Latest / Identity at the Center / #166 - 2022 Gartner IAM Summit - Hed Kovetz with Silverfort

Transcript

#166 - 2022 Gartner IAM Summit - Hed Kovetz with Silverfort · Identity at the Center

0:09
You're listening to the identity of the center podcast, this is
0:13
the show that talks about identity and access management
0:15
and making sure you know who has access to what let's get
0:18
started. Welcome to the identity of the
0:26
center podcast I'm Jeff and that's Jim.
0:27
Hey Jim hey Chef, how are you not too bad yourself?
0:30
Good broadcasting here from the RSM podcast.
0:34
Sweet here in hot. Las Vegas is very hot.
0:38
Not so hot in here though. I've kept it real cool.
0:41
Yeah, but we've been doing this series when the I am Summit here
0:47
in Las Vegas and it's been fantastic.
0:50
Having those podcasting sweet. Really excited about the Sun.
0:54
And that we have here today, we're going to talk about, ITT
0:58
are ya identity, threat, detection, response.
1:00
Help us with that conversation. We've got head Cadets, he's a
1:03
CEO and co-founder at Silver for welcome head.
1:06
Hey, great to be here. Yeah, thanks so much for taking
1:08
the time and so we have tradition here.
1:10
When we have someone on the show, we have to find out about
1:13
their identity origin. Story is identity, something
1:15
that you chose or did it Choose You?
1:19
It's a good question. You know I kind of went into the
1:24
whole cyber security space like a lot of Father you know, easily
1:29
alleys in this space to the to the minute of 8,200 unit before
1:35
that, I thought I'm going to be an artist.
1:37
I didn't even think I'm going to go into Tech but when I was 18,
1:41
you know, 8200 just bought me in and I loved it.
1:45
I stayed up for six years. It was a group leader.
1:48
It's five teams though doing like cybo campaigns and then
1:54
after that walked for governments on similar things.
1:57
So you know, because I had this experience with, let's say the
2:02
offensive side of security, it became very clear to me that at
2:06
the end of the day, I mean everybody's talking about
2:09
zero-day attacks and fancy things, but if you want to
2:11
tackle identity is just the easiest way in and it's almost
2:17
crazy. How easy it is.
2:20
Like if you really want to go like, bleach into a network of
2:23
move laterally inside of it. Why would you bother do anything
2:27
else? It's just so easy and exposed
2:31
and that, that drove me to find you.
2:34
Think about why is it like this? I mean obviously there are a lot
2:37
of solutions. So that, that is what attracted
2:40
me to the space is knowing that those such a clear problem.
2:44
And even though there are hundreds of Solutions in the
2:46
market, the problem is not solved still the majority of
2:48
data breaches involved stolen identities.
2:51
So why is that? And is there any way to do it
2:54
differently? That's something that I taught a
2:57
lot about and, you know, really want to do something on the
3:00
time, I'm very glad they did. So this space called identity
3:05
threat detection or spots. I TDR, I feel like this Maybe it
3:09
was started with you be a at some point in the past and maybe
3:11
it's evolved or maybe I'm not thinking it in the correct terms
3:14
but that's why we got you here to help educate myself and
3:17
others. What is itd are in your
3:21
perspective? So for a long time, identity
3:24
security was kind of mixed into just I am identity
3:29
infrastructure. You know, if you have an I am
3:33
platform. It has some security features,
3:35
obviously. But I think we got to a point
3:38
where because there are so many attacks that are leveraging,
3:40
stolen identities and credentials, people are
3:43
realizing that we need to look at identity security as a
3:45
standalone thing that we have to solve.
3:48
And it kind of can't be a feature in that identity
3:52
platform because most companies have a few different identity
3:56
platforms. They have, they have active
3:57
directory, on-prem, and they have a GED or OCTA in the cloud.
4:02
And they have something for the privileged access management and
4:04
they have something in the perimeter and all of these all
4:07
from different vendors that Are competing with each other.
4:10
So there has to be a standalone category or solution that would
4:16
look at identity threats across all these things and really
4:20
focus on on the securing the identities, securing these this
4:26
this attack surface that people I think for a long time didn't
4:28
really think about it as a major attack surface.
4:30
But it is, you know, one of the biggest we see that with every
4:34
rainstorm or attack. All right.
4:36
We'll it just spreads in the network.
4:38
So easily, no matter what kind of security tools you have
4:41
simply because you can take, you know, stolen account for active
4:45
directory, and use it to move to any other computer in the
4:48
network. Nobody will stop you.
4:50
So I TDL is really about detecting and stopping this
4:54
disease, entity threats and looking at identity as an attack
4:57
surface. Yeah, to me this, the whole itg
5:01
are explanation that you just gave is really what we call
5:06
identity at the center. So if you think about the name
5:08
of this Broadcast is the idea that you have all these tools
5:11
throughout the network. Some of them are identity tools.
5:14
Some of them are other tools like you gr but that identity
5:18
and tying off who the person is, who has a counseling, all those
5:21
environments as touching. All those environments doing?
5:23
All those things ties back to a person and if you have that
5:27
intelligence and you can take action, you know, that's a big
5:31
thing. It's not just throwing a bunch
5:33
of alerts, right? It's being able to take action.
5:35
So I want to take a step back. We could be because you have a
5:39
booth here. So you're getting to interact
5:42
with a lot of identity practitioners, the people who
5:45
listen to this show. I'm wondering.
5:47
What are those people asking you at your booth about your
5:51
products about itg are, are they at the point where they really
5:55
have a firm understanding or they just kind of Dipping their
5:58
toe in the water of what the space is all about?
6:01
I think most of them don't understand it yet.
6:03
And this is by the way, why we have time to talk about what we
6:06
actually do. Instead of just putting a title,
6:10
you know, itdo it's kind of similar to how a lot of vendors
6:13
are using zero tasks as the title ID.
6:16
It's a concept, it's a framework is a very important.
6:18
One eye to the other as well, but we should talk to customers
6:23
about what is it that we actually do?
6:25
What is the solution? How does it work?
6:28
So that's what we try to do at the person.
6:29
People really get it feel like people respond to it very well.
6:33
We had hundreds of good conversations here.
6:36
I did a session that, you know, a lot of People came to talk to
6:40
me after we also had, you know, I was very glad to find out that
6:46
some point that Andrew cannon from General Motors did a
6:49
session about their whole strategy for identity security
6:53
and 0 tasks. Any yet a whole slide with our
6:55
we are like the missing piece because they're one of our
6:58
customers. That obviously got a lot of
7:02
people to come to our boussinesq.
7:03
You know, how can we do the same?
7:05
That's a good. Get, you just expand it in a way
7:07
by the way. I think expanding way that this
7:09
is better than how I do it in certain ways, just so simple.
7:13
By the way, I think in general, that's what the industry needs.
7:16
Much much simpler explanations that are much more
7:19
straightforward without a lot of marketing fluff.
7:21
Like this is what we do, this is how it plugs into your existing
7:25
Solutions and this is what you get and that's what I'm trying
7:28
to do. I feel like every year it's a
7:30
fort or story became become simpler instead of adding more
7:35
and more complexity. It's actually a simple story
7:37
every year and it just works. Well, that's been a theme.
7:39
I think, for this conference, we've seen some of the Keynotes
7:42
were around storytelling and sort of human element and
7:44
Distilling things down into simpler easier to understand
7:49
Concepts. Because if you can't articulate
7:50
what it is that you're doing. If a very difficult time,
7:53
getting any traction, especially, because there's so
7:55
many vendors and I do think we're doing something very
7:58
differently. So if we just use the same terms
8:00
like everybody, it's all designed to really explain what
8:03
is it that we do? And by the way Jim I think that
8:06
you hit on exactly these two things.
8:08
It's before the that I TDL needs to evolving because I mean, you
8:15
guys are right in many ways, this is just, this could be just
8:19
trim blending of some existing things like Huey, be a, but I
8:24
think it will not think it will be much more than that, and it's
8:26
especially because of two changes that I think.
8:29
And I hope I did. I will blink versus the old.
8:32
You know, Huey be a about one is the response.
8:38
Which I think a lot of people are still trying to figure out
8:40
what is that response, but it cannot be about detecting
8:44
anomalies in sending alerts to the same.
8:47
The last thing people need is a more alerts.
8:50
Nobody, I mean, they said, there's a shortage in talent in
8:54
the market. Nobody has enough people to
8:55
handle all these alerts. It has to come with some kind of
8:59
real-time automated response that will stop the attack.
9:03
Especially when were talking identity attacks, they are so
9:06
fast. When you got an attacker in your
9:09
network with a domain admin account, they will take over
9:14
your network, you know, within an hour they will not wait until
9:18
you get a bunch of a little to your serum and you go
9:19
investigate them and it will it's way too late.
9:23
So I think the response part is what a lot of the solutions.
9:27
Started as mobile fed detection, tools will now need to evolve
9:31
in. And that's I think one of the
9:32
managers will be where we innovated.
9:35
And the second is has to be course platform.
9:39
It cannot be something that works only for the cloud or only
9:42
for the on-prem. Only for one type of users.
9:46
It has to be across the board, by the way, that is in my
9:49
opinion, the biggest failure in identity security.
9:53
Until now, if you think about it identity is one of the only
9:57
Categories. Well, security is just a feature
10:00
inside the infrastructure platform, right?
10:03
So, if you got a jewel and you're using the security
10:05
features for the identities of using achter de of Dell security
10:08
features in other categories Securities, it's not like that.
10:12
Think about endpoint security you by your endpoints themselves
10:18
from one vendor or fulfill, you know, Lenovo HP Dell, you don't
10:22
buy endpoint protection from each of them, that only works
10:25
for their own endpoints. You go to Vendors that
10:28
specialize in endpoint security and you buy a solution that
10:32
works, on top of all the platforms, all the laptops, same
10:36
with network, you can buy network security solution,
10:38
regardless of what kind of switches and routers, you have.
10:40
It's a security solution that works everywhere, but identity
10:43
is not in identity. If you have five different
10:47
platforms for identity because your hybrid multi-cloud,
10:51
whatever, Each of them has its own security features within the
10:56
infrastructure. Those actually not I mean I
10:59
think I think we are but I think those not a good solution all
11:03
the hasn't been for a long time. That is really a security layer,
11:07
the track on top of all of them because they are competing with
11:09
each other Michael's of dr. Ping Starbuck they will not
11:12
allow the other one to apply policy on their platform.
11:16
Right. Each of them is only doing its
11:18
own thing, looking at their own piece of the puzzle.
11:20
And we'll trying to be the new ciao.
11:22
Security layer on top. And this is why I think I did.
11:26
L is such an important thing because identity security has to
11:31
stop being just a feature in the infrastructure.
11:33
It has to evolve into something separate from I am gets on
11:37
capability, essentially? Yeah.
11:38
Because it has to be Standalone. It has to be something that
11:41
works on top of old identity platforms.
11:44
So I'm kind of wondering like, who from an organization then
11:47
identifies that there's a problem that needs to be solved.
11:50
Is it the folks that run? On the EDR and realize that,
11:54
wow, we're not getting all the data that we need.
11:56
This is the folks from the, I Am side that realize that we're
12:00
managing identities and all these different places.
12:03
And we just have to be able to kind of make what's happening
12:07
over here. And we need to be able to flow
12:10
our actions positive or negative two, other places where that
12:16
identity has access. It's a great question.
12:19
And I think it illustrates exactly the problem I just
12:21
mentioned, because Think about it right now in companies you
12:25
got I am teams. What is that exactly?
12:28
Is that infrastructure? Is that security for end point
12:32
it's clear right? You got one team managing the
12:35
end points themselves from an IT perspective and you got another
12:38
team doing endpoint security. Why is the identity one team
12:44
sometimes? Reporting to the Seesaw,
12:45
sometimes reporting to the CIO to the city, oh, but it's one
12:48
team that has to take care of the infrastructure and the
12:50
security. These are two separate things.
12:53
Right now we are seeing companies from, you know, some
12:56
companies have it on the right tea and then these people
12:58
usually kill more about, you know, the the infrastructure
13:01
side, some companies have it on do security.
13:04
But I think that, I hope that as this Market evolves.
13:08
And as identity security, right EDR.
13:10
Become a separate thing from I am infrastructure.
13:15
Companies were also evolved and have separate teams that are
13:18
doing, identity infrastructure, and identity security.
13:22
But right now, it is confusing. And yes, sometimes it's coming
13:25
from people who like, the endpoint team or the stock team,
13:29
or but it shouldn't, you know, identity is important enough to
13:34
have a team dedicated to identity security specifically,
13:38
some companies have them, but usually, very large ones.
13:41
So, so, as I TDR, A product class, like IGA or is a
13:47
framework like zero trust. It's a good question.
13:52
I think that in many ways, it's a flame Oak, I think a lot of
13:56
different solutions will now say that they'll doing it DL.
14:00
Because in many ways they are all of these.
14:03
Like, if you're doing, you know, MFA or Pam or many of these
14:07
other things in many ways, you o, part of idea.
14:12
But I do think that idea is more about the brain that controls
14:17
all of these different things, right?
14:19
So yes, you got em f. You got Pam, you got, you know
14:23
monitoring you got all these different things, but there has
14:26
to be something in the middle, which this is what how I think
14:29
about idea like the brain that the Plies, all of these controls
14:34
in the right time. So if we detect something that
14:35
looks like lateral movement or like an anomaly, okay, maybe we
14:38
then call the MFA, by the way. The MFA doesn't even do need to
14:42
be part of our platform. We, for example, walk with all
14:45
the MFA vandals, if we detect a threat in the network, we will
14:49
they go do. I will take out the Azure MFA?
14:51
Will to go OCTA. It doesn't do to be a part of
14:54
it. What we are is really the policy
14:56
engine, the ones that detect the traps and decides what is the
14:59
right response to it? Is it to trigger MFA?
15:02
Is it to block the user? Is it sending an alert?
15:06
You know, there are many things you can do and they they don't
15:08
necessarily have to be part of the itd.
15:11
How policy engine, they can be things that companies already
15:15
have. We're saying to customers a, you
15:17
already have MFA. Just like now you're using it as
15:21
a pretty simple control. That sits on your perimeter and
15:24
maybe your Cloud applications how'd you like to take this
15:26
existing MFA solution that you already have an extended into
15:31
the place as well attacks actually happen within the you
15:34
know the identity infrastructure, all these things
15:37
that the MFA Solutions don't cover you know, command line,
15:41
tools and Industrial Systems. And you know all these foul
15:45
shells and on-prem particles that end.
15:49
Just doesn't walk Focus right now, it's all in the VPN in the
15:52
cloud applications web apps. But you don't need to replace
15:57
it. We're just extended to these
16:00
places. We're bring the modern security
16:02
into the places where he doesn't walk the Legacy systems.
16:05
The service accounts, the infrastructure So in a way I
16:09
did, the other is just, it's the policy engine of the brain.
16:14
That enforces, the security control that you might already
16:16
have. When it's the right time in the
16:18
right place, I think you have the policy won't.
16:21
One thing I was thinking about there is that, you know what?
16:24
I think about IGA system implementation, especially like
16:28
10 years ago. We're automating a lot of things
16:31
that were happening manually, right?
16:34
So, the business result was we were reducing the The
16:38
organization by doing things in an automated way.
16:41
We didn't have to have people running around and provisioning
16:44
access or you know, exporting Excel files and somebody else
16:48
turning them into an access for you.
16:50
But I think what you're talking about with ITT, are these are
16:53
things that don't happen today. So this the business result is
16:57
reduction in Risk. You actually now have visibility
17:00
into security data that today, you do not have these things are
17:06
happening, but you can't do anything about it.
17:08
It is why do we? I think the most exciting thing
17:11
about itdo even as you know as opposed to other types of
17:17
detection response tools that are not on the identity is that
17:22
if you're talking about detection response outside of
17:24
identity, the response is actually pretty limited.
17:28
What you can do is usually Send an alert, you know, and do
17:33
something retroactive, which is not great because nobody can
17:36
handle these alerts. And you're missing the actual
17:37
attack or you can block, you can block the endpoint, you can
17:42
block the, the network access, you know, something that is very
17:45
aggressive, you don't want to do that.
17:47
Because most of the detection today is not necessarily
17:50
accurate, right? You get a lot of false
17:51
positives, so, you know, nobody wants to do that.
17:54
So this choice between sending an alert or doing something very
17:58
aggressive, is all you got when you're talking detection
18:01
response, outside of identity. But in identity, you got a third
18:05
option, you can step up the authentication.
18:08
That's a great option because everybody's used to it.
18:11
I'd getting an MFA Pompton saying.
18:13
Yes, this is me almost two years, 22 years to it.
18:16
By the way, they're going to do it less with idea because
18:20
without i.d., all they need to do it.
18:21
Every time they log in, we fight it out, they only need to do
18:24
When we think the count is may be compromised.
18:27
So it's actually less annoying and maybe they will be less
18:30
automatically you know, right? Clicking on it.
18:33
By the way, the other solutions for that, we have a whole whole
18:36
block about that too. But the thing is step-up
18:41
authentication as a response tool in many ways, is the most
18:47
effective one, because you're basically, letting the usual
18:50
tell you, is it you or not, why have the stock team
18:53
investigates? Thousands of alerts.
18:55
If we can simply ask the user is it, you can you prove it and
18:59
within one click they will tell us.
19:01
Yes, it is me and you're just annoying me for no reason.
19:05
And please don't don't do it again and we can actually learn,
19:09
we can train the algorithm. You know what, maybe for you.
19:12
It is normal to login in the middle of the night from, you
19:15
know, from another country. Maybe for you, it is normal to
19:18
connect, 25 databases in all the weekend, if you can prove it
19:23
that it's you. We can train our algorithms to
19:26
understand what is normal. That's something you don't get
19:28
with regular you. A ba doo ba, you know,
19:31
theoretically, we can train it, but nobody does here.
19:34
It's almost like you are crowdsourcing your alerts to the
19:36
users, right? Let them tell us.
19:39
What are the two positives? If I can tell the stock Team?
19:43
All of these thousands of anomalies that I taught, or
19:46
maybe another security product taught that are risky.
19:49
You know what? We actually ask the users and
19:52
these are the five were the user.
19:54
Couldn't prove his identity. These are your real incidents,
19:57
and by the way, we block them, we didn't let them too, but you
20:00
can now focus on these five all the rest of them.
20:04
You know what we target? Step-up authentication, the user
20:06
told us that same. It's much, much less risky.
20:09
Let's focus on the ones. We couldn't, this is unique to
20:12
Identity. You don't get that with any kind
20:14
of other detection response. At the end point that the
20:16
network are sorry, as I think I did the others, even a bigger
20:19
potential, the detection response to other platforms and
20:23
forces the You give another words, we found a potential bad
20:28
actor shut that bad actor off. Whereas what you're talking
20:31
about is now we can do Step Up. We've confirmed a positive.
20:36
Now, we can actually, you know, reduce that risk to our so that
20:40
the user has a has less friction throughout their journey.
20:45
I wanted to shift off exclusive is really generously trying, but
20:48
there was one more thing I wanted to hit, which, is this
20:51
itd, our space, it's just becoming He is entering my
20:56
Consciousness, right? So it's kind of like new for me,
20:59
anyway, and I'm kind of tracing it back to the Gartner hype
21:03
cycle, right? Because I think if you look at
21:06
product like single sign-on, IGA privileged access management,
21:12
it's gone all the way through the hype cycle is probably at
21:14
the what they called the plateau of productivity.
21:17
You look at zero trust it's kind of like gone through it.
21:20
And now it might be, you know, might start at some point is
21:23
going to get into Us. Trough of disillusionment.
21:26
And the reason I say that is not because to put down zero trust,
21:30
I think 0 trusses fantastic. But if there's the mentality
21:34
that hey I'm just going to be able to Cobble together some
21:37
products or maybe by one Suite of products in b0, trust.
21:41
That's the joke. That's not what it is.
21:43
So, what I wanted to ask you is, where is ited?
21:48
Are in this in this hype cycle? And would you say that like a
21:54
year? For now, how does it look
21:55
different? Our people is it more and more
21:57
people's Consciousness. Are people saying this is just
22:00
something you have to do. It's a great question and I
22:03
think that we all that it time well, a lot of angels will say
22:06
we do idea and a lot of customers were wrongfully.
22:10
Think that idea is just one product you buy and you'll good.
22:13
And it's not just like zero tossed.
22:16
It's an approach. You need to get all your
22:19
solutions to walk together around it so I think The will be
22:25
for the next year or two, a lot of confusion.
22:28
A lot of people will look at things that are actually mostly
22:31
detection tools as I TDR. And, you know, a lot of products
22:35
that will you be a or doing different things to detect
22:38
threats will now say I was doing idea and our response is that we
22:42
send an alert to the sock and then they do something about it.
22:46
And what I hope will happen is you know slowly people will
22:50
realize that the detection part has been though for But will it
22:56
really? You know what I did?
22:58
That was really an opportunity is to really connect the
23:01
detection to the real-time active response to the
23:04
enforcement. If we can do that, if we can
23:07
take the detection that has been though.
23:09
I mean, it is improving now but it's has been done for years and
23:14
we finally connected to the enforcement to the MFA to the
23:18
conditional access policies to the things that actually stop
23:20
attacks. If we finally make that
23:22
connection that is the opportunity of idea.
23:24
Ha, and I think for the next year or two people are going to
23:26
be confused or going to look at detection tool that has
23:29
repackaged as ideal as if this is.
23:32
You know, this is what they need.
23:34
And I think slowly they will realize okay that's just sending
23:36
us another alert. It will not actually stop the
23:39
attacks force and they will understand it.
23:42
Ideas about the connection between detection and response
23:46
active response, it actually stops attacks and that is where
23:50
it will get to a certain maturity.
23:52
Well, I do think that the it Back to once it matures one,
23:56
people do Ido this way. I think that the impact of this
24:00
will be huge. I think that, in terms of
24:03
actually stopping attacks, this will be one of the most
24:06
effective Concepts or tools ever simply because so many attacks
24:12
involving identities without the identity element to probably
24:16
much, much less risky they will probably stay on one two
24:18
devices. The not be able to take over the
24:20
entire network without the identity element.
24:24
It is used to propagate and second because I think the
24:27
response at the identity level step-up authentication is such a
24:32
great option for response because it's the perfect
24:36
combination between security and productivity.
24:40
You take action real action to prevent the attack without
24:44
blocking your real legitimate users that are simply trying to
24:47
walk. You use Step Up aggregation
24:50
almost as a filter. To stop only the real threats
24:54
without bothering the legitimate users.
24:58
I think this is where idea is going to be a game-changer, but
25:02
yes, it will take time for everybody to understand what is
25:05
really active and what is maybe just a piece of it like
25:08
detection. Yeah, thank you.
25:10
It's very, very educational, very eye-opening.
25:13
And it's going to be very interesting to watch this
25:16
unfold, you know, over the next year to see, you know, I think
25:22
Kind of I hear one of your predictions is that they're
25:25
going to be vendors trying to repackaged Old products as like
25:29
hey this is now I TD R zero trust and ideas are so you just
25:35
like take care of all your problems with with our product.
25:38
That's what I'm afraid of is the dilution of the terms but was
25:42
happens but I think customers will realize eventually to take
25:47
time but it's okay you know if every category but people will
25:50
realize what is actually bringing them.
25:52
The value. And also, I think that the
25:55
detection tools still have a place.
25:57
I think that, you know, I don't believe that any Vendo has the
26:00
solution for everything, we obviously don't, you know, we
26:05
really try to connect with all of the other security products
26:07
in order to work together. By the way, that's another
26:09
concept Governor is talking about the mesh, right?
26:12
Everything's to work together. So yes, the detection tools.
26:15
Also have a place they can detect certain things.
26:18
Maybe there's another product that can enforce, you know, and
26:21
it all To all these different identities.
26:23
Silos, that will be connected. Everybody needs to work
26:26
together. No, no.
26:27
Single. Vendor can say, I have the
26:28
solution for everything and I think customers are starting to
26:32
get that. And I think, well, it will
26:35
become very clear as once these Solutions.
26:38
And we always think it with our product will actually stop a lot
26:41
of attacks that our daughters. Don't we stop an attack.
26:45
Almost every week. Now, real data breach on one of
26:47
our customers and I think people are telling each other that
26:51
those saying. Hey you know what?
26:52
I Other than some of attacking my network and you know, some of
26:54
what actually saw it stepped up the authentication to my user,
26:57
the user didn't respond and it stopped it stayed on the One
27:01
initial endpoint on patient zero and let move anywhere else and
27:06
they'll telling each other about it.
27:07
You know what, it actually stopped the attack.
27:10
Another thing that is driving awareness and influencing the
27:13
industry is cyber insurance. A few years ago, I think people
27:17
didn't really know what it will become, I think, just like in
27:20
other Industries, eventually, it's not there yet, but
27:22
eventually cyber insurance will signal to the customers.
27:27
What they need to do because they have a lot of data and they
27:31
have a strong incentive to actually get you to buy the
27:35
product that stop attacks because otherwise they would pay
27:37
a lot of money. So if they recognize and I think
27:40
they are starting to that this is going to actually stop
27:43
attacks and stop ransomware attacks.
27:45
Especially do going to force everybody to buy this and I
27:49
think it's a good thing because any single customer can beg get
27:53
confused with all these different vendors and messages.
27:56
It's actually a good thing that, you know, insurance will tell
27:59
you. You know what we have data from
28:01
tens of thousands of customers. And we can tell you if you get
28:04
this product or this type of product, your risk actually goes
28:07
down. So we'll only give you insurance
28:09
if you buy it. I think that's a good thing.
28:12
It's not there yet but it's it will get them carry saying a lot
28:14
of maturity. D and cyber Insurance
28:16
questionnaires that are going out and my faith a couple years
28:19
ago. What do you mean?
28:19
You're not doing MFA? Okay.
28:20
Now you need to because you got to follow the money.
28:23
I think it's maybe the least is still not the for list of what
28:27
people should do, but it's good because it kind of puts a mirror
28:31
in front of people. Like these are the things you
28:34
need to do. Because we believe that they
28:36
reduce the risk. The most And it's good because
28:40
it doesn't, it means that not every small company will need to
28:42
do their own research and come to these conferences.
28:47
You know, they will actually get a list of, you know, this is
28:51
what you need to do to have a lower risk.
28:57
And I think I did, I was going to be a big part of it.
28:59
I mean now it's MFA and privileged access but eventually
29:02
all these things tie together into idea.
29:05
It's protecting the identities that's key to stopping a tax.
29:09
Even very eloquent and helping us understand itd are so I want
29:12
to put that eloquence on display.
29:16
What's the 30 second? Elevator pitch that you give to
29:18
somebody when you're like okay what do you do?
29:20
Like I'm sober for okay so me so So what we do is we extend
29:29
identity security controls such as multi-factor, authentication
29:32
conditional access everywhere, even in two places where they
29:37
don't work. Today, the Legacy protocols, the
29:39
service accounts, you know, command line, tools, all these
29:43
things that people actually targeting in a way that doesn't
29:48
require you to change any of these systems because we sit
29:50
behind your existing identity infrastructure.
29:53
We detect threats Enforce the security controls so that we can
29:57
protect your identities everywhere even in the places.
30:01
Well, security for identity is not available today.
30:07
And by the way, as you can understand from this, you know,
30:09
short explanation. I'm not focusing on.
30:12
I TDR, I think that in many ways, this is idea, but I think
30:15
that people will slowly understand what I did there is
30:18
and we can, you know, we can do, we can help them.
30:21
And the fact that you guys are doing this, obviously helps
30:24
people understand. But for now, we need to talk
30:26
about the things that people really need to do and it's about
30:30
securing identities. Will I think one of the biggest
30:33
gaps? You know, putting itd have a
30:35
site for second is the fact that modern identity security is only
30:40
available for modern applications.
30:43
It's available in the cloud in octane as already.
30:46
But for the, for the Legacy infrastructure for the on-prem
30:50
does nothing, people have to listen passwords and Legacy
30:54
protocols in a tackles know. That's what the focus the
30:57
command line tools, the file shows the service accounts in
31:00
our machine to machine access the Legacy infrastructure.
31:03
That's where they go. So this is the main thing we
31:08
actually talking about today. I believe itthere is the future.
31:11
I believe, this is what we're going to focus on this, what
31:14
we're going to do, but right now to simplify this for the
31:17
customers and help them solve a much more clear than immediate
31:19
pain. My focus is actually on this.
31:22
I'm telling them you already have.
31:25
Eight Solutions, you know, I show it is a great solution, it
31:28
has MFA in conditional access and everything, but it only
31:31
works for your web applications, it doesn't work for all these
31:34
things. I just mentioned, we can extend
31:37
that because we work, with all these vendors, we can extend
31:39
your Azure ad and agile MFA to these places.
31:43
I didn't even mention, I TDR, or zero task to any of these
31:46
Concepts. Thank you.
31:47
It will actually help you achieve those things, all right?
31:52
Because once you extend more than identity security, The
31:55
everywhere, you will actually achieve zero Tarzan idea, but
32:00
I'm trying to focus on. What are you actually getting
32:02
what? What is not protected today that
32:05
we will protect for you and I leave?
32:08
I TDR and zero tolerance to these kind of conversations.
32:10
Well, you know, I do hope that people will adopt these Concepts
32:16
but I think people are tired of just seeing vandals, only talk
32:19
about the buzz words, we need to talk about what the solution is
32:22
actually does and how it does it.
32:25
And that's really resonates with people.
32:28
I feel like in this week was very, very clear.
32:31
We just talked to people about, you know, what do you use today
32:34
for MFA for identity security? And they will say, whatever.
32:38
Vendor they have great probably works perfectly for your web
32:41
applications, your modern applications.
32:43
But how about all these other things, the Legacy stuff, the
32:46
command line tools, the service accounts that's what attackers
32:49
actually go because they know it's not protected.
32:52
We can extend that solution that you already have or The and
32:56
that's such a clear story that is letting them extend an
33:01
existing solution that they already invested in.
33:03
That gives them great results in one environment extend it to the
33:07
out of. So if you ask me, what is the
33:10
the easy way? What is the way I am?
33:12
Expanding our product today. That's how I do.
33:14
I think that We should really, I think every window should really
33:19
try to focus on one of the clear issues that they solve and how
33:23
they solve them. And yeah, we can talk about the
33:26
concepts in order to educate the market, but otherwise it becomes
33:29
too confusing for people to just heal these buzzwords.
33:33
So that Simplicity in the language exo-k, explanation is
33:36
something that is I'm finding to be more and more important
33:39
because we get lost sometimes in Flowery language and it was you
33:43
know, spend a focus here at the Gartner conference as well
33:45
around storytelling and You know, really being articulate
33:48
around the message, you've been really great through time and I
33:51
just wanted to know if we have just a couple more minutes, I
33:52
want to ask you more questions from like a CEO perspective.
33:57
We were talking before we hit the record button and you
34:00
mentioned something about retention and with where we are
34:04
right now with great resignation and now quiet quitting, which is
34:07
apparently, a new thing that's out there.
34:10
What are some of the things that our secrets to success?
34:13
And I'm sure you're going to show statistics, I hope you will
34:16
around Round finding and retaining talent.
34:19
Because I think there's a lot of people who are trying to build
34:20
teams trying to find identity, people is really hard right now
34:25
because you're taking care of hopefully the ones that are
34:26
happy and if you're trying to build a team, the pool of talent
34:29
is not as is not where it needs to be and I'm curious from your
34:33
perspective, as you know, the CEO of a corporation, you know
34:36
company. How are you doing that?
34:39
It's very important topic. I think, I think everybody has
34:42
this problem of talent in cyber security and identity.
34:46
Its Oh, by the way, is something that is very important to me,
34:49
specifically, like one of the reasons I actually started the
34:51
company, you know, besides wanting to invent, you know,
34:56
Heidi are in all these great thing is actually that they
35:00
wanted to build a company that I would have liked to walk for
35:05
like a place that is actually good for the people.
35:09
A person who will people like working with each other and
35:12
believe in what they do because I want to wake up in the
35:16
morning. And go to a place where I enjoy
35:19
what I do. All right?
35:21
And it was very important for me all along to build this kind of
35:24
culture where people really work together as one team without
35:28
politics without ego. You know, just working as one
35:32
team to the same goal and I think we were able to achieve
35:36
that it becomes difficult when you go fast.
35:40
So, you know, we've been going very fast instantly, you know,
35:43
some of our teams like cells marketing tripled since the
35:46
beginning of the It's hard to keep the culture.
35:49
I still meet everyone who joins the company, by the way, before
35:52
just do or even to interview them professionally.
35:54
But just to understand that I'm not going to lose that special
35:57
thing that we have. But I think the most important
36:00
partner is just caring about the employees whether it's about the
36:04
work-life balance or about the fact that they will be
36:07
challenged with with interesting things to do, and just knowing
36:11
that the company cares about them and then they care about
36:13
the company, I don't believe in forcing people to Still the
36:17
number of hours a day. And as people can, especially in
36:21
the post covid World, it doesn't really matter.
36:23
People can not do anything and you will never know.
36:26
It's very hard to know. So the only thing you can do is
36:28
try to make them kill about it and that's never about the
36:33
product or the even the money. It's usually about the people if
36:38
you work with people that you like and you feel like they care
36:40
about you and you feel like management is Is in the same
36:45
boat with you people, actually liked it and stay.
36:48
We had last year, little more than one percent of people
36:53
leaving the company, we have 150 employees and I think it's
36:59
because of that. So half a person left.
37:02
How did that work? No, it was, it was too.
37:06
But I think that another part of that is just how we react to the
37:13
changes in the mouth. It, you know last year was
37:15
crazy. So many startups did crazy
37:18
funding rounds with valuations that have nothing to do with the
37:21
actual performance side and they burned the money with, you know,
37:25
fancy parties and whatever. And it's, you know, great for
37:29
them. But now when the market is down
37:32
at all of these companies are letting go a lot of employers
37:34
and I think employees understand that you know, it's important to
37:37
be in the company that kills about.
37:38
It doesn't go crazy when the market is too optimistic and
37:41
doesn't need to overcorrect at your Expense, right?
37:45
Because the CEO is probably still, you know, tell.
37:48
But at the expense of some of these employees when things are
37:52
bad, that's a great Point. Yeah, I mean, the other thing, I
37:55
just wanted to point out is, as a smaller company.
37:58
I think if you make it bad hire bringing the toxic personality,
38:05
just the the is has a magnifying effect of how how much damage
38:11
that can do. I mean that can that can hurt
38:13
even a big Buddy right. But with a small companies just
38:16
magnified so you interviewing everybody as they come in just
38:20
to make sure that you're not going to upset that corporate
38:25
culture. I think is just so important.
38:28
I just want to hire people that want to walk in this mentality.
38:32
When we all work together, we help each other.
38:35
Even if it's not exactly. You know someone's
38:38
responsibility is not exactly getting paranoid.
38:40
People were help each other because we all want to achieve
38:43
the same goal. Urgh.
38:45
And I want to find people like that.
38:46
It's not easy by the way, but there are a lot of people like
38:50
that. I feel like we have a great team
38:52
and I will not continue to probably interview everybody,
38:54
right? But I can't ask my my managers
38:56
and executive to do that. I think they get it completely.
38:59
And I think it's it's something that the whole company believes
39:03
in, I think but also part of it is this, you know, knowing how I
39:08
make decisions that I'm being responsible with the company's
39:12
goals and money, I think. Care about that.
39:14
Think they want to know that. And we are very transparent and
39:18
basically showing to the team, every quarter, the same size I'm
39:21
showing to the bolt. No, just this is where we are.
39:24
This is all the data. This is the bad things to good
39:26
things. I think people appreciate that
39:27
because they want to know that we're doing the right things and
39:31
they can continue to believe in where the company is going.
39:34
And I think the company is going in, amazing direction will be
39:37
having great traction. Now the potential of this space
39:41
in general, but also just just, this solution is so big.
39:43
Big. But, you know, it's it's not
39:46
enough a lot of the other part of it is the people like, people
39:51
people, leave great companies all the time because because of
39:54
people because of the pressure energy or that colleague at the
39:57
the saying, the strata-ray Europe people.
39:59
Don't quit bad jobs, they quit bad managers for sure.
40:03
I think this is really good advice for your we're talking
40:05
about building company but a lot of times you're building teams
40:08
within a company and this is great advice, you know, build a
40:10
team that you want to be a part of, you know, could have said
40:13
Myself and you've been very generous with your time.
40:15
So I want to let you get back to the show but really appreciate
40:19
you being here. I think you know for folks who
40:21
are listening out there, want to learn more about solar Fort
40:24
silver fork.com, I'll include a link in our show notes.
40:27
Hopefully you're okay with you know connecting with people on
40:29
LinkedIn because like those send out those LinkedIn connections
40:32
directly happy to talk more about any of these topics.
40:36
Thank you so much for inviting me and also for doing this.
40:38
I mean, I think it really helps people in the industry to learn
40:42
more about these things. So thank you for having me here
40:46
and for doing this. Really appreciate that.
40:48
Yeah, well, hopefully people are listening out there and if
40:51
they're not, we'd still be doing it anyway.
40:53
All right, we're going to go ahead and wrap things up a
40:54
little bit here. Thanks again, to the RSM team
40:56
for. Hooking us up with this nice,
40:58
sweet guy, Z and Daniel are over in the other side of the room,
41:01
being quiet as mice. Watching the magic happen for
41:03
identity at the center, you can find us on the web identity at
41:07
the center.com. We're on Twitter at IDC podcast
41:11
and we'll have to leave it there.
41:12
Thanks everyone for listening and we'll talk with you.
41:13
On the next one. Thanks for listening to the
41:20
podcast. If you like what you heard,
41:22
don't forget to subscribe and visit us on the web.com.