Listen Here

| |

Actionable
Takeaways

Layer future-proofing onto immediate ROI:

Post-quantum cryptography doesn't require quantum computers to function—it runs on classical infrastructure while providing superior security. Peter sells banks on moving from SMS OTP to mobile app authentication (tangible, immediate benefit) while positioning quantum resistance as migration insurance: "You won't have to rip-and-replace in three years." For emerging tech, anchor value in today's operational wins, not future scenarios.

Give struggling departments concrete wins:

Large banks have quantum threat teams tasked with replacing every piece of software by 2030-2035. Peter gives them measurable progress: "We move you from 5% to 10% completion on authentication and digital identity." These teams need defensible projects to justify their existence. Identify which internal groups are fighting for relevance and deliver projects they can report upward.

Banking references are binary gatekeepers:

Every bank asks "who else is using this?" Non-banking customers (telcos, gaming, lottery) don't count—banking regulation and systems are fundamentally different. The first banking customer is the hardest barrier. Once cleared, subsequent conversations become tractable. Budget aggressively to land that first bank, even at unfavorable terms.

Respect the annual budget cycle:

Banks allocate resources 12 months ahead. Approaching in Q2/Q3 means budgets are locked—even free POCs fail because internal resources are committed. Peter's pipeline strategy: build relationships and maintain visibility throughout the year, then activate when budget windows open. Don't confuse market education with active pipeline.

Map and sequence multi-stakeholder buys:

Authentication purchases require alignment across quantum threat teams (if they exist), cybersecurity/compliance, CTO/CIO (infrastructure acceptance), and digital product owners (UX concerns affecting their KPIs). Start at director level—board executives are too removed from technical details. Research each bank's org structure before engaging, then tailor sequencing.

EU regulatory leadership creates expansion vectors:

European regulations like PSD2 and strong authentication requirements get replicated in Southeast Asia, MENA, and other regions. Peter benefits from solving EU compliance first, then riding regulatory diffusion. The US remains fragmented with smaller regional banks still using username/password. Founders should analyze which geographies lead regulatory adoption in their category.

Maintain composure through 18+ month cycles: Peter's regret:

losing his temper during negotiations cost him time. Banking doesn't buy impulsively—sales require patience through lengthy security reviews, compliance checks, and committee approvals. Incremental progress and rational positioning matter more than aggressive closing. Emotional control is operational discipline.

Conversation
Highlights

 

How Wultra Cracked the Closed Banking Ecosystem With Post-Quantum Authentication

Every bank asks the same question when evaluating new security vendors: “Who else is using this?”

For Peter Dvorak, Founder and CEO at Wultra, that question represented the single biggest barrier to breaking into banking. In a recent episode of Category Visionaries, Peter shared how his company navigated one of B2B’s most notoriously closed ecosystems to position Wultra as the only post-quantum cryptography provider for digital identity in banking.

The answer banks demanded couldn’t come from telecom companies or gaming platforms. “If you say, oh, I have this amazing telco company, nobody cares really, because banking regulation is different, banking systems are different,” Peter explains. You need banking proof points to unlock banking conversations—creating a catch-22 that kills most startups before they gain traction.

 

Positioning Quantum-Safe Crypto When the Threat Timeline Is Uncertain

Wultra protects digital identities from quantum computing threats through post-quantum authentication. The challenge: most experts agree 2035 is the realistic timeline for quantum computers capable of breaking current encryption, but the actual arrival could accelerate dramatically.

Peter draws a parallel to AI’s trajectory: “If you look at current state of AI, five years ago, talking computer would be complete sci fi. Today it’s pretty normal. You can talk to a computer, ask questions, it gives you very good answers which actually look better than what we imagined even in the sci fi movies.”

The quantum timeline uncertainty creates a positioning problem. Sell too hard on the future threat, and banks deprioritize against immediate concerns. Undersell it, and your differentiation disappears.

 

Peter’s solution: layer future-proofing onto immediate ROI.

“The important part that we always say is that post quantum cryptography doesn’t need quantum computers to run,” he explains. Post-quantum algorithms run on classical infrastructure—smartphones, servers, existing banking systems—while providing superior security against both current and quantum threats.

More importantly, Wultra positions itself as solving today’s authentication pain points. Banks moving from SMS OTP to mobile app authentication hear: “If you choose our product instead of the competitors, you will be using it in five years as well. You don’t have to migrate in three years.”

The pitch anchors on tangible benefits—better security, improved UX, reduced SMS costs—while quantum resistance becomes migration insurance rather than speculative investment.

 

Targeting Departments Fighting for Internal Relevance

While most vendors target CISOs or CTOs, Peter identified an underutilized internal champion: quantum threat departments.

These teams exist at large banking groups with an impossible mandate—replace every piece of quantum-vulnerable software by 2035. That includes authentication, digital identity, payments, blockchain deployments, VPNs, and cloud infrastructure. Peter estimates this represents hundreds of software systems at enterprise banks.

These departments face the same credibility challenge Wultra does: how do you justify budget for a threat that might be a decade away?

Peter gives them concrete wins: “We can basically tell them, hey look, we can help you move from 0% or 5% or wherever you currently are to 7 or maybe 10% of the entire task.”

It’s a positioning multiplier. Quantum threat teams need implementation-ready projects to demonstrate progress and defend their budgets. Wultra provides tangible deliverables they can report upward—authentication and digital identity moved to quantum-safe infrastructure—transforming abstract mandates into measurable KPIs.

 

Mapping Multi-Stakeholder Enterprise Purchases

Authentication purchases in banking require alignment across four distinct stakeholder groups, each with different concerns:

Quantum threat teams (where they exist) prioritize post-quantum cryptography implementations and progress toward 2035 compliance deadlines.

Cybersecurity and compliance focus on regulatory requirements—strong authentication mandates under regulations like PSD2 in Europe—and security audit results.

CTOs and Chief Information Officers must approve infrastructure compatibility, deployment models, and integration requirements with existing systems.

Digital product owners obsess over user experience metrics. As Peter notes, “bad user experience influences his or her KPIs” like mobile banking adoption rates and authentication completion percentages.

“We always need to research the bank a little bit, understand the stakeholders and then we can kind of tailor our strategy towards going there,” Peter explains.

His targeting approach: start at director level—board minus one. “If you go to board level, they have no idea what we talk about, it’s just too specific.” Board executives lack the technical depth to evaluate authentication solutions; directors have both authority and understanding.

 

Respecting the Annual Budget Cycle

Peter learned banking budget mechanics the hard way.

“If you come to a bank in June or July, it’s really difficult to get any budget for any activity,” he notes. Banks allocate resources twelve months ahead. By mid-year, not just dollars but also internal resources—developer time, product management bandwidth, compliance review capacity—are committed to approved projects.

This kills even free POCs: “Even if it’s free, it still has a cost for the bank.”

The implication reshapes pipeline strategy entirely. Approaching banks in Q2 or Q3 expecting near-term closes is ineffective. Instead, Wultra focuses on year-round visibility—conferences, analyst validation, LinkedIn presence—to ensure they’re in consideration sets when budget windows open in Q4/Q1.

“It is not really about closing them immediately because banks rarely buy impulsively,” Peter observes. “Typically you have to be kind of in the space, be visible. And eventually when they are looking for something, when they decide when they are ready, they can buy.”

This requires reframing what “active pipeline” means. Most conversations won’t close for 12-18 months. Early engagement is market education, not deal acceleration.

 

Building Credibility in Closed Ecosystems

Breaking into banking required Wultra to build credibility through multiple validation channels simultaneously.

Conference presence drives ecosystem visibility. Peter attends Money 2020, Finovate, and Singapore Fintech Festival—not for lead generation, but to establish Wultra as a recognized player. “We basically go to conferences to be kind of connected to the industry.”

Analyst relationships counter the “are you too small?” objection. Wultra works with Gartner and KuppingerCole (boutique analyst firm for digital identity). These relationships provide third-party validation that helps small vendors pass procurement committees.

Content strategy maintains presence without overwhelming prospects. Peter focuses on LinkedIn, sharing insights on post-quantum cryptography and banking authentication. The goal: ensure Wultra appears when banks enter buying cycles, not force premature conversations.

Peter positioned Wultra narrowly to own a defensible category: “We are currently the only company that does post quantum cryptography and digital identities for banking. So we are kind of narrowing down the segment, but it’s still pretty big.”

 

The European Regulatory Playbook

Peter benefits from building in the European Union, where banking regulation leads global adoption.

“I am actually this is one of the situations where I’m happy that I’m in the European Union because banking regulation is actually ahead of time. So it’s kind of being copy pasted,” he explains. EU requirements around strong authentication get replicated in Southeast Asia, MENA, and other regions.

The US market operates differently. While large institutions like Wells Fargo and Chase maintain sophisticated authentication, thousands of smaller regional banks still use username-password authentication that would violate EU regulations. “In Europe this would be basically illegal. You cannot use it’s not strong enough.”

This regulatory leadership creates expansion vectors. Solutions satisfying EU compliance provide templates as other markets adopt similar frameworks. Founders should identify which geographies lead regulatory adoption in their category.

 

The Discipline of Extended Sales Cycles

When asked for his biggest lesson selling to banks, Peter doesn’t cite tactics or frameworks.

“Never get discussion to heated,” he says. “I actually lost some time by basically losing my temper at some situation. Not like on the meeting, but internally during the negotiations and staying calm, looking at the situation rationally and basically moving forward in smaller steps actually helps.”

Banking sales stretch 18+ months. They involve security reviews, compliance approvals, committee decisions, and proof-of-concept periods. Progress happens in increments—winning over one stakeholder, passing one security review, completing one POC milestone.

“That’s like the big learning that kind of, if I could do some things differently, this would be it,” Peter reflects.

Emotional control isn’t soft skill advice—it’s operational discipline for founders in enterprise markets.

 

Building the Quantum-Safe Baseline

Peter’s vision extends beyond selling authentication solutions to individual banks.

“The big vision for us would be to have like invisibly embedded finances everywhere in applications protected by really strong security,” he explains. “Quantum safe should be by default. It shouldn’t be viewed as the big threat somewhere in the future. It should be viewed as something that we can build immediately and protect the world from quantum computers even before we have them kind of on a baseline level.”

For B2B founders targeting regulated industries, Wultra’s journey provides tactical frameworks: solve immediate pain while positioning future protection, identify internal champions fighting for wins, respect institutional rhythms like annual budgets, map multi-stakeholder decisions before engaging, and maintain composure through extended cycles.

The banking ecosystem remains difficult to penetrate. But Peter’s approach—combining deep category expertise, strategic patience, and precise stakeholder navigation—demonstrates how startups crack even the most closed enterprise markets.

 

Recommended Founder
Interviews

Ken Bagnall

CEO & Founder of Silent Push

Ken Bagnall, CEO & Founder of Silent Push: $22 Million Raised to Transform Threat Intelligence Through Adversary Infrastructure Monitoring

Dimitri Sirota

CEO & Co-Founder of BigID

Dimitri Sirota: The GTM Story of BigID ($1.25 Billion Valuation)

David Brumley

CEO of Mayhem

David Brumley, CEO of Mayhem: $38 Million Raised to Build the Future of Security Testing

Scott McCrady

CEO of SolCyber

Scott McCrady, CEO of SolCyber: $20 Million Raised to Build the Future of Managed Security

Dan Lorenc

CEO & Founder of Chainguard

Dan Lorenc, CEO & Founder of Chainguard: $250 Million Raised to Power the Future of Software Supply Chain Security

Tom Jermoluk

CEO of Beyond Identity

Tom “TJ” Jermoluk, CEO of Beyond Identity: $200 Million Raised to Build the Future of Multi-Factor Authentication

Ani Chaudhuri

CEO & Co-Founder of Dasera

Ani Chaudhuri, CEO & Co-Founder of Dasera: $21 Million Raised to Build the Future of Data Security

David Etue

CEO of Nisos

David Etue, CEO of Nisos: $33 Million Raised to Build the Future of Managed Intelligence

Itzik Alvas

CEO & Co-Founder of Entro Security

Itzik Alvas, CEO & Co-Founder of Entro Security: $24 Million Raised to Build the Future of Non-Human Identity Management

Marina Segal

CEO and Co-Founder of Tamnoon

Marina Segal, CEO & Co-Founder of Tamnoon: Over $5 Million Raised to Build the Future of Cloud Security

Amit Gupta

Senior Director of Marketing Operations of Fortanix

Why Marketing Ops Should Be Your First GTM Hire

Peter Prizio Jr

CEO of SnapAttack

Peter Prizio Jr, CEO of SnapAttack: $8 Million Raised to Power the Future of Threat Management

Ben Kliger

CEO and Co-Founder of Zenity

Ben Kliger, CEO and Co-Founder of Zenity: $21.5 Million Raised to Build the Future of Security and Governance for AI, Low-Code, and No-Code Development

Danny Lopez

CEO of Glasswall

Danny Lopez CEO of Glasswall: $60+ Million Raised to Make the Content Disarm and Reconstruction (CDR) Category Mainstream

Edward Wu

CEO and Founder of Dropzone AI

Edward Wu, CEO & Founder of Dropzone AI: $20 Million Raised to Build the Future of AI SOC Analysts

Tony Scott

CEO & President of Intrusion

How the ex-White House CIO turned around a failing cybersecurity company by fixing the product first | Tony Scott

Ori Eisen

CEO & Founder of Trusona

Ori Eisen, CEO & Founder of Trusona: $38 Million Raised to Power the Future of Account Takeover Prevention

Diana Rabba

Head of Marketing of Exein

Long Game Marketing: Building Trust in High-Stakes B2B Sales

Robert Cowart

CEO & Co-Founder of ElastiFlow

Robert Cowart, CEO & Co-Founder of ElastiFlow: $8 Million Raised to Power the Future of Network Performance and Security Analytics

Alan LeFort

CEO of StrongestLayer

How StrongestLayer achieved 85% meeting-to-POC and 100% POC-to-win rates using transparent one-week pilots | Alan LeFort

Mike Janke

Co-Founder of Data Tribe

Funding the Future: Mike Janke, Co-Founder of Data Tribe

Rohan Sathe

Co-Founder & CEO of Nightfall AI

How Nightfall AI uses CISO dinners to generate pipeline | Rohan Sathe

Dan Lowden

CMO of Blackbird.AI

How to Create a Category: Dan Lowden’s 8-Exit CMO Playbook

Carole Winqwist

CMO of GitGuardian

How to Win with Rapid Response: GitGuardian’s Media Playbook

Arie Zilberstein

CEO and Co-Founder of Gem Security

Arie Zilberstein, CEO and Co-Founder of Gem Security: $34 Million Raised to Power the Future of Cloud Detection and Response

Bob Tinker

CEO & Co-Founder of BlueRock

How BlueRock identified three distinct buyer personas by asking “How would you describe what we do to your peers?” | Bob Tinker

Paul Valente

CEO and Co-Founder of VISO Trust

Paul Valente, CEO and Co-Founder of VISO Trust: $17 Million Raised to Build the Future of Third-Party Cyber Risk Management

Ryan Lasmaili

CEO & Co-Founder of Vaultree

Ryan Lasmaili, CEO of Vaultree: $16 Million Raised to Build the World’s First Fully Functional Data-in-Use Encryption

Mollie Breen

CEO and Co-Founder of Perygee

Mollie Breen, CEO and Co-Founder of Perygee: $6.4 Million Raised to Build the Future of IT/OT Security

Julie Preiss

Chief Marketing Officer of Centripetal

Why Your Cybersecurity Brand Sounds Like Everyone Else

Joshua Motta

CEO & Co-Founder of Coalition

Joshua Motta: How Coalition Created the “Active Insurance” Category ($5B Valuation)

Matteo Bogana

CEO and Co-Founder of Cleafy

Matteo Bogana, CEO & Co-Founder of Cleafy: $12 Million Raised to Build the Future of Online Fraud Prevention

Austin Gadient

CTO & Co-Founder of Vali Cyber

Austin Gadient, CTO & Co-Founder of Vali Cyber: $15 Million Raised to Build the Future of Linux Security

Sivan Tehila

Founder and CEO of Onyxia

Sivan Tehila, Founder and CEO of Onyxia: $5 Million Raised to Build the Future of Cybersecurity Performance Management

Spencer Thompson

CEO and Co-Founder of Prelude

Spencer Thompson, CEO and Co-Founder of Prelude: Over $30 Million Raised to Build the Future of Continuous Security Testing

Eric Olden

CEO and Founder of Strata Identity

Eric Olden, CEO and Founder of Strata Identity: $42 Million Raised to Build the Identity Orchestration Category

Colby Proffitt

VP of Marketing of Shift5

From the Pentagon to B2B: Colby Proffitt’s Journey and ABM Insights

Michael Assraf

CEO & Founder of Flamingo

How Flamingo generated 1,000 waitlist signups before launching a product using a free community tool | Michael Assraf

Nadav Arbel

CEO & Co-Founder of Cyrebro

Nadav Arbel, CEO & Co-Founder of Cyrebro: $51 Million Raised to Build the Future of ML-Backed MDR

Josh Shaul

CEO of Allure Security

Josh Shaul, CEO of Allure Security: $6 Million Raised to Help Businesses Win the Battle Against Online Scammers

Tom Jermoluk

CEO of Beyond Identity

Tom “TJ” Jermoluk: The GTM Storyteller of Beyond Identity ($1.1 Billion Valuation)

Dimitri Sirota

CEO & Co-Founder of BigID

Dimitri Sirota: The GTM Story of BigID ($1.25 Billion Valuation)

Russell Spitler

CEO & Co-Founder of Nudge Security

Russell Spitler, CEO & Co-Founder of Nudge Security: $17 Million Raised to Build the Future of SaaS Security

Lisa O’Reilly

Vice President of Marketing of iVerify

How iVerify’s First Marketing Hire Built a Research-Driven Engine

Umaimah Khan

CEO and Co-Founder of Opal Security

Umaimah Khan, CEO & Co-Founder of Opal Security: $32 Million Raised to Build the Future of Identity Security

Michael Assraf

CEO & Co-Founder of Vicarius

Michael Assraf, CEO of Vicarius: $29 Million Raised to Build the Future of Vulnerability Prioritization

Oren Kaniel

CEO & Co-Founder of AppsFlyer

Oren Kaniel: The GTM Story of AppsFlyer ($2 Billion Valuation)

Neil Serebryany

CEO and Co-Founder of CalypsoAI

Neil Serebryany, CEO & Co-Founder of CalypsoAI: $38 Million Raised to Power the Future of AI Security

Christian Almenar

CEO & Co-Founder of Monad

Christian Almenar, CEO of Monad: $19 Million Raised to Solve the Cybersecurity Big Data Problem

Stephen de Vries

CEO and Co-Founder of IriusRisk

Stephen de Vries, CEO and Co-Founder of IriusRisk: $40 Million Raised to Build the Future of Threat Modeling

Mykolas Rambus

CEO & Co-Founder of Hush

Mykolas Rambus, CEO & Co-Founder of Hush: $7.5 Million Raised to Build the Future of Data Privacy

Kyle Hanslovan

CEO & Co-Founder of Huntress

Kyle Hanslovan, CEO of Huntress: $160 Million Raised to Build the Future of Managed Security

Philippe Humeau

CEO of CrowdSec

Philippe Humeau, CEO of CrowdSec: $21 Million Raised to Build the Future of Cyber Threat Intelligence

Ayal Yogev

CEO and Co-Founder of Anjuna

Ayal Yogev, CEO and Co-Founder of Anjuna: $42 Million to Build The Future of Confidential Computing

Ryan Schonfeld

Founder & CEO of Hivewatch

Ryan Schonfeld, CEO of Hivewatch: $25 Million Raised to Build the OS of Physical Security

Matthew Howard

SVP & CMO of Virtru

How to Time Analyst Relations for Maximum Category Impact

Aurelie Guerrieri

Chief Marketing & Alliances Officer of DataDome

Aurelie Guerrieri, Chief Marketing & Alliances Officer at DataDome: 20 Years in Silicon Valley – Insights on the Evolving Tech Landscape

Eddie DeCurtis

Co-Founder and CEO of Shush

How Shush differentiated against competitors by solving business operations, not just deploying technology | Eddie DeCurtis, Co-Founder & CEO of Shush Inc.

Harley Sugarman

Founder & CEO of Anagram

Harley Sugarman, Founder & CEO of Anagram: $10 Million Raised to Transform Human-Driven Security

Tony Lombardo

VP of Marketing of ThreatModeler Software

Why 99% of Cybersecurity Marketers Are Doing Demand Gen Wrong

Megan Howard

VP of Marketing of Vali Cyber

Do Webinars Still Work in Cybersecurity?

Kyle Hanslovan

CEO & Co-Founder of Huntress

What happens when you outgrow your messaging? w/ Huntress CEO Kyle Hanslovan

Paul Lewis

Founder and CEO of Calamu

Paul Lewis, CEO of Calamu: $20 Million Raised to Build the Cyber Storage Category

Pukar Hamal

CEO and Founder of SecurityPal

Pukar Hamal, CEO and Founder of SecurityPal: $21 Million Raised to Power the Future of Customer Assurance

Jean Le Bouthillier

CEO of Qohash

Jean Le Bouthillier, CEO of Qohash: $20 Million Raised to Build the Future of Data Security

Tiffany Ricks

CEO and Founder of HacWare

Tiffany Ricks, CEO and Founder of HacWare: $2.6 Million Raised to Build the Future of Security Awareness

Dave Mor

CEO and Co-Founder of OneLayer

Dave Mor, CEO and Co-Founder of OneLayer: $15 Million Raised to Protect Private Cellular Networks

Stijn Vande Casteele

Founder of Sweepatic

Stijn Vande Casteele, Founder of Sweepatic: $4.4 Million Raised to Build the Future of External Attack Surface Management

Tom Tovar

CEO and Co-Founder of AppDome

Tom Tovar, CEO of AppDome: Over $26 Million Raised to Build the Future of Mobile App Security

Ben Levine

Senior Director of Product Management and Marketing of Axiado Corporation

Building Marketing Guidelines That Actually Stick Across Teams

Bill Moore

CEO and Founder of XONA

Bill Moore, CEO and Founder of XONA: $30 Million Raised to Build the Future of OT User Access

John Milburn

CEO of Clear Skye

John Milburn, CEO of Clear Skye: More Than $20 Million Raised to Build the Future of Identity and Access Governance

Sebastian Stranieri

CEO & Founder of VU Security

Sebastian Stranieri, CEO & Founder of VU Security: $24 Million Raised to Build the Future of Digital Identity & Fraud Prevention

Jessica Pratt

Director of Marketing and Communications of Peak Metrics

How PeakMetrics Turns Product Data Into Marketing Gold

Ian Amit

CEO and Founder of Gomboc

Ian Amit, CEO & Founder of Gomboc: $5 Million Raised to Build the Future of Cloud Security Remediation

Adam Cecchetti

CEO & Co-Founder of Staris AI

Adam Cecchetti, CEO & Co-Founder of Staris AI: $5.7 Million Raised to Build Total Context Security for Application Protection

Joe Levy

CEO of Sophos

Joe Levy, CEO of Sophos: $1.5 Billion ARR and the Future of Cybersecurity at Scale

Rodrigo Leme

Marketing Director of Right-Hand Cybersecurity

Rodrigo Leme, Marketing Director at Right-Hand Cybersecurity: Standing Out in a Crowded Market – Niche Targeting and Customer-Centric Approach

Justin Beals

CEO, Co-Founder of Strike Graph

Justin Beals, CEO of Strike Graph: $12 Million Raised to Build the Future of Automated Security and Compliance

Guy Tytunovich

Creating the Go to Market Security Category with CHEQ’s Guy Tytunovich

Arjun Bhatnagar

CEO & Co-Founder of Cloaked

Arjun Bhatnagar, CEO of Cloaked: $25 Million Raised to Build the Future of Data Privacy

Jason Martin

Co-Founder and Co-CEO of Permiso Security

Jason Martin, Co-Founder and Co-CEO of Permiso Security: $10 Million Raised to Build the Future of Cloud Security