Conversation
Highlights

Welcome to another episode of Category Visionaries — the show that explores GTM stories from tech’s most innovative B2B founders. In today’s episode, we’re speaking with David Brumley, CEO of ForAllSecure, an autonomous security testing platform that has raised $38 million.

• David’s journey from a high school dropout to a cybersecurity expert emphasizes the transformative power of education and resilience. His early career at Stanford, including an incident where he had to shut down Google’s Stanford.edu domain due to a hack, showcases the pivotal moments that shaped his path.
• The origin of ForAllSecure traces back to David’s research at Carnegie Mellon University, focused on automating the process of finding software vulnerabilities. This work led to the development of the Mayhem system, a pivotal advancement in cybersecurity technology.
• The Cyber Grand Challenge, organized by DARPA, was a turning point for ForAllSecure. Winning the challenge with a system that could autonomously find and patch software vulnerabilities demonstrated the potential of their technology and directly contributed to the company’s founding.
• A shift towards Product-Led Growth (PLG) marks a strategic move for ForAllSecure. Transitioning from traditional sales strategies to a model that emphasizes product utility and customer-driven growth reflects a broader trend in the tech industry towards more transparent and accessible solutions.
• The significance of educating the market on the new category of autonomous security testing. David’s efforts to redefine market categories and his critique of traditional analyst categories highlight the importance of clear communication and education in the adoption of innovative technologies.
• ForAllSecure’s future vision includes expanding their autonomous security testing technology to comprehensively protect software across the globe. The aim is not just to detect vulnerabilities but to fully automate the cycle of patching and verification, thus significantly enhancing software security.