Hackers to Founders

Only about 1% of all CVEs have ever been exploited, and closer to 0.2% have caused real financial loss. Jeremiah Grossman, founder of WhiteHat Security and Bit Discovery and now CEO of Root Evidence, explains why finding vulnerabilities was never the hard part, and what security teams should focus on instead.

We talk about what Anthropic's Mythos findings in OpenBSD and Firefox actually mean, why companies don't just "patch everything," and how breaches really happen today. Then we get into founding companies, how Grossman Ventures picks investments, and jiu-jitsu.

In this episode:
- Why most AI-found vulnerabilities will never be weaponized
- The real reason companies don't patch everything
- How breaches actually happen: edge devices, credential stuffing, and BEC
- Why he calls compliance-driven security "actually evil"
- A 90-day security plan for a Series A startup: scanning, MFA everywhere, and canaries
- "Kamikaze" vs. "optionality": two ways to build a startup
- The daily habit he uses to find problems worth solving
- Why he never doubted he could be a founder, only an employee

0:00 Intro
1:33 AI vuln discovery: finding vs. exploiting
3:50 Mythos, the remediation gap, and the 1% of CVEs that matter
6:21 Why companies don't patch everything
8:35 How breaches actually happen today
9:16 Is the annual pen test dead? Compliance vs. security
10:58 Software liability
12:07 CVSS: keep, kill, or ignore?
13:34 How much of security sells more findings
14:49 MSPs, SMBs, and how insurers scan
16:59 SOC 2 and pen tests for a Series A founder
17:52 The most common mistake: inconsistent MFA
20:03 Security vendor warranties
21:14 A 90-day security plan for a new fintech
22:57 Lightning round
25:27 Hacking Yahoo at 19
26:26 What he wishes he knew before WhiteHat
28:25 Kamikaze vs. optionality startups
29:07 Bootstrap or raise? Talk to a customer every day
31:18 Technical founders who hate selling
32:40 The 3 people founders should talk to daily
35:32 How Grossman Ventures picks investments
39:29 Security problems he'd start a company around
41:10 What Grossman Ventures wants to fund
42:34 Why some security firms stall and others scale
44:19 AI startups and the moat problem
45:34 ToyBox Car Club and moving to Boise
47:39 Jiu-jitsu and the Black Hat BJJ event
57:00 Book recommendations
1:01:06 What's next: Root Evidence and competing at Worlds
1:08:32 Where to find Jeremiah and who should be on next
1:09:36 How he met his co-founders
1:10:52 Did he ever doubt he could be a founder?
1:11:57 Wrap-up
1:12:55 Outro

Watch the full video on YouTube: https://youtu.be/fp3F6nc2pcQ

Links:
Jeremiah Grossman on LinkedIn: https://www.linkedin.com/in/grossmanjeremiah/
Root Evidence: https://rootevidence.com/
Grossman Ventures: https://www.grossman.vc/
Chris Magistrado on LinkedIn: https://www.linkedin.com/in/cmagistrado/

Hackers to Founders features the hackers and security practitioners who went on to build companies. Subscribe wherever you listen.

Erik Cabetas won DEF CON CTF his first year, failed at running a consulting shop, then came back five years later and built Include Security into an all-senior application security firm serving billion-dollar software companies.

Erik Cabetas is the founder and "head hacker herder" of Include Security, an application security firm he's run for nearly 15 years.

His path there was anything but linear. He was a materials engineering major who dropped an entire semester two months before graduation to switch to computer science. He learned to hack from zines and FTP servers before Google existed, after a college roommate put Back Orifice on his machine in 1998. He got his first security job by cold-emailing, at 4am, a guy he'd seen on a documentary that aired at 3am. He won DEFCON CTF in 2003 on a team that was in dead last when he asked to join — and his contribution wasn't the two exploits he wrote, it was reorganizing who on the team did what.

Then he tried to start a company, and it didn't work. He went solo for five quarters, took four clients, hit his revenue target almost exactly to the dollar — and quit anyway, because he'd worked himself into the ground to get there and couldn't see it getting easier.

Five years later he tried again. Include Security launched in January 2011 with three clients already signed.

This is a full start-to-finish conversation. Erik walks through the Ernst & Young Advanced Security Center team that spawned Bishop Fox, Gotham Digital Science, and his own company. Burning out on the road at Fortify Software. Running security, fraud, and trust & safety at The Ladders through the 2008 crash — including being handed the layoffs after HR was laid off. And what it actually took to build a firm that deliberately has no junior hackers on it, in an industry where nearly everyone runs a 70%-junior pyramid.

He's unusually candid about the parts founders normally skip: what his rent was, what number he set for himself, why sales and legal were harder than any technical work he'd ever done, why refusing to use his own network was a mistake, why it took him five years to find one salesperson he trusted, and why the real driver of pen testing demand is B2B contract language rather than compliance.

Some of what we get into:

• Learning security in 1998, and why Erik thinks it's harder now, not easier
• The Honeynet Project forensics challenges, and writing for 2600 at 20
• Getting hired at E&Y off a cold email, and being 22 telling a Fortune 500 you have root
• Why he left a job the moment they promoted him
• Include Security "version zero" — the attempt that failed, and exactly why
• Reading an entire commercial product's source code in a week to survive a customer site
• Cutting seven-figure credit card fraud by 98% with a few hundred lines of T-SQL
• The bad RFP responses that convinced him the industry could be done better
• The all-senior model vs. the pyramid model, and what clients actually notice
• 54 programming languages, and what they found in the largest production Rust app they've assessed
• How paid research time works, and the blog posts that turned into DEF CON talks
• Concrete advice for starting a consulting firm today — including why he lets future competitors subcontract off his company
• Drum & bass, the Spawn soundtrack, and searching Napster by random nouns

Links

• Include Security: https://includesecurity.com
• Include Security research blog: https://blog.includesecurity.com

Books Erik recommends

• Security Engineering — Ross Anderson
• The Ghidra Book — Chris Eagle & Kara Nance
• Never Split the Difference — Chris Voss
• The Trusted Advisor — David Maister

 What if AI-powered security could eliminate human errors in cybersecurity? Meet the founder making it happen.

In this episode of Hackers to Founders, I sit down with Patrick Ben Thomas, the founder of NullZec and its advanced malware development division, Shadow Mask. Patrick shares his journey from early cybersecurity research to building a solution designed to eliminate human errors and prevent malware from spreading. We discuss how his team integrates sandboxing, zero-trust architecture, and in-house malware analysis to isolate and detect threats before they reach end users. He also dives into the offensive research behind Shadow Mask, where they develop real-world exploits to strengthen defenses. Tune in to learn how Patrick is blending adversary simulation with next-gen defense strategies to reshape cybersecurity.

People

• Patrick Ben Thomas (Guest, Founder of NullZec & Shadow Mask)
• Kevin Mitnick (Famous hacker, cybersecurity expert)

Companies & Organizations

• NullZec (Parent company founded by Patrick Ben Thomas)
• Shadow Mask (Malware development & adversary simulation division under NullSec)

Products & Technologies

• HackRF (Software-defined radio device used for security research)
• BladeRF (Full-duplex SDR used for radio frequency security research)
• Proxmark 3 (RFID/NFC security tool for cloning and emulation)
• Flipper Zero (Multi-tool for hardware and RF hacking)
• NFC Kill (Device used to destroy NFC-enabled cards by electromagnetic pulse)

Cybersecurity Events & Conferences

• DEFCON (Hacker conference)
• Black Hat (Cybersecurity conference)
• BSides (Security conference, mentioned as besides)
• RSA Conference (Cybersecurity event)

Cybersecurity Services & Platforms

• VirusTotal (Malware analysis service, mentioned as insufficient for zero-day threats)

What if AI could predict and prevent cyber fraud before it happens? Meet the founder making it possible " On this episode of Hackers to Founders, we feature Zara Perumal, the CTO and co-founder of Overwatch Data. The episode explores Zara’s journey from an early fascination with computer science, influenced by her software developer father, to her evolution into a cybersecurity and AI entrepreneur. Zara recounts her first steps into coding, beginning with HTML at age 11 and later developing iOS apps, which sparked her passion for building technology. She reflects on her experiences at MIT, where she explored bioinformatics, machine learning, and eventually cybersecurity, which became a turning point in her career. Her work at Google’s Threat Analysis Group further deepened her understanding of digital threats, leading her to the realization that she wanted to create a company addressing cybersecurity challenges at scale.

The episode then shifts focus to Overwatch Data, where Zara details the company's mission to harness AI to process OSINT (open-source intelligence) and provide actionable insights for businesses. She describes the challenges of collecting and analyzing data from the dark web and fraudulent networks, explaining how Overwatch leverages automation and investigative techniques to detect threats and fraud. She also discusses the business side of the startup, from finding the right market fit to the importance of customer feedback in shaping their solutions. Throughout the conversation, Zara and host Chris Magistrado delve into the complexities of cybercrime, the evolving threat landscape, and the role of AI in modern threat intelligence, offering listeners a fascinating look into the intersection of security, AI, and entrepreneurship.

People

• Zara Perumal – CTO and Co-founder of Overwatch Data, specializing in AI-driven cybersecurity.
• Chris Magistrado – Host of Hackers to Founders, interviewing tech and security entrepreneurs.
• Arjun Bisen – CEO and Co-founder of Overwatch Data who initially had the idea for the company.
• Ron Rivest – Renowned cryptographer and MIT professor who influenced Zara’s interest in cybersecurity.
• Michael (YC Advisor) – Advisor at Y Combinator who guided Overwatch Data through its early stages.

Companies & Organizations

• Overwatch Data – A cybersecurity startup leveraging AI to process OSINT and detect fraud.
• MIT CSAIL – MIT’s Computer Science and Artificial Intelligence Laboratory where Zara conducted research.
• Harvard Belfer Center – A research institute focused on security, where Zara contributed to digital democracy defense.
• Akamai – A cloud and cybersecurity company where Zara gained experience in software and data analytics.
• NASDAQ – A major stock exchange where Zara worked in technology roles.
• Apple – Technology company where Zara developed software.
• Y Combinator – Startup accelerator that backed Overwatch Data.
• Corellium – A company providing a virtualization platform for mobile security research.

Technologies & Tools

• Objective-C – Programming language used for iOS app development before Swift.
• Swift – Modern programming language for Apple’s ecosystem.
• React Native – A framework for building cross-platform mobile applications.
• Flutter – Google’s UI toolkit for natively compiled mobile apps.
• JADX – A tool for reverse-engineering Android applications.
• Telegram – Messaging platform heavily used by cybercriminals for fraud and illicit activities.
• GPT (ChatGPT) – AI tool used for scripting and automating analysis tasks.
• DeepSeek – An AI tool discussed for its open-source implications.
• Magic Eye – A bot used for detecting duplicate images on Reddit.
• Corellium – A mobile security research platform used for analyzing malware.

Cybersecurity & Hacking

• OSINT (Open-Source Intelligence) – Intelligence gathered from publicly available sources.
• Dark Web – A hidden part of the internet where illicit cyber activities and fraud take place.
• SIM Swapping – A fraud technique where hackers take over phone numbers to gain access to accounts.
• Credential Stuffing – A hacking technique using stolen username-password combinations.
• PDF Malware – Malicious software hidden in PDFs, which Zara researched in academia and at Google.
• Null Market (Nulled) – A recently taken-down dark web forum used for cybercrime.
• DNM (Dark Net Marketplaces) – Online platforms for buying and selling illicit goods.
• Grams – A dark web search engine that indexed darknet marketplaces.
• MD5 Hashing – A cryptographic technique used to verify digital signatures.

Who created the CVE system? That's Adam! In this insightful episode of "Hackers to Founders," host Chris REal0day Magistrado welcomes Adam Shostack, a renowned cybersecurity expert and co-creator of the Common Vulnerabilities and Exposures (CVE) system. Adam recounts his journey from a curious and geeky childhood, engaging in activities like D&D and building with Legos, to his influential career in cybersecurity. He delves into his early experiences at Brigham and Women's Hospital, where he first encountered the importance of security and privacy in medical systems. Adam shares his entrepreneurial ventures, including his pivotal roles in startups like Net Tech and Zero Knowledge Systems, highlighting the challenges and rewards of building security-focused businesses during the nascent stages of the cybersecurity industry. His passion for threat modeling is evident as he discusses his work at Microsoft, where he developed user-friendly threat modeling tools and authored influential books to make security practices more accessible.

Beyond his technical achievements, Adam emphasizes the significance of education, training, and mentorship in advancing cybersecurity. He explains his transition from product development to focusing on training and creating scalable educational programs, ensuring that essential security skills are widely disseminated. Adam also explores his collaboration with Cyber Green to establish cyber public health, aiming to apply public health methodologies to measure and mitigate cyber impacts effectively. Throughout the conversation, Adam underscores the importance of diversity in fostering innovative solutions and the need for adaptable strategies in an ever-evolving threat landscape. His dedication to making cybersecurity more inclusive and his visionary approach to integrating interdisciplinary techniques position him as a key thought leader committed to enhancing global security practices.

People

• Adam Shostack: Renowned cybersecurity expert, co-creator of the Common Vulnerabilities and Exposures (CVE) system, author of several influential books on threat modeling and security design.
• Frank Abagnale: Subject of the book "Catch Me If You Can," which influenced Adam's childhood interest in security and deception techniques.
• Leonardo DiCaprio: Actor who portrayed Frank Abagnale in the movie adaptation of "Catch Me If You Can."
• Mike Howard: Worked alongside Adam on the Secure Development Lifecycle team.
• Steve Lipner: Collaborated with Adam on threat modeling initiatives.
• Rob Kinnaki: Worked with Adam on the cyber public health project, contributing to the development of new cybersecurity disciplines.
• Tara Wheeler: Partnered with Adam in establishing cyber public health methodologies.
• Heidi Trust: Recommended by Adam as a notable figure intersecting usability and security.
• Gene Spafford: Part of Adam's professional network, contributing to cybersecurity discourse.
• Steve Belvin: Known to Adam, part of his network of cybersecurity professionals.
• Bruce Schneier: Part of Adam's extensive network within the cybersecurity community.
• Marcus Ranham: Known to Adam, contributing to his professional relationships.
• Mudge: Met by Adam during his time at BBN, part of his influential network.
• Weld Pond: Met by Adam at BBN, contributing to his professional connections.
• Prerit Garg: Contributor to threat modeling methodologies.
• Lance Cottrell: Influenced Adam's work on anonymized networks at Zero Knowledge Systems.
• Paul Syverson: Co-inventor of onion routing. His work influenced the development of anonymized network systems like Tor and Zero Knowledge Systems.
• Steve Christie: Involved in the development of the CVE system.
• Dave Mann: Collaborated with Adam on creating the CVE system.
• Andre Fresh: Worked with Adam on developing the CVE system.
• Tony Sager: Helped secure funding for the CVE system through collaboration with MITRE.
• Stephen Savage: Involved in ransomware detection research, mentioned in relation to cyber public health.

Organizations

• CVE (Common Vulnerabilities and Exposures): A standardized system for identifying and categorizing cybersecurity vulnerabilities. Co-created by Adam Shostack to provide a common reference for vulnerabilities across different platforms and organizations.
• Net Tech
  • Startup focused on developing vulnerability scanners. Adam played a pivotal role in this successful startup, contributing to the creation of security tools.
• Zero Knowledge Systems: Startup aimed at creating anonymized network solutions similar to Tor. Adam joined this company to work on privacy-focused technologies.
• MITRE: Not-for-profit organization that manages various federally funded research and development centers. Collaborated with Adam to develop and support the CVE system.
• Secure ID: Company that produced authentication tokens. Adam conducted security and privacy reviews of their products early in his career.
• BBN (Bolt Beranek and Newman Inc.) Technology company known for its work on ARPANET and early internet infrastructure. Adam worked here and met key figures like Mudge and Weld Pond.
• DEF CON: One of the world's largest and most notable hacker conventions. Adam attended DEF CON, sharing experiences and networking with other security professionals.
• 2600: Hacker community magazine and associated meetings. Part of the hacker culture Adam was involved with during his early career.
• ShmooCon: Annual East Coast hacker convention. Adam attended and interacted with the hacker community here.
• CISA (Cybersecurity and Infrastructure Security Agency): U.S. federal agency responsible for cybersecurity and infrastructure protection. Mentioned in the context of cybersecurity research and vulnerability management.

Products and Tools

• CVE System (Common Vulnerabilities and Exposures): A standardized system for identifying and cataloging cybersecurity vulnerabilities. Co-created by Adam Shostack to provide a common reference across the cybersecurity industry.
• Hacker Shield: Vulnerability scanner developed by Adam's company. Used by organizations to identify and remediate security vulnerabilities.
• Stride: A mnemonic framework for threat modeling (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). Developed by Prerit Garg and others to help structure threat analysis.
• Tor: An anonymity network that directs internet traffic through a free, worldwide, volunteer overlay network. Influenced the development of Zero Knowledge Systems' anonymized network products.
• Mixmaster: Asynchronous email router designed for anonymizing email traffic. Developed by Lance Cottrell, influencing Adam's work on privacy-focused networking.
• Log4j: Java-based logging utility with significant vulnerabilities exploited in cybersecurity attacks. Discussed by Adam in the context of vulnerability management and public health approaches to cybersecurity.

How do you defend Fox News, hedge funds, and global networks while building groundbreaking startups? John Terrill shares his journey.
 
In this episode of Hackers for Founders, cybersecurity executive John Terrill shares his fascinating journey from a curious 12-year-old attending 2600 meetings in Atlanta to becoming a seasoned CISO and co-founder of Drawbridge Networks. He delves into the formative experiences that shaped his career, including his early exposure to security research at Internet Security Systems and his role in founding and developing innovative security technologies. Terrill highlights his learnings about product-market fit, timing, and the challenges of building technology ahead of its time, such as with Drawbridge Networks' pioneering work in micro-segmentation.

The conversation also explores Terrill’s tenure as CISO at Fox News during a transformative period, including its sale to Disney, and at Point72, where he tackled challenges like the rise of ransomware, executive protection, and the pivot to remote work during the pandemic. Throughout the episode, Terrill emphasizes the importance of aligning cybersecurity efforts with business objectives, explaining the delicate "yin and yang" balance between offensive and defensive security strategies. He also critiques current board-level approaches to cybersecurity, advocating for more nuanced discussions around practical solutions, recovery planning, and metrics to assess whether organizations are genuinely improving security posture.

Companies and Organizations

1. Phosphorus Cybersecurity Inc: A cybersecurity company specializing in xIoT security solutions.
2. Point72: A global hedge fund focused on investment and asset management.
3. Fox News Media: A major American media company known for its news and television broadcasting.
4. OPĀQ Networks: A network security company acquired by Fortinet.
5. Drawbridge Networks: A cybersecurity startup co-founded by John Terrill, focusing on network microsegmentation.
6. NYU Tandon School of Engineering: The engineering school of New York University, where John Terrill was an adjunct professor.
7. BlackRock: A global investment management corporation, where John led application security efforts.
8. NASDAQ OMX: A global financial services corporation operating stock exchanges, where John worked as a consultant.
9. IBM (Internet Security Systems): A technology and cybersecurity company where John started as an X-Force researcher.
10. Zettaset: A cybersecurity startup focusing on big data security, co-founded by John.

Events and Concepts

1. 2600 Meetings: Monthly hacker meetings where cybersecurity enthusiasts and professionals share knowledge.
2. Microsegmentation: A network security strategy for isolating workloads and preventing lateral movement.
3. Zero Trust: A cybersecurity framework emphasizing the elimination of implicit trust in networks.
4. MITRE ATT&CK Framework: A globally accessible knowledge base of adversary tactics and techniques.

Vivek's passion for solving nuanced, bleeding-edge problems in cybersecurity led him to found SquareX, a browser-native security product that addresses client-side web attacks. He emphasizes the importance of authenticity, community engagement, and leveraging one’s expertise to create scalable solutions. Additionally, Vivek delves into the challenges and lessons of entrepreneurship, stressing the significance of realistic goals, understanding market needs, and networking with advisors and peers to build successful ventures.

On the personal front, Vivek values balancing work with family and creative pursuits, such as writing a comic book series to inspire young minds about ethical hacking. He advises entrepreneurs to focus on solving real problems, building meaningful relationships, and continuously learning from customer feedback and market trends.

Events and Conferences

• Black Hat
• Defcon
• BruCON
• NullCon

Books

• Founders at Work by Jessica Livingston
• Rich Dad Poor Dad by Robert Kiyosaki
• Superfans

Technologies and Platforms

• Kali Linux
• Metasploit
• Qubes OS

Podcasts and Media

• 20VC by Harry Stebbings
• Joe Rogan Podcast

From crimping cables to advising the French Minister of Defense—Dave Chronister’s journey is unreal!

Step into the world of cybersecurity with Dave Chronister, a trailblazer whose career spans decades of groundbreaking achievements. As the founder of Parameter Security, Dave has helped organizations across heavily regulated industries protect their technology, data, and reputation through cutting-edge strategies. He also launched ShowMeCon, a premier InfoSec conference known for its hands-on training and top-tier speakers. From building one of the largest exchange server deployments to advising global leaders, Dave has been featured on CNN and CNBC for his expertise. Join us as he shares his journey from a small-town IT tech to a global cybersecurity icon, blending technical mastery with insights on business, AI, and creating impactful conferences. You won’t want to miss this!

1. People and Speakers

• Dave Chronister: Cybersecurity expert, founder of Parameter Security, creator of ShowMeCon.
• Chris REal0day: Co-interviewer or participant in the conversation with Dave Chronister.
• French Minister of Defense - Mentioned as a speaker at a conference where Dave Chronister was a keynote speaker.

2. Companies and Organizations

• Parameter Security: Cybersecurity firm founded by Dave Chronister.
• ECCouncil: Organization offering certifications like CEH and facilitating cybersecurity training.
• EuroPol: European Union's law enforcement agency, involved in cybersecurity collaborations.
• FBI: U.S. federal law enforcement agency, referenced in cybersecurity operations.
• Fortinet: Cybersecurity company mentioned in the context of speaker quality.

3. Conferences

• ShowMeCon: InfoSec conference organized by Dave Chronister.
• Def Camp: Cybersecurity conference held in Bucharest, Romania.
• Positive Hack Days (PHDays): Cybersecurity conference held in Moscow, Russia.
• Black Hat: Leading business-focused cybersecurity conference.
• DEF CON: Grassroots hacking conference focused on InfoSec enthusiasts.
• RSA Conference: Government-focused cybersecurity conference.

4. Certifications and Courses

• CISSP: Certified Information Systems Security Professional, taught by Dave Chronister.
• CEH: Certified Ethical Hacker certification, taught by Dave Chronister.
• Security Plus: Foundational cybersecurity certification taught by Dave.

5. Pop Culture References

• Animal House: Mentioned as the basis for Mizzou's party reputation.

6. Books

• Find Your Why by Simon Sinek - A book that helps individuals and organizations discover their purpose and align their actions accordingly​
• Traction by Gino Wickman - Focused on the Entrepreneurial Operating System (EOS) framework, helping businesses gain clarity and improve execution​
• Rocket Fuel by Gino Wickman and Mark C. Winters - Explores the relationship between visionaries and integrators in business, emphasizing the need for complementary roles to drive success​
• Value-Based Fees by Alan Weiss - A guide for service-based businesses on pricing based on value delivered rather than hours worked​
• Vivid Vision by Cameron Herold - A book on creating a clear and compelling vision for businesses and teams to rally around​
• Who Not How by Dan Sullivan - A book on delegating effectively and focusing on what you do best by surrounding yourself with the right people​
• Living the Best Year Ever - A book with worksheets and tools for setting and achieving personal and professional goals
• The Home MBA - A curated list of books for learning business fundamentals

Interested in the Darknet and untold stories of the internet??
On this episode of Hackers to Founders, Chris and Jack Rhysider explore the art of podcasting, focusing on Jack’s journey with Darknet Diaries and his evolution as a storyteller. They discuss community building, creating superfans, and the challenges of reaching out to guests, along with the complexities of expanding into new languages. Jack shares insights on integrating AI into creative processes, crafting immersive audio, and the importance of editing and collaboration. The conversation delves into hacking culture, ethical storytelling, and Jack’s transition to full-time podcasting through various revenue models. He reflects on personal growth, networking, community engagement, and aspirations for teaching and writing to inspire others.

Guest:
Jack Rhysider, Host of Darknet Diaries

Darknet Diaries:

• Clothing Shop
• Patreon

People

1. Chris REal0day Magistrado: Hacker and Host of https://HackersToFounders.com
2. Jack Rhysider: Jack Rhysider is the creator and host of Darknet Diaries.
3. Pat Flynn: An entrepreneur, author, and podcaster known for Smart Passive Income.
4. General Nakasone: General Paul M. Nakasone is the Commander of U.S. Cyber Command and Director of the National Security Agency (NSA), now on the board of OpenAI.
5. Roman Mars: A radio producer and host of the podcast 99% Invisible.
6. Blind Boy: A podcast host and Irish musician and author.
7. Tim Ferriss: An author, entrepreneur, and public speaker known for "The 4-Hour Workweek."

Podcasts and Media Programs

1. Darknet Diaries: A podcast exploring true stories from the dark side of the internet.
2. Smart Passive Income: A resource for online business and passive income strategies.
3. This American Life: A weekly public radio program and podcast.
4. Radiolab: A radio program and podcast weaving stories and science into sound-rich documentaries.
5. Rabbit Hole: A New York Times podcast exploring the internet's influence on society.

Books and Learning Resources

1. Make Noise: A company specializing in modular synthesizers and other music equipment.
2. Superfans: This term can refer to various platforms or communities.
3. The 4-Hour Workweek: A book by Tim Ferriss on lifestyle design and productivity.
4. Pixar in a Box: An online learning collaboration between Pixar Animation Studios and Khan Academy.

Organizations and Events

1. NSA (National Security Agency): A U.S. government agency responsible for signals intelligence and information assurance.
2. NPR (National Public Radio): An American nonprofit media organization.
3. DEF CON: One of the world's largest hacker conventions held annually in Las Vegas.
4. CCC (Chaos Computer Club): Europe's largest association of hackers.
5. Toorcamp: I couldn't find a specific URL for Tor camp.
6. CCCamp: The best hacker gathering in the world, held 1 hour north of Berlin, this features hackers from all over the world, very grassroots.

Technology and Platforms

1. ChatGPT: An AI language model developed by OpenAI.
2. Minecraft: A sandbox video game developed by Mojang Studios.
3. Roblox: An online platform and game creation system.
4. IRC (Internet Relay Chat): A protocol for real-time text communication.
5. Anonymous: A decentralized international activist and hacktivist collective.
6. 4chan: An anonymous English-language imageboard website.

Cultural and Physical Landmarks

1. Elden Ring: An action role-playing game developed by FromSoftware.
2. Eiffel Tower: A wrought-iron lattice tower in Paris, France.

Creators

1. Mr. Beast: A popular YouTuber known for his elaborate challenges and philanthropy.
2. CORPSE: Artist and Creator w/ a very unique voice.

Want to start your own pentesting consultancy/business? Listen how ApolloGuard created their own pentesting company, offering high-value services in a competitive market. 

The podcast explores the journey of Daniel Amidon and Pujan Shah, co-founders of ApolloGuard, a cybersecurity company specializing in offensive security. Daniel shares his transition from being a self-taught hacker mentored in vulnerability research to becoming a cybersecurity entrepreneur. Pujan highlights his path from studying computer science and working in various industries like healthcare and venture capital to co-founding ApolloGuard. Their partnership is built on complementary skills: Daniel’s technical expertise and Pujan’s operational and strategic vision. Together, they emphasize the importance of proactive security measures and building trust with clients.

The discussion also dives into how ApolloGuard operates, blending technical depth with business agility. They share insights on starting a pen-testing firm, from leveraging existing networks for early clients to addressing the gap between compliance-driven testing and meaningful security solutions. The founders stress the value of persistence, innovation, and relationships in growing a security company while staying true to their mission of providing high-quality, actionable insights to clients.

Guests
Pujan Shah - Co-Founder & CEO
Daniel Amidon - Co-Founder & CTO

Company
ApolloGuard Website
Hackers to Founders Website - https://HackersToFounders.com

Books Mentioned

1. Your Next Five Moves - Patrick Bet-David 
2.  The Subtle Art of Not Giving a F*ck - Mark Manson 
3. The 7 Habits of Highly Effective People - Stephen Covey
4. The Four Hour Work Week - Tim Ferriss 
5. The Obstacle Is the Way - Ryan Holiday 
6. Outliers - Malcolm Gladwell

Businesses Mentioned

1. DEFCON - Hacker & InfoSec Conference
2. StockX - Website to buy rare shoes