Agentless

In this episode of Agentless, Jason Loomis and Dave Cole dive into the ethical challenges that arise when CISOs partner with VCs and investors, particularly when financial incentives are involved. They explore the controversial "Gili Renan model," where CISOs allegedly receive kickbacks for promoting portfolio companies. The discussion touches on the transparency and moral obligations CISOs face in maintaining trust while participating in the startup ecosystem. They also address the complexities of balancing advisory roles with corporate responsibilities.
"If we paid CISOs more, the temptation for an extra 5,000 or 10,000 in equity wouldn’t be a factor. It’s about transparency and making ethical decisions that best serve the company, not personal gain." – Jason Loomis
"CISOs are instrumental to the startup ecosystem. But with that influence comes the need for transparency and a solid ethical framework. It's not just about defending the company—it's about trust." – Dave Cole

In the latest Agentless Podcast, @JasonLoomis and @DaveCole dive into the AI hype cycle, comparing it to past tech fads like Y2K and the internet boom of the 90s. From the challenges CISOs face with AI to what companies need to prioritize, it's a must-listen for anyone navigating the evolving tech landscape. Tune in to hear why AI might not be ready to solve all your problems... yet."
Jason Loomis: "AI is not ready yet. Put a magnifying glass on anyone selling you AI solutions—it's more hype than reality. Focus on the basics, like data governance and risk management."
Dave Cole: "In times of profound change, teaching people how to think about AI is far better than imposing rigid policies. First principles will always win out over the hype."

n this episode of Agentless, we focus on the changing role of analysts, particularly in the cybersecurity space, and the evolving ways professionals gather trusted information. Listen in as Jason and Dave reflect on how analyst firms like Gartner have shifted from being a key resource in the '90s to a more commercialized model today. They also discuss alternative sources of advice, from VCs to AI tools like ChatGPT, and how these changes impact the vendor-CISO dynamic.

On our latest episode of Agentless, we dive into the challenges of aligning vendor promises with reality, the importance of showing immediate value, and the frustrations both sides experience during the sales process - especially around POCs and Vs.
"Proving the concept is one thing, but showing value that makes a CISO reach for their wallet? That’s when you know you've hit the mark." – Dave Cole
"It's not just about proving the tech works; it's about showing that it works in my environment. And 75-80% of POCs fail to do that." – Jason Loomis

Welcome to the inaugural episode of "Agentless", the podcast. Hosted by long-time CISO Jason Loomis and seasoned and recovering security vendor Dave Cole, Episodes dives into the relationship between CISOs and vendors. Imagine Hollywood talent agents brokering deals between tech vendors (the studios) and over-caffeinated CISOs (the talent).

In this episode, we explore Cybersecurity conferences. From RSA to ShmooCon, we discuss the essential role of these events in the cybersecurity ecosystem. Nothing is off limits from the absurdities of virtual booths to the hefty price tags of real ones to the eternal frustration of salespeople who can't answer technical questions.