The Security Podcast of Silicon Valley

In this episode of a YSecurity.io production, we dive deep into the world of cryptography and software security with David M'Raihi , the Chief Product Security Officer at Rivian . With a wealth of experience in the field, David shares his insights on the multifaceted challenges and opportunities in protecting innovative technologies in the automotive industry. David and host Jon McLachlan engage i...

In this inspiring episode of a YSecurity.io production, we are joined by Michael Crandell , CEO of Bitwarden Inc. , who shares the vision, journey, and the profound wisdom behind Bitwarden's success. Bitwarden stands at the forefront of enhancing collaboration, bolstering security, and amplifying productivity through the synergy of open source and community engagement, offering an intuitive soluti...

Sergej Dechand shares his security journey from  usable security research to Co-Founding Code Intelligence , where he is CEO . Code Intelligence delivers open-source static analysis-guided fuzz testing  that enables developers to simplify software security testing  without modifying their code.   In this episode of a YSecurity.io production, we dive into the compelling world of software security w...

Dive into the world of cryptography with Benoit Chevallier-Mames in this episode of a YSecurity.io production, where he shares his remarkable journey through the realms of encryption, engineering, and leadership. From making significant contributions at Apple to his current role at Zama , Benoit's work has profoundly impacted data security for billions of users worldwide , all while maintaining a...

In this engaging episode of a YSecurity.io production, we sit down with Aaron Painter , CEO of Nametag Inc , to explore the cutting-edge future of authentication. As we delve into the concept of "Sign in with ID," Aaron shares his vision for a world where traditional passwords and device-based authentication methods are replaced with a more secure, trusted, and user-friendly alternative. Aaron pro...

In this enlightening episode of a YSecurity.io production, we delve into the transformative world of authorization with Anders Eknert , whose journey to Styra is marked by deep insights and vast experience. Anders guides us through the evolution of authorization, addressing the pivotal question, "What are you allowed to do?" and illustrating how the landscape is shifting away from the chaotic "wil...

In this episode of a YSecurity.io production, we're privileged to have Sean Cassidy , the Head of Security at Asana , share the wealth of knowledge and experience he's accumulated in building leading security teams and developing impactful security products. Sean takes us on a journey through his career, offering an insider's view on the challenges and triumphs of establishing a culture of securit...

In this thrilling episode of a YSecurity.io production, we sit down with Will Butler , a seasoned security expert whose journey into the world of red teaming began with an audacious hack of airport security systems in his youth. This pivotal moment not only sparked Will's passion for security but also set him on a path to becoming a formidable figure in the field of penetration testing and red tea...

In this enlightening episode of a YSecurity.io production, we're joined by Ben , a versatile software engineer with a rich background in computer security. Having navigated a diverse career path that spans startups , major tech companies , research labs , and intelligence agencies, Ben brings a unique perspective to the table. He shares his journey into the world of security, recounting the experi...

In this episode of a YSecurity.io production, we have the pleasure of speaking with Biff W. Clark , the Managing Partner and Cyber Security Consultant of Coefficient Technologies LLC . With an impressive career spanning over 25 years in sales and sales leadership, including 15 years dedicated to consulting on information technology and cyber security solutions, Biff brings a wealth of knowledge an...

Join us for an engaging episode of a YSecurity.io production featuring Paul Nguyen , the Co-Founder and Co-CEO of Permiso Security . Paul brings a wealth of knowledge and innovative insights from his journey in the cybersecurity industry, particularly in enhancing security posture and protecting against evolving threats. In this conversation, Paul shares the story behind founding Permiso Security,...

In this insightful episode of a YSecurity.io production, we're joined by Dan Sherry , Founder and CEO, and Grace Chi , Co-Founder and COO, of Pulsedive , for an in-depth discussion on the pivotal role of Threat Intelligence in today's cybersecurity landscape. Dan and Grace share their journey of building Pulsedive, a platform dedicated to simplifying complex data problems in security and the instr...

Dive into the intersection of cybersecurity, military discipline, and endurance sports in this episode of a YSecurity.io production featuring Robert Rounsavall , Co-Founder and President of Trapezoid Inc. Robert's journey from a childhood fascination with security, through a distinguished military career, to leading innovation in firmware security, provides a compelling narrative of resilience, in...

In this compelling episode of a YSecurity.io production, Michael Malone , the visionary Founder and CEO of SmallStep , takes us on a deep dive into the critical realms of Identity, Certificates, X.509, and Authentication. Michael unfolds the journey of SmallStep, from its initial focus on Authorization to its strategic pivot towards Authentication, highlighting the evolutionary path of the company...

In this thought-provoking episode of a YSecurity.io production, we're joined by Dylan Ayrey , the Founder and CEO of Truffle Secure , for a deep dive into the transformative power of open-source projects in cybersecurity. Dylan, the brain behind the renowned open-source tool Truffle Hog, shares insights on leveraging open-source projects to forge a more secure, resilient, and transparent digital f...

In this deeply insightful episode of a YSecurity.io production, we are honored to have Fredrick Lee ("Flee") , the Chief Security Officer at Gusto , share his experiences and the profound impact of diversity on building engineering and security teams. Flee's journey from his childhood, through his formative years at a boarding school in the deep south, to his role as a leading figure in cybersecur...

In this thought-provoking episode of a YSecurity.io production, we welcome Michael Brooks , the Chief Information Security Officer at Trava, to dissect the complex world of cyber risk, ransomware attacks, business preparedness, and risk management strategies. Michael brings a wealth of knowledge and experience, offering deep insights into the foundational challenges and strategic imperatives of cy...

In this episode of a YSecurity.io production, we sit down with Prakash Darji , General Manager of the Digital Experience Business Unit at Pure Storage , for an insightful conversation about the evolving landscape of storage and security. Prakash brings a wealth of knowledge and experience to the table, offering a glimpse into the future of these critical technology sectors as envisioned by one of...

Join me for an interview with Leigh Honeywell . As founder and CEO of Tall Poppy, she's building tools and services to help companies protect their employees from online harassment and abuse.   Together, we share many vulnerable and authentic moments as we explore online harassment, abuse, and how Tall Poppy helps humans navigate difficult situations while still building a thriving business that m...

An interview with Wesley Belleman , Cyber Warfare Operator at the California Air National Guard and System Engineer at Palo Alto Networks, and his journey through Security Operations in the United Space Space Force .   In this episode, we dive into what a SOC is, how new technology changes our ability to respond to threats , and what the open problems are still open. We explore the cultural differ...

An interview with Daniel Feldman , Cloud Security Architect at HPE (formerly Scytale.io ), as we discuss his journey through service authentication with the open standard SPIFFE and the implementation SPIRE .   In this episode, Daniel tells the story of how he came across this problem of authentication at Veritas Technologies , why he joined a small startup Scytale.io to continue focusing on his s...

An interview with Andrew Gontarczyk , Chief Information Security Officer at Pure Storage , on the challenges of building a security team.   When is the right time for a company to build a security team? What types of Security Teams are there (Product Security, Infrastructure Security, DevSecOps, Red Team, Blue Team, Purple Teams), and what do they do? As a security leader, how do you influence the...

Join me for an interview with Anand Ganesh, Founding Software Architect at Hammerspace, to discuss how storageless data solves traditional B2B storage security problems.   What is storageless data? How does Hammerspace encrypt data at rest? How do disaster recovery, backup, and snapshot data protection mechanisms work in Hammerspace?  Why does data-as-a-service eliminate the need for fail-overs (p...