Discussion with Mark Curphey, Head of Innovation and Co-Founder, at Crash Override.

Summary

In this conversation, Justin Somaini interviews Mark Curphey, co-founder of Crash Override, discussing his journey in the security industry, the lessons learned from past startups, and the importance of understanding customer needs in product development. They delve into the challenges of visibility in software development, the role of AI, and the significance of building the right team and investor relationships. Mark shares insights on the limitations of S-BOMs and the innovative solutions being developed at Crash Override. In this conversation, Justin Somaini and James Bond 007 discuss the intersection of AI and security development, exploring how AI can enhance security practices, the challenges posed by outdated security advice, and the importance of observability in software development. They share insights on customer adoption of security tools, the rapid evolution of vulnerability discovery, and the future of security in an AI-driven landscape.

Chapters

00:00 Introduction and Background

03:03 Career Journey and Lessons Learned

05:58 Startup Experiences and Founding Crash Override

08:55 Fundraising and Investor Relationships

12:06 Product Development and Customer Insights

15:01 Visibility Challenges in Software Development

17:57 Chalk: The Core Mechanism of Crash Override

20:56 S-BOMs and Their Limitations

24:02 Future of Development and AI Integration

30:40 AI in Security Development

33:46 Challenges with Current Security Practices

35:54 Optimizing Development Processes with AI

39:20 The Importance of Observability in Software Development

43:09 Customer Insights and Adoption

45:02 Exploring Vulnerability Discovery and Management

57:17 The Future of Security with AI

Keywords

security, startup, visibility, product development, fundraising, software engineering, AI, Crash Override, S-BOM, investor relations AI, security development, vulnerability management, software observability, customer insights, coding practices, open source, security tools, software development, engineering best practices

Discussion with Jason Lish, CISO at Cisco, and Iain Mulholland, CISO at Salesforce.

Jason Lish: https://www.linkedin.com/in/jasonlish/

Iain Mulholland: https://www.linkedin.com/in/iainmulholland/

Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues

Summary

In this conversation, Justin Somaini engages with Jason Lish and Ian Mulholland to explore the intersection of AI and cybersecurity. They discuss the challenges and opportunities presented by AI in vulnerability remediation, the importance of understanding exploitability and reachability, and the ongoing issues of legacy code and tech debt. The conversation also delves into the role of AI in automating vulnerability assessments and remediation, the emerging concept of unit economics in security, and the future of AI in code generation and security practices. In this conversation, the speakers discuss the evolving landscape of technology security, focusing on the challenges posed by end-of-life products, the importance of securing AI production environments, and the role of agents in identity management. They explore the complexities of authorization in AI systems, the future of security functions, and the impact of automation on security workflows. Additionally, they address geopolitical considerations that affect technology security and the need for ongoing conversations in the industry.

Chapters

00:00 Introduction to AI and Security Challenges

02:59 Vulnerability Remediation in the Age of AI

05:56 Understanding Exploitability and Reachability

09:05 Reducing Attack Surface and Code Hardening

11:59 Legacy Code and Tech Debt Challenges

14:47 Harnessing AI for Vulnerability Assessment

18:01 The Role of AI in Remediation and Code Quality

21:00 Unit Economics in Security

23:46 Future of AI in Code Generation and Security

26:59 Balancing Change and Stability in Software Development

37:24 Navigating End-of-Life Issues in Technology

41:18 Securing AI Production Environments

44:59 The Role of Agents in Identity Management

49:26 Challenges of Authorization in AI Agents

55:11 The Future of Security Functions and Skill Sets

61:07 The Impact of Automation on Security Workflows

67:19 Geopolitical Considerations in Technology Security

Keywords

AI, cybersecurity, vulnerability remediation, exploitability, reachability, attack surface, legacy code, tech debt, harnessing AI, unit economics, code generation technology, security, AI, identity management, automation, authorization, end-of-life issues, production environments, skill sets, geopolitical risks, Salesforce, Cisco

Discussion with Austin Cowan, Principal at Heidrick & Struggles.

Austin Cowan: https://www.linkedin.com/in/austin-cowan-17186584/

Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues

Summary

In this conversation, Justin Somaini speaks with Austin Cowan, a principal at Heidrick and Struggles, about the evolving landscape of cybersecurity roles, particularly the CISO position. Austin shares his journey into executive recruiting and discusses the significant changes in expectations for CISOs, emphasizing the need for technical skills and product management capabilities. The conversation also highlights the importance of hiring managers understanding these new requirements and the role of effective communication in the hiring process. In this conversation, Austin Cowan and Justin Somaini delve into the complexities of the CISO role, the challenges in hiring practices, and the importance of succession planning in cybersecurity. They discuss the evolving landscape of cybersecurity leadership, the disconnect between hiring managers and the skills needed for CISO roles, and the necessity for organizations to adapt to the increasing demand for cybersecurity expertise. The conversation emphasizes the need for accountability in the hiring process and the importance of fostering a supportive environment for cybersecurity leaders.

Chapters

00:00 Introduction to Austin Cowan and His Journey

03:05 The Evolution of Cybersecurity Roles

06:00 The Shift in CISO Expectations

09:01 The Changing Landscape of Cybersecurity Hiring

12:04 The Technical Skills Required for Modern CISOs

15:03 The Future of Cybersecurity Leadership

18:03 The Role of Hiring Managers in Cybersecurity

21:10 Building a Product-Oriented Security Team

23:47 The Importance of Communication in Hiring

27:14 Conclusion and Future Outlook

30:44 Understanding the CISO Landscape

36:45 The Disconnect in Hiring Practices

41:58 The Evolving Role of the CISO

46:56 Succession Planning in Cybersecurity

51:07 Navigating the CISO Interview Process

55:50 Final Thoughts and Industry Accountability

### Keywords

cybersecurity, CISO, executive recruiting, technical skills, hiring managers, security teams, automation, product management, leadership, industry trends CISO, cybersecurity, hiring practices, succession planning, interview process, industry accountability, AI security, risk management, leadership, trust officer

Discussion with Harold Byun, CEO at BlueRock.

BlueRock: https://bluerock.io

Harold Byun: https://www.linkedin.com/in/haroldbyun/

Summary

In this conversation, Justin Somaini interviews Harold Byun, CEO of BlueRock, discussing the evolving landscape of cybersecurity, particularly in the context of AI and agentic security. Harold shares his extensive background in cybersecurity, the challenges faced in data security, and the innovative approaches BlueRock is taking to address these issues. The discussion covers the importance of governance, manageability, and the need for effective security measures in an increasingly complex digital environment. In this conversation, Harold Byun and Justin Somaini delve into the complexities of AI security, focusing on semantic analysis, intent recognition, and the operational aspects of AI agents. They discuss the importance of understanding the intent behind actions taken by AI agents, the need for contextual awareness, and the challenges of monitoring and analyzing agentic operations. The conversation also touches on customer use cases, the differences between corporate and production environments, and the future of AI interfaces and endpoints.

Chapters

00:00 Introduction to Agentic Security and AI

02:12 Harold Byun's Journey in Cybersecurity

05:33 The Evolution of Data Security Products

08:39 Challenges in Cloud and SaaS Security

11:40 Transitioning to BlueRock and Active Security Models

17:05 Understanding BlueRock's Architecture and Technology

25:04 Governance and Manageability in AI and Security

32:47 Understanding Semantic Analysis in AI Security

35:17 Intent Recognition and Contextual Awareness

39:30 Agentic Operations and Monitoring

49:16 Customer Use Cases and Enablement

55:25 Production vs Corporate Use Cases

61:16 The Future of AI Interfaces and Endpoints

Keywords

AI, cybersecurity, agentic security, data security, Blue Rock, SaaS security, cloud security, active security, governance, manageability AI security, semantic analysis, intent recognition, agentic operations, customer use cases, production environments, corporate governance, AI interfaces

Discussion with Mark Crane, Partner at General Catalyst, about the cybersecurity market, venture capital, and more.

Summary

In this conversation, Justin Somaini and Mark Crane discuss the current landscape of innovation in cybersecurity and venture capital. They explore the rapid advancements in technology, particularly AI, and how these changes are shaping the future of cybersecurity solutions. Mark shares his journey to becoming a partner at General Catalyst and the importance of due diligence in evaluating startups. The discussion highlights the challenges and opportunities that arise in this fast-paced environment, emphasizing the need for security leaders to adapt and leverage new technologies effectively. In this conversation, Justin Somaini discusses the critical role of founders in the success of startups, particularly in the cybersecurity space. He emphasizes the importance of product development, market strategy, and the milestones that founders must achieve to secure funding and grow their companies. Somaini also highlights the evolving landscape of venture capital and the implications of high valuations in the current market. He concludes by expressing optimism about the future of cybersecurity startups and the quality of founders emerging in the industry.

Chapters

00:00 The Exciting Era of Innovation

01:11 Mark Crane's Journey to General Catalyst

07:47 Waves of Innovation in Cybersecurity

27:29 Due Diligence in Venture Capital

33:35 The Future of Cybersecurity Solutions

34:05 The Founder-Focused Approach

41:17 Milestones in Building a Company

46:05 The Role of VCs in Early-Stage Companies

55:10 Understanding Valuations and Market Dynamics

66:08 The Future of Cybersecurity Startups

Keywords

innovation, cybersecurity, venture capital, AI, General Catalyst, due diligence, market trends, technology adoption, enterprise software, investment strategies founders, venture capital, cybersecurity, product development, market dynamics, startup milestones, valuations, early-stage companies, go-to-market strategy, innovation

Discussion with Patrick Coughlin, CEO and Co-Founder of Savi Security.

Patrick Coughlin Linkedin

Download the Savi App

Dark Side of the Boom 

Scamwise - Free Scam Checker

Summary

In this conversation, Justin Somaini and Patrick Coughlin delve into the evolving landscape of cybersecurity, particularly focusing on the increasing threats to consumers in the digital age. They discuss the rise of scams and fraud, especially in light of advancements in AI technology, and how these developments have made consumers more vulnerable. Patrick shares his personal experiences and insights from his journey in cybersecurity, emphasizing the need for better protection mechanisms and the importance of educating the public about these threats. The conversation highlights the necessity for innovation in consumer technology to combat the growing sophistication of cybercriminals. In this conversation, Justin Somaini discusses the impact of scams on families, particularly focusing on the vulnerabilities of seniors. He shares the creation of Savi Security and its first product, Scamwise, aimed at providing digital protection. The discussion highlights the importance of building trust in a world filled with scams and the need for innovative solutions to protect consumers. Somaini emphasizes the responsibility of technology to safeguard users and the necessity of addressing the evolving landscape of digital threats.

Chapters

00:00 Navigating New Threats to Families

02:08 Patrick Coughlin's Journey into Cybersecurity

18:02 The Rise of Consumer Targeting in Cybercrime

24:08 The Dark Side of AI in Scams

30:15 Understanding the Ecosystem of Cybercrime

33:30 The Impact of Scams on Families

34:56 Creating Savi Security: A Family Mission

36:18 Scamwise: A Tool for Digital Protection

39:27 Targeting Vulnerable Populations: Seniors and Scams

42:42 Building Trust in a Distrustful World

52:36 Navigating the Consumer Landscape

60:46 Innovating Against the Threat of Scams

Keywords
cybersecurity, consumer protection, AI scams, fraud, threat intelligence, digital fraud, organized crime, cybersecurity landscape, consumer technology, security awareness scams, digital protection, family security, Savi Security, Scamwise, AI technology, consumer safety, seniors, trust issues, cybersecurity

Discussion with Omar Santos, Distinguished Engineer at Cisco.

Omar Santos: https://www.linkedin.com/in/santosomar/

CoSAI: https://www.coalitionforsecureai.org/

Summary

In this conversation, Omar Santos, a distinguished engineer at Cisco, discusses his extensive background in cybersecurity and the evolving role of AI in security practices. He shares insights on the challenges of network security, the importance of responsible AI, and the impact of open source on vulnerability management. The discussion highlights the dual nature of AI technology, emphasizing both its potential benefits and the pressing challenges it presents in the cybersecurity landscape. In this conversation, Omar Santos and Justin Somaini discuss the evolving landscape of open source security, the formation of the Coalition for Secure AI (CoSAI), and the introduction of Code Guard as a solution to enhance security in AI development. They emphasize the importance of collaboration among organizations to address vulnerabilities and the need for compensating controls in the face of rapid technological advancements. The discussion highlights the significant impact of Code Guard in reducing vulnerabilities in AI-generated code and the straightforward implementation process that can be adopted across various coding agents. In this conversation, Omar Santos and Justin Somaini discuss the evolving role of AI in software development, particularly in code review and vulnerability management. They explore the challenges of human coding practices, the potential of AI to refactor and modernize code, and the importance of eliminating unused features to reduce risk. The discussion also touches on the differences between corporate and production AI adoption, the need for centralized services for secure development, and the call to action for improving open source security practices.

Chapters

00:00 Introduction to Omar Santos and AI Security

01:15 Omar Santos' Background and Career Journey

03:13 Challenges in Network Security and Maintenance

06:29 The Role of AI in Security Practices

07:11 Omar's Early Experiences with AI and Machine Learning

10:07 Responsible AI and Its Importance

12:57 Cisco's Exploration of LLMs and AI Integration

17:07 The Dual Nature of AI in Security

19:14 Current Vulnerability Management Challenges

24:40 The Impact of Open Source on Security

28:04 The State of Open Source Security

31:43 Introducing CoSAI: Coalition for Secure AI

37:24 Code Guard: Enhancing Security in AI Development

46:57 Implementation and Impact of Code Guard

53:51 The Evolution of AI in Code Review

55:11 Human vs AI: Coding Vulnerabilities

56:27 Refactoring Code with AI

58:23 Eliminating Unused Features to Reduce Risk

60:28 The Importance of Modernizing Technology

62:00 The Challenge of Unused Features in Software

64:30 Corporate vs Production AI Adoption

66:53 Centralized Services for Secure Development

69:03 The Wild West of AI Experimentation

72:33 Preparing for AI Security Challenges

75:15 Call to Action for Open Source Security

Keywords

AI security, Omar Santos, Cisco, vulnerability management, machine learning, responsible AI, network security, open source, cybersecurity, incident response Open Source Security, AI, CoSAI, Code Guard, Vulnerability Management, Cybersecurity, Cisco, Machine Learning, Security Best Practices, Software Development Life Cycle AI, code review, vulnerabilities, refactoring, software security, open source, corporate adoption, technology modernization, risk management, coding agents

Discussion with Mark Crane, Partner at General Catalyst, about the cybersecurity market, venture capital, and more.

Summary

In this conversation, Justin Somaini and Mark Crane discuss the current landscape of innovation in cybersecurity and venture capital. They explore the rapid advancements in technology, particularly AI, and how these changes are shaping the future of cybersecurity solutions. Mark shares his journey to becoming a partner at General Catalyst and the importance of due diligence in evaluating startups. The discussion highlights the challenges and opportunities that arise in this fast-paced environment, emphasizing the need for security leaders to adapt and leverage new technologies effectively. In this conversation, Justin Somaini discusses the critical role of founders in the success of startups, particularly in the cybersecurity space. He emphasizes the importance of product development, market strategy, and the milestones that founders must achieve to secure funding and grow their companies. Somaini also highlights the evolving landscape of venture capital and the implications of high valuations in the current market. He concludes by expressing optimism about the future of cybersecurity startups and the quality of founders emerging in the industry.

Chapters

00:00 The Exciting Era of Innovation

01:11 Mark Crane's Journey to General Catalyst

07:47 Waves of Innovation in Cybersecurity

27:29 Due Diligence in Venture Capital

33:35 The Future of Cybersecurity Solutions

34:05 The Founder-Focused Approach

41:17 Milestones in Building a Company

46:05 The Role of VCs in Early-Stage Companies

55:10 Understanding Valuations and Market Dynamics

66:08 The Future of Cybersecurity Startups

Keywords

innovation, cybersecurity, venture capital, AI, General Catalyst, due diligence, market trends, technology adoption, enterprise software, investment strategies founders, venture capital, cybersecurity, product development, market dynamics, startup milestones, valuations, early-stage companies, go-to-market strategy, innovation

Discussion with Rob Knake, CEO and Co Founder at TPO Group and former Deputy National Cyber Director for Strategy and Budget.

Summary

In this conversation, Rob Knake shares his extensive experience in cybersecurity policy, discussing his journey from academia to the White House and the evolution of cyber policy in the U.S. He highlights the challenges of navigating the complex landscape of cybersecurity, the role of the National Cyber Director, and the importance of regulation in the private sector. The discussion also touches on the impact of crises on policy development and the ongoing struggle for effective regulatory authority in cybersecurity. In this conversation, Justin Somaini and Rob discuss the evolving landscape of cybersecurity regulation, the role of big banks as regulators, and the challenges faced by government entities like CISA. They explore the need for outcome-based regulation, accountability in cybersecurity, and the importance of establishing security standards. Rob emphasizes the necessity of software liability and creating a culture of security within organizations. The discussion also touches on the current state of cybersecurity in government and the future of cybersecurity policy, highlighting the mission of the TPO Group in bridging technology and policy.

Chapters

00:00 Introduction to Cybersecurity Policy and Rob Naik's Background

04:08 The Journey into Cybersecurity Policy

09:37 Navigating the Cyber Policy Landscape

16:17 The Role of the National Cyber Director

23:32 Crisis-Driven Policy Development

30:52 The Shift Towards Regulation in Cybersecurity

37:58 Challenges in Regulatory Authority and Implementation

43:08 The Role of Big Banks in Cybersecurity Regulation

44:08 Challenges in Government Cybersecurity Regulation

45:57 Defining Effective Cybersecurity Regulation

46:56 Outcome-Based Regulation in Cybersecurity

49:07 Accountability in Cybersecurity

50:50 The Need for Liability in Cybersecurity

52:59 Creating a Culture of Security

55:05 Establishing Security Standards

57:00 The State of Cybersecurity in Government

67:12 CISA's Current Challenges and Future

70:59 The Future of Cybersecurity Policy

72:53 The TPO Group and Its Mission

Keywords

cybersecurity, policy, national security, regulation, private sector, cyber strategy, Rob Naik, NIST, cyber resilience, government cybersecurity, regulation, big banks, government, accountability, liability, CISA, policy, security standards, technology

Discussion with Jacques Benkoski, General Partner at U.S. Venture Partners (USVP) and author of The Market Entry Strategy.

USVP: http://www.usvp.com

Jacques Benkoski: https://www.linkedin.com/in/jacques-benkoski-ab9133/

The Market Entry Strategy: https://a.co/d/0b1W3euC

Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues

Summary

In this conversation, Justin Somaini interviews Jacques Benkoski, a general partner at US Venture Partners, discussing his extensive background in engineering and venture capital. They explore the evolution of cybersecurity innovations, the impact of AI on software development, and the intricacies of due diligence in venture capital investments. Jacques shares insights on the challenges entrepreneurs face, the changing landscape of technology, and the importance of understanding customer needs in the investment process. In this conversation, Jacques Benkoski and Justin Somaini discuss critical aspects of startup growth, particularly in the cybersecurity sector. They emphasize the importance of understanding unique value propositions, navigating market entry strategies, and recognizing valuation traps that can hinder a startup's success. The discussion also highlights the need for founders to be disciplined in their approach to funding and market differentiation, ensuring they target the right customers and avoid unnecessary pitfalls in their growth journey.

Chapters

00:00 Introduction to Jacques Benkoski and His Journey

08:04 Transitioning from Engineering to Venture Capital

12:09 The Evolution of Cybersecurity Innovations

19:59 AI's Impact on Software Development and Security

30:03 Due Diligence in Venture Capital Investments

34:57 Understanding Unique Value Propositions

46:11 Navigating Market Entry Strategies

55:14 Valuation Traps and Their Implications

62:44 Key Takeaways for Founders and Security Leaders

Keywords

venture capital, cybersecurity, AI, software development, market entry strategy, entrepreneurship, innovation, investment strategies, technology trends, business growth unique value proposition, market entry strategy, valuation traps, cybersecurity, startup funding, founder-led sales, go-to-market strategy, customer differentiation, venture capital, business growth