open-source-security
(11)
Matt Moore and the Art of Fixing the Defaults
A brisket photo became a startup text. Years of building container tools had prepared Matt Moore for a larger argument: the safest software should be the easiest software to use.
Dan Lorenc and the Problem with a Trusted Download
Dan Lorenc became uneasy when strangers ran the first Minikube release without asking who built it. A decade later, the Chainguard co-founder is still trying to make that question impossible to ignore.
The Founder Who Couldn’t Sit Still
Kim Lewandowski helped turn the hidden plumbing of open source into a product people could trust. After building Chainguard, she is starting again - this time with developers in the new AI world on her mind.
Ron Rymon Turned One Miserable Code Audit Into a Company
A punishing due-diligence exercise showed a computer scientist that open-source security was working against developers. His answer became WhiteSource, now Mend.io - and the clearest expression of a career spent turning technical friction into companies.
Liz Egan Builds Companies by Making Marketing Feel Like Something
She learned marketing on the job, helped take Yext public, and still insists the discipline cannot live by dashboards alone. At Chainguard, Liz Egan is putting a company builder’s instinct behind the quiet machinery of secure open source.
Jim Ivers Has Spent 20 Years Making Invisible Risk Impossible to Ignore
A computer-science graduate became cybersecurity's translator-in-chief - building brands through acquisitions, making the case for secure software, and learning when the market is finally ready to hear an old warning.
Azi Cohen Has Spent 25 Years Finding the Risk Everyone Else Left for Later
The Mend.io co-founder built companies around neglected security chores. Now, back in the CEO seat, he is betting that AI will make the old habit of fixing risk at the end of development impossible to defend.
Ian Riopel Wants Software Security to Fix the Problem, Not Forward the Ticket
After years spent watching security teams produce longer lists of vulnerabilities, the Root co-founder made a different bet: patch the software, preserve the workflow, and give developers their time back.
Dylan Ayrey Went Looking for Bug Bounties. He Found a Company in the Commit History.
A weekend security tool escaped its creator's laptop, found a global community, and became Truffle Security. Ayrey's real trick was learning that the history developers delete can be more revealing than the code they keep.
Bhagwat Swaroop
Bhagwat Swaroop is the CEO of Sonatype, the software supply chain security company behind the Nexus platform and the world's largest repository of open source component intelligence. Appointed in July 2025, he brings nearly 30 years of cybersecurity and enterprise software leadership from Entrust, One Identity, Proofpoint, Symantec, NetApp, McKinsey, and Intel. Armed with an MBA from Wharton and an MS in Electrical Engineering from Arizona State, Swaroop is betting that developers - not perimeter firewalls - are the new front line of cybersecurity, and he's building Sonatype's AI-powered platform to prove it.
Brian Dye
Brian Dye is the CEO of Corelight, the network detection and response (NDR) company behind the enterprise deployment of Zeek, the open-source network security monitor trusted by the U.S. military, major banks, and critical infrastructure operators worldwide. After a 20-year career spanning Symantec, McAfee, Citrix, and Intel, Dye joined Corelight as CPO in 2018 and was elevated to CEO in August 2020. Under his leadership the company has grown 40% annually, expanded its cloud/SaaS business by 300%, secured a $150M Series E at a $900M valuation in April 2024, and positioned itself at the intersection of AI-driven automation and high-fidelity network evidence.