The Security Podcast of Silicon Valley

There are a handful of genuinely useful structural observations - the Cyber Haven breach vector, the argument that network security players are becoming glorified VPNs, and the market-size math that leaves only ~10% addressable by startups - but they are buried under extended biographical narrative, generic startup-philosophy riffs, and repeated affirmations that eat significant runtime.

“A DLP vendor called Cyber Haven got compromised. The attacker took over their admin account in the Google Chrome store, replacing their browser extension used for DLP with malware.”

“80% of the budget is going to the GSIs and the hyperscalers, actually very little goes to solve risk”

A few contrarian angles land well - the 'poison pill' framing of trying to be the everywhere-AI-security vendor, and the 'glorified VPNs' destiny of network-security players - but the episode also recycles well-worn startup mantras ('fall in love with the problem,' 'everyone loves to buy, nobody likes to be sold to') without adding meaningful new framing.

“if AI will be everywhere, it's a poison pill to try and be the AI security vendor”

“the network security players are destined to become VPNs, glorified VPNs”

Orr Eshed is a genuine practitioner - IDF background, led a real browser-hijacker takedown at Checkpoint, built a funded company with named institutional investors and a claimed 99% logo retention - but the interview draws him toward founder-journey storytelling rather than the operational depth his background could support.

“I led the takedown of the largest browser hijacker operation in history while I was working at Checkpoint”

“We were the only AI security contributor in 2025”

The Cyber Haven breach is named and described with real mechanism; investor names, the 99% logo-retention figure, and the Verizon DBIR contribution add texture; but several significant claims - 'largest data lake in the world for browser extension sandboxing,' 'great NRR,' 'best customer success in our space by far' - are asserted without supporting data.

“A DLP vendor called Cyber Haven got compromised. The attacker took over their admin account in the Google Chrome store, replacing their browser extension used for DLP with malware.”

“20% of half, which is pretty much 10% of the cybersecurity market, could be utilized by startups”

The host defaults almost entirely to softball prompts ('proudest day,' 'most difficult day,' 'what inspired you'), accepts every claim unchallenged, and punctuates responses with repeated affirmations rather than probing follow-ups; no substantive pushback occurs anywhere in the episode.

“Wow, so it's like the all-in-one AI and browser security platform.”

“That's spectacular. Everyone is going after social confirmation”