Somaini's Trust Issues

Justin Somaini

With constantly increasing threats, the need for Security to innovate faster is paramount.  With more than three decades in the Security industry, I've lived through these problems and been on the bleeding edge of our industry's innovation.  Join me as we dive into what new waves of innovation that are coming at us but also look at the founding teams that are in them.  Along the way, we'll talk to industry leading experts for their unique perspective on what's needed and where we need to go.

  1. 2d ago

    EP 31: Bloom

    Discussion with Itay Keren, CEO and Co-Founder at Bloom. Itay Keren: https://www.linkedin.com/in/itay-keren-%F0%9F%8C%B8-544760148/ Bloom: https://bloom.security/ Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues Summary In this conversation, Itay Keren, CEO and co-founder of Bloom Security, discusses the urgent need for AI security solutions, his journey from the Israeli Navy to cybersecurity, and the importance of company culture in building successful tech companies. He emphasizes the evolving landscape of endpoint security, the challenges posed by AI, and the necessity for visibility and control in security solutions. Keren also explores the integration of security principles in AI development and the future complexities of managing AI agents. In this conversation, the discussion revolves around the evolving landscape of endpoint security, emphasizing the importance of AI, user experience, and the integration of IT and security teams. Justin and Itay explore the challenges and innovations in cybersecurity, particularly focusing on supply chain firewalls and the necessity for proactive measures in security management. They also highlight the significance of a robust go-to-market strategy and the need for companies to adapt quickly in the fast-paced AI era. Chapters 00:00 The Urgency of AI Security Solutions 01:51 Founder's Journey: From Navy to Cybersecurity 05:14 The Importance of Company Culture 14:09 Identifying Opportunities in Endpoint Security 21:47 The Future of AI and Endpoint Management 26:00 Visibility and Control in Security Solutions 29:18 Integrating Security in AI Development 33:03 Identifying Endpoint Security Gaps 34:01 The Role of AI in Endpoint Solutions 35:24 Understanding Supply Chain Firewalls 38:18 Enhancing User Experience in Security 41:36 Bridging IT and Security Teams 43:25 Customer-Centric Product Development 46:43 The Future of AI in Cybersecurity 50:05 Competitive Landscape in Endpoint Security 52:54 The Importance of Go-To-Market Strategy 56:15 Accelerating Company Growth in the AI Era Keywords AI security, endpoint security, cybersecurity, company culture, founder journey, visibility, control, AI development, Bloom Security, technology innovation endpoint security, AI, supply chain firewall, user experience, IT security, cybersecurity, product development, go-to-market strategy, company growth, automation

  2. Oct 22

    EP 30: Legion Security

    Discussion with Ely Abramovich, CEO and Co-Founder of Legion. Legion Security: https://www.legionsecurity.ai Ely Abramovich: https://www.linkedin.com/in/ely-abramovitch-a3a912bb/ Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues Summary In this conversation, Ely Abramovich, CEO and co-founder of Legion, discusses the evolution of security operations, the integration of AI in cybersecurity, and the importance of understanding customer needs. He shares his journey from a musician to a tech entrepreneur, emphasizing the significance of creativity and hard work in both fields. The discussion also covers the challenges of alert fatigue in security, the fundraising landscape for startups, and the future of security operations with continuous learning and adaptation. In this conversation, the speakers delve into the evolving landscape of security operations, emphasizing the importance of automation and AI in streamlining processes. They discuss the challenges faced by security teams, the need for cultural shifts within organizations, and the critical role of security professionals in adapting to new technologies. The conversation highlights the necessity of optimizing workflows and managing costs effectively while embracing innovative solutions to enhance security measures. Chapters 00:00 Rethinking Security Operations 03:01 Ely Abramovich: A Journey from Music to Tech 05:57 The Intersection of Creativity and Technology 08:46 Building Relationships in Tech 12:04 The Importance of Understanding Customer Needs 14:55 Transitioning to Founder ship 18:10 Navigating the Fundraising Landscape 20:57 Addressing Alert Fatigue in Security 23:49 The Role of AI in Modern Security 27:12 Implementing AI Solutions Effectively 30:00 Continuous Learning and Adaptation in Security 32:52 The Future of Security Operations 37:12 Automation in Security Processes 40:54 The Future of Security Operations 45:41 AI and Automation in Security 49:58 Cultural Shifts in Security Teams 53:09 The Role of Security Professionals 56:00 Optimizing Security Workflows 61:20 Cost Management in Security Solutions 67:32 The Evolution of Detection Mechanisms Keywords security operations, AI in security, Ely Abramovich, cybersecurity, alert fatigue, fundraising, tech entrepreneurship, continuous learning, automation, Legion automation, security processes, AI, security operations, cultural shifts, security professionals, cost management, detection mechanisms

  3. Oct 8

    EP 29: Bob West (Cyera)

    My discussion with Bob West, Data and AI Security Officer at Cyera, Lifelong CISO. Bob West: https://www.linkedin.com/in/bowest/ Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues Summary In this conversation, Justin Somaini and Bob West explore the intersection of cybersecurity, business, and personal development. They discuss the importance of understanding the business context in security roles, the influence of family and community on personal growth, and the critical role of education in shaping career paths. The conversation also delves into the significance of effective communication, building trust, and the impact of mentorship in professional settings. Bob shares his journey from technology to security, emphasizing the need for cybersecurity professionals to be influential communicators and leaders. Chapters 00:00 Understanding Business Context in Security 03:00 The Influence of Family and Community 05:48 The Role of Education in Career Development 09:06 Navigating College Life and Early Career Choices 11:53 Transitioning from Technology to Security 15:12 The Importance of Communication in Cybersecurity 17:59 Building Relationships and Trust in Professional Settings 20:50 Leadership Styles and Their Impact 24:14 The Evolution of Cybersecurity Education 26:59 The Role of Mentorship in Career Growth Keywords cybersecurity, business context, communication, leadership, education, mentorship, career development, community influence, trust, technology

  4. Oct 1

    EP 28: Glow

    My discussion with Omer Singer, Co-Founder & CTO at Glow. Omer Singer: https://www.linkedin.com/in/omer-singer/ Glow: https://www.glow.io/ Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues Summary In this conversation, Justin Somaini and Omer Singer discuss the evolution of cybersecurity, the role of AI in innovation, and the importance of endpoint security. They share personal experiences and insights into the challenges and opportunities within the cybersecurity landscape, emphasizing the need for proactive prevention and the impact of emerging technologies. In this conversation, Justin Somaini discusses the evolving landscape of cybersecurity, particularly focusing on the role of AI in both attacks and defenses. He highlights the asymmetry between attackers and defenders, emphasizing the need for proactive strategies in endpoint security. The discussion covers the importance of building a trustworthy software inventory, the evolution of endpoint security, unexpected use cases, and the potential of AI to transform security practices from reactive to proactive. Somaini stresses the significance of aligning security solutions with advancements in AI intelligence to effectively combat emerging threats. Chapters 00:00 The Role of AI in Cybersecurity Innovation 00:48 Personal Journeys in Cybersecurity 06:03 The Evolution of Cybersecurity Technologies 10:05 The Importance of Endpoint Security 16:48 Navigating the Startup Landscape in Cybersecurity 22:00 The Future of AI in Cybersecurity 25:45 The Asymmetry of AI in Cybersecurity 29:40 Proactive Endpoint Security Strategies 33:27 Building a Trustworthy Software Inventory 37:39 The Evolution of Endpoint Security 41:45 Unexpected Use Cases and Lessons Learned 46:00 Harnessing AI for Proactive Defense Keywords AI, cybersecurity, endpoint security, innovation, startups, technology, prevention, detection, security operations, machine learning AI, cybersecurity, endpoint security, proactive defense, software inventory, security strategies, AI agents, vulnerabilities, detection, prevention

  5. Sep 24

    EP 27: Holly Ventures

    Summary In this conversation, Justin Somaini interviews John Brennan, founder of Holly Ventures, discussing the intricacies of venture capital, particularly in the cybersecurity space. Brennan emphasizes the importance of thoughtful capital raising, building relationships within the CISO community, and the unique value proposition of his firm. He shares insights from his journey in cybersecurity investing, the significance of reputation, and the process of evaluating founders and their teams. The discussion also touches on the sales process for startups, the transition from seed to growth, and the critical nature of trust in the VC-startup relationship. In this conversation, Justin Somaini discusses the current landscape of venture capital and seed investing, particularly in the cybersecurity sector. He highlights the challenges of hypervaluations and increased competitiveness in the market, as well as the importance of building strong relationships with founders. Somaini emphasizes the need for thoughtful investment strategies and the potential for innovation in cybersecurity, especially with the rise of AI. He encourages collaboration within the industry and stresses the importance of supporting new founders and their ideas. Chapters 00:00 The Importance of Thoughtful Capital Raising 03:01 Navigating the CISO Community 05:55 John Brennan's Journey to Cybersecurity Investing 09:12 The Unique Value Proposition of Holly Ventures 12:04 Building Relationships in the VC Ecosystem 14:56 The Sales Process for Founders 18:12 The Role of Reputation in Venture Capital 20:56 Evaluating Founders and Teams 23:50 Driving ARR and Customer Relationships 27:08 Transitioning from Seed to Growth 29:56 The Importance of Trust in the VC-Startup Relationship 33:45 Navigating Hypervaluations and Market Dynamics 36:03 The Evolution of Seed Investing 39:27 Valuation Trends and Market Corrections 42:15 Building for the Future: Strategies for Success 47:54 Emerging Innovations in Cybersecurity 52:01 The Role of Founders in Shaping the Future 57:32 Encouraging Collaboration in the Cybersecurity Community Keywords capital raising, cybersecurity, venture capital, CISO community, startup investing, founder relationships, customer acquisition, cybersecurity investing, seed stage, venture ecosystem venture capital, seed investing, cybersecurity, market trends, founder strategies, AI security, innovation, valuations, investment strategies, collaboration

  6. Sep 18

    EP 26: Humanix

    Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues Humanix Website: https://www.Humanix.ai Keith Stewart: https://www.linkedin.com/in/keithrstewart/ Summary In this conversation, Justin Somaini and Keith Stewart discuss the evolving landscape of cybersecurity, focusing on the challenges posed by social engineering and the innovative solutions offered by Humanix. They explore Keith's journey from tech support to startup founder, emphasizing the importance of understanding customer needs and the role of AI in enhancing security measures. The discussion highlights the need for a shift in how organizations approach cybersecurity, moving away from blaming individuals and towards leveraging technology for detection and response. In this conversation, Justin Somaini delves into the complexities of social engineering in cybersecurity, emphasizing the need for a robust understanding of human behavior and the limitations of traditional security training. He discusses real-world examples of social engineering attacks, the evolving role of AI in security, and the importance of tailoring security measures to specific industries. Somaini also highlights insights from cognitive psychology regarding deception and the necessity of knowledge acquisition for business success. Chapters 00:00 Reimagining Cybersecurity Challenges 03:05 The Journey into Cybersecurity 05:55 Sales and Understanding Customer Needs 08:48 Navigating the Startup Landscape 12:07 The Birth of Humanix 14:58 Understanding Social Engineering 17:49 Building Trust in Cybersecurity 21:11 The Role of Technology in Security 23:54 Addressing Internal and External Threats 31:05 Understanding Social Engineering Tactics 34:58 The Limitations of Human Memory Under Pressure 35:55 Building a Robust Security Framework 39:08 Tailoring Security Measures to Different Industries 42:02 The Importance of Knowledge Acquisition in Business 44:25 Real-World Examples of Social Engineering Attacks 49:12 The Future of AI in Social Engineering 54:25 Insights from Cognitive Psychology on Deception 58:07 Navigating Vulnerabilities in Business Systems Keywords cybersecurity, social engineering, AI, startups, customer needs, technology, trust, Humanix, sales, detection and response social engineering, cybersecurity, AI, deception, human behavior, security training, incident response, memory under pressure, security frameworks, industry-specific security

  7. Sep 3

    EP 25: Crash Override

    Discussion with Mark Curphey, Head of Innovation and Co-Founder, at Crash Override. Summary In this conversation, Justin Somaini interviews Mark Curphey, co-founder of Crash Override, discussing his journey in the security industry, the lessons learned from past startups, and the importance of understanding customer needs in product development. They delve into the challenges of visibility in software development, the role of AI, and the significance of building the right team and investor relationships. Mark shares insights on the limitations of S-BOMs and the innovative solutions being developed at Crash Override. In this conversation, Justin Somaini and James Bond 007 discuss the intersection of AI and security development, exploring how AI can enhance security practices, the challenges posed by outdated security advice, and the importance of observability in software development. They share insights on customer adoption of security tools, the rapid evolution of vulnerability discovery, and the future of security in an AI-driven landscape. Chapters 00:00 Introduction and Background 03:03 Career Journey and Lessons Learned 05:58 Startup Experiences and Founding Crash Override 08:55 Fundraising and Investor Relationships 12:06 Product Development and Customer Insights 15:01 Visibility Challenges in Software Development 17:57 Chalk: The Core Mechanism of Crash Override 20:56 S-BOMs and Their Limitations 24:02 Future of Development and AI Integration 30:40 AI in Security Development 33:46 Challenges with Current Security Practices 35:54 Optimizing Development Processes with AI 39:20 The Importance of Observability in Software Development 43:09 Customer Insights and Adoption 45:02 Exploring Vulnerability Discovery and Management 57:17 The Future of Security with AI Keywords security, startup, visibility, product development, fundraising, software engineering, AI, Crash Override, S-BOM, investor relations AI, security development, vulnerability management, software observability, customer insights, coding practices, open source, security tools, software development, engineering best practices

  8. Aug 19

    EP 24: Jason Lish & Iain Mulholland

    Discussion with Jason Lish, CISO at Cisco, and Iain Mulholland, CISO at Salesforce. Jason Lish: https://www.linkedin.com/in/jasonlish/ Iain Mulholland: https://www.linkedin.com/in/iainmulholland/ Support the show and Donate to NCMEC: https://give.missingkids.org/TrustIssues Summary In this conversation, Justin Somaini engages with Jason Lish and Ian Mulholland to explore the intersection of AI and cybersecurity. They discuss the challenges and opportunities presented by AI in vulnerability remediation, the importance of understanding exploitability and reachability, and the ongoing issues of legacy code and tech debt. The conversation also delves into the role of AI in automating vulnerability assessments and remediation, the emerging concept of unit economics in security, and the future of AI in code generation and security practices. In this conversation, the speakers discuss the evolving landscape of technology security, focusing on the challenges posed by end-of-life products, the importance of securing AI production environments, and the role of agents in identity management. They explore the complexities of authorization in AI systems, the future of security functions, and the impact of automation on security workflows. Additionally, they address geopolitical considerations that affect technology security and the need for ongoing conversations in the industry. Chapters 00:00 Introduction to AI and Security Challenges 02:59 Vulnerability Remediation in the Age of AI 05:56 Understanding Exploitability and Reachability 09:05 Reducing Attack Surface and Code Hardening 11:59 Legacy Code and Tech Debt Challenges 14:47 Harnessing AI for Vulnerability Assessment 18:01 The Role of AI in Remediation and Code Quality 21:00 Unit Economics in Security 23:46 Future of AI in Code Generation and Security 26:59 Balancing Change and Stability in Software Development 37:24 Navigating End-of-Life Issues in Technology 41:18 Securing AI Production Environments 44:59 The Role of Agents in Identity Management 49:26 Challenges of Authorization in AI Agents 55:11 The Future of Security Functions and Skill Sets 61:07 The Impact of Automation on Security Workflows 67:19 Geopolitical Considerations in Technology Security Keywords AI, cybersecurity, vulnerability remediation, exploitability, reachability, attack surface, legacy code, tech debt, harnessing AI, unit economics, code generation technology, security, AI, identity management, automation, authorization, end-of-life issues, production environments, skill sets, geopolitical risks, Salesforce, Cisco

See All (31)

Ratings & Reviews

3.7
out of 5
3 Ratings

About

With constantly increasing threats, the need for Security to innovate faster is paramount.  With more than three decades in the Security industry, I've lived through these problems and been on the bleeding edge of our industry's innovation.  Join me as we dive into what new waves of innovation that are coming at us but also look at the founding teams that are in them.  Along the way, we'll talk to industry leading experts for their unique perspective on what's needed and where we need to go.

Information

  • Creator
    Justin Somaini
  • Years Active
    2026
  • Episodes
    31
  • Rating
    Explicit
  • Copyright
    © 2026 Justin Somaini

You Might Also Like