Latest / Cyber Go-To-Market Talk: The Cybersecurity Podcast About Cyber Sales, Marketing & Revenue Growth / How to Build a Cyber Sales Machine From Nothing That Delivers 30X ARR Growth and 166% NRR
Transcript
- 0:32SPEAKER_02: The feeling of Cyber Donut is that they're poised for a growth street.
- 0:37SPEAKER_02: They're poised for a great 2025 to try and get to that$10 million ARR.
- 0:42SPEAKER_02: You know, they fix some of the go-to-market challenges, they've had some changes in headcount, and end up being that Q1 was their best quarter so far.
- 0:50SPEAKER_02: It was bigger than Q4, which isn't always the case as we know.
- 0:53SPEAKER_02: And they're looking at the rest of the year with excitement, but also frankly with a little bit of apprehension about what lays ahead.
- 0:58SPEAKER_02: And they're thinking it'd be good to chat with someone who has taken a cybersecurity sales team through a period of growth, responsible growth, not just throwing headcounter at the problem.
- 1:09SPEAKER_02: Tackled all these issues, won the early customers, grown the team, navigated the whole technical cell versus business cell, and all the other things that are going on, which is why I'm excited to welcome Nick LaBaz, who is the VP of sales at Endor Labs.
- 1:24SPEAKER_02: Now, Nick joined Endor in its early stage, was in fact the first uh go-to-market person, salesperson on board, and has now grown the team out to 16 people.
- 1:36SPEAKER_02: He's been through shifts in focus of the company, different things in terms of growth and how you scale up the team, and all these things is what Nick has tackled.
- 1:45SPEAKER_02: He's talking about it on today's podcast.
- 1:47SPEAKER_02: I'm Andrew Monahan, and this is the Cybersecurity Go to Market Podcast, where we tackle the question: how can Cyber Donut get to$10 million in ARR by the end of 2025?
- 2:09SPEAKER_02: All right, well, Nick, welcome to the podcast.
- 2:11SPEAKER_02: So we are here, we're in the business of saving Cyber Donut.
- 2:15SPEAKER_02: It's now May 2025, and they're just kind of getting going.
- 2:23SPEAKER_02: It was more than Q4, which isn't always the case, right, in the world that we're in.
- 2:27SPEAKER_02: So there's a good uptick from there.
- 2:28SPEAKER_02: They're on a bit of a tear.
- 2:30SPEAKER_02: The CEO is feeling confident and they feel like it might be the start of a real growth trajectory.
- 2:36SPEAKER_02: So I thought it'd be good to invite you on because of what you guys are doing at Endor.
- 2:42SPEAKER_02: I like if I look at your your headcount growth in the last number of years.
- 2:47SPEAKER_02: So I'll read it as everyone can see this.
- 2:49SPEAKER_02: So on September 30th, 2021, Endor Labs had two people.
- 2:55SPEAKER_02: And as of today, which is the 14th of May 2025, you had 151.
- 3:01SPEAKER_02: And when I look at the curve, in fact, it's almost a straight line.
- 3:06SPEAKER_02: It's like the almost perfect, you know, linear growth in headcount.
- 3:10SPEAKER_02: I know headcount doesn't equate to revenue, but in this day of you know measured growth, I think it's not a bad proxy.
- 3:17SPEAKER_02: So I kind of look at that and think, God, there's there's something to learn here.
- 3:20SPEAKER_02: I remember I actually taught to Varun your CEO two years ago when uh Endor Labs was selected for the innovation sandbox at RSA in 2023.
- 3:30SPEAKER_02: And actually, one of the things I noticed, let me ask you about this.
- 3:32SPEAKER_02: So back when I taught to Varun, I remember rightly, the focus was on analysis of open source code in products and apps, and not just from a security standpoint, but I think also from a legal standpoint, because it's gonna be downside risk on some of that stuff.
- 3:49SPEAKER_02: Um, it felt like as I was kind of tagging along and watching your development, there might be a bit of a shift.
- 3:55SPEAKER_02: I wouldn't say a pivot, but a little bit of a shift in what Endor is doing.
- 3:58SPEAKER_02: Why don't you take us through what's been going on in the market that uh has enabled you to make that shift?
- 4:02SPEAKER_02: It's a great question.
- 4:03SPEAKER_00: Uh I would describe it as we've widened the aperture.
- 4:06SPEAKER_00: So the engine we built, the initial problem we solved with that engine was software composition analysis, the evaluation of open source dependencies for security and license risk.
- 4:18SPEAKER_00: But that underlying technology allowed us to solve for some neighboring problems in application security.
- 4:25SPEAKER_00: So if I'm building software, you know, the way we think about things is you need to secure everything your software depends on.
- 4:30SPEAKER_00: So your developers write code, first-party code, they bring in open source components, they have CICD pipelines that move code through the process.
- 4:39SPEAKER_00: They use things like GitHub Actions, they put code into containers.
- 4:43SPEAKER_00: And all of these things need security.
- 4:45SPEAKER_00: They need visibility, they need rules.
- 4:48SPEAKER_00: So we have sequentially gone down the path of adding new capabilities to the platform so that companies that historically had to buy a best in breed capability to solve each of those individual silos can now look to a platform to consolidate tools and consolidate effort.
- 5:04SPEAKER_00: The modern uh evolution, if you can call it that, I wouldn't quite call it a pivot.
- 5:09SPEAKER_00: But if we think about when you spoke with Varun two years ago, obviously software development, as we highlighted, was 80% of code was open source, right?
- 5:18SPEAKER_00: Well, we've had this pretty dramatic technology shift in the since then uh with AI-assisted code generation.
- 5:24SPEAKER_00: So it's not in the too distant future where we can expect 80% of your code to be AI assisted or AI generated.
- 5:32SPEAKER_00: Satya, in a press in their earnings release uh a week ago, just said about 30% of Microsoft's code is already going that direction.
- 5:39SPEAKER_00: So that opens up a lot of opportunity for businesses to think about how they apply this tech, but ultimately we also have to govern this new wave of code.
- 5:49SPEAKER_00: So that's top of mind for us and some of the problems we're working on solving for our customers.
- 5:54SPEAKER_02: Yeah, it's it's crazy.
- 5:55SPEAKER_02: Like uh, you know, even someone like even someone like me, you know, I get drawn into some of these apps.
- 6:01SPEAKER_02: There's like Bolt and there's I think it's Canvas, is it?
- 6:04SPEAKER_02: Uh I forget all the different ones.
- 6:06SPEAKER_02: And if you know, if listeners don't know, you literally get these apps, you can type in and say, you know, build me an app that uh is a, I don't know, uh a podcast booking app.
- 6:15SPEAKER_02: And what I want to be able to do is reach out to a bunch of people, automate the whole process.
- 6:19SPEAKER_02: I then want to do calendaring, I want to do scripting, I want to do pre-production stuff.
- 6:24SPEAKER_02: Uh I want it to loot like this, have a look at these sites, pull these colors, build me an app.
- 6:29SPEAKER_02: And literally within a few minutes, this app just shows up on your screen.
- 6:33SPEAKER_02: And all you have to do at that point is say, well, I don't really like this, change that.
- 6:36SPEAKER_02: Maybe change the dates, you know, things, whatever it might be.
- 6:38SPEAKER_02: It just does it.
- 6:39SPEAKER_02: You don't need, I don't need to know any coding or what's happening behind the scene to do this.
- 6:44SPEAKER_02: So it seems like this is, well, it seems amazing for one thing, but kind of crazy that some someone like me then wouldn't then go in and say, well, let me just check to make sure this is somewhat secure, right?
- 6:53SPEAKER_02: Which is kind of the world we're in right now, right?
- 6:55SPEAKER_00: Yeah.
- 6:56SPEAKER_00: We call that vibe coding, is the uh industry nomenclature.
- 6:59SPEAKER_00: There's some fun anecdotes out there.
- 7:01SPEAKER_00: The one I would highlight is uh why Combinator believed published that 95% of the code generated was vibe coded in their last cohort.
- 7:11SPEAKER_00: So this is this is a tidal wave.
- 7:14SPEAKER_00: Uh it's exciting for us as a security company, but I think it's also very exciting for organizations that have to think about the pace of innovation and how to leverage some of the good things that AI assistants can do for us.
- 7:26SPEAKER_02: One of the things that struck me about it was um, you know, I've got no skills to know the quality of the code.
- 7:33SPEAKER_02: I mean, I I know what it's producing works from my standpoint, right?
- 7:36SPEAKER_02: Uh I kind of had this idea, though, that the quality, both from uh you know, coding but also from a security perspective, would be pretty good.
- 7:44SPEAKER_02: But I'm gathering as I kind of dig into this more and more, that isn't the case.
- 7:48SPEAKER_02: It's a bad assumption to make.
- 7:49SPEAKER_00: Yeah.
- 7:50SPEAKER_00: Studies show it's less secure than uh well-written human code.
- 7:55SPEAKER_00: So the the stats on this, it writes copilot, cursor, windsurf, these AI code assistance.
- 8:01SPEAKER_00: Code velocity increases 40%.
- 8:03SPEAKER_00: Code quality issues, which could be security or quality, exist in about 60% of it.
- 8:08SPEAKER_00: So it's a troubling thing for security counterparts of engineering to face in that I have the capability to build a lot faster that may be lower quality or more risky.
- 8:22SPEAKER_00: How are you on the other side of this going to govern this volume of code?
- 8:26SPEAKER_00: So it'll improve, but as things stand today, uh oversight inspection governance is gonna be necessary.
- 8:33SPEAKER_02: I imagine you're probably seeing as well the the shadow code generation inside companies.
- 8:38SPEAKER_02: You know, what you thought was the the purview of the 15 developers in the corner or something people like me think is a good idea to start developing apps.
- 8:44SPEAKER_00: Totally.
- 8:45SPEAKER_00: Yeah, it's it's funny.
- 8:46SPEAKER_00: I had the same uh occurrence in my last life with Varun at Redlock, right?
- 8:52SPEAKER_00: We were at a point in time, this was early in the cloud security evolution and cloud adoption.
- 8:57SPEAKER_00: And there were these companies that professed at the time we'll never put our stuff in AWS or Azure or GCP, and now that's obviously in about every enterprise in the world.
- 9:06SPEAKER_00: I believe the stat was 80% of developers admit to using copilots, which means 90 to 95% of developers are probably using copilots.
- 9:17SPEAKER_00: So it's less hidden than uh one might expect, but it is going to be par for the course here very quickly.
- 9:23SPEAKER_02: Yeah, yeah.
- 9:24SPEAKER_02: Well, you mentioned something there that you'd worked with for Rune before.
- 9:27SPEAKER_02: So at Redlock, Redlock was acquired by by Palo.
- 9:30SPEAKER_02: Was that 15, 16, something like that?
- 9:32SPEAKER_02: Was that the right time for you?
- 9:33SPEAKER_02: Uh 2018.
- 9:34SPEAKER_02: 2018.
- 9:35SPEAKER_02: Okay.
- 9:36SPEAKER_02: And then when he um founded Endor Labs, he hit you up back in November 2022, it looked like, to say, come and come and put the band together again.
- 9:47SPEAKER_02: You know, let's go and do this thing called Endor.
- 9:50SPEAKER_02: So you walked in there November 22.
- 9:52SPEAKER_02: Well, I mean, so a lot of things to be done, right?
- 9:55SPEAKER_02: But what was one thing that you you looked at and said, okay, this is where I start.
- 9:59SPEAKER_02: This is the thing that I need to start fixing or building to start building the sales function over there.
- 10:04SPEAKER_00: Yeah.
- 10:05SPEAKER_00: There was nothing to fix because I was brought in to put in the infrastructure.
- 10:09SPEAKER_00: The first thing I think we needed to do was just learn who buys this product and why and how do they buy it.
- 10:15SPEAKER_00: Right.
- 10:15SPEAKER_00: So we were pre-revenue at the time.
- 10:18SPEAKER_00: We had had some very great partners on the enterprise that were using the product.
- 10:22SPEAKER_00: And we had to land what is the value to them going to be.
- 10:26SPEAKER_00: Uh technology, you know, the capabilities at the time were much narrower than they are today.
- 10:30SPEAKER_00: So we had to rigorously define our ICP because there was a tech sack we needed to define to be uh to show a high ROI to our customers.
- 10:40SPEAKER_00: So it was iterating on that pretty frequently, which is okay, this is one, this is the components of tech I want to see in a potential prospect.
- 10:49SPEAKER_00: Now let's go find those prospects.
- 10:51SPEAKER_00: Now let's go find some sellers that can find those prospects and execute against that sales play.
- 10:55SPEAKER_00: But it was it was a fun learning in the early days because every conversation we were finding something out.
- 11:03SPEAKER_00: And ultimately we would have to apply that to the next conversation we were having and continue to do that today.
- 11:09SPEAKER_02: Now, is that difficult to do, though, coming in with a sales title?
- 11:11SPEAKER_02: And really, actually, your main job is learning as opposed to selling in those first couple of months, right?
- 11:17SPEAKER_00: Yeah.
- 11:18SPEAKER_00: You know, I had to walk and chew gum at the same time.
- 11:20SPEAKER_00: Um I you know, you build a company by getting great prospects to partner with you on a journey, but there has to be value for both of you.
- 11:29SPEAKER_00: So, you know, I was sell how, right?
- 11:31SPEAKER_00: I was doing, I was prospecting, I was selling, I was trying to build out the playbook.
- 11:36SPEAKER_00: I was trying to understand who that audience would be and what value we were going to offer and how to execute proofs of concepts.
- 11:44SPEAKER_00: But it was uh, you know, like I said, I think we we learn a lot.
- 11:47SPEAKER_00: You you know, implement the plans based on the lessons and continue to evaluate and evolve them.
- 11:53SPEAKER_02: Yeah.
- 11:54SPEAKER_02: One of the things I think that teams or early stage founders as well, I saw the founder actually a couple of days ago about this.
- 12:01SPEAKER_02: One of the things they struggle with is how to have that conversation about is this company even going to be able to buy from an early stage company like us?
- 12:09SPEAKER_02: How do we find that out elegantly?
- 12:11SPEAKER_02: When do we find that?
- 12:12SPEAKER_02: Do we find out early?
- 12:13SPEAKER_02: Do we cross our fingers and hope it doesn't come up too much towards the end?
- 12:16SPEAKER_02: How did you handle that early on?
- 12:18SPEAKER_00: Yeah, I think you have to take it on pretty early, right?
- 12:21SPEAKER_00: There are enterprises that want to be forward-looking, partnering with innovative companies to shape their roadmap to meet their own needs.
- 12:30SPEAKER_00: There are people that want to see technology proven out in the market where their competitors and other industry comrades buy it first.
- 12:37SPEAKER_00: You have to get that line of sight.
- 12:39SPEAKER_00: You have to get that clarity because otherwise, you've got to be ruthlessly prioritizing in a startup.
- 12:45SPEAKER_00: We're lean, there's not a lot of resources, there's NSE, NSCR, one seller.
- 12:52SPEAKER_00: And they and you should be spending time where the likelihood of partnership is higher than not.
- 12:59SPEAKER_00: And it's okay for people to want to not be on the bleeding or leading edge of things.
- 13:03SPEAKER_00: Uh, and they can sit back and watch how the market matures and then raise their hand at a point in time when they're ready to adopt.
- 13:09SPEAKER_00: But you know, I'd rather not spend nine months of our team's time learning that until the decision is, okay, we're still two years away.
- 13:18SPEAKER_00: Yeah.
- 13:18SPEAKER_00: How did you have that conversation?
- 13:19SPEAKER_00: How did you bring it up?
- 13:21SPEAKER_00: Just about that abruptly.
- 13:22SPEAKER_00: Really?
- 13:23SPEAKER_00: Do you all like to partner with early stage companies?
- 13:25SPEAKER_00: Uh, why do you like to do that?
- 13:27SPEAKER_00: What do you need to see to get something out of this of value?
- 13:30SPEAKER_00: What are you expecting of us?
- 13:32SPEAKER_00: Uh, very fair questions, especially if someone's going to lean into you and say, hey, what about the product doing this?
- 13:38SPEAKER_00: Or we would need to see this in order to buy the product.
- 13:41SPEAKER_00: So I think at the right level of a of a prospect, at the right buyer, those conversations are necessary and not too uncomfortable.
- 13:49SPEAKER_02: Yeah, yeah.
- 13:49SPEAKER_02: Um, I think early on seems to be the way to go.
- 13:52SPEAKER_02: I worked uh as a startup 10 10 years ago, and we did the first conversation.
- 13:57SPEAKER_02: You know, we we got the excitement up, they were excited about what we're doing, and then we would say, look, you know, not every company can do it.
- 14:03SPEAKER_02: Um, what about the culture of your company?
- 14:05SPEAKER_02: And they would you know talk about that.
- 14:06SPEAKER_02: And then we say, well, but you do you have the appetite to do it?
- 14:09SPEAKER_02: Because not even an individual might want to take it on due to their career, highly established they are, how much risk they feel like they're taking on, things like that.
- 14:16SPEAKER_02: So we we would tackle it from two different angles.
- 14:19SPEAKER_00: I'd add to I would also ask them from what you've seen, how high of a priority is this from you?
- 14:25SPEAKER_00: Um because it's not just the willingness to partner with an early stage startup.
- 14:29SPEAKER_00: All of us have competing priorities, right?
- 14:31SPEAKER_00: You know, the security buyers we're talking to, there's no shortage of startups or or enterprise security vendors that are trying to capture their attention and solve problems they feel they have.
- 14:41SPEAKER_00: So we were pretty deliberate about leaning into the most urgent thing on your list or a curiosity that one day you might seek to solve.
- 14:49SPEAKER_02: Yeah.
- 14:50SPEAKER_02: Yeah.
- 14:50SPEAKER_02: And how did you get those meetings in those first few months?
- 14:53SPEAKER_02: What was working for you?
- 14:55SPEAKER_00: Guerrilla tactics, right?
- 14:56SPEAKER_00: We had an SDR, you know, who was great about getting us in front of people.
- 15:00SPEAKER_00: Uh obviously, you have the network of people from the Prisma Cloud days that we had sold into.
- 15:05SPEAKER_00: You have the introductions from our investors, you have just cold outreach.
- 15:10SPEAKER_00: Uh, we had the look-alikes for we're talking to this person and they have a problem.
- 15:13SPEAKER_00: So others in the industry may have the same.
- 15:16SPEAKER_00: So it was it was all over the place.
- 15:18SPEAKER_00: Uh, and I think you know, we obviously had a very purposeful mindset around sales at everyone's job at the start of this journey, still have that belief where any employee of the company, any introduction they can make where we can position this, get some feedback, and figure out if that's the right conversation for us to be having was useful.
- 15:38SPEAKER_00: And I would say everyone linked into that.
- 15:40SPEAKER_02: Yeah.
- 15:40SPEAKER_02: And take us back to that first order.
- 15:42SPEAKER_02: What was it like?
- 15:43SPEAKER_00: What was that moment?
- 15:45SPEAKER_00: Uh it's a it was a great one.
- 15:47SPEAKER_00: I was sitting at an event in Seattle where a design partner of ours had made uh a multi-year commitment to move forward with us, uh, six-figure multi-year commitment.
- 15:57SPEAKER_00: And we pulled the company together on an all hands, uh, I think it was probably 5 p.m.
- 16:02SPEAKER_00: specific, and uh announced the order and and rang a virtual bell and moved the deal deal forward in HubSpot at the time.
- 16:09SPEAKER_00: Uh we've since modernized our CRM.
- 16:12SPEAKER_00: But you know, it's something I won't forget.
- 16:14SPEAKER_00: It's uh it's a pretty amazing thing when you have those first dollars the company will ever see on the board.
- 16:18SPEAKER_00: And and obviously, you know, I had been there three months at that point, but there had been people that had been building this product for 12 months at that point.
- 16:26SPEAKER_00: So the to see that effort pay off and to come to this conclusion, albeit the first of many, uh, this thing we've built actually has viability in the market was was pretty incredible.
- 16:38SPEAKER_00: Yeah, that's awesome.
- 16:39SPEAKER_00: What a moment, right, for the whole company.
- 16:40SPEAKER_00: Yeah.
- 16:41SPEAKER_02: It was.
- 16:41SPEAKER_02: Um so let's fast forward to today then, Nick.
- 16:44SPEAKER_02: Um you know, as you kind of think about the growth.
- 16:47SPEAKER_02: How many people are in the team right now?
- 16:49SPEAKER_00: Aaron Powell There's 16 AEs on the team and one first line leader.
- 16:53SPEAKER_02: Aaron Powell Okay.
- 16:54SPEAKER_02: Uh and did that first line leader come from inside or did you hire from outside?
- 16:58SPEAKER_00: Aaron Powell from outside.
- 16:59SPEAKER_00: Uh not to say that we won't be promoting some others internally.
- 17:03SPEAKER_00: We've promoted others through the ranks from coming in uh you know SDRs to uh to ICs, but this individual came from the outside.
- 17:09SPEAKER_00: And we'll be expanding the leadership team pretty quickly as well.
- 17:12SPEAKER_02: Aaron Powell Was there one decision as you look back in the last couple of years about maybe the growth of the team that you you made that kind of goes against conventional wisdom a little bit, but it kind of panned out for you?
- 17:24SPEAKER_02: Aaron Powell That's a great question.
- 17:25SPEAKER_00: Um, I I will say we hired in the central US.
- 17:33SPEAKER_00: Uh I think you could have made a couple of bets early, right?
- 17:35SPEAKER_00: So we we've been very good about selling across verticals.
- 17:40SPEAKER_00: But if you look at some startups, you could say concentrate in the West with tech, concentrate in the East with the banking.
- 17:49SPEAKER_00: Um we put a rep in the central US pretty quickly and have had very significant production out of that geography.
- 17:57SPEAKER_00: So, you know, could I have put a second person, a third person in the bay, a third and second in New York?
- 18:04SPEAKER_00: Uh but we decided that with this product having sort of a universal audience, it does well in specific verticals, but anyone can and should use it.
- 18:14SPEAKER_00: That just going to geographies that may have been less progressive adopters of tech has actually worked out for us.
- 18:22SPEAKER_00: Why do you think that is?
- 18:23SPEAKER_00: It's a great product.
- 18:25SPEAKER_00: Um I I there there's the argument could be made that other people aren't going there sooner.
- 18:30SPEAKER_00: So we had a an earlier mover advantage to bring this very modern approach to the problems we're solving to the buyers.
- 18:39SPEAKER_00: Um I think that would be some of it.
- 18:41SPEAKER_00: Uh it's talented individuals, it's it's a great product.
- 18:44SPEAKER_00: But I think you know, you combine those three things and you know it it paid off pretty quickly for us.
- 18:50SPEAKER_02: Aaron Powell Yeah.
- 18:51SPEAKER_02: That's interesting, actually.
- 18:51SPEAKER_02: Because yeah, my my inclination would be to say east and west.
- 18:55SPEAKER_02: I mean, uh one of the dirty secrets is the some of the biggest development teams in the world are actually in financial companies on the East Coast.
- 19:02SPEAKER_02: You know, there's like 15,000 developers at a bank is is is mind-blowing to some people.
- 19:06SPEAKER_00: Aaron Powell Totally.
- 19:07SPEAKER_00: I may just have a soft spot too.
- 19:08SPEAKER_00: I spent you know 15 years selling between Ohio and Chicago and you know the the logos and the partners after a decade plus of doing that.
- 19:16SPEAKER_00: But no, it's uh you know, I think it it it was uh it was a it was a well-placed bet and it's paying off.
- 19:22SPEAKER_02: Yeah.
- 19:22SPEAKER_02: Well, it's kind of a lines that the other thing I'm thinking about is you know, you indoor came in, weren't the first, but one of the early ones in this whole shift-left idea, right?
- 19:32SPEAKER_02: And it was kind of a big buzzword, you know, buzzwords uh two or three years ago.
- 19:36SPEAKER_02: I would imagine there was a lot of noise in the market as everyone was kind of trying to carve out their space.
- 19:41SPEAKER_02: Is there something that you look back that you and the team were doing from a sales standpoint in talk to people that you think enabled your prospects to clearly get what you're doing and and how it was different compared to all the noise they were hearing out there?
- 19:57SPEAKER_00: Yeah, I think the thing that we we we certainly had shift left as a focus.
- 20:01SPEAKER_00: The the more pronounced differentiator for us, and still is, is the concept of reachability.
- 20:08SPEAKER_00: Um we're not the first people to ever claim this idea of reachability and application security.
- 20:13SPEAKER_00: I would argue we have moved the ball forward the farthest, the fastest.
- 20:17SPEAKER_00: But that establishing that principle in our conversations of why reachable vulnerabilities are are critical to look at, that market is you you can hear that messaging more commonly now.
- 20:31SPEAKER_00: Uh and I would argue part of that is in response to the fact that we were pretty clear with prospects and customers that if you have 10,000 problems, but only 100 affects you, and you don't know which 100 that is, you have to get to that destination.
- 20:47SPEAKER_00: So, yeah, we had to uh plant the seeds of what reachability is.
- 20:50SPEAKER_00: It wasn't a well-understood concept, at least in my opinion, two and a half years ago.
- 20:55SPEAKER_00: And then we had to fight the battle of not all reachability is created equal, subsequent to us establishing the principle.
- 21:02SPEAKER_00: So it's been uh, yeah, that was a fun messaging effort to go through in the early days.
- 21:09SPEAKER_00: And now reachability is well understood and it's foundational to everything we're doing, but we've had to again progress into new concepts in software development.
- 21:19SPEAKER_00: I mentioned this AI code assistant thing.
- 21:20SPEAKER_00: It's fundamentally changing the way we think about governing the risks we were helping our prospects and customers solve.
- 21:27SPEAKER_02: Aaron Powell So it sounded like the market was probably asking you about something else, right?
- 21:32SPEAKER_02: I don't know what ability to find things or whatever it might be, and you're saying, yeah, we can do that, but you're trying to shift the conversation.
- 21:38SPEAKER_02: Let's talk about the Zara aspect of this.
- 21:40SPEAKER_02: Um People don't like to be told what to think, though.
- 21:43SPEAKER_02: So I imagine that's uh that's an interesting shift you have to make in there in the discussion.
- 21:47SPEAKER_00: Aaron Powell It is.
- 21:49SPEAKER_00: But I'll go back to the Redlock days where I also want to help you understand the problems you are going to incur before you incur them.
- 21:57SPEAKER_00: Right.
- 21:57SPEAKER_00: Now, the the contrast between Redlock and Endor Labs is Redlock was creating a category and Endor is taking on a category.
- 22:05SPEAKER_00: Application security, it's not new.
- 22:08SPEAKER_00: But to think about the new approach of solving the problem requires some foresight and anticipation.
- 22:14SPEAKER_00: So I need to give you the vision of here's where you need to go, and here's how I can get you there.
- 22:21SPEAKER_00: And part of that is being provocative.
- 22:24SPEAKER_00: But others would call that like this is going to help you avoid touching the stove if you know it's hot.
- 22:30SPEAKER_00: So like let me give you the Collective experience of all the people we've helped and understand how they tackled the problem, what the trade-offs were, and decide if that's right for you.
- 22:40SPEAKER_02: Yeah.
- 22:41SPEAKER_02: It's a tough conversation to manage.
- 22:43SPEAKER_02: Some people are really good at it.
- 22:44SPEAKER_02: It come naturally to them and you say be a little bit provocative and being comfortable doing that.
- 22:48SPEAKER_02: What I hear, what I I don't know if you've heard this or experienced this.
- 22:51SPEAKER_02: What I've heard is, yeah, that might be what the CEO or the founder says, but I'm just a sales room.
- 22:55SPEAKER_02: I can't I can't say that.
- 22:58SPEAKER_02: What's your thoughts on that?
- 22:59SPEAKER_00: I think anyone can say anything if they have the credibility and backing to say it.
- 23:06SPEAKER_00: Now, I learned how to sell this product by sitting in the room with the founder and doing the first 30 or 40 sales conversations.
- 23:12SPEAKER_00: So I may have inherited it in dialogue a bit.
- 23:15SPEAKER_00: But I think if you are truly curious about customer outcomes, this is your responsibility, is to be a source of knowledge for these prospects.
- 23:25SPEAKER_00: It's to help them buy solutions to their problems.
- 23:29SPEAKER_00: And the way you do that is being a subject matter expert.
- 23:32SPEAKER_00: So we may not be the right solution for every company on the planet, but they should understand the pros and cons of what we're proposing very explicitly.
- 23:40SPEAKER_02: Yeah, I think that's right.
- 23:42SPEAKER_02: Like if you got the knowledge and you feel like you understand, then you'll naturally have the confidence to when you say things, it doesn't feel weird to you.
- 23:50SPEAKER_02: But if it feels weird to you, it's gonna feel weird to them, right?
- 23:53SPEAKER_02: So you kind of have to have that, you know, put the time in to learn like that, right?
- 23:57SPEAKER_02: That's probably where where it goes.
- 23:58SPEAKER_00: Aaron Powell And if you don't believe it.
- 23:59SPEAKER_00: Yeah.
- 23:59SPEAKER_00: You know, this isn't uh this can't just be a story you're telling.
- 24:02SPEAKER_00: You have to truly live and experience these things.
- 24:08SPEAKER_02: All right, Nick.
- 24:09SPEAKER_02: Let's learn a little bit more about you personally.
- 24:11SPEAKER_02: Believe it or not, I have 49 questions on my list here.
- 24:15SPEAKER_02: But I have this amazingly, it's actually protected.
- 24:18SPEAKER_02: It's it's such an amazing random question generator.
- 24:21SPEAKER_02: I've got it present uh protected by some sort of quasi-morphic encryption and uh DLP is working so no one can no one can steal it from inside my office or come in and get it through the through the IPS and never IPS I have in my my place here.
- 24:35SPEAKER_02: So let's go ahead and spin the wheel and see what questions we come up with.
- 24:43SPEAKER_02: All right, number nine.
- 24:45SPEAKER_02: How did you make money as a kid?
- 24:47SPEAKER_00: Traditional ways I had a paper out, a cabbie, and one unique one to my geography.
- 24:53SPEAKER_00: I grew up in Speedway, Indiana, home of the Indianapolis 500.
- 24:57SPEAKER_00: And we would go to the track the morning of the race with wagons and pool people's coolers so they didn't have to carry them.
- 25:04SPEAKER_00: And uh that was quite lucrative in that day and age.
- 25:06SPEAKER_02: Wow.
- 25:07SPEAKER_02: So they would show up fully loaded, right?
- 25:09SPEAKER_02: And then he would jump in and say, Let me help you out.
- 25:11SPEAKER_00: And they would leave fully loaded as well.
- 25:15SPEAKER_01: So you would you get uh the the pickings at the end of the day?
- 25:18SPEAKER_01: And a little bit, yeah.
- 25:19SPEAKER_01: I mean 10 or 11 for that, but uh you know, maybe now.
- 25:22SPEAKER_01: All right.
- 25:23SPEAKER_01: And caddying, did you play golf or do you just caddy?
- 25:25SPEAKER_00: Uh I play a little bit, uh, not as much as I liked, and uh, you know, got my start back then.
- 25:30SPEAKER_00: That's awesome.
- 25:30SPEAKER_02: All right, let's go with the next one.
- 25:32SPEAKER_02: Let me spin the wheel.
- 25:37SPEAKER_02: All right, number 29.
- 25:39SPEAKER_02: What's an embarrassing or memorable moment in your sales career?
- 25:45SPEAKER_00: One stands out.
- 25:46SPEAKER_00: My first job, I was in office equipment at a time when digital imaging was coming around and people wanted to convert, you know, hard paper to digital images.
- 25:53SPEAKER_00: We did a huge study at the manufacturing plant.
- 25:56SPEAKER_00: We go in, present the study to the CFO.
- 25:59SPEAKER_00: Uh, it's my first huge study.
- 26:01SPEAKER_00: He says, This is great.
- 26:02SPEAKER_00: I'm ready to sign.
- 26:03SPEAKER_00: We didn't have any order forms.
- 26:05SPEAKER_00: We thought we were presenting some outputs uh and didn't quite go for the close.
- 26:10SPEAKER_00: So uh later me would have learned better.
- 26:13SPEAKER_00: But that was a pretty noteworthy lesson for me earlier in my career.
- 26:16SPEAKER_00: Did you whip by the napkin and say, let's just use this napkin?
- 26:19SPEAKER_00: True story.
- 26:19SPEAKER_00: Had three-part forms on us, and we sat in his office, filled them out as he waited, and inked the deal before we left.
- 26:25SPEAKER_02: Oh, the days of uh triplicates, right?
- 26:28SPEAKER_02: That's right.
- 26:28SPEAKER_02: All right, let's spin the wheel one last time.
- 26:36SPEAKER_02: Number 42.
- 26:37SPEAKER_02: What is the story behind you getting your first job in cybersecurity?
- 26:42SPEAKER_00: Cold emails from a recruiter, which is not that unique.
- 26:46SPEAKER_00: I'll give a fun anecdote.
- 26:48SPEAKER_00: One of the parts of the interview process was to write a research paper on, I believe it was deep sea mining or deep sea treasure hunting.
- 26:56SPEAKER_00: Wait a minute.
- 26:57SPEAKER_00: Write a write a research paper.
- 26:58SPEAKER_00: Yeah, write a two-page paper on treasure hunting, deep sea treasure hunting, something to the effect.
- 27:04SPEAKER_00: And I actually cold emailed some professors that were teaching the subject.
- 27:08SPEAKER_00: And when I went into review this with the uh president of the company at the time, he asked me, Did you actually email these people and do this interview?
- 27:17SPEAKER_00: And I said, I did.
- 27:18SPEAKER_00: And he goes, Okay, you're getting the job.
- 27:20SPEAKER_00: That's awesome.
- 27:21SPEAKER_00: So apparently no one had ever thought to talk to humans on the subject.
- 27:25SPEAKER_02: Wow.
- 27:25SPEAKER_02: And of course, these days it would be a uh a five-minute uh deep research task in Gemini or ChatGPT for your report.
- 27:33SPEAKER_00: If if that, and and probably better written than the one I put together.
- 27:36SPEAKER_00: Oh well, almost certainly.
- 27:38SPEAKER_02: Oh, that's awesome.
- 27:39SPEAKER_02: Well, uh, start of a big career, a big career switch.
- 27:41SPEAKER_02: Was it a natural thing for you to do, or do you just think, oh, I'll give it a go?
- 27:46SPEAKER_00: No, uh, it was lucrative financially and more lucrative than what I was doing.
- 27:50SPEAKER_00: Uh I was uh I was doing sales at the time, and this was a bigger brand and a bigger opportunity.
- 27:54SPEAKER_00: So that was really the first, my first just an individual contributor job at a at a well-known cyber company.
- 28:04SPEAKER_02: You mentioned outcomes there, Nick.
- 28:06SPEAKER_02: I'm I'm almost fascinated by this is that you know when I think about what Endor does, it's it would seem like to me that it could very quickly get a very technical sound, right?
- 28:17SPEAKER_02: You're talking potentially to developers who are hands-on keyboards and then development leads and people like that.
- 28:22SPEAKER_02: And yet you mentioned outcomes.
- 28:24SPEAKER_02: So you know, there's also the business side to this, what we're actually trying to help this company achieve.
- 28:27SPEAKER_02: I'm wondering anything you've learned in the last couple of years about how to navigate the need to keep people happy with the the features and capabilities, but also to keep focused on what we're trying to achieve here that the company cares about.
- 28:40SPEAKER_00: Yeah, I I I think it's separation of church and state.
- 28:43SPEAKER_00: Like we have a highly technical product and a highly technical evaluation.
- 28:48SPEAKER_00: But none of that matters if the objectives of that aren't mapped to some business outcomes.
- 28:53SPEAKER_00: So when I'm conversing with someone, I'm trying to understand why are we we in the room together, right?
- 28:58SPEAKER_00: So what pain do you have today?
- 29:00SPEAKER_00: What problems do you seek to solve?
- 29:02SPEAKER_00: Tremendous partner running our customer solutions team who can then help paint a picture of how we can demonstrate our proof to you technically.
- 29:10SPEAKER_00: But you know, ultimately as sellers, our our job should be to be adept enough to speak to the technical considerations of the product, but tie all that back to business value, right?
- 29:20SPEAKER_00: CEOs and and even CISOs aren't buying the widget of my product, they're buying what outcomes I improve in their environment.
- 29:28SPEAKER_02: Yeah, that's a that's a tough thing to I find it tough for see I see sellers find it tough to do that pretty well, right?
- 29:34SPEAKER_02: Because I think you know, traditionally, I think it's changed maybe a little recently, but traditionally, you know, cybersecurity sellers were product salespeople.
- 29:40SPEAKER_02: You know, there was always products.
- 29:41SPEAKER_02: Well, I I sold a firewall, I've sold a web gateway, I've sold an email, whatever it might be, right?
- 29:45SPEAKER_02: And then suddenly it's well, you've got to do that, but you've also got to be able to hold your own with someone with C in their title and aligned to business needs, things like that.
- 29:53SPEAKER_02: It's it's not always that easy to do.
- 29:55SPEAKER_00: I couldn't agree more.
- 29:57SPEAKER_00: And I think you know, it you you shouldn't be serious enough again to to speak to the technical aspects of your product, but you have to speak the language of your audience.
- 30:06SPEAKER_00: And if that audience is deeply technical, then that's when my solution architects have come in.
- 30:10SPEAKER_00: And if it's uh C-level executive that has a question on why this proposal is on his desk, should be prepared to talk about that.
- 30:16SPEAKER_02: Yeah.
- 30:17SPEAKER_02: Yeah.
- 30:17SPEAKER_02: Now you you said you got up to 16 in the team right now.
- 30:20SPEAKER_02: I almost feel like that five to ten uh you know range of sellers is kind of a point, right?
- 30:26SPEAKER_02: It's a natural thing.
- 30:27SPEAKER_02: Okay, we need to kick a bit more coverage if we hire a few people, and then it's like, okay, where do we go from here?
- 30:32SPEAKER_02: Any learnings about how to kind of keep going through and and and uh and growing up to 16 as you were doing that that you were a little bit surprised about?
- 30:40SPEAKER_00: I think a few things.
- 30:41SPEAKER_00: One is how critical enablement is in the process.
- 30:44SPEAKER_00: Um, as I described, I got to be in the room virtually with Varun for the first dozens of sales conversations, and then you bring a few sellers on board, two or three, and you personally enable them, you walk them through how to pitch the product and how to do the demo and how to do discovery, and they learn from you.
- 31:02SPEAKER_00: And then the next three learn from those three.
- 31:04SPEAKER_00: Uh, but all of a sudden you're a few degrees removed from how people go to market with your message, with your playbook, with all these things.
- 31:15SPEAKER_00: So, you know, the lesson we've learned is to document and iterate this quickly.
- 31:21SPEAKER_00: Uh, and I have tremendous partners in sales ops and revops and enablement to build this out.
- 31:27SPEAKER_00: Because I think otherwise it the game of telephone starts to lose something.
- 31:31SPEAKER_00: And you can quickly get to a point where folks are sort of saying the same thing, but it's not the company message.
- 31:39SPEAKER_00: So and that's just been critical for us is making sure that everybody can come in and very effectively grasp what we do, how we do it, how we're different, what our process is, uh, and we're making a lot of investment in that right now.
- 31:51SPEAKER_02: Aaron Powell, I call that go-to-market dispersion, right?
- 31:53SPEAKER_02: You know, you ever starts here, and as you bring people in, they bring their own secret sauce, right?
- 31:58SPEAKER_02: They're successful for a reason.
- 31:59SPEAKER_02: But then suddenly before you know it, you've you've got this dispersion in messaging and how to position things and how to have a discovery conversation that's affect before you know it, when you're trying to build a repeatable model, you're wondering, well, why is why are my new hires not being as successful as my new hires from last year?
- 32:15SPEAKER_02: That's that's partly the reason why.
- 32:17SPEAKER_00: Yeah.
- 32:17SPEAKER_00: And then and you know, being realistic, there's also a volume aspect to this, which is you know, you can sit in on two or three reps deals and calls in the first meetings.
- 32:25SPEAKER_00: You can't at 10 or 16 or 12.
- 32:29SPEAKER_00: So how do you build the model to be giving you the feedback loops you meet and you know correcting things that need to get corrected and highlighting positive things?
- 32:40SPEAKER_00: So that that's something that we just continue to think about.
- 32:42SPEAKER_02: And it sounded like you brought in an innovative person already.
- 32:46SPEAKER_02: Is that right?
- 32:47SPEAKER_02: We did.
- 32:47SPEAKER_02: Yeah.
- 32:47SPEAKER_02: How how soon did you do that in the terms of numbers?
- 32:50SPEAKER_02: And how did you position that to Varun to say this is something we need to do?
- 32:53SPEAKER_00: Aaron Powell Yeah, I I think when we got to, we started looking at maybe the 10-11 rep mark.
- 32:59SPEAKER_00: Um and it was exactly this, which is we need to standardize all we go to market, what we say, how we say it, who we say it to, uh, the sales process.
- 33:09SPEAKER_00: We did some work on getting more structured and defined with our sales stages and entry and exit criteria.
- 33:15SPEAKER_00: And it's one thing to build those things, but it's an entirely different one to reinforce them because we are going to launch, we launched a very massive launch at RSA.
- 33:24SPEAKER_00: Okay, well, what's the messaging look like that?
- 33:26SPEAKER_00: How do I enable the sellers to internalize what this is, who I say it to, contacts.
- 33:31SPEAKER_00: Um, so we did it at, again, I'll call it the 11 or 12 rep mark.
- 33:36SPEAKER_00: And I would probably say if I was pressed to do it again, I would do it sooner because the impact of these programs we're already seeing in how we can help everyone be more successful.
- 33:49SPEAKER_02: I I'd encourage uh sales leaders, CEOs who are listening to this.
- 33:53SPEAKER_02: Um, Black Cat's coming up in you know two, three months now.
- 33:57SPEAKER_02: If you want to understand the nature of this problem, go to a booth and go to it three or four times over a couple of days, pick a different seller or different person you talk to and ask them, hey, what do you guys do?
- 34:09SPEAKER_02: And ask them, how are you different to others?
- 34:11SPEAKER_02: And I guarantee you you will get very conflicting messages from those people nine times out of ten.
- 34:19SPEAKER_02: And you can tell which companies have invested a little bit in this because you see them much more on point and much more effective.
- 34:25SPEAKER_02: And those that just either don't know or aren't able to invest, it really does have a profound impact.
- 34:31SPEAKER_00: Aaron Powell I would actually tell them don't do that because you'll be alarmed.
- 34:33SPEAKER_02: So uh There must be a market for a secret shopper, right, who goes around and says, okay, I'm hired by these 15 companies.
- 34:40SPEAKER_02: I'm going to go up to their booths at different times and see how how far off message they are.
- 34:44SPEAKER_02: Trevor Burrus, Jr.
- 34:44SPEAKER_02: It's not a bad that's not a bad startup idea.
- 34:46SPEAKER_02: Trevor Burrus It's hard work though.
- 34:48SPEAKER_02: You have to kind of go through it.
- 34:50SPEAKER_02: But it is it's rife though.
- 34:51SPEAKER_02: I mean, it's a and I think that's very forward-thinking of you guys to even the 10 or 11 sellers do that.
- 34:56SPEAKER_02: I think a lot of companies struggle with it.
- 34:58SPEAKER_02: Um I was actually on a somehow I got forwarded a thread.
- 35:03SPEAKER_02: It was uh it was CEOs at one of the major VCs in their kind of little world.
- 35:09SPEAKER_02: They were, they have obviously some sort of, I don't know, as a Slack group or a messaging thread or whatever.
- 35:13SPEAKER_02: And this founder, the CEO, said, you know, I I'm I'm really loath to invest in enemies.
- 35:19SPEAKER_02: Isn't it a job of the sellers?
- 35:22SPEAKER_02: We paid them a lot of money to go and you know skill up and get knowledgeable and all the rest of it, right?
- 35:27SPEAKER_02: And uh this other CEO who's pretty well known at a well-known company came in and said, Look, here's the reality.
- 35:33SPEAKER_02: You know, if you throw things over the fence to salespeople and expect them just to all pick up the right things in the right way and do it from there, it's not that they don't learn, it's just they'll all learn different things from your three-page document, right?
- 35:46SPEAKER_02: And unless you've helped them figure out, no, this is the way to actually take all this, you're relying too much on translation to be uniform and it's not.
- 35:53SPEAKER_02: It's just not the way humans work.
- 35:54SPEAKER_00: Aaron Powell Yeah.
- 35:55SPEAKER_00: And I think there's also the consideration that these great enablement professionals have is people learn differently, right?
- 36:01SPEAKER_00: Are you visual?
- 36:01SPEAKER_00: Are you auditory?
- 36:02SPEAKER_00: Do you want to see things?
- 36:03SPEAKER_00: Do you want to experience things?
- 36:04SPEAKER_00: So how do you make this approachable for everyone?
- 36:08SPEAKER_00: And you nailed it.
- 36:09SPEAKER_00: I can send a 10-page PowerPoint out to my team and say, hey, here, internalize this, but they're still going to come out with 10 different opinions on it.
- 36:16SPEAKER_00: So uh you know, you have to get structured and consistent with these things.
- 36:20SPEAKER_02: Yeah.
- 36:21SPEAKER_02: Well, Nick, I'm looking at uh your announcements at uh at RSA just a few weeks back.
- 36:25SPEAKER_02: Two actually, was it two weeks ago now?
- 36:27SPEAKER_02: Wow.
- 36:28SPEAKER_02: Um we were just talking two weeks now, everyone's recovered from the bugs and lurgies they brought back from San Francisco.
- 36:34SPEAKER_02: I was one of the lucky ones that I got away pretty much uh free, which is nice.
- 36:38SPEAKER_02: But you know, big announcements from Endor, uh one of which was uh in the same time frame, you you you you find uh be around at$93 million.
- 36:47SPEAKER_02: So you're walking around with all this cash stuffed into your pockets.
- 36:50SPEAKER_02: What's the plan for the go-to-market team this year in terms of investments and what you're trying to achieve?
- 36:55SPEAKER_00: Yeah, I mean, bro, uh bro, reasonably, right?
- 36:59SPEAKER_00: I think uh this is not a blank check to go be reckless and just expand beyond what is uh what is appropriate, but it gives us an opportunity to double down on a lot of stuff that's working very, very well.
- 37:11SPEAKER_00: So obviously head count is 16 today.
- 37:13SPEAKER_00: That will go up.
- 37:14SPEAKER_00: We had a major, major product announcement.
- 37:17SPEAKER_00: So I think just thinking about the channels and how we accelerate the messaging and the marketing around what we feel is just a critical time in application security.
- 37:26SPEAKER_00: Uh so that the timing was really appropriate and that organizations are going to have to tackle this evolution of what AI assisted software development means for them.
- 37:35SPEAKER_00: And we talked about it at the beginning with the volume of code and the quality of code going in opposite directions.
- 37:40SPEAKER_00: And it's a board level and a C level conversation in all of the businesses we're having.
- 37:45SPEAKER_00: So we need to be prepared to go assist and participate in those conversations.
- 37:49SPEAKER_00: And the B, in addition to us, you know, hiring more people to build these great products and market these great products and sell these great products, it'll hopefully capitalize on that.
- 37:59SPEAKER_02: All right.
- 37:59SPEAKER_02: And if someone is interested in hitting you up to see if you're looking for quality talent in their area, what's the best way to reach out to you?
- 38:06SPEAKER_00: You can find me on LinkedIn, uh NickLebuzz or uh and your labs.com.
- 38:11SPEAKER_00: We have all of our openings available.
- 38:13SPEAKER_00: And as as you may guess, we are always hiring.
- 38:16SPEAKER_02: That's awesome.
- 38:16SPEAKER_02: Well, Nick, we're rooting for you this year.
- 38:18SPEAKER_02: Be awesome to see that uh that that that curve continue to be a straight line up and to the right.
- 38:24SPEAKER_02: Uh really impressive uh development over the last two or three years, you guys.
- 38:27SPEAKER_02: Awesome.
- 38:28SPEAKER_00: Yeah, thank you.
- 38:29SPEAKER_00: This was great.