Experienced CISOs from MongoDB and Gusto reveal proven frameworks for translating complex cybersecurity metrics into board-friendly presentations that drive decision-making.

Topics Include:

• Security leaders discuss challenges of presenting technical cybersecurity topics to boards
• MongoDB CISO presents three times in six months, Gusto director five times
• Three-angle metrics framework: environmental threats, prevention quality, and detection/response speed capabilities
• Board members switch contexts frequently, requiring extensive education and simplified heat maps
• Repeatable presentation models help board members follow consistent data across meetings
• Audit committees get different depth than general board updates on programs
• New technologies like AI require educating boards on risks versus opportunities
• Foundational security principles like zero trust remain constant regardless of technology
• Security buzzwords need translation appendices since board members forget technical definitions
• Financial services background helps translate cyber risks into dollar amounts boards understand
• Third-party penetration testing provides independent validation but requires vendor rotation strategies
• Limited 30-minute board time means trusting security leaders' vendor diligence decisions
• First-time CISOs should educate on threat landscape then tailor strategy to company
• Balance discussing shiny new technologies with essential foundational security blocking and tackling
• AI implementation spans customer features, infrastructure security, and augmenting security capabilities internally

Participants:

• Sean Josephson - Sr. Director of Information Security, Gusto
• Julien Soriano – Sr. Vice President, CISO, MongoDB
• Gee Rittenhouse - Vice President, Security Services, Amazon Web Services

Further Links:

• Gusto: Website – LinkedIn
• MongoDB: Website – LinkedIn – AWS Marketplace

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

John Skinner of Vectra AI shares how cyber attackers are democratizing sophisticated attacks using dark web tools, and why AI-powered hybrid defense is now essential for enterprise security.

Topics Include:

• Vectra AI: 13-year-old cybersecurity company founded as "AI native" from day one
• Built on machine learning assumption while competitors treated AI as afterthought
• Generative AI represents the latest evolution in their comprehensive AI journey
• Started pairing threat researchers with ML developers to codify attack behaviors
• Added agentic AI in 2018 for correlation across space and time
• Uses AWS Security Lake, GuardDuty, and recently became AWS Bedrock customer
• Success measured by reducing "dwell time" from initial attack to detection
• Achieved 60% faster alerts, 51% faster monitoring, 50% faster investigation times
• Customers should evaluate vendor's data science quality and algorithm training years
• Evolved hybrid defense approach as attacks start anywhere, go everywhere
• AI handles high-volume correlation while humans focus on analytical decisions
• Future challenge: democratized cyber attacks using readily available dark web tools

Participants:

• John Skinner – Vice President Corporate/Business Development, Vectra AI

Further Links:

• Vectra AI: Website – LinkedIn – AWS Marketplace - YouTube

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

Vice President of Engineering James Musson reveals how Lucanet integrated multiple acquired solutions into a unified platform, achieving 3-month integration timelines while serving 6,000+ customers.

Topics Include:

• Lucanet evolved from financial consolidation tool to comprehensive CFO solution platform
• Platform covers consolidation, planning, ESG reporting, tax compliance, and cash management
• Three key differentiators: easy to use, fast time-to-value, innovative AI features
• AI-powered XBRL tagging reduces days of manual work to minutes with 90% accuracy
• Complex challenge: integrating multiple acquired tech stacks with cloud-native platform development
• Built micro front-end architecture and platform services for seamless user experience
• Custom control plane automates customer onboarding and manages rolling upgrades safely
• Latest acquisition integrated into platform within three months, unprecedented speed
• Strong company culture focuses on innovation, hackathons, and continuous learning
• AI bootcamps and tech lunch sessions keep 6,000+ customer engineering teams engaged
• Balances AI innovation with regulatory compliance using deterministic core processes
• Heavy AWS adoption with serverless technologies handles peaky financial reporting workloads

Participants:

• James Musson – Vice President, Engineering, Lucanet

Further Links:

• Lucanet: Website – LinkedIn

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

Learn how Trellix transformed into a cloud-first security leader through strategic AWS partnership, generating $500M+ pipeline and winning major enterprise deals like Airbus.

Topics Include:

• Trellix's transformation: From legacy McAfee/FireEye to cloud-first cybersecurity solutions with AWS
• Partnership lessons: How AWS enabled 27-year-old ePolicy Orchestrator's successful cloud migration journey
• Legacy transition advice: Embrace innovation, don't follow the "Sears model" of resisting change
• AI go-to-market strategy: Dev days, marketplace usage, and Bedrock/Nova integrations driving customer adoption
• Customer AI concerns: Addressing data security fears and proving AI doesn't train on customer data
• Integration philosophy: XDR connects with AWS native services and even competitor tools seamlessly
• $12M Airbus win: Six-country enterprise deal showcasing collaborative sales across AWS teams and marketplace
• Future opportunities: AI-powered threat detection innovations and $500M+ pipeline through AWS marketplace

Participants:

• Taylor Mullins - Sr. Solutions Architect, Trellix
• Brian Shadpour - General Manager, Security B2B Software Sales, Amazon Web Services

Further Links:

• Trellix: Website – LinkedIn – AWS Marketplace

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

Security leaders from CyberArk, Fortra, and Sysdig share actionable strategies for securely implementing generative AI and reveal real-world insights on data protection and agent management.

Topics Include:

• Panel explores practical security approaches for GenAI from prototype to production
• Three-phase framework discussed: planning, pre-production, and production security considerations
• Security must be built-in from start - data foundation is critical
• Understanding data location, usage, transformation, and regulatory requirements is essential
• Fortra's security conglomerate approach integrates with AWS native tools and partners
• Machine data initially easier for compliance - no PII or HIPAA concerns
• Identity paradigm shift: agents can dynamically take human and non-human roles
• 97% of organizations using AI tools lack identity and access policies
• Security responsibility increases as you move up the customization stack
• OWASP Top 10 for GenAI addresses prompt injection and data poisoning
• Rigorous model testing including adversarial attacks before deployment is crucial
• Sysdig spent 6-9 months stress testing their agent before production release
• Tension exists between moving fast and implementing proper security controls
• Different security approaches needed based on data sensitivity and model usage
• Zero-standing privilege and intent-based policies critical for agent management
• Multi-agent systems create "Internet of Agents" with exponentially multiplying risks
• Discovery challenge: finding where GenAI is running across enterprise environments
• API security and gateway protection becoming critical with acceptable latency
• Top customer need: translating written AI policies into actionable controls
• Threat modeling should focus on impact rather than just vulnerability severity

Participants:

• Prashant Tyagi - Go-To-Market Identity Security Technology Strategy Lead, CyberArk
• Mike Reed – Field CISO, Cloud Security & AI, Fortra
• Zaher Hulays – Vice President Strategic Partnerships, Sysdig
• Matthew Girdharry - WW Leader for Observability & Security Partnerships, Amazon Web Services

Further Links:

• CyberArk: Website – LinkedIn – AWS Marketplace
• Fortra: Website – LinkedIn – AWS Marketplace
• Sysdig: Website – LinkedIn – AWS Marketplace

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

Brian Mendenhall, Worldwide Head, Security & Identity Partner Specialists of Amazon Web Services, reveals the insider framework for transforming enterprise AI security, including the three-pillar approach and partnership strategies that leading companies use to navigate AI governance challenges.

Topics Include:

• At AWS everything starts with security as core principle
• Consulting partners follow three-phase model: assess, remediate, then fully manage security
• Traditional security framework covers threat detection, incident response, and data protection
• AI compliance spans multiple governance bodies with stacking requirements and regulations
• EU AI Act affects any company globally if Europeans access their applications
• Three pillars: security OF AI, AI FOR security, security FROM AI attacks
• AWS launches AI security competency program with specialized partner categories and certifications
• Enterprise AI spans five risk levels from consumer apps to self-trained models
• Legal liability dramatically increases as you move toward custom AI implementations
• Safety means preventing harm; security means preventing breaches - both critical distinctions
• Current AI hallucination rates hit 65-75% across major platforms like Palantir
• Shared responsibility model determines who's liable when AI security tools fail
• Industry evolution progresses from machine learning to generative AI to autonomous agents
• Major prototype-to-production gap caused by governance, security, and scalability challenges
• Successful AWS partnerships require clear use cases, differentiation, and targeted go-to-market strategy

Participants:

• Brian Mendenhall - WW Head, Security & Identity Partner Specialists, Amazon Web Services

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

Caitlin Anderson, Intel's Americas Sales GM shares which industries are leading AI adoption, where the biggest untapped opportunities lie, and why AI spending is expected to double by 2028. With special guest Piyush Sharrma of Tuskira.ai

Topics Include:

• Caitlin Anderson discusses Intel-AWS partnership and generative AI trends accelerating business
• Intel's AI journey spans decades: analytics since 1980s, natural language processing 2000s
• Computer vision remains major use case from edge computing to data centers
• Generative AI and AI agents are the latest wave, with agents collaborating together
• Intel uses AI internally for manufacturing automation in highly sensitive fab environments
• Robotics and AI optimize quality control, system monitoring, and technician productivity
• AI spending growth spans all industries, with significant acceleration expected through 2028
• Software services, healthcare, and financial services lead current AI adoption and experimentation
• Education, government, retail, and energy represent major untapped growth opportunities ahead
• Intel-AWS partnership spans 20 years, featuring custom silicon and broad CPU portfolio
• Tuskira CEO Piyush Sharrma explains cybersecurity "perfect storm" where attackers weaponize same AI tools
• Success requires ecosystem partnerships - no single company can solve complex AI challenges

Participants:

• Caitlin Anderson - Corporate Vice President, GM Americas Sales, Intel
• Piyush Sharrma – CEO and Co-Founder, Tuskira.ai

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

Aditya Vasudevan, Cohesity's cyber recovery expert, shares battle-tested insights from defending Fortune 100 companies against AI-powered cyberattacks.

Topics Include:

• Cohesity protects 85% of Fortune 100 data with battle-tested cyber recovery experience
• Top 10 cyber adversaries target organizations; Cohesity has defended against most major threats
• GenAI adopted by 100 million users in two months, creating unprecedented security challenges
• New AI threats include prompt injection, synthetic identities, shadow AI, and supply vulnerabilities
• Attackers now use AI for sophisticated phishing, automated malware, and accelerated attack chains
• Real companies completely banned AI after code leaks, misuse incidents, and data concerns
• Three-pillar security approach: fight AI with AI, enhanced training, and automated workflows
• Secure AI design requires private deployments, complete traceability, and role-based access controls
• Amazon Bedrock offers built-in guardrails, private VPCs, and enterprise monitoring capabilities
• Cohesity's Gaia demonstrates secure AI with RAG architecture and permission-aware data access
• Resilience strategy combines immutable backups, anomaly detection, and recovery automation for incidents
• Proper AI security reduces cyber insurance premiums and prevents costly downtime disasters

Participants:

• Aditya Vasudevan - GVP of Cyber Resiliency, Cohesity

Further Links:

• Cohesity: Website | LinkedIn | AWS Marketplace

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

Tyler Warden, SVP of Product at Sonatype, shares surprising research on security, productivity and prioritization, with actionable strategies for organizational transformation.

Topics Include:

• Tyler from Sonatype (Maven creators) shares research on security culture in development
• Security is more cultural than tooling, with rising supply chain attacks
• Development speeds up while global regulations rapidly change across markets
• Tyler's background: wanted to be a Broadway conductor, not tech speaker
• Beethoven's 9th Symphony story: nephew missed a dot, changing tempo forever
• We can "be the dot" - small changes creating big organizational impact
• Three organization types: Leaders (collaborative), Adapters (balanced), Protectors (security-first)
• Leaders achieve best productivity and security but face executive skepticism
• Research reveals balanced teams outperform purely security-focused or productivity-focused approaches
• High-performance teams go faster AND stay more secure than alternatives
• "Yes" philosophy from improv comedy: fun happens when we enable innovation
• Apply proven supply chain principles from manufacturing to software development security

Participants:

• Tyler Warden – Senior Vice President, Product, Sonatype

Further Links:

• Sonatype: Website | LinkedIn | AWS Marketplace

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

Learn how Amazon Bedrock enabled Prophix to build enterprise-grade AI agents that transform secure CFO workflows, while delivering real-time financial intelligence through advanced agentic architecture.

Topics Include:

• AWS and Prophix leaders discuss building autonomous AI agents for financial management
• AI agents defined: autonomous systems that reason, plan, and execute tasks independently
• Evolution from simple chatbots to collaborative multi-agent systems solving complex problems
• Core agent components: cognitive planning module, memory systems, and external tool integrations
• Prophix: 30-year financial software company serving 3,500 CFO offices globally across industries
• Prophix One Intelligence: platform-level AI service powering predictions, analysis, and automation
• Customer concerns addressed: data privacy, role-based security, accuracy, and cost control
• Rejected "models in the sky" approach for AWS Bedrock's managed, controllable infrastructure
• Agentic architecture: LLMs generate API parameters instead of processing massive datasets
• Real-time data access, automatic security inheritance, and A/B testing capabilities achieved
• Live demo: automated budgeting workflows, natural language queries, and autonomous task execution
• AWS introduces AgentCore platform to simplify agent development for enterprise customers

Participants:

• Anurag Yagnik – Chief Technology Officer, Prophix
• Deborshi Choudhury – Sr Solutions Architect – ISV, Amazon Web Services

Further Links:

• Prophix: Website | LinkedIn 

See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/