# The Door Is the New Firewall: How One Startup Locked Down Half of America's Hyperscale Data Centers

In a stunning revelation that's reshaping how we think about physical security in the AI era, Alcatraz AI has disclosed that more than half of the roughly 17 hyperscale data center operators headquartered in the U.S. now rely on its facial authentication platform to secure their facilities. While the cybersecurity world has spent two decades fortifying networks against malware and remote intrusions, the physical door—still guarded by 1990s-era badge technology—has remained the industry's most overlooked vulnerability. Now, with a new study revealing that 58% of Americans have never even heard of "tailgating" as a security threat, the convergence of AI infrastructure and physical access control has become the most critical—and least understood—battlefront in modern cybersecurity.

## The Billion-Dollar Blind Spot in Physical Security

Here's a hard truth that should keep every security researcher up at night: while cybersecurity has absorbed billions in investment since 9/11 redefined critical infrastructure, physical security has been left in the technological dust. The majority of office buildings, data centers, and critical facilities still rely on the same badge and key-card systems that were cutting-edge in the 1990s. These systems are fundamentally blind and binary—a valid credential opens the door, and the system's job ends there. It has absolutely no way to determine whether the person walking through is the one who badged in, or simply someone who followed a step behind.

This is the vulnerability that Alcatraz AI has built its entire business around solving. The company's flagship product, the Rock™, uses fully anonymized facial authentication to detect and prevent tailgating in real-time, closing the gap that has plagued physical security for decades. And the market has responded with remarkable speed: Alcatraz closed a $50 million Series B in April 2026, bringing total funding past $100 million, and closed out 2025 with triple-digit growth—300% year-over-year growth in data center adoption, 200% growth in new enterprise customers, and a fivefold expansion across Fortune 500 deployments. More than 4 million people now authenticate through the platform.

## Why AI Infrastructure Demands a New Security Paradigm

The stakes for hyperscale data centers are almost incomprehensibly high. According to IBM's 2025 Cost of a Data Breach Report, the average cost of a data breach is $4.44 million globally, but that figure skyrockets to $10.22 million in the United States. These costs are driven primarily by downtime, reputational damage, and the expensive process of winning back or replacing clients—all outcomes that a physical intrusion can trigger just as easily as a network breach.

Greg Sarrail, Senior VP at Alcatraz AI, explains why hyperscale operators have converged on a single standardized vendor rather than maintaining a patchwork of legacy access-control systems: "Data centers use Alcatraz because the cost of a data breach is extremely high, so they have to deploy the best technology available for access control. One tech giant tested Alcatraz alongside a dozen other technologies over four years. After rigorous testing, they chose only Alcatraz."

The challenge is particularly acute for co-location data centers, which house multiple clients within a single facility. "They need to ensure the right people have entered the right spaces—not just the right building, but the right data halls, the right server racks—with an auditable record of who touched what and when," Sarrail said. "The cost of a breach is just too high."

## The Privacy Trade-off That Changed the Game

What makes Alcatraz's approach particularly interesting to security researchers is how it solves the biometric privacy dilemma that has historically prevented widespread adoption of high-security authentication. Traditional iris scanning, long considered the gold standard for biometric security, requires a person to stop and align themselves with a scanner. More critically, it works by capturing and storing a unique biological identifier—a form of personally identifiable information that itself becomes a target if breached.

Alcatraz takes a fundamentally different approach. The Rock authenticates users at walking speed, eliminating the friction that plagues other biometric systems, but it doesn't store a photograph or a biometric template. This is the security bar that the highest-stakes facilities require, without the data-retention risk that makes traditional biometrics a liability.

Tina D'Agostin, CEO of Alcatraz AI, who previously helped shape physical security and technology efforts for Chase Center and Salesforce Tower while at Johnson Controls, emphasizes this distinction: "Most access control reliant on badge or card technology is blind and binary: it only opens a door. It's completely unintelligent. Alcatraz harnesses AI technology to make the door intelligent without compromising employee privacy. The Rock recognizes whether someone belongs or doesn't. It provides real-time alerts to catch tailgating, and tells security personnel when and where a breach has occurred. Most importantly, our patented technology means employees are 100% anonymous—that's what distinguishes it from every other biometric on the market."

## The Summer of Security Failures

The urgency of this problem was underscored this summer by a series of high-profile physical security failures. Unauthorized breaches at Harvard, UCLA, and 30 Rockefeller Center all traced back to the same mechanism measured in the Alcatraz study: a valid credential, and no way to detect who followed behind it. Whether the door leads to a dorm room or a data center floor, the vulnerability is identical.

The first independent U.S. study measuring public awareness of tailgating found that 58% of Americans have never heard the term used to describe an unauthorized person following someone else through a secured door or turnstile. This awareness gap is particularly troubling given that tailgating is the exact breach vector that Alcatraz's technology is designed to eliminate.

"Every company in America spent a decade locking down the network. We never locked down the door," D'Agostin said. "How is it possible that 25 years after 9/11, most security still relies on a card or badge—a 30-year-old piece of technology? This study confirms what security directors already know: unless we upgrade the technology and make doors intelligent, buildings stay vulnerable."

## The New Standard for Critical Infrastructure

The platform installs alongside existing access control infrastructure rather than replacing it, and is operational on day one. No personal identification information, such as date of birth or address, is stored. This approach has made Alcatraz the trusted choice where security standards are highest and certifications hardest to earn: hyperscale data centers, financial institutions, airports, and nuclear and energy infrastructure. The company's technology now protects professional sports teams from the NBA to the NFL, Fortune 100 companies, universities, stadiums, and private individuals.

While Alcatraz is prohibited by NDAs from naming its clients, Sarrail notes that "they include the largest tech companies in the world." The convergence of so many hyperscale operators on a single vendor represents a significant shift in how the industry approaches physical security—and a recognition that in the AI era, the door is just as important as the firewall.

## The Bottom Line

As AI infrastructure continues to expand at breakneck speed, the physical security of the facilities housing that infrastructure has become a critical vulnerability that can no longer be ignored. The market has clearly spoken: more than half of U.S. hyperscale data center operators have standardized on Alcatraz AI's platform, and the company's triple-digit growth suggests this is just the beginning. For security researchers and tech enthusiasts watching the evolution of physical access control, the message is clear—the badge and card era is over, and the intelligent door has arrived. The question isn't whether your organization will make the upgrade, but how long you can afford to wait.