Secure Ventures with Kyle McNulty

Andrew Rubin is co-founder and CEO of Illumio. Illumio is a breach containment and network segmentation company that has become a mainstay in the cybersecurity market over the last decade. Illumio was last valued at almost $3 billion dollars and is now on the verge of going public as we discuss in the episode. Before Illumio, Andrew grew his career in sales at VoiceNet in the late 90s and early 2000s before moving to Cymtec, where he was VP of Sales for two years before taking over as CEO. That led him to love the CEO role and then start Illumio. In the episode, we discuss everything from redefining sales goals, meeting a co-founder (spoiler: in Andrew's case it was a lot of luck), preparing to IPO, including why the "IPO window" concept is silly, and more.Website

This episode was recorded live at the Dreamit Cyber Founders Summit during RSA. Huge thanks to the Dreamit team for including me during their inaugural event!David Cass is the CISO at GSR, which is a cryptocurrency market maker. For the finance uninitiated, that basically means they buy and sell cryptocurrencies in large volumes to then buy and sell to other parties. As a result, David's role entails a lot more than the average CISO. As he will mention, it is his job to secure GSR's corporate IT like any CISO, but he also has to sign off that the cryptocurrencies they are trading are secure enough to hold a financial position without undue risk to the company. David therefore has one of the most advanced perspectives on the cybersecurity controls for cryptocurrencies. In the conversation we discussed his views on the productization of web3 security, cryptocurrency regulation, and the successes behind his CISO community CISOs connect.GSRDreamit

Raj is CEO and co-founder of Blueflag, which helps ensure developers only have the access permissions needed for their roles, reducing risk of excess exposure. Raj started his career as an engineer and then in marketing at Adobe and VMware before taking on a COO role at Cloudknox, which they later sold to Microsoft. Raj took his lessons from working with identity at Cloudknox and applied them to designing Blueflag while paying attention to the nuanced differences for the development lifecycle. In the episode we discuss his core tenets of successful marketing in cybersecurity, the promise and challenges of cloud infrastructure entitlements management, the value of his time as an entrepreneur in residence, and how he has constantly reevaluated strategy at Blueflag informed by his previous experience.Website

Recorded live at Blu Ventures’ Cyber Venture Forum! I got the chance to speak with Rick Howard, previously Chief Security Officer at Palo Alto Networks from 2013 to 2019. Rick has a wealth of cybersecurity industry experience, and he wrote a book called Cybersecurity First Principles and maintains the cybersecurity book hall of fame, called the Cybersecurity Canon. In this episode we discussed his perspective on the fundamental themes of cybersecurity with a lens to how entrepreneurs and investors can leverage these ideas.Cybersecurity Canon WebsiteCybersecurity First Principles on AmazonSponsored by VulnCheck!

Amir is co-founder and CEO at Vorlon Security, which provides visibility and monitoring for SaaS app connections within an enterprise. For example, Vorlon can detect what other applications are connected to your Salesforce instance along with what data is flowing between each relationship. This helps security teams detect data exfiltration, data leakage, improper configuration, and more. Before Vorlon, Amir worked his way from a software developer into progressively more customer-facing roles, most recently as a Director at Palo Alto Networks. We kick off the episode talking about his early motivation to become a founder and how he led a decade of his career in pursuit of preparing himself for that role. Now, the team is continuing to focus on product and growth after raising $15 million last year from Accel and Shield Capital.WebsiteSponsor: VulnCheck

Jon is co-founder and CEO of Halcyon, which is building an endpoint solution fully focused on anti-ransomware. Halcyon recently raised at a $1B valuation in 2024. Jon started his career in cybersecurity consulting for a decade before joining Cylance in 2014 as Chief Research Officer. After his stint at Cylance, in 2017 Jon founded Boldend, which was building offensive cyber capabilities to be used by the US intelligence community for information gathering and electronic warfare. Boldend was acquired by Sixgen three years after Jon stepped down as CEO to start Halcyon given the critical impact of ransomware on US companies.

Pete is CEO and co-founder of Realm Security, which is building a security data fabric to help companies manage their disparate log sources for monitoring tools. For companies spending millions of dollars every year on contracts with Splunk, Realm is the light at the end of the tunnel that can help them move to a cheaper SIEM tool. Pete started his career at Rapid7 after dropping out of college, and he worked his way through a variety of cybersecurity sales leadership roles since, including companies acquired by CarbonBlack and Cisco. In the episode we talk about his emphasis on moving roles for new learning opportunities, his obsession with customer problems rather than potential solutions, and how Realm's message is unique in a cyber ecosystem where vendors are always asking for CISOs to grow their budget. Website Sponsor: VulnCheck

Odysseas is co-founder and CEO of Phylax, a web3 security company building a security layer for blockchain-based protocols. Before Phylax, Odysseas worked at Nomad, a crypto exchange which suffered a $190M breach in August 2022. In the episode, we talk about his unique background as a developer relations manager, the approach law enforcement takes to recover funds in the wake of a crypto breach, the different attack surfaces for the web3 ecosystem, and more. If you are not a blockchain expert, do not worry, me neither. There are still plenty of interesting high level conversation points throughout!

Ben is founder and CEO of watchTowr, building an external attack surface management tool (EASM) that performs automated penetration testing and red teaming activities. Before founding watchTowr in 2021, Ben worked as a security consultant for a decade focused largely on penetration testing. And as Ben describes in the episode, what started as a combination of cobbled together scripts from his previous experience has since grown into a comprehensive automation platform. Website: https://watchtowr.com/ Sponsor: VulnCheck

David is CEO and Founder of Naoris Protocol, which provides a blockchain-based mesh architecture for improved endpoint integrity. The company was founded in 2016 and has since raised over $30 million. Before Naoris, David was a cyber leader at a range of global companies including AT&T, Electronic Arts, London City Airport, and others. In the episode, we discuss his background discovering cybersecurity in a small farming village in Portugal and the real-world applications of blockchain technology which have yet to become popularized.

Oz is co-founder and CEO of Opsin, which provides access control capabilities to LLM outputs ensuring users only get appropriate outputs based on their access level. The company was founded earlier this year, but they have already seen strong customer and investor interest given they are aimed at a key roadblock in making gen AI more available within the enterprise. Before Opsin, Oz worked in product management at high profile technology and security companies for most of the last decade, including Fireeye and Abnormal (where he met his co-founder James). In the episode we discuss everything from the origin story to the technical challenges of applying access control to these outputs and how to maintain current records despite a constantly changing access landscape. Website Sponsor: VulnCheck

This episode is a re-release of a conversation I had with Uri back in the beginning of 2022. It is truly one of my all-time favorites because of how well he illustrates the evolution of fraud prevention in financial services over time. Rest assured, he will be back on the show soon to talk about his new company which was in stealth at the time of this recording. His new company's website Our sponsor, VulnCheck!

Craig is co-founder and CEO of Bleach Cyber, which is building a product for small businesses to manage their holistic cybersecurity posture in a streamlined fashion. Before Bleach, Craig was COO and co-founder of Cyvatar which is a cybersecurity as a service offering for SMBs. Craig has 15 years of experience as a CISO or equivalent, including at companies such as Monster.com and Fujitsu. In the episode we touch on his journey from CISO to founder, the comparison of cybersecurity for extremely small businesses to B2C, and the strategy behind their go to market approach currently in-play. Website Sponsor: VulnCheck