The Security Podcast of Silicon Valley

84. What gets missed when nobody reviews the code (with Jack Cable, Corridor)

Code ships faster than anyone can review it. Jack Cable, CEO and Co-Founder of Corridor, explains what actually gets missed when teams stop reviewing every pull request, why most security tools surface noise instead of risk, and how Corridor approaches secure-by-design when speed is non-negotiable.
Jack: https://www.linkedin.com/in/jackcable
Corridor: https://www.corridor.dev
Jon: https://www.linkedin.com/in/jon-mclachlan
Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich
YSecurity: https://www.ysecurity.io

83. How small companies can make their security doable (with Phil Howie)

What if your first security hire wasn’t a person, but a simple, guided program that made sense to everyone in your company? In this conversation, Sidekick founder and CEO Phil Howie breaks down how SMBs can build a security and privacy practice from the ground up—long before they can afford a full internal team. We cover the reality of compliance vs real security, working with MSPs, the role of design in security tools, and how founders should think about AI, governance, and future regulation. If you’re a founder trying to grow in regulated markets, this one’s for you.

Phil: https://www.linkedin.com/in/philhowie

Sidekick: https://www.sidekick.co

Jon: https://www.linkedin.com/in/jon-mclachlan/ 

Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich/ 

YSecurity: https://www.ysecurity.io/ 

82. Automating app security for modern dev teams (with Rejah Rehim)

Most companies still test security long after code is shipped. That delay creates blind spots.

In this episode, Rejah Rehim, Co-Founder & CEO of Beagle Security, explains how automated penetration testing gives teams a clearer picture of their real exposure—while keeping the process simple enough for developers to run themselves.

 

Rejah: https://www.linkedin.com/in/rejah/

Beagle Security: https://beaglesecurity.com/

Jon: https://www.linkedin.com/in/jon-mclachlan/ 

Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich/ 

YSecurity: https://www.ysecurity.io/ 

How to put AI agents safely into production (with Eric Olden)

AI agents can burn through budgets and trust in minutes. Eric Olden, Co-Founder and CEO of Strata Identity, breaks down the control plane founders need: policy-driven guardrails, intent/context/outcome audit, and lifecycle governance—so you can move from sandbox to production with confidence.

Eric: https://www.linkedin.com/in/boughtnotsold

Strata Identity: https://www.strata.io

Jon: https://www.linkedin.com/in/jon-mclachlan

Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich

YSecurity: https://www.ysecurity.io

Think Like a Hacker: Why Curiosity Drives Innovation and Security (with Ted Harrington)

Most people think hackers exploit systems. The best hackers improve them. In this episode, Ted Harrington explains how to unlock your “inner hacker”—the mindset that turns obstacles into innovation. From breaking outdated rules to building smarter, safer companies, this conversation reframes what it means to lead with curiosity.

Ted: https://www.linkedin.com/in/securityted/ 
Ted’s website: https://www.tedharrington.com/ 
Jon: https://www.linkedin.com/in/jon-mclachlan
Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich
YSecurity: https://www.ysecurity.io

AI at Brinks Home: Lower costs, better customer support (with Veronica Moturi)

Cutting support costs usually tanks experience—unless you redesign the system. Veronica Moturi shares how Brinks built an AI “first line,” kept humans for nuance, and improved accuracy by unifying data, verification, and troubleshooting. If you’re scaling support, this is your roadmap to trust, speed, and measurable unit economics.

 

Veronica: www.linkedin.com/in/veronica-moturi

Brinks Home: brinkshome.com

Jon: www.linkedin.com/in/jon-mclachlan 


Sasha: www.linkedin.com/in/aliaksandr-sinkevich 

YSecurity: www.ysecurity.io 

Invisible Security: The Future of Authentication and Trust (with Deepak Dutt)

Deepak Dutt, founder of Zighra, reveals how continuous behavioral authentication is changing the game—from stopping $200M fraud schemes to securing military operations.

Deepak: https://www.linkedin.com/in/deepakdutt/
Zighra: https://zighra.com/
Jon: https://www.linkedin.com/in/jon-mclachlan
Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich
YSecurity: https://www.ysecurity.io

Inside Augment Code: Why security starts at line one (with Dirk Meister)

What if your first lines of code determined your startup’s ability to scale? Dirk Meister, founding engineer at Augment Code, walks us through the intentional security architecture decisions they made on day one—and why trust isn't something you can bolt on later.

Dirk Meister: https://www.linkedin.com/in/meisterdirk/

Augment Code: https://www.augmentcode.com/

Jon McLachlan: https://www.linkedin.com/in/jon-mclachlan/

Sasha Sinkevich: https://www.linkedin.com/in/aliaksandr-sinkevich/

YSecurity: https://www.ysecurity.io/

The Critical Security Stage Every Startup Skips (With Michael Nov)

Michael Nov, Co-Founder and CEO of Prime Security, reveals how ignoring the design stage creates costly security gaps later. He shares hard-won lessons from building at OwnBackup and launching a startup during crisis.

Michael: https://www.linkedin.com/in/michael-nov
Prime Security: https://www.primesec.ai
Jon: https://www.linkedin.com/in/jon-mclachlan  
Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich  
YSecurity: https://www.ysecurity.io  

How to Use AI Without Giving Up Your Data (with Jonathan Mortensen)

Contracts aren’t controls. Jonathan Mortensen, CEO of Confident Security, lays out a practical path to provably private AI—confidential compute, attestation, and encrypted weights—so you can swap your OpenAI-compatible endpoint, keep crown-jewel data out of vendor training, and still close enterprise deals. Listen to learn how founders can pass security reviews, avoid GPU sprawl, and turn privacy into a sales advantage.

Jonathan: https://www.linkedin.com/in/jonathanmortensen

Confident Security: https://www.confident.security

Jon: https://www.linkedin.com/in/jon-mclachlan

Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich

YSecurity: https://www.ysecurity.io