This is not an ad hominem. Security is a notoriously difficult field, made worse by the fact that bad security is often very hard to tell from good security.

Asking for the credentials (and the research) of someone claiming to have a new security product is a shortcut to knowing how well acquainted they are with this difficult field. Yes, it's a shortcut, but it's also warranted. It doesn't mean they won't be heard, just that they will be heard with healthy skepticism.