3 ms·
No worries. I think we might be talking past each other, and that's ok :). I believe we're defining the market differently. It sounds like you're talking about
by asadeddin 3y ago
No worries. I think we might be talking past each other, and that's ok :). I believe we're defining the market differently. It sounds like you're talking about vulnerable code in other apps, and I'm talking about vulnerability detection in general in security. Is that correct?
For code you own, control or have over-sight over, we can help. Otherwise, we can't.
When I mention vulnerability detection, I mean that generally as "findings". For example, our original product was detection data leakage issues in SaaS tools like Slack, Snowflake, JIRA, etc. For example, we could detect someone pasting credentials by mistake to their colleague in Slack because they wanted to share logs. This is a human caused problem facilitated by not properly sanitizing logs. I include these when I'm talking about the market.
The comment about the dev tool vs security tool is interesting. How would you categorize Snyk?
- waihtis 3y agoGotcha, alert fatigue is usually associated with threat detection hence the qualys > How would you categorize Snyk? Im not a heavy user, but I believe they themself position themself as ”developer security” (think its even in their slogan)
- asadeddin 3y agoI believe we're in a similar category. A telling sign of what category a company belongs to is based on what conferences and events they're sponsoring and attending. Snyk and the likes sell to the security teams with dev friendliness in mind. We're aiming to do the same here.