Cacioppo: To Build a Successful Security Startup, Start a Compliance Company
Christina Cacioppo · Security in the Age of AI: Vanta CEO on Compliance and Risk · Apr 10, 2025 · at 25:26
Christina Cacioppo, CEO and co-founder of Vanta, explains the core thesis behind starting Vanta and connecting cybersecurity efforts to direct commercial ROI.
0:00 / 0:05exact quote · 5.6s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“The joke that's not a joke about Vanta is I think if you want to start a security company, you should start a compliance company.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Christina Cacioppo
Cacioppo: Foundation Models Finally Enable Automated Enterprise Security Questionnaires
“Everyone has always wanted to build a product that just answers the questions correctly the first time. That wasn't possible prior to some of these foundation models, but now it is”
Cacioppo: Security and Compliance Tolerate Less Generative AI Creativity
“Security and compliance of the place where I think there is less tolerance for creativity and true generation and, you know, more, more desire for accuracy.”
Cacioppo: AI models can generate tailored security blueprints from company context
“These models kind of let you, again, they understand the best practices, you can get them to understand the regulations, and then they can ask you some questions about your company, or you can tell them about your company, and they can kind of merge all of tha…”
Cacioppo: Upcoming AI Regulations Will Functionally Target Traditional Data Security
“If you force me to bet I think a lot of it will focus on data security, and so it'll be kind of under the, you know, banner of AI, but it'll probably be a lot of the things we've talked about with data security”
Cacioppo: Companies Should Treat Enterprise Data Like Toxic Waste
“One analogy a security professional gave me years ago was you should think of data as sort of like toxic waste. You have it, you might need it, but you want to keep it contained, and if it starts leaking out, it's very hard to kind of clean that up. And again,…”
Cacioppo: AI Software Requires New Mindset Because Outputs Shift Without Code Changes
“You cannot change the code. You can get very different answers and so it's almost a different mentality on building. Again, when it's deterministic, you ship it, and you can kind of move on. Again, you want to keep an eye on it, but, like, it'll keep doing wha…”