How to build your own Infosec Company
summary
Builds a boutique pen‑test firm (kept at ~20 people) that wins a large US browser vendor as first client, uses Google Drive and Slack for collaboration, keeps three isolated backups and runs a yearly “chaos monkey” restore to be fully productive in about six hours. Keeps contracts small, fires abusive clients, partners with peer firms to survive Q4 surges, and cites a real pricing gap where one vendor quoted ~20× more for the same scope. Uses mailbox zero and simple tooling to stay sane.
AI-written summary · about
chapters (19)
- 0:00Intro
- 2:12Talk Structure
- 4:09Infosec Companies today
- 7:22Bigger is.. bigger?
- 10:56Advantages of a Boutique
- 11:15Smaller is.. faster?
- 13:53Bootstrapping Phase
- 18:20The First Client
- 19:12Time to get organized
- 20:51Tools
- 24:26Start exercising Mailbox Zero
- 27:48Like... Security. Redundancy.
- 31:00Final Act
- 32:11Thicken Your Skin
- 37:02Find your way to deal with them.
- 37:57And most importantly.
- 38:52Pardner up!
- 43:54Stress & Workload...
- 44:27Don't burn out.
related talks
01h 02mKeynote - How To Build Your Own Infosec Company
27mSmall Company, Big Threats: Cybersecurity for the Rest of Us
36mHow to build continuous security and embed it in your product
58mBalancing Security and Agility While Scaling Your Company
46mIn Search of Security Shangri-la
30mEffective security on a tight budget
39mOpen-Source and Exponential Business
33mRapid-Fire Stories of Creative Solutions to InfoSec Problems