Capture the CISO

Hosted by Johna Till Johnson, Capture the CISO is the conversation interested CISOs have with vendors about their solutions. It’s also a competition, with vendors are judged across three variables: Is it innovative? Does it solve a real need? How easy is it to deploy?

Finals - Season 2 05/18/2024

Finals - Season 2 Welcome to the finals of Capture the CISO Season 2! Our host is and our judges are , executive director and CISO, , and , EVP and CISO, . Our contestants: , CEO & Founder, , vp, strategy, , CEO & co-founder, Huge thanks to all our contestants who are also sponsors of Capture the CISO BugProve offers a vulnerability management platform for embedded devices. Its unique feature of identifying zero-day vulnerabilities sets it apart from other solutions, ensuring proactive protection against emerging threats. By providing comprehensive software bills of materials and identifying vulnerabilities in open-source components, it offers a holistic view of device security, and its monitoring function empowers organizations to act fast. These features help companies get compliant with upcoming regulations such as CRA, RED, and Cyber Trust Mark. Its high-speed scans deliver results within minutes, accelerating the testing process significantly. Moreover, with no setup fee or commitment, BugProve ensures rapid return on investment realization. Anvilogic breaks the SIEM lock-in that drives detection gaps and high costs for enterprise SOCs. It enables detection engineers and threat hunters to keep using their existing SIEM while seamlessly adopting a scalable and cost-effective data lake for high-volume data sources and advanced analytics use cases. By eliminating the need for rip-and-replace, Anvilogic allows security leaders to confidently join the rest of the enterprise on the modern data stack without disrupting existing processes. Security operations teams at banks, airlines, and large tech companies use Anvilogic’s modular detection engine, thousands of curated threat scenarios, and AI security copilot to improve detection coverage and save millions of dollars. Nudge Security helps modern organizations manage SaaS security and governance at scale. Our patented SaaS discovery method eliminates blind spots, giving customers a full, continuously updated SaaS asset inventory from Day One. With AI-driven risk insights, security teams can readily understand their SaaS risk posture, prioritize security efforts, and regain control of IT governance. And, a human-centric approach to SaaS security orchestration helps security teams ensure proper governance while minimizing manual effort for themselves and friction for end users. /episode/index/show/c6c04a7e-8485-4e99-95ab-c08dd6bb6856/id/31365672

Season 2: BugProve, Egress, Zenity 05/01/2024

Season 2: BugProve, Egress, Zenity Welcome to episode three of Capture the CISO Season 2! Our judges are , CIO, and , CISO, . Our contestants: , CEO & Founder, , VP of Product Management, , CEO, Huge thanks to all our contestants who are also sponsors of Capture the CISO BugProve offers a vulnerability management platform for embedded devices. Its unique feature of identifying zero-day vulnerabilities sets it apart from other solutions, ensuring proactive protection against emerging threats. By providing comprehensive software bills of materials and identifying vulnerabilities in open-source components, it offers a holistic view of device security, and its monitoring function empowers organizations to act fast. These features help companies get compliant with upcoming regulations such as CRA, RED, and Cyber Trust Mark. Its high-speed scans deliver results within minutes, accelerating the testing process significantly. Moreover, with no setup fee or commitment, BugProve ensures rapid return on investment realization. Egress is the only cloud email security platform to use an adaptive security architecture to continuously assess human risk and automate personalized security for each user across the enterprise. Egress Intelligent Email Security integrates seamlessly into Microsoft 365 to deliver AI-powered behavioral-based threat detection that eliminates advanced phishing attacks, human error, and data exfiltration. Combining contextual machine learning and AI, we use zero-trust and pre-generative modeling to provide the highest efficacy of phishing detection to prevent attacks that get through native controls and secure email gateways. For outbound detection, we leverage social graph and pre-trained deep neural networks to detect anomalous behavior and stop accidental data loss and intentional data exfiltration. Our products also deliver behavioral-based micro-training through real-time teachable moments, tangibly reducing risk. Zenity is a security and governance company that enables businesses to securely unleash business application and AI development throughout the enterprise. Zenity’s agentless platform is built from the ground up with a security-first approach. With SOC 2 Type 2 and GDPR compliance, Zenity is uniquely positioned to help our customers implement strong application security practices throughout AI, low-code, and no-code development. /episode/index/show/c6c04a7e-8485-4e99-95ab-c08dd6bb6856/id/30973433

Season 2: HYAS, Nudge Security, and SlashNext 04/24/2024

Season 2: HYAS, Nudge Security, and SlashNext Welcome to episode one of Capture the CISO Season 2! Our host is and our judges are , CISO, and , CISO, . Our contestants: , CEO, , CEO & Co-founder, , CEO, Huge thanks to all our contestants who are also sponsors of Capture the CISO HYAS is a world-leading authority on cyber adversary infrastructure and communication to that infrastructure. HYAS is dedicated to protecting organizations and solving intelligence problems through detection of adversary infrastructure and anomalous communication patterns. We help businesses see more, do more, and understand more in real time about the nature of the threats they face. HYAS turns meta-data into actionable threat intelligence, actual adversary visibility, and protective DNS that renders malware inoperable. HYAS’ award-winning threat intelligence and investigation platform and protective DNS solution detects and blocks the beaconing requests of malicious and anomalous command-and-control communication and stops attackers from progressing. Nudge Security helps modern organizations manage SaaS security and governance at scale. Our patented SaaS discovery method eliminates blind spots, giving customers a full, continuously updated SaaS asset inventory from Day One. With AI-driven risk insights, security teams can readily understand their SaaS risk posture, prioritize security efforts, and regain control of IT governance. And, a human-centric approach to SaaS security orchestration helps security teams ensure proper governance while minimizing manual effort for themselves and friction for end users. SlashNext Cloud Email Security leverages our advanced AI platform, purpose built to stop sophisticated BEC and advanced phishing threats. The service delivers industry leading 99.9% detection rate and 1 in 1 million FPs by utilizing Gen AI, natural language parallel prediction, computer vision, relationship graphs, and contextual analysis for: Broad threat coverage due to large and diverse LLMs Highest accuracy and a 48-hour detection advantage to stop sophisticated zero-hour threats Increased SecOps and user productivity from using a solution with the highest detections and the lowest FP 360° protection with threat protection across all messaging channels: in email, mobile and web Request a demo . /episode/index/show/c6c04a7e-8485-4e99-95ab-c08dd6bb6856/id/30892268

Season 2: Anvilogic, Lumius, and Onyxia 04/17/2024

We're returning for Season 2 on April 17th 2024 04/10/2024

Finals - Season 1 06/22/2022

Season 1: Feroot, Perception Point, and Sunday Security 06/01/2022

Season 1: Lightspin, PlexTrac, and Torq 05/25/2022

Season 1: Lightspin, PlexTrac, and Torq Welcome to episode two of Capture the CISO, hosted by Johna Till Johnson, CEO, Nemertes. Our judges are Edward Contreras, CISO, Frost Bank and Mark Eggleston, CISO, CSC. Our contestants: Vladimir (Vladi) Sandler, CEO, Lightspin Nick Popovich, hacker in residence, PlexTrac Leonid Belkind, co-founder and CTO, Torq Huge thanks to all our contestants who are also sponsors of Capture the CISO. Lightspin Lightspin’s next-gen cloud security platform built on Neo4j graph database prioritizes risk in cloud and Kubernetes environments focusing DevSecOps efforts on the critical issues that matter most. Our developer friendly platform provides plug and play remediation in the form of IaC, and scans pre-production code to catch misconfigurations, which are the main cause of breaches. Lighstpin proudly focuses on small and medium-sized businesses running workloads in the cloud, offering a free version of the platform including the industry’s only graph-based Attack Path risk prioritization. For an affordable, efficient, and secure cloud experience loved by engineers learn more at www.lightspin.io. PlexTrac A better security posture begins and ends with PlexTrac, the Proactive Cybersecurity Management Platform that streamlines your entire security workflow. Maximize ROI by aggregating findings from all your sources, generating robust analytics, cutting reporting time in half, and assigning and tracking remediation — all in one platform. Facilitate collaboration and communication across offensive engagements, monitor team performance, and analyze your security posture in real-time. PlexTrac makes cybersecurity teams more efficient, effective, and proactive to help them win the right security battles. Generate better reports. Promote closer collaboration. Enable faster remediation. Gain more insights. PlexTrac is the must-have platform for security teams. Torq Torq is a no-code automation platform for security teams. It helps people of any skill level automate workflows to streamline and reinforce security processes, using a drag-and-drop editor and guided configurations. Workflows can be built with templates from our ever-growing library, helping users automate even the most complex processes with ease. The platform readily integrates with any other system out of the box—no special connectors, just limitless integrations. With Torq, teams maximize protection while minimizing complexity, creating a more dynamic and enduring security posture. /episode/index/show/c6c04a7e-8485-4e99-95ab-c08dd6bb6856/id/23178290

Season 1: Conveyor, Pentera, and Votiro 05/18/2022

Season 1: Conveyor, Pentera, and Votiro Welcome to episode one of Capture the CISO, hosted by Johna Till Johnson, CEO, Nemertes. Please go to the for this episode to check out the demo videos of all the contestants. Our judges are Shawn Bowen, CISO, World Fuel Services and Mike Johnson, co-host, CISO Series Podcast and CISO for Fastly. Our contestants: Christopher Gomes, head of product, Conveyor Jake Flynn, sales engineer, Pentera Aviv Grafi, founder and CTO, Votiro Huge thanks to all our contestants who are also sponsors of Capture the CISO Conveyor makes security reviews fast, easy, and accurate for both vendors and their customers. How? By making it easy for 3rd party risk teams to get basic info on vendors, request access to their security docs (like SOC 2s and PenTests), and get their security questions answered without actually issuing a questionnaire. Check out our video to see how Conveyor can save you 71% of your time on your vendor security reviews. Pentera Automated Security Validation Platform is designed to help teams increase their security posture against modern day threats across the entire attack surface. Evaluate your security readiness with continuous and consistent autonomous testing with granular visibility into every execution along the way. Validate your tools are working effectively by safely emulating attacks & prioritize your remediation efforts with true contextual driven results. With Mitre ATT&CK framework mapping, stay on top and test your environment against adversary techniques to create an optimized process from testing to in-production. Don’t just operate, validate! Votiro Can you trust the files and content entering your organization? Votiro Cloud's Zero Trust open API proactively disarms files of known, unknown, & zero-day malware threats at scale without adding friction, interrupting user or application workflows, or impacting file fidelity. Votiro reduces work, alerts, & risk for IT and security teams while enabling the seamless flow of safe files. is tool-agnostic, and provides virtually limitless auto-scale capabilities to handle any file throughput and the greatest span of file formats, preventing malicious files uploaded to web apps, portals, data management platforms, and cloud services. /episode/index/show/c6c04a7e-8485-4e99-95ab-c08dd6bb6856/id/23115047

Introducing Capture the CISO 05/03/2022

Capture the CISO

TOPICS