisational structure intended to align research, engineering, and product development, and to link new detection techniques with product roadmaps.

OPSWAT said its approach aims to spot threats earlier in the file lifecycle and stop evasive threats before they reach users, systems, or critical networks.

The strategy relies on adaptive sandboxing, behavioural analysis, and threat intelligence. Sandboxing typically runs files in a controlled environment and observes their behaviour, while threat intelligence draws on indicators and context from wider sources. OPSWAT is emphasising decision-making at the perimeter, where security systems may need to act quickly on incoming content.

Benny Czarny, Founder and CEO of OPSWAT, linked the appointment to the company's focus on AI-driven threat prevention.

"Jan's appointment reinforces OPSWAT's commitment to leading the next generation of AI-driven threat prevention," said Benny Czarny, Founder and CEO of OPSWAT.

Background

Miller has worked in malware analysis and threat detection for more than a decade, according to OPSWAT. He is known for work on sandboxing, behavioural analysis, and research into evasive malware.

He has founded multiple cybersecurity companies that were acquired by CrowdStrike and OPSWAT. Since joining OPSWAT in late 2022, he has held several roles, most recently Chief Technology Officer of Threat Analysis.

OPSWAT said Miller has influenced how the company combines adaptive sandboxing and threat intelligence, and has contributed to efforts that link behavioural analysis with broader detection and response signals.

Industry standards

Alongside his corporate role, Miller is a board member of the Anti-Malware Testing Standards Organisation, which works on transparency and standardised approaches to evaluating security technologies.

He is a lead author of AMTSO's Sandbox Evaluation Framework, which sets out principles for testing and validating sandbox products. Such products can be difficult to compare because configurations, detonation environments, and reporting vary widely.

The appointment comes as vendors and buyers scrutinise how malware analysis products perform against evasion and how well they integrate with threat intelligence feeds. Security teams also face pressure to reduce false positives and triage workload while maintaining coverage for new and unknown threats.

Miller described perimeter deployment as the point where time constraints shape detection decisions.

"To counter modern malware, sandboxing must work hand in hand with threat intelligence at the perimeter, where files first enter the environment and decisions need to be made in seconds," said Jan Miller, Chief Technology Officer at OPSWAT. "This approach will allow customers to reduce alert noise, accelerate response, and improve protection across critical environments. Our new Technology Centre will focus on advancing the integration of sandboxing and threat intelligence."

OPSWAT said the Technology Centre will continue to invest in research and innovation on integrating sandboxing and threat intelligence, with Miller leading the work across the company's development teams.