The Ledger
Every statement that passed quotation and attribution checks. Mix any filter with any other: certainty 1/5, debate potential 5/5, or both at once.
why aren't all 15 resolved? a statement only gets an assessment when the public record can support or contradict it. opinions and what-ifs never can, and 0 checkable ones are still open, waiting for their date. predictions held up or didn't; assertions are supported or contradicted. on every card: ▮▮▮▮▮ certainty · ▮▮▮▮▮ debate potential. speakers are clickable
Podjarny: Developer-first security requires building a developer tooling company
“To achieve that, you need to build a developer tooling company, not a security company.”
Podjarny: Security products require broad stack coverage to deliver real value
“A security person needs breadth. They need, if you solve the security threat, but you only solve it for 50% of my apps, you're not very helpful security. I'm going to need to buy another tool or find another solution for the other 50% because I need to cover a…”
Podjarny: Containers are the evolution of the app, not the VM
“The industry has been seeing containers as the evolution of the VM. And they've been trying to retrofit VM patching practices onto containers while we saw containers as the evolution of the app.”
Podjarny: Traditional SAST security tools are not usable for developers
“Unless we can actually build something that is fast enough for CICD, which these tools are not. And that is accurate enough to actually be usable to developers, because as it stands, these tools are not usable for developers.”
Tech giants rely on Snyk's vulnerability database due to lacking alternatives
“Many players rely on it now as their sort of information source for properties because there is no other good one really in the yeah.”
Guy Podjarny: Open source struggles with maintenance and vulnerability tracking
“Open source is not known for being very good at maintenance. So things like the vulnerability database and things like that. They don't really work that well in most cases”
Protect freemium growth from enterprise demands using structural resource isolation
“It became hard for someone leading both the product that growth aside and the enterprise motion to say, no, no, no, I will put aside this like very large customer's requirement. And I will prioritize this sort of freemium user. Need instead of that. So you hav…”
Podjarny: DevSecOps practitioners must be software builders, not passive auditors
“A DevSecOps person is very similar to an SRE. They should be a person able to build software build services and help developers successfully find issues and fix them as opposed to an auditor who should be good at finding those issues themselves and doing it.”
Podjarny: Snyk grew revenue and ARR by around 200%
“We've grown I think about 200% in, in revenue and sort of a similar number in, in ARR.”
Podjarny: Snyk raised roughly $350M over 12 to 18 months
“We did raise about three hundred and fifty million dollars during during that period of time as well.”
Podjarny: Security must be embedded in the development process to scale
“Security has to be built into the development process because nothing else scales.”
Guy Podjarny: GitHub is not open-source but gets its halo
“GitHub is not an open source company. It's but it benefits from the halo of open source.”
Podjarny: Snyk scaled staff annually from 23 to 450 employees
“We've gone from 23 to 84 to 250 to 450 people in annual increments in terms of staff.”
Snyk launches new products as narrow add-ons before making them standalone
“We ship every new product we've added, and now we do it intentionally... We ship it as an add-on first. So we don't ship, you know, crap products pardon my French here. You know, we ship very good products, but very narrow ones. And we ship them as add-ons. An…”