Brilliance Security Magazine Podcast

There are a handful of genuine operational insights - session-level tracking beyond authentication, the reframe from 'who has access to what' to 'who is accessing what,' and the data-security analogy for identity - but they are diluted by significant product pitch, filler affirmations, and well-worn industry observations. The 300-breach analysis is interesting but never meaningfully unpacked.

“you should flip that question around and ask the question instead, who is accessing what? Uh not who has access to what, but who is accessing what?”

“just like we secure data, uh, when you secure data, you secure data at rest, uh, in transit and uh, when it is used, you should start to think about identity the same way”

The 'identity at rest / in motion / in use' framing borrowed from data security is a tidy rhetorical move, and the parallel-session detection scenario adds some texture, but the bulk of the episode recycles standard identity security vendor messaging - behavioral anomaly detection, MFA gaps, non-human identities - without meaningful contrarian or first-principles argument.

“we said uh, let's step away from the acronyms and then let's think about what are the problem to solve”

“A very motivated attacker might use the same network location, similar ISP that you have used before. So it's really hard to kind of convict based on what we call vital signs of your session”

Abhay carries genuine practitioner credentials - early VP of Engineering at Netscope during the SASE era and SVP/GM running WebEx at scale through the pandemic - which grounds his product perspective in real operational experience. The interview skews promotional, limiting how much depth that background actually surfaces.

“when I was at Netscope especially, we Wrote a proxy. We were inspecting network traffic and we uh, always used to wonder, uh, oh, wait a minute, what if the same traffic actually happened, but it didn't go through the proxy”

“when I was uh, at WebEx, um, we were running a very large platform at WebEx, uh, went through the pandemic. We scaled the platform”

There are several concrete anchors - named threat actors (Shiny Hunters, Scattered Spider), a 90% false-positive reduction claim, a 300-breach corpus, and named platforms - but dollar figures, customer names, timeline data, and breach specifics are absent, and key statistics are hedged with 'some numbers say 80%, some say 70%' vagueness.

“a couple of our customers kind of compared us with their legacy sim environments and some other competing players and they found out that we reduced the false positive rates by 90%”

“When you look at what Shiny Hunters is trying to do, what Scattered Spider is trying to do, they mount a massive social engineering attack”

The host asks topically reasonable questions but consistently leads with 'great question,' accepts all claims without challenge, and narrates back what the guest just said rather than pushing for precision or disagreement. There is no probing of the 90% false-positive claim, no challenge to competitive positioning, and no productive tension throughout the 45-minute conversation.

“That is super cool. Thank you”

“So that, that's kind of what you're doing. So what when you do that it'd be kind of interesting, kind of fun I think to understand what kind of risks you're seeing”