Manoj Nair

Living it up in Las Vegas 🎰🍒🎲 Excited to be in Vegas again next week for Okta's SaaS Startup Competition! Block Party is one of three finalists, alongside RunReveal and Validia, who will be presenting our innovations in identity, privacy, and security on stage to a panel of judges and the Oktane24 audience. Block Party's tools are built for end users -- i.e., individual people, all of us who use social media, not always aware of or thinking about the potential risks we open ourselves up too as part of living our digital lives -- but sometimes it's the organizations we belong to that have the most vested interest in ensuring our protection. It could be an issue of workforce protection because our line of work puts us at risk of harassment; or organizational cybersecurity risk mitigation because an individual getting spear phished can compromise the entire system. I'm excited to meet with all the security practitioners, experts, leaders, and investors who will be at Oktane! Watch our video: https://lnkd.in/eyMfMxkH https://lnkd.in/ekN5jjWw

85

5 Comments

In advance of the RSA Conference next week, today we launched Snyk AppRisk Pro, providing holistic, dev-first ASPM to AppSec teams worldwide, empowering them to prioritize critical issues and fix vulnerabilities faster. As highlighted in DevOps.com’s launch coverage, this new solution can trace insecure portions of deployed applications back to the specific code components to be addressed to fix the issue. Critically, Snyk AppRisk Pro combines this unique level of prioritization with proven dev-first tools for vulnerability prevention and remediation, all underpinned and enabled by AI. As Manoj Nair, our Chief Product Officer, stated: "Snyk AppRisk Pro provides AppSec teams with the birds-eye view they need to proactively drive remediation and prevention." Take a moment to read the full article from Michael Vizard, linked below. https://bit.ly/44lyD9r

230

2 Comments

Enterprises spend more on security but aren’t benefitting from the extra spend. Palo Alto Networks’ customers who buy security across 3 platforms spend more than 40x those that secure just one. Despite those dollars… “Adding incremental point products is not necessarily driving a better security outcome for them.” - Nikesh Arora, CEO of Palo Alto Networks The average enterprise uses upwards of 70 security products. Many of these products produce alerts identifying phishing emails or network access issues or odd device behavior. The security operations center (SOC) reviews these alerts. Estimates suggest the typical team receives between 5,000 & 11,000 alerts per day - every day. Worse still, every SOC team is short-staffed. No wonder these teams can’t keep up with the deluge. Fewer than 10% of alerts are ever reviewed. Many security breaches could have been detected earlier with broader coverage. Dropzone provides AI SOC analysts that never sleep. Leveraging the power of LLMs, Dropzone’s analysts collect alerts, fetch relevant information from other systems, and then triage alerts. These agents also inform copilots that empower security analysts to ask questions of their environment leveraging the insight of the AI analysts. RSA selected Dropzone a top 10 Finalist in the Innovation Sandbox. We’re thrilled to support Edward & the Dropzone team in fulfilling their mission. As Senior Principal Scientist, Edward architected the AI systems at ExtraHop, a network security company acquired for $900M. Our partner Andy wrote in greater depth about our vision for the company here : https://lnkd.in/dyUy6M_3. And if you’re curious to test it on your own, you can test drive it here : https://lnkd.in/djzXcwjs.

43

5 Comments

Can we really tolerate static context in our dynamic cloud? You know what they say—you can’t protect what you don’t understand. Without real-time visibility into your assets, vulnerabilities, and how everything’s connected, it’s easy to get overwhelmed by false positives and miss what really matters. At Stream.Security, we’re the only ones who give teams real-time cloud context across all layers. Check out our latest blog in the first comment to learn what can be done with real-time context. #soc #cdr #secops #cloudsecurity #cloudcomputing #realtime

40

5 Comments

Okta signed the Cybersecurity and Infrastructure Security Agency’s Secure by Design pledge at #RSAC to take meaningful steps in adopting #secure by design principles in the coming year. I am excited that we are accompanying our peers in the industry to take the steps needed to prioritize application security. Identity-based #attacks have become a top method for cybercriminals, and according to the Open Worldwide Application Security Project, broken access control is the number one most common web application security risk. It’s putting companies building their applications at risk. This is a priority for Okta. There’s never been a more critical time for us to come together and implement secure design principles to keep the #identity #secure. Learn more about this pledge https://bit.ly/3UQNLbz. Tomorrow is also Okta Showcase! I am excited to join Todd McKinnon, Sagnik Nandy , and others to share the latest product innovations & commitments Okta is making to secure identity. You can tune in here: https://bit.ly/4cLldaI

189

2 Comments

An interesting update from one of the stalwarts of the cybersecurity industry, Check Point Software. Tellingly, with at 30 years at the helm, Gil Shwed is the longest-tenured CEO on Nasdaq. This will be an exciting experiment to put a VC and founder (who is an investor and chair of 17 startup companies). It is compelling to bring in an innovator into the top spot, and will be interesting to see if he can make a difference. #cyber #cybersecurity #vc #innovation #checkpoint https://lnkd.in/gRZeaFVW

1

In my latest episode, Okta CEO Todd McKinnon dives into the essential lessons he’s learned on high-stakes decision-making, managing up to the board, and competing against tech giants like Microsoft. Todd also reflects on his journey to founding Okta, his bold choice to team up with a co-founder he hardly knew, and the motivations that have fueled him for over seven years as a public company CEO. Some key takeaways… → How founders can strengthen board communication Early on at Okta, Todd recalls making the mistake of being too passive with the board. He would present issues and ask for input rather than confidently sharing his decision-making process and a clear plan. This approach was ineffective, as the board expects the CEO to lead with clear direction, not to use meetings for brainstorming. He realized the tone needed to shift to, “Here’s what we’re doing, the thought process behind it, the risks and opportunities, and potential ways we might pivot.” Effective board communication involves presenting a well-thought-out course of action, potential risks, and future pivots, rather than merely seeking opinions on challenges. → Okta’s approach to high-stakes decisions One tactic that has worked well for Okta is setting up two teams to present opposing views on big decisions. For example, if they were considering an acquisition, even if Todd was in favor, one team would argue why it’s an excellent idea, while another would argue against it. Each team spends an hour presenting their case, helping to achieve a balanced perspective. Okta uses this approach for product direction, prioritization, people moves, and other compounding decisions. → Focusing on customer value to survive In Okta’s third year, the team struggled to meet expectations, missing a key quarter and facing challenges while trying to raise their Series B. Despite limited signals of success, Todd realized the importance of focusing on true customer value, which he sees as the only reliable indicator of long-term viability. The following quarter, Okta experienced a modest breakthrough, slightly surpassing the sales target and marking a tipping point as market demand began to align with Okta’s vision. Since then, Okta has continued to thrive—even as a single-sign-on product facing intense competition from tech giants like Microsoft—proving the company’s resilience and the strength of its product-market fit. Full episode: https://lnkd.in/dDxbCTiq

91

As a Netscape alum I’ve always been a proponent of standards as a driver of innovation and a reducer of complexity. Identity standards have been the driving force for the modernization we’ve been seeing over the past few years and IPSIE takes it to the next level by providing an end-to-end standards based approach to identity. Now we all have to get on board and drive it home. Let’s go! #identitysecurity #modernidentity

7

🔒 Looking to protect your Okta Workforce Identity Cloud (WIC) data? HYCU R-Cloud has you covered! Our latest post dives into how you can easily secure and recover your critical IAM data. 💡 Check it out to learn how HYCU, Inc. simplifies backup and recovery for Okta WIC, ensuring business continuity without the hassle. Read the full blog 👇 and make sure to stop by the Okta Venture pavilion at Oktane next week to see more! #dataprotection

16

Cloud bills taking a bite out of your budget? PointFive’s here to put ‘em on a diet, and they’ve just bagged a cool $20M in Series A to do it. Alon Arvatz, Gal Ben David 🇮🇱🎗️ and Amir Hozez - cybersecurity vets who sold IntSights for a smooth $350M—aren’t playing around. They’ve taken their know-how, added DeepWaste™ Detection, and built PointFive to turn cloud cost optimization into a no-brainer. Forget those cluttered dashboards and endless “insights” nobody asked for. PointFive doesn’t overwhelm with data—it cuts straight to the bottom line, showing you exactly where your cloud is hemorrhaging cash. It’s a financial MRI, dissecting spend patterns and highlighting inefficiencies traditional tools totally miss. The payoff? Early adopters are slashing cloud costs by 15-30% and pocketing millions in real savings. Salesforce Ventures, Index Ventures, Entrée Capital, and Sheva see where this is headed. As cloud adoption speeds up, cost optimization isn’t just a line item—it’s mission-critical. Major players like Elastic and Fanatics are already signing on because PointFive aligns cloud spending with actual business goals. This isn’t just “nice to have,” it’s engineering excellence on a whole new level. With multi-cloud support for #AWS, #GCP, and soon #Azure, PointFive is gearing up to own the cloud cost optimization game. So here’s the question every CTO should be asking: Are you ready to take control of your cloud costs, or are you waiting to watch your competitors beat you to it? #Cloud #CloudOptimization #CloudCost #CloudComputing #CloudCostOptimization #Technology #Innovation #TechEcosystem #StartupEcosystem #VentureCapital #StartupFunding #startups

8

DeepSeas and Devo are joining forces to transform cybersecurity programs! I’m happy to share that DeepSeas is integrating Devo to be a critical component of its reimagined data lake platform. The integration will bring speed, scale, advanced analytics, and AI capabilities to our midmarket and enterprise clients who choose Devo as their SIEM. Dive Deeper: https://lnkd.in/gMFYXgSV #siem #cybersecurity #logging

1

Join Arctic Wolf Field CTO Christopher Fielder and Senior Product Marketing Manager Mike McCleary for a webinar that takes a deep dive into the just-released Arctic Wolf 2024 Security Operations Report. You'll gain invaluable insights into the dynamic landscape of a large-scale modern security operations program and discover the key elements required for a world-class level of security operations that can reduce your cyber risk. #EndCyberRisk

4

My brilliant colleague Sergey Passichenko just published a great article on the CrowdStrike outage in The New Stack! Check it out here: https://lnkd.in/gmTwSbjP #SoftwareDevelopment #TheNewStack #IndustryInsights #Crowdstrike

3

Ransomware can put SMB and critical infrastructure at risk. Kymberlee is taking the stage at Labscon to talk about the work we’re doing in this space

3

Ensuring that your #security team has full visibility of all log data is paramount, and to do that, you need a #SIEM that can ingest any event in any format. Read Devo's latest blog post to learn about two red flags indicating your current SIEM might fall short.

17

Data poisoning and backdoor attacks on LLMs used for code completion currently go undetected if malicious payloads are directly integrated into code with minimal transformation / indirection (see code examples): https://lnkd.in/gz_HyWMu

3

Stop choosing which logs to keep and which ones to dump. With Sumo Logic's $0 ingest you can log everything and pay for the insights, not ingest. Break down silos, build collaboration, and drive innovation with a single source of truth across your #DevSecOps teams. 💰

14

A big thank you to John Gilroy for moderating an insightful discussion in "Ep. 178 Akamai and Identity Management" of the FedTech Podcast, where our very own Mike Colson, Director of Public Sector Growth, and Dave Zukowski, Director of Engineering, tackle the complexities of Identity Credentialing and Access Management (ICAM) for the Department of Defense (DoD). 🛡️ Growth always brings challenges—especially when the DoD is managing 1.3 million active-duty service members, reserves, DoD civilians, veterans, and more. As the agency moves towards a hybrid cloud environment, the identification process becomes even more intricate. And yes, they have to secure mobile devices too! 📲 Key takeaways from the episode: 🔍 The role of AI/ML in analyzing identity data 🔐 Applying FIDO standards to simplify identity management 💡 Akamai's deep experience with technologies like CAC/PIV, YUBIkey, and securing web and mobile applications If you’re tasked with managing identities at scale, this episode offers invaluable insights on ensuring security while navigating complex environments. 🎧 Don’t miss it! Listen here: https://bit.ly/3zGzLJL

1

At DataDome, customer obsession is at the core of everything we do, driving us to continually innovate. In the recent Forrester Wave™: Bot Management Software, Q3 2024 report, we were recognized for our "ambitious goal of launching one product per quarter" and we’ve delivered on this promise with the launch of Discover. Discover is a powerful new feature seamlessly integrated into our threat dashboard, allowing organizations to quickly pinpoint and understand their unprotected domains and subdomains across their digital ecosystem. Discovery is a critical component of any robust cybersecurity strategy, offering the visibility and insights needed to protect cloud environments, IT assets, sensitive data, and APIs. Our focus on discovery enables businesses to stay ahead of emerging threats and fortify their defenses against malicious bots on their online platforms. Learn more: https://lnkd.in/ej-pvrwH

48

2 Comments