The Security Podcast of Silicon Valley
YSecurity
Show overview
The Security Podcast of Silicon Valley has been publishing since 2021, and across the 5 years since has built a catalogue of 105 episodes. That works out to roughly 70 hours of audio in total. Releases follow a monthly cadence.
Episodes typically run thirty-five to sixty minutes — most land between 34 min and 45 min — and the run-time is fairly consistent across the catalogue. None of the episodes are flagged explicit by the publisher. It is catalogued as a EN-language Technology show.
The show is actively publishing — the most recent episode landed 6 days ago, with 20 episodes already out so far this year. The busiest year was 2025, with 26 episodes published. Published by YSecurity.
From the publisher
The Security Podcast of Silicon Valley invites founders, engineers, and security leaders to share how they tackle compliance, growth, and real-world security challenges—turning obstacles into strategic advantages. Brought to you by YSecurity.
Latest Episodes
View all 105 episodes105. Shrink what a breach can reach (with Yair Grindlinger)
104. Why a16z’s CISO doesn’t trust the approve button (with Yash Kosaraju)
103. Your zero trust is running on a sticker (with Roei Ganzarski)
102. CISO does not spell CEO (with Chris Kirschke)
101. Hacking AI is now a TikTok skill (with Johnny Hung & Munam Wasi)
100. Why Your Employees' Favorite AI Tool Might Be Leaking Your Data
99. AI Onboarding Is a Security Problem, Not a Feature (with Ged Ossman)
98. How Browser Security Became the New Battleground for Enterprise AI
97. The God-Level Hacker: How One Founder Is Building the World's Most Powerful Offensive Cyber Tool (with Alexis Lingad)
P96. They Don't Need to Hack You Now. They Just Need to Wait. (with Kevin Kane)
95. Stop Saying No: How Security Leaders Enable AI Instead of Blocking It (with Pranava Adduri and George Gerchow)
94. How one unsecured printer can take down 11,000 devices (with Jim LaRoe, Symphion, Inc.)
93. The Conversation Nobody’s Having About AI (with Jacob Andra and Stephen Karafiath)
92: The Real Problem Isn't Deepfakes. It's Identity (with Jasson Casey)
Ep 9191. Why Asking Developers To Fix Everything Is... A Bad Idea (with Neatsun Ziv)
Is your security team drowning in noise while your developers struggle to keep up? Neatsun Ziv, CEO of Ox Security, explains why traditional "Shift Left" strategies have failed and how applying business context can help your team focus on the vulnerabilities that actually matter. Listen to the full episode to learn how to turn security into a competitive advantage. Neatsun: https://www.linkedin.com/in/neatsun-ziv-ab7394/ Ox Security: http://www.ox.security/ Jon: https://www.linkedin.com/in/jon-mclachlan Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich YSecurity: https://www.ysecurity.io
Ep 9090. How Two Marines Cracked the Defense Tech Industry (Reveal Technologies)
Most security decisions fail when the people doing the work don’t have the information they need. Garrett Smith, Founder and CEO of Reveal Technology and a Marine Corps Reserve Lieutenant Colonel, explains how bottom-up product design changes defense outcomes—and what business leaders can learn about building technology people actually adopt. Listen to learn how compliance, procurement, and mission pressure shape what ships and what stalls. Garrett: https://www.linkedin.com/in/wgarrettsmith/ Reveal Technology: https://www.revealtech.ai Jon: https://www.linkedin.com/in/jon-mclachlan Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich YSecurity: https://www.ysecurity.io
Ep 8989. AI Agents Will Delete Your Database. And Then Lie About It (with Graham Neray)
AI agents can delete your production database and tell you everything is fine. Graham Neray, Co-Founder and CEO of Oso, breaks down why AI agents introduce a new level of risk for growing SaaS companies. If you’re adding AI to your product, moving upmarket, or selling into regulated industries, your authorization model is no longer a backend detail—it’s a growth dependency. Listen in to learn how automating least privilege protects your product, your customers, and your revenue. Graham: https://www.linkedin.com/in/grahamneray/ Oso: http://www.osohq.com Jon: https://www.linkedin.com/in/jon-mclachlan Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich YSecurity: https://www.ysecurity.io
Ep 8888. How Illumio Stops Hackers When the “Front Door” Fails (with Andrew Rubin)
The perimeter will fail. What matters is whether your business turns one incident into a disaster. Andrew Rubin, Founder and CEO of Illumio, explains how breach containment reduces blast radius, why category timing is “luck,” and what leaders must do as AI speeds up attackers and defenders. Listen for a founder-level playbook on building security that scales with growth. Andrew: https://www.linkedin.com/in/andrewsrubin Illumio: https://www.illumio.com Jon: https://www.linkedin.com/in/jon-mclachlan Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich YSecurity: https://www.ysecurity.io
Ep 8787. Escape the Ticket Trap: How AI Agents Are Replacing Manual DevOps
AI won’t save your startup. Unless it can ship changes safely. Venkat Thiruvengadam breaks down why the real value isn’t the model, it’s the orchestration: guardrails, permissions, context, and human-in-the-loop workflows that let agents do more than “read-only.” Tune in for a practical conversation on scaling DevOps, security, and compliance without slowing the business. Venkat: www.linkedin.com/in/venkat-thiruvengadam DuploCloud: www.duplocloud.com Jon: www.linkedin.com/in/jon-mclachlan Sasha: www.linkedin.com/in/aliaksandr-sinkevich YSecurity: www.ysecurity.io
Ep 8686. Ex-FBI Agent: The Biggest Security Threat is the Human Behind the Keyboard
Trevor Hilligoss, Head of Security Research at SpyCloud and former FBI agent, joins the show to discuss why humans remain the biggest security risk facing organizations today. From reused credentials to commoditized cybercrime tools, Trevor breaks down how attackers actually gain access — and why focusing on real-world human behavior is more effective than worrying about sophisticated nation-state threats. Trevor: www.linkedin.com/in/thilligoss/ SpyCloud: spycloud.com Jon: www.linkedin.com/in/jon-mclachlan Sasha: www.linkedin.com/in/aliaksandr-sinkevich YSecurity: www.ysecurity.io