Fencer

If you were impacted by the recent Delve issues and want to harden your security posture, we (@fencer_security ) will be happy to help you out. For anyone that signs up in the next two weeks, we will give you 15% off an annual subscription and provide white glove onboarding ourselves. This will include our full platform of code, infrastructure, runtime protection, static code analysis (SAST), dynamic application security testing (DAST), identity management and SIEM. We typically work with software companies between 20 and 500 employees. While we don’t ourselves do the compliance part, we integrate with many of the large vendors in the industry (Vanta, Drata, etc.) Feel free to DM me or comment below.

@watchdutyapp serves millions of people during active wildfires. That kind of public visibility comes with real threats like phishing campaigns, fake apps, and domain squatting, on top of the compliance pressure that comes with landing enterprise customers. When their CTO David Merritt started the SOC 2 journey, they had four engineers. He didn't need a security program built for a thousand-person org. He needed something that could grow with them without burying them. Shortly after rolling out @fencer_security , Watch Duty identified and fixed multiple critical vulnerabilities before they could be exploited. Security ownership spread across the team. Audit requirements got knocked out automatically. "Fencer gives us peace of mind that we're providing a strong security posture for our customers." fencer.dev/customer-stories/…

Wrapped up an interview on Monday with @joshuahlipton on @YahooFinance about current cyber risks. Wanted to share my three key takeaways for execs (and board members if they feel like reading it : ) 1️⃣ Iranian retaliation backed by state actors, hacktivists, North Korean and Chinese groups is now the top risk for U.S. companies. Most organizations remain reactive, only hardening perimeters, networks, apps, and identity after an incident. 2️⃣ Attacks will target three layers: defense and military systems, critical infrastructure (power, water, airports, transport), and everyday corporations. Independent hacktivists add further unpredictability. 3️⃣ AI is accelerating offensive threats, letting attackers deploy hundreds or thousands of agents to probe environments simultaneously and find hidden flaws. The good news: AI can also strengthen defenses when applied strategically. Bottom line: Security can no longer be treated as optional insurance. Prioritize code security, network/application protection, and especially identity management today. Full interview here 👇 finance.yahoo.com/video/cybe…

When @timolsh and I decided to start building again, we made one non-negotiable rule: This time, it had to be a truly massive market. Zenput, taught us that lesson the hard way. We built a great vertical SaaS business, but over time it became clear we were fighting in a ~$50M market for our core product. So we created a simple two-pronged framework for picking any new market: 1️⃣) Whatever we build must be the single most important decision on the buyer’s plate. The one they can’t afford to get wrong right now. 2️⃣) We had to believe the business could realistically go from $0 to $100M in revenue in under 5 years. Why these two criteria? If you’re not solving their #1 priority, you have almost zero pricing power. Companies will happily spend millions on infrastructure, CRM, or security, but with thousands of project management tools out there, no one is paying premium prices for “just another one.” And even if you’re critical in a small market, it’s not enough. ERP systems sit in a giant TAM, but they move so slowly that scaling from $0 to $100M in <5 years is basically impossible. That framework is exactly how we landed on cybersecurity, a $250B+ annual spend market, and specifically on what we’re building at @fencer_security , informed by our own experience scaling tech companies from the inside.