Tom Finch

Tom Finch is a technical leader at Chainguard specialising in software supply chain security, minimal container images, and secure-by-default cloud-native architectures. He works hands-on with platform and engineering teams to reduce CVE exposure, harden container environments, and modernise build pipelines using distroless and minimal base images.

Previously at Wiz, Tom advised enterprises on cloud security posture management across complex multi-cloud environments. At Puppet, he helped organisations automate infrastructure and implement policy-driven configuration management at scale.

With deep expertise in Kubernetes, containers, CI/CD pipelines, and infrastructure as code, Tom focuses on practical security outcomes — reducing attack surface, improving SBOM transparency, and shifting security left without slowing development velocity.