Discussion with Gal Tal-Hochberg, CEO and Co-Founder at Beacon Security

Beacon Security: https://beacon.security

Gal Tal-Hochberg: https://www.linkedin.com/in/galhochberg/

Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues

Summary

In this conversation, Justin Somaini shares his journey from a tech-savvy child to a successful entrepreneur in the cybersecurity space. He discusses his early experiences in technology, the challenges and lessons learned from various startups, and the founding of Beacon, a company focused on revolutionizing security telemetry. Justin emphasizes the importance of team dynamics, innovative solutions, and the seamless integration process that Beacon offers to its clients, aiming to simplify cybersecurity challenges and improve overall security outcomes. In this conversation, Justin Somaini discusses the innovative approaches Beacon is taking to optimize data processing and management in security operations. He emphasizes the importance of efficient data reduction techniques, cost-effective solutions for data storage, and the integration of in-stream analytics to enhance user experience. Somaini also highlights Beacon's unique position in the competitive landscape, focusing on their ability to provide tailored solutions that meet the diverse needs of their clients. He concludes with a vision for the future of security telemetry, emphasizing the opportunities for growth and improvement in the field.

Chapters

00:00 The Genesis of a Tech Entrepreneur

09:26 Navigating the Startup Landscape

20:16 The Birth of Beacon: A New Vision in Cybersecurity

26:46 Understanding Beacon's Unique Approach

37:13 Seamless Integration and Onboarding Process

39:56 Accelerating Data Processing and Optimization

42:47 Data Reduction Techniques and Efficiency

46:50 Cost-Effective Data Management Solutions

50:55 In-Stream Analytics and User Experience

54:09 Integrating with Security Operations

60:09 Differentiating Beacon in a Competitive Landscape

66:47 Future Vision for Security Telemetry

78:41 Embracing Opportunities in Security Technology

Keywords

cybersecurity, startup, technology, entrepreneurship, telemetry, logs, Beacon, integration, AI, data management data processing, optimization, data reduction, cost-effective solutions, in-stream analytics, security operations, competitive landscape, security telemetry, technology opportunities

Discussion with Michael Nov, CEO and co-founder at Prime Security.

Prime Security: https://www.primesec.ai/

Michael Nov: https://www.linkedin.com/in/michael-nov/

Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues

Summary

In this conversation, Justin Somaini speaks with Michael Nov, CEO and co-founder of Prime Security, about the rapid advancements in AI and its impact on engineering and application security. They discuss the challenges faced in integrating security into the engineering process, the importance of automation, and the cultural shifts needed to prioritize security in fast-paced development environments. Michael shares his journey from backup recovery to founding Prime Security, highlighting the need for innovative solutions to bridge the gap between security and engineering teams. In this conversation, Justin Somaini discusses the architecture of AI solutions in security, focusing on outcomes for security teams, identifying gaps in security standards, defining and quantifying risk, and the evolving role of security in engineering. He emphasizes the importance of context in AI applications and how it can enhance engineering processes. The discussion also touches on the competitive landscape in the AppSec market and the challenges of building a company in this space.

Chapters

00:00 The Acceleration of AI in Engineering

01:13 Introduction to Prime Security and Its Innovations

02:33 Michael Nov's Background and Journey

06:13 Transitioning from Backup Recovery to Application Security

08:34 The Motivation Behind Starting Prime Security

11:55 Identifying Problems in Security and Engineering Collaboration

15:46 The Impact of Agile Development on Security

18:37 Cultural Challenges in Security Integration

20:59 Automating Security Processes

23:52 Understanding Customer Environments and Integration

27:51 The Future of Engineering and Security with AI

34:03 Understanding the Architecture of AI Solutions

37:04 Outcomes for Security Teams

40:21 Identifying Gaps in Security Standards

46:04 Defining and Quantifying Risk

51:45 The Role of Security in Engineering

56:13 Differentiating in the AppSec Market

61:04 Building a Company in the Security Space

Keywords

AI, engineering, application security, automation, Prime Security, security architecture, Agile development, collaboration, security tools, software development AI, security, SaaS, risk management, engineering, architecture, outcomes, AppSec, automation, differentiation

Discussion with Cy Khormaee and Ryan Luo, Co-Founders at Aegis AI (aegisai.ai)

Aegis: https://aegisai.ai/

Cy Khormaee: https://www.linkedin.com/in/cykho/

Ryan Luo: https://www.linkedin.com/in/rllluo/

Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues

Summary

In this conversation, Justin Somaini speaks with Sy Cormé and Ryan Liu, co-founders of Aegis Security, about the rapid evolution of AI threats, particularly in the realm of email security. They discuss their backgrounds, the inception of Aegis, and the persistent challenges of email security, especially with the rise of AI-powered phishing attacks. The conversation highlights the need for innovative solutions in cybersecurity and the unique approach Aegis is taking to address these challenges. In this conversation, Justin Somaini discusses the evolving landscape of email security, focusing on the challenges posed by malicious hosts, the importance of active learning in detection systems, and the need for effective email authentication. He highlights the significant improvements in detection efficacy that can be achieved through innovative methodologies and the importance of understanding the context of attacks. The discussion also touches on the acceleration of AI threats and the need for better integration of security solutions across different platforms.

Chapters

00:00 The Rise of AI Threats

01:08 Founders' Background and Journey

07:38 Inception of Aegis Security

10:00 The Persistent Email Security Problem

12:21 AI-Powered Phishing: A New Era

19:17 The Evolution of Cyber Attacks

27:18 Introducing Aegis Security

31:08 Understanding Malicious Hosts and Attack Patterns

34:02 Active Learning and Contextual Decision Making

37:44 Customer Experience and Detection Efficacy

40:36 Email Authentication Challenges and Solutions

45:43 The Evolution of Email Attacks

48:55 Future Needs in Email Security

51:42 Behavioral Controls and Identity Management

54:54 The Acceleration of AI Threats

58:07 Differentiation in the Security Market

Keywords

AI threats, email security, phishing, Aegis Security, cybersecurity, AI-powered attacks, founders' journey, email vector, machine learning, threat intelligence email security, AI threats, malicious hosts, detection efficacy, authentication, active learning, customer experience, identity management, phishing, cybersecurity

Discussion with Kamal Shah, CEO and Co-Founder at Prophet.

Prophet Security: https://prophetsecurity.ai/

Kamal Shah: https://www.linkedin.com/in/kdshah/

Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues

Summary

In this conversation, Justin Somaini interviews Kamal Shah, CEO of Profit, discussing the transformative role of agentic AI in security operations. They explore Kamal's journey from Mumbai to Silicon Valley, his experiences at FedEx and various startups, and the challenges faced in the cybersecurity landscape. The discussion highlights the importance of automation in addressing alert fatigue, the unique approach of Profit in leveraging AI for security, and the need for transparency and documentation in AI solutions. In this conversation, Justin Somaini discusses the transformative impact of agentic AI on cybersecurity operations, emphasizing its role in expediting communication, enhancing incident response, and minimizing false positives. He highlights the importance of customization and context in security alerts, the future of threat hunting, and the need to address burnout in security teams. The discussion also covers the efficacy of AI solutions, differentiation in a competitive market, and the overall promise of AI in improving security operations.

Chapters

00:00 The Rise of Agentic AI in Security Operations

03:06 Kamal Shah's Journey: From Mumbai to Silicon Valley

05:53 Career Path: From FedEx to Startups

09:08 Navigating the Tech Landscape: Lessons from Startups

11:59 The Genesis of Profit: Addressing Security Challenges

14:53 Leveraging AI to Combat Alert Fatigue

18:08 Profit's Unique Approach to Security Automation

21:03 Operationalizing Profit: Integration with Existing Systems

23:49 Transparency and Explainability in AI Solutions

26:48 Building Trust: The Role of Documentation in Security

30:07 The Future of Security Operations: AI and Human Collaboration

35:39 Expediting Communication in Security Operations

38:04 The Role of Agentic AI in Incident Response

39:57 Minimizing Hallucinations in AI Solutions

41:51 Customization and Context in Security Alerts

44:38 Future of Threat Hunting with AI

46:32 Real-World Impact of AI on Security Teams

49:15 Role Elevation vs. Elimination in Cybersecurity

52:07 Addressing Burnout in Security Operations

55:57 Efficacy and Implementation of AI Solutions

60:18 Differentiating in a Competitive Market

64:30 The Promise of AI in Security Operations

Keywords

Agentic AI, Security Operations, Automation, Cybersecurity, Alert Fatigue, AI Solutions, SOC, Technology Startups, Innovation AI, cybersecurity, incident response, security operations, threat hunting, automation, security alerts

Discussion with Surag Patel, CEO and Co-Founder of Pixee.

Pixee: https://pixee.ai/

Surag Patel: https://www.linkedin.com/in/suragpatel/

Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues

Summary

In this conversation, Surag Patel shares his journey from growing up in San Jose to becoming a key player in the cybersecurity and application security space. He discusses his early entrepreneurial ventures, his experiences at Comscore and Contrast Security, and the challenges faced in the application security domain. Surag emphasizes the need for a balanced control model in security practices and introduces his latest venture, Pixie, which aims to streamline the remediation process in application security by leveraging AI and LLMs. The discussion highlights the importance of contextualization and the need for solutions that address the manual workload of developers and security teams. In this conversation, Justin Somaini and Surag Patel discuss the evolving landscape of application security, focusing on the integration of AI in vulnerability management and remediation processes. They explore the importance of quality and accuracy in triage, the role of human judgment in fixing vulnerabilities, and the metrics that define success in developer engagement. The discussion also touches on the competitive landscape of application security solutions and the future of AI in enhancing security processes. Ultimately, they emphasize the need for practical experience with these technologies to truly understand their value.

Chapters

00:00 Surag Patel's Journey: From Kansas to Silicon Valley

02:58 Building a Business in High School: The PC Venture

05:55 Career Path: From Comscore to Cybersecurity

09:02 Transitioning to AppSec: Lessons from Contrast Security

11:50 The Challenges of Application Security

15:11 The Need for a Balanced Control Model

17:49 Founding Pixie: Addressing Manual Work in AppSec

20:51 Implementing Pixie: Time to Value and Contextualization

23:51 Leveraging LLMs: The Future of AppSec Solutions

37:19 Triage and Remediation in Application Security

40:40 Quality and Accuracy in Vulnerability Management

43:31 Fixing Vulnerabilities: The Role of AI and Human Judgment

46:08 Measuring Success: Merge Rates and Developer Engagement

49:09 Mean Time to Remediation: Automation and Efficiency

53:54 Competitive Landscape in Application Security

61:43 The Future of AI in Security Processes

66:33 Final Thoughts: Experience Over Theory

Keywords
Waymo, application security, cybersecurity, developer experience, Pixie, remediation, technology, confidence, Saurabh Patel, Contrast Security AI, application security, model selection, quality assurance, developer adoption, merge rates, competitive landscape, automation, remediation, security processes

Discussion with John Morello, CTO and Co-Founder at Minimus.

Minimus: https://minimus.io/

John Morello: https://www.linkedin.com/in/john-morello/

Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues

Summary

In this conversation, Justin Somaini interviews John Morello, CTO and co-founder of Minimus, discussing the importance of container security and the innovative approaches Minimus is taking to reduce vulnerabilities in software. They explore Morello's career journey, lessons learned from his time at Microsoft, and the evolution of security practices in the tech industry. The discussion highlights the challenges faced by security professionals and the need for a proactive approach to managing vulnerabilities in cloud environments. In this conversation, Justin Somaini discusses the complexities of building secure software at scale, emphasizing the importance of balancing security with developer flexibility. He explains how their product allows for customization while maintaining security standards, and shares insights on deployment strategies and customer experiences. The discussion also covers navigating compliance and security standards, differentiating in a competitive market, and the realities of adoption and deployment in organizations.

Chapters

00:00 Introduction to Minimus and Container Security

09:50 Career Journey and Lessons from Microsoft

19:59 The Evolution of Security Practices

29:47 Innovations in Container Image Management

39:55 The Future of Security in Cloud Environments

32:04 Balancing Security and Developer Flexibility

36:11 Deployment Strategies and Customer Experiences

42:16 Navigating Compliance and Security Standards

45:53 Differentiating in a Competitive Market

50:23 Realities of Adoption and Deployment

Keywords

Minimus, container security, cybersecurity, John Morello, software vulnerabilities, cloud security, image management, security practices, technology innovation, startup journey software security, deployment strategies, compliance, developer flexibility, container images, vulnerability management, software engineering, customer experience, market differentiation, operational efficiency

Somaini's Trust Issues podcast introduction with Justin Somaini.