The Boring AppSec Podcast S2E04 - Varun Badhwar

January 28, 2025

The fourth episode of Season 2 is out now! In this episode, we chat with Varun Badhwar. Varun is the Founder and CEO of Endor Labs. Varun has been an operator (Salesforce), consultant (KPMG), and entrepreneur (Redlock, CipherCloud, & Endor). He is also on the Forbes Technology council and routinely contributes the discourse around Cybersecurity.

Below are some of the key takeaways from the episode.

Key Takeaways

Endor Labs aims to make AppSec more engaging and effective.
Many existing AppSec tools create friction between teams.
The future of software development will involve AI-generated code.
Understanding the software supply chain is crucial for security.
Acquisitions in cybersecurity often fail due to integration issues.
Founders must empathize with practitioner pain to build effective products.
Compliance often drives security priorities in organizations.
Effective integration of tools can enhance security outcomes.
The industry needs to focus on enabling faster business operations.
Balancing platform capabilities with best-of-breed tools is essential.
Compliance is essential for sales enablement in cybersecurity.
First-time founders should focus on product and distribution.
User experience and developer experience are critical in AppSec products.
Contextual information is vital for engineers to make informed decisions.
Automation can help reduce noise in security alerts.
Reachability analysis improves visibility in code dependencies.
Impact assessment is crucial for effective vulnerability remediation.
LLMs can assist in reasoning but need rules for effective application.
AI governance is a growing concern in the software development space.
The industry must adapt to the rapid advancements in AI technology.

We hope you tune in and, if you like the episode, please do subscribe!