ProdSec Decoded

Pratik Roychowdhury & Chiradeep Vittal

This is a podcast on Product security. On ProdSec Decoded, we'll be having candid conversations with the brightest minds who are navigating the complex landscape of securing products in a world increasingly powered by AI.

Episodes

  1. Real World Product Security in Practice. Discussion with Sam Satyanathan (Head of Product Security @ UKG)

    10/13/2025

    Real World Product Security in Practice. Discussion with Sam Satyanathan (Head of Product Security @ UKG)

    In this episode of ProdSec Decoded, we sit down with Sam Satyanathan, Head of Product Security at UKG, to explore his journey from software development to leading security across financial services and SaaS. Linkedin: https://www.linkedin.com/in/sgsnathan/ We dive into: - What product security really means vs. AppSec - How to measure success with the right KPIs - The impact of AI — both opportunities and risks - Evolving leadership roles like the Chief Product Security Officer - Common mistakes companies still make in 2025 - Tips for spotting and building great security talent Packed with insights, predictions, and a rapid-fire round, this is a must-listen for security leaders, product builders, and anyone curious about the future of cybersecurity. 00:00 – Intro & Guest Background: Welcome to ProdSec Decoded 01:20 – Introducing Sam Satyanathan and his career highlights. 01:59 – Sam’s Journey into Security : From software development to financial services, mobile payments, and eventually product security leadership. 05:35 – Defining Product Security : AppSec vs. Product Security, SaaS vs. hardware, customer interactions, and working with product/engineering teams. 10:03 – Measuring Success : Key metrics and KPIs: testing coverage, MTTR, security champions, vulnerability management, compliance frameworks. 14:17 – Humans vs AI as vulnerabilities, “vibe coding” vs AI-assisted engineering, and the debate on AI replacing security teams. 22:00 – The rise of Chief Product Security Officer (CPSO) roles and how they complement CISOs. 25:04 – Common Mistakes in Product Security 26:42 – What makes a great product security hire — beyond certifications and pedigree. 29:02 – Predictions for the Future 30:13 – Rapid Fire Round 34:28 – Closing & Key Takeaways Recommendations from Sam : https://www.islf.foundation/ https://www.scworld.com/podcast-show/application-security-weekly https://podcasts.apple.com/us/podcast/ciso-tradecraft/id1538132658

    35 min
  2. Product Security from Dual Perspectives - Eng Leadership Meets CISO. Discussion with Ilan Dar (CISO @ AutoFi)

    08/18/2025

    Product Security from Dual Perspectives - Eng Leadership Meets CISO. Discussion with Ilan Dar (CISO @ AutoFi)

    In this episode of ProdSec Decoded, we sit down with Ilan Dar, who brings a rare dual perspective as both CISO and Senior Vice President of Technology Services. With over 20 years spanning engineering, product management, and information security, Ilan shares practical insights on building scalable product security programs in complex environments. Ilan Dar: https://www.linkedin.com/in/ilandar/ Key topics covered: - Balancing speed vs security - How to enable "security delivery at speed" without creating bottlenecks - Tackling tool noise and alert fatigue - Practical strategies for improving signal-to-noise ratio in security alerts - FinTech security challenges - Navigating the complex ecosystem of dealers, OEMs, lenders, and regulatory requirements - Proactive security frameworks - The five-step approach to securing complex third and fourth-party integrations - AI in cybersecurity - Cutting through the hype to identify real opportunities and emerging risks Budget allocation strategies - How security leaders are adapting spending priorities in the AI era Perfect for: CISOs, product security leaders, engineering managers, and anyone looking to understand how to scale security practices while maintaining development velocity in today's fast-moving tech landscape. 🔗 Listen for actionable insights on transforming security from a bottleneck into a business enabler at https://prodsec.tv Contacts: Pratik Roychowdhury: https://www.linkedin.com/in/proychowdhury/ Chiradeep Vittal: https://www.linkedin.com/in/chiradeepvittal/

    41 min
  3. OpenSource and its impact on ProdSec in a world powered by AI. Discussion with David Nalley (Ex-President @ Apache Software Foundation)

    07/16/2025

    OpenSource and its impact on ProdSec in a world powered by AI. Discussion with David Nalley (Ex-President @ Apache Software Foundation)

    In this video, we interview David Nalley (AWS Director of Developer Experience and Open Source Strategy + Former President of the Apache Software Foundation) about 'OpenSource and its Impact on Product Security in the world increasingly powered by AI'. https://www.linkedin.com/in/davidnalley/ Discussion Topics: 1. Evolution of Open Source & David’s career journey from sysadmin to open source leader. 2. Dependency Risk & Governance Gaps: Incidents like Log4Shell underscore the critical failures in dependency governance — fast remediation is not enough when vulnerable versions are still widely downloaded. 3. Maintainer Blind Spots & Burnout: Open source maintainers often have no visibility into how their code is used — from cloud infra to medical devices. 4. Security in the AI Supply Chain: Developers frequently import random, low-maintenance libraries sourced from GitHub. 5. AI & the Developer Lifecycle: The rise of “vibe coding” (prompt-driven development) accelerates software creation but demands greater upfront clarity on goals and architecture. 6. Code Review is the New Bottleneck: With AI increasing volume, projects must scale up review mechanisms—not just code gen. 7. Open Source vs “Open” AI: The term “open source” is misused in the LLM world—many projects share weights but not data, training methods, or full model transparency. 8. Licensing Complexity: Existing licenses were built for source code, not for models, weights, or datasets. There’s growing consensus that new definitions and licenses (beyond Apache 2.0, GPL) are needed for open models. 9. Wrap up & Advice to Security & Engineering Leaders

    41 min

Ratings & Reviews

5
out of 5
3 Ratings

About

This is a podcast on Product security. On ProdSec Decoded, we'll be having candid conversations with the brightest minds who are navigating the complex landscape of securing products in a world increasingly powered by AI.