Epirus & Galvanick CEOs on the Future of Defense & Cyberattacks

5 Oct 2025 · 54 min

Ask about this episode

Ask anything about it. ChatGPT or Claude reads this page and answers with the times it was said.

Connect VO and ask about every podcast you hear, including the moments you saved. Add to ChatGPT · Add to Claude

In short

Sourcery Podcast: Episode Summary

Podcast Overview Title: Sourcery Description: Interviews with the top Investors, CEOs, & Founders

Episode Title Epirus & Galvanick CEOs on the Future of Defense & Cyberattacks Description: Andy Lowery, CEO of Epirus, & Joshua Steinman, CEO of Galvanick, join Molly O’Shea to discuss advancements in defense technology and cybersecurity, focusing on drone warfare and industrial cyber threats.

---

Key Guests

  • Andy Lowery - CEO of Epirus
  • Joshua Steinman - CEO of Galvanick
  • Molly O’Shea - Host

---

Episode Highlights

Epirus

Revolutionizing Warfare

  • Company Background
  • Founded in 2018, originated from Raytheon’s Next Generation Jammer project.
  • Raised over $550M from notable investors including StepStone and General Dynamics.
  • Innovation in Defense
  • Development of the Leonidas™ solid-state, high-power microwave weapon designed to counter drones and drone swarms.
  • Concept of the “sixth domain of warfare” where cyber attacks have physical impacts.
  • Strategic Defense Approach
  • Adoption of a “one-to-many” defense model that enhances U.S. defense capabilities against mass drone threats.
  • Emphasis on leveraging American ingenuity to counteract adversaries like China.

Galvanick

Fortifying Cybersecurity

  • Company Mission
  • Founded by Joshua Steinman, focusing on protecting industrial control systems (ICS/SCADA) critical to manufacturing, energy, and defense sectors.
  • Highlighted the vulnerabilities of America’s industrial infrastructure to cyberattacks.
  • Real-world Implications
  • Discussed a previous incident where hackers took control of Iranian steel mills, demonstrating the catastrophic potential of cyber warfare.
  • Proactive Cyber Defense
  • Galvanick develops platforms that can quickly detect and neutralize threats, aiming to protect essential services such as water and energy supplies.

---

Critical Discussions The Sixth Domain of Warfare

  • Definition and implications of cyber threats becoming physical.
  • Overview of advancements in drone technology and the need for innovative defense mechanisms.

Reindustrialization of America

  • Importance of rebuilding American manufacturing capabilities in the defense sector.
  • Challenges with sourcing essential components like high-powered amplifiers and rocket motors domestically.

Cybersecurity for Industrial Infrastructure

  • The necessity for robust cybersecurity measures to protect vital industries from attacks.
  • Galvanick’s approach to automating threat detection and response to increase efficiency.

---

Key Takeaways

  • Emerging Threat Landscape: Understanding the evolving nature of warfare and cybersecurity is crucial for national defense.
  • Innovation in Defense Technology: Companies like Epirus and Galvanick are at the forefront of integrating advanced technologies to address modern threats.
  • Importance of Reindustrialization: Strengthening America's industrial base is essential for maintaining national security and resilience against adversaries.
  • Collaboration and Knowledge Sharing: The intersection of defense and tech communities can drive innovation and improve national security measures.

---

Conclusion The episode provides an insightful exploration of how innovative technologies in defense and cybersecurity are reshaping the landscape of modern conflict. By understanding the challenges and solutions discussed by industry leaders, listeners gain a clearer picture of the future of national security and the importance of reindustrialization in America.

Additional Resources

  • [Andy Lowery on LinkedIn](https://www.linkedin.com/in/andylowery/)
  • [Joshua Steinman on LinkedIn](https://www.linkedin.com/in/jmsteinman/)
  • [Molly O'Shea on Twitter](https://x.com/MollySOShea)
  • [Sourcery Podcast](https://www.sourcery.vc/)

---

Sponsors

  • Brex: Modern finance platform for startups.
  • Turing: Customizable AI systems for various industries.
  • Kalshi: Prediction market platform.

---

Chapters

  • 00:00 - Future of Defense & Cyberattacks
  • 01:25 - Origins of Epirus
  • 03:55 - Defining the Sixth Domain of Warfare
  • 06:35 - America’s Edge in Defense
  • 08:47 - The One-to-Many Defense Approach
  • 11:15 - Epirus’ Gen 2 Systems
  • 15:00 - Reindustrialization and Manufacturing Bottlenecks
  • 19:00 - U.S. Talent and Supply Chain Challenges
  • 21:45 - Epirus Milestones
  • 23:15 - Transition to Joshua Steinman
  • 24:00 - Background on Joshua Steinman
  • 32:25 - Galvanick’s Mission
  • 34:00 - Real-world ICS/SCADA Attacks
  • 39:15 - Cybersecurity and U.S. Resilience

This summary encapsulates the discussions from the episode, providing a thorough overview of the content and insights shared by the guests.

Written by AI. May contain mistakes. Listen to the episode to check what was said.

Hear the part that matters, and keep it.Open this episode in VO. Double tap your headphones to save a moment as you listen.
Get VO free

Transcript

Automatic transcript. May contain errors.

0:00The other thing that America does really, really well is we are underdog comeback kings, you know? I see us catching up, but we can't just play the Me Too game. Like Andrew's very Me Too to China, they said we're going to go toe-to-toe, manufacturing in volume, build computers, build drones. We're going to build everything that China does really, really well. The easiest way to defeat a weapon system is on the factory floor. CrowdStrike's a$100 billion company to secure IT systems. In operational technology, it's almost zero. Qualcomm, Intel, NVIDIA, all of those chips come preloaded with all the software and the control circuits you need.

0:35Build a drone or build a robot or build an augmented reality headset. And a lot of times the chip manufacturers even give you reference designs or plans to say, well, if you don't know how to build your own drone, here's how to do it. It isn't how many we have today, it's how many can you build in a year. Mike Flynn called me up and said, hey, come to the White House. And then spent four years and owned all cyber, telecom, supply chain, and crypto policy at the White House on the National Security Council. I think President Trump is probably the best boss I've ever had. He's like two increments smarter than most other people, like very smart people.

1:05Things would happen. And I'd ask myself, like, why did he do that? Joshua Steinman, Andy Lowery. Welcome to Sorcery.

1:25Andy Lowery, welcome to Sorcery. Thank you. So you're CEO of Epirus. Correct. Could you give some background on EPRES? Yeah, sure. EPRES was founded in 2018 by a team that I led back at Raytheon, where we worked on a really kind of incredible project called Next Generation Jammer, which was a long-range standoff electronic attack system. That system kind of clued in a bunch of the engineers that founded the company into the direction of saying, you know, what could we use other gallium nitride phased arrays, which is sort of the essence or the key feature that the next generation jammer came with.

2:07They looked at that and they looked at fields like directed energy and protecting and sort of using electronic warfare to protect things like bases or ships or aircraft or even vehicles. And when they looked at that, they said, this is a great idea. I mean, it's a really great idea to put the same sort of technology that we did in standoff electronic attack for this other mission of basically weaponizing electromagnetic interference in order to get consumer electronics not to function. So we said, all right, let's try it. But for the longest time at Raytheon, the Air Force and the military, the customer didn't really see the viability of that approach.

2:48They didn't think it would work. In other words, not invented here. We're not quite sure this is going to work. We're not putting any money at it. And because traditional primes are so coupled with the interests and the directionality that the customer wants to take them in, they don't really have a lot of independent thinking, right, where they say, well, we're going to put$200 million to work, build a big machine, prove you guys wrong, and then sell a whole bunch of them to protect our warfighter. But that's what neoprimes or these new class of primes, like Andrel, like even Palantir was the grandfather of us all, so to speak.

3:24But the new primes, S.H.I.E.L.D., Saronic, others like me, Epirus, we kind of do do that. That is the motion that we do. We're like a product company where we're looking at the capability gaps more than the requirements. And what's the capabilities you're trying to solve for? Like, what are you trying to fix as a warfighter, taking the approach as like a product thinker? Like, hmm, what's the human factors types of issues? What are the different issues and what could we bring technologically that would go up against this particular type of threat? And when you look at traditional threats, okay, I still would say there was some benefit in being able to basically use a product motion, use a competitive motion to kind of analyze what kind of even sophisticated, exquisite systems that we would need to fight sort of the old war.

4:19But when we're talking about the sixth domain of warfare, which is this fifth domain of warfare for your listeners is cyber. So it built up. It was like land, sea, air, space, and then came cyber. Well, now what's happened, we see within this what I'll call sixth domain is the cyber systems have become physical. So cyber has typically been only software attacking networks, attacking sorts of systems with software types of attacks. And we've learned to defend against cyber with what? One to many type of defenses like cyber protection, you know, antivirus, those types of things that can take many, many, many, many, many simultaneous threats all coming at the same time and repel them all equally.

5:10Like imagine a virus software that only could take one software at a time. It would just let anything in the back door. The same is true with the physical cyber is what I'm going to call. Six-domain type stuff where you have computers that are flying or computers that are in boats or computers that are in robot men that are starting to walk the fields robotically that China's begun to build. All of those things are cyber types of attacks that are just now in the physical realm or the physical domain. and there's an element, one, of folks doing Me Too, like Andrew's very Me Too to China. They said, we're going to go toe-to-toe.

5:49We're going to manufacturing in volume. We're going to build computers. We're going to build drones. We're going to build everything that China does really, really well. They've got a long way to go. I mean, China's building, I've heard, 60 million drones per year. It's not outside of the question of China being able to do, but in the U.S., maybe 50 ,000 drones in a year, So there's a huge disparity there. So they're making a lot of good ground. But the other thing that America does really, really well, and it's branded into our culture, really, is we are underdog comeback kings. You know, we from our even reception as the Revolutionary War, we were underdogs that somehow got past the English and struck our independence.

6:33And we're an underdog again. I see us catching up, but we can't just play the Me Too game. This isn't going to be a war just mass versus mass, and whoever has the more massive type of arsenal wins. We have to be clever. We have to outthink the enemy as well and leverage what we're really, really good at. And part of what we're really, really good at is radars, is phased arrays, is gallium nitride, and that comes from our military-industrial complex like Raytheon and everything else. So take the knowledge, but now apply it to cots, very simple systems that are easy to build, easy to field, and turn that into more of a Silicon Valley kind of design motion.

7:14And that's what we've done at EPRES. So we, unlike Andrel, have more of our roots back into traditional defense. But like Andrel, we also have our roots heavily cemented with a whole bunch of different folks from like Rivian, Waymo, and other Silicon Valley companies. So we've blended those two worlds, and we think to deliver the types of systems, like the force field generator that Epris generates, I think to deliver those type of systems, we're the type of company, we're the right blend, we're the right mix, and so far the customer has thought the same. sorcery is brought to you by brex the financial stack trusted by more than 30 000 companies including one in three venture-backed startups in the u.s nearly 40 percent of startups bail because they run out of cash brex is literally built to help founders avoid that unlike traditional banks that let your money sit idle shipping away at it with fees brex is designed to help you spend smarter and move faster their all-in-one solution combines checking treasury and fdic protection into one powerful account.

8:20You can send and receive money globally at lightning speeds, get 20 times the standard FDIC coverage through their partner banks, and even high yield from day one. But same day and even same hour liquidity. Access your funds anytime. Companies like Scale AI, DoorDash, Service Titan, HIMS, Anthropic, Flexport, Robinhood, and Plaid trust and use Brex. Start today at brex.com slash sorcery. That's B-R-E-X dot com slash sorcery. Drones seem to be at the forefront of the sixth domain of warfare. Could you explain a little bit further your one-to-many approach to this? Sure. So when you look at drones, they have the advantage of coming out of what we'll call consumer electronics.

9:08And consumer electronics for years have been building around common system on a chip cores. So Qualcomm, Intel, other companies build NVIDIA, build the Jetson system. All of those chips come preloaded with all the software and the control circuits you need to build a drone or build a robot or build an augmented reality headset. And a lot of times the chip manufacturers even give you reference designs or plans to say, well, if you don't know how to build your own drone, here's how to do it. And so that feeds basically a very simple tinker toy way of building drones or fielding and building drones.

9:48And so we see lots of different folks that are becoming to the business. You see folks from China, you see folks from Iran, but you see folks like the Houthis who don't even have their own country, but they're able to participate in this kind of warfare due to the ease of design and engineering. And then when you're talking about additive manufacturing, 3D printing, and these types of things, then that makes the physical container for those chips easy to build as well and easy to scale as well. So we have a problem with manufacturing speed and capacity more than like arsenal depth or how many missiles we have.

10:25It isn't how many we have today, it's how many can you build in a year. And that becomes sort of similar in why we call this physical cyber at EPRES. it becomes similar to thinking about it from the aspect of a cyber attack, where you might have many, many small little software packages all coming and descending upon some sort of vulnerability and some sort of a network. Well, this is just like that. You might have 1 ,000, 2 ,000, 10 ,000, 100 ,000, and it'll just keep going up until they overwhelm your defenses, overwhelm your ability to protect. and the traditional way of protecting one effector, one threat, OODA loop, that isn't going to work.

11:08It does not scale with this sort of six domain threat. We need to do something different. And that's what we're here to kind of solve at EPRES. You talk a lot about being a product company. And now you're on the second generation. Could you explain how you've built this out and what the second generation brings you? Sure thing. Yeah, we just very exciting times. We're announcing officially we're nearly done with our first four systems that we're building in the second generation technology. We've built into that. That second generation technology has lots of benefits and a lot of features that the previous version didn't.

11:48So our generation one. And again, think of it for the viewers that are familiar with engineering that are out there in Silicon Valley, you typically use a heavy sort of leveraged prototype development system. They call it EVT, DVT, PVT. They stand for engineering verification test article development. I'm sorry, design verification test article and then production. So you're building basically prototypes at each stage. Now, this is in contrast to when I was an engineer at Raytheon, and we would build things through what you call a waterfall method, which has a lot of policy and procedures and checklists and things like that.

12:27And you're slowly building one system to kind of the end game to a set of requirements. You're not iterating with prototypes and iterating with generations. That feels like a product company. And so Generation 2 is our next generation where we've taken in from two deployments now, two deployments overseas and four systems, we've taken in all of that data, all of that feedback, and we've rolled it in to the Generation 2 system. The number one thing that they've asked us for is more range. You know, they want to see a half a mile or even further if we can make it further. And that's for two reasons.

13:05One reason is to push out the actual protection arc. But the other reason is, and people don't think about this, is a lot of these aircraft will continue even after we disrupt them in the force field. They continue to have some sort of forward motion. So you need to be able to contend with the tumbling, and we still want that sort of final detonation to be outside a fence line or outside wherever we're trying to protect. So Generation 2 does that. It has about two and a half times the range of the Generation 1 system in the same size box, exact same size of kind of a 10-foot by 10-foot box. It has two and a half times the range of the previous generation.

13:45And what I would consider it to be is a fully mission-capable prototype, ready for action, ready for scale, ready for production, ready for overseas deployment, ready for integration into a variety of different C2 command and control systems, ranging from Andrell's Lattice to FADC2 that the Army uses. In today's high-speed business world, staying ahead means using the smartest tools possible, including the powerful capabilities of artificial intelligence. Meet Turing Intelligence. Turing builds customizable AI systems designed to solve your mission-critical challenges, no matter your industry.

14:20From expert guidance to tailored projects, Turing helps top companies realize AI that's more capable, more adaptable, and more effective. With Turing, discover how AI can accelerate your business growth. To learn more, visit Turing.com slash sorcery. Spelt S-O-U-R-C-E-R-Y. That's Turing.com slash sorcery. Wow, that's a huge achievement. Yeah, it's great. We're real excited at Everest right now. It feels like our child has grown up and gone to college, and now he's well ready for the world and ready to get out there. And Generation 2 will be that bird that finally flies from the nest and I think starts distributing these protective systems all over the world.

15:04So we're at Reindustrialize. The heart of this summit and conference is reindustrializing in America. What is Everest's role in reindustrialization? Well, that's a great question. And it's a very interesting topic that I don't even know was fully explored. Like, there's a lot of defense companies here. And the question's why. Well, you know, I think Palmer Luckey said it in Laksberg. The robot. The robot. Palmer bot, I guess. It's going to go with murder bot. You know, that's now we got Palmer bot out there with his, what do you call it, bullet or whatever haircut that they had on that robot earlier.

15:42Well, as he was saying, though, there are regulations that require people to manufacture in America. So when we're talking about more and more volume defense systems at mass, when we're talking about millions of drones needing to be built for military purposes, not for just, you know, toys and things, we're talking about that being done in the United States. So that is a real need. The six domain drives a real need for us to build back into America. But here's what's going on as we're doing that. We're realizing that lots of the stuff that go inside at two or three levels down, these systems are also coming in without any manufacturing sources in America.

16:27So you the microprocessors, the computers, you cannot buy an American made computer. You have to go overseas. You have to go to China. And military doesn't want to buy a foreign-made computer, but there isn't any option. So they have to do by exception and so on and so on. And each of these drones are just little computers inside of flying gizmos. That's exactly what we're talking about. Those computers there are not sourced by the United States. So this is pulling, this kind of sixth domain is pulling a lot of that more consumer electronics manufacturing back to the U.S. because now it's becoming militarized.

17:04So we see that in our system. Now, the other thing it does, though, is it accentuates enormous gaps in very simple pieces of equipment like rocket motors for the drones. And Palmer detected that he wasn't going to be able to source that many rocket motors in the entire United States, and he went and opened a factory in Ohio. And so what did we do? Something very similar. We have this big phased array system that requires hundreds and hundreds of high-powered microwave amplifiers, every single system. So if we get an order for a hundred systems, we're talking tens of thousands of high-powered microwave amplifiers.

17:43We haven't built that kind of volume of amplifiers in the United States anyways since the early 2000s when we were doing the base stations and all of the towers were going up for our cell phones everywhere and you had Nortel networks and all of that. That was really the last time we've built this kind of volume of high-powered amplifiers in the United States. So since then, what has happened, we've moved those overseas, the high-volume lines, we've lost the capacity, we've lost the formula, we lost the quality. And so our rocket motor is really high-powered amplifiers. And that's what we're looking at very seriously because we really seriously think in the next year, maybe two years, we're going to get an order for at least dozens, if not hundreds, of our systems, which will drive this kind of weakness in our current sort of manufacturing capability in the U.S.

18:34So, but we're ahead of it, and we're working here, and we're here. This is why we're here. We're working with partners. We're working with partners like General Dynamics. We're working with lower kind of supply chain partners that we have as well, and we're looking at options and how we can expand capability, capacity, quality of all of those partners right now. One of the externalities of having this stagnation in production and manufacturing in the U.S. is loss of talent or no talent. So how are you going about the talent issue? Well, the experience we draw from is from Raytheon. And Raytheon, you know, being an aerospace and defense contractor does do a lot of assembly.

19:18does do a lot of work and how we design the systems even lend themselves to the type of the workforce that still exists that are able to do things like torque things together and assemble things physically and all of that. What we're really talking about a lot of times in at least our systems is sort of lower down in the food chain, sort of when you're putting boards through solder reflow or you're pick and placing components on top of those boards. And then you're tuning those boards by sort of a hand process where you're basically very carefully putting in capacitors or you're very carefully putting in wires in order to do some tuning for the systems.

19:55All of that is like tried and true aerospace manufacturing that I've managed many, many factories to do that. The problem with those factories is they're generally low volume, high mix. And we need that same quality, but now at high, high volume. And so that's what's missing. It's that ability to go high volume and push that button when we need it. We don't have that in the United States in electronics very much anymore. It's pretty much been shipped overseas. How do we solve this? I think just one step at a time and one company at a time and one project at a time. Our project is driving a huge demand for it.

20:33So it'll be sort of a name maker when it comes to bringing back high-powered amplifier design and manufacturing back to the U.S. I think EPRS alone will drive a lot of that one particular class of product. But then when you look at all the other classes of products that we're missing in America and missing being able to manufacture, we need companies to basically take the mantle and drive that change. I mean, Andrel talked about if someone doesn't build a U.S.-made computer, they're liable to do it. an andrel. Okay, that's the type of sort of gung-ho, hey, all on board, all on deck. We need to kind of collaborate.

21:09We need to kind of get some spirit, United States spirit here, and we need to really, really reinvigorate the whole Made in America concept and not just on the surface. A lot of the Made in America stuff has just been, oh yeah, we put a little paint on it at the very last step. We need to really look at the entirety of the supply chain and begin slowly but surely bringing that capability capacity back into the United States. And I will say that this administration is making it easy, much easier than other administrations. And they are willing to take risk. They are willing to lean forward. And we've been a beneficiary or it's been benefiting Empress very much since the new administration has taken over and have been pushing for this type of delivery, these types of systems.

21:54So as we wrap up, what are you most looking forward to in the next year? Well, I can't, I mean, generation two leaving the nest. I mean, I cannot wait and see in January, maybe February, we'll be testing these systems officially for SCORE and the Army. If these systems go forward, if these systems work as well as I think they're going to do, it will be a damn breaking moment for us and customers internationally, customers in Department of Homeland Security, and then of course, all of our services, Navy, Air Force, and Army, will all be sort of given permission, if you will, to go forth and order as much as they want.

22:32So I'm pretty excited about that. I'm pretty excited about where the direction of a lot of this whole neoprime and six-domain-type warfare is going, and I'm really grateful to be in the center of it all. I feel like the luckiest kid in the world to be kind of a part of this really important stage of our country's sort of future. Andy, it was a pleasure to have you on Sorcery. Thank you so much for the time. Thank you very much for having me. I really appreciated it. Thanks.

23:21Carta's fund administration platform supports over 9 ,000 funds and SPVs, representing nearly$185 billion in assets under management, with tools designed to enhance the strategic impact of fund CFOs. For more information, visit carta.com slash sorcery. That's C-A-R-T-A dot com slash S-O-U-R-C-E-R-Y. Joshua Steinman. Molly O'Shea. Welcome to Sorcery. Great to be here. We need to start off with your background. You have one of the most intense backgrounds I've come across. Can you just break this all down? Don't leave anything behind. Yeah.

24:04I spent a summer in high school studying Al-Qaeda and writing pretty extensively on it. And it just so happened that summer was the summer before 9-11. So like literally on 9-11, I was like, oh, there's an Al-Qaeda attack. I had this huge paper that had been written critiquing U.S. foreign policy with Al-Qaeda up until that date, saying it wasn't going to work. And that sort of kicked off this crazy sequence of events that, you know, led me to get recruited into like a strange section of the Navy out of college. two tours in Iraq doing fun stuff there and then working at the intersection of emerging technology and defense both in uniform and then out left active duty went to the private sector joined a startup and then yeah had an old boss Mike Flynn call me up and say hey come to the White House and then spent four years and owned all cyber telecom supply chain and crypto policy at the White House on the National Security Council for four years and then started Galvanic.

25:12It's been a ride so far. Quite the highlight reel. Yeah, it's been fun, you know. So have you been focused on cyber the whole time? Yes and no. I think the interesting thing is that if you, at a philosophical level, I like this mental model of thinking about layers of reality. So like the spoken word is a layer of reality, like we're communicating using that layer. I could communicate through the written layer of reality by writing things. Money is another layer of reality. And then raw digital information is like sort of the most pressing layer of reality that exists right now that I think is changing the way in which things happen.

26:02And so I think a lot of my work over the past 15 years has been trying to find where we can use those layers of reality to positively affect America's national security. So forward in Iraq, that had to do with running operations to find out critical information that we needed to know to find people that we wanted, stop things from happening, that we didn't want to happen, et cetera, and you can use the various layers of reality to do that. And then, you know, at the White House, you know, crypto is like one version of that layer of reality. Cyber, obviously, is a huge part of that layer of reality.

26:45We've basically connected everything in the world to the internet, and we're just now seeing what that actually means for security, prosperity, all those things. So you spent the first term for President Trump in the White House. You worked with him. What was that like during the first term? It was great. So I loved it. Playing at that level is, you know, that's the human chess match. That's like the great game. you're playing against adversaries with live rounds and I you know both in terms of you know from the military side but you'll go visit a foreign leader on behalf of the president and you'll literally come to an agreement and it's like you're there on behalf of the president United States on behalf of the country and like this is the offer let's go do this and they're like okay great let's do that and it takes just an incredible amount of patience and aggression intelligence that is both sort of you have to be able to understand or think about and try and understand like what do people want from me what do people want from us what do they want from the country um and yeah i found it incredibly enjoyable i think president trump is probably the best boss i've ever had he and every day was just another realization of this it's probably hard for him, I think.

28:11I think he's like an increment smarter, two increments smarter than most other people, smart people, like very smart people. Things would happen. And I'd ask myself, like, why did he do that? You know, you don't say anything, right? He's the president. It's his show. But, you know, he would do something. I'd be like, why did he do that? And then like two weeks later, you see like, oh my God, what a chess move. And so after like, Like after a certain period of time, it just became very easy to just like hit the I believe button, go be a good staffer, give him the good options that he needs, give him leverage, give him opportunities, and then just sort of like let the master work.

Read the full transcript

28:47Yeah, that was great. I'm really curious. Like what did that teach you about lines of command and power? I spent eight years in the military as an active duty sailor. and you have it drilled into you. Like you obey the orders of those appointed over you. That's the actual language in the, and so it's somewhat natural, but at the same time, almost all of my assignments were such where I was like dropped off in the middle of nowhere with like a small team. And they're like, all right, go do what America expects you to do, right? That was literally it. Just like we expect you to figure out the opportunities.

29:25And that was very rare. a lot of my peers did not have those opportunities. And so, you know, in the back of your mind, you're like, obviously the commander in chief, this is like the top of the chain of command. You're working at the White House and it just gave me an intense amount of pleasure because it was just like, look, I'm going out there. You can operate very aggressively. But at the same time, it's like Bezos has this line, disagree and commit. It's very easy to do that when you have a high degree of trust in the person at the top, where you just have to assume that like, that's the guy who has as much of the information as exists in reality, right?

30:05Like he's got all of those information feeds coming to him. He's talking to his fellow executives. He's talking to other heads of state. He's seen the Intel feeds. He's seen the markets, et cetera. And so, you know, a lot of times people will second guess him in the media. They'll second guess him privately in the group chats, on Twitter, whatever. And at least from my perspective, it's like that guy's got the most information of anyone in the world. And he has repeatedly, repeatedly over like at this point, I mean, really it's 30 years of a public life, called it right. So it's like, all right, people can panic.

30:46They can complain. They can this, they can that. But like, I have a high degree of trust in his judgment and track record. What is the biggest difference between that term and this term? Personnel. Really? Yeah. Oh, yeah. I think last time he was, President Trump was new to Washington and picked a lot of people that folks in Washington thought were going to be the right people for those jobs. They didn't see eye to eye with the president, and then they would essentially utilize their authority to do things that the president didn't want or do them in a different way when they should have been doing what he wanted or just resign.

31:23Like, no one's going to fault you for resigning. You're the secretary of some agency. But instead, they would go out and run their own program. And I think the president knows now that you have to have people that are going to execute the program. That's what the American people voted for. They get to choose every four years who's in charge. So I think he's got a really good team this time. It's creating a lot of tailwinds, too. It's amazing. I mean, the economy is cooking, and I think things are going really well. And look at us. We're at Reindustrialize. We're at Reindustrialize. We're in Detroit.

31:53Detroit is Reindustrialize. I grew up in Detroit. You did? Yeah. Oh, yeah. Wow. You're home. I didn't know this before, but we're right next to Canada. It's very close. It's right. It's right there. You can't throw a football, but you - You can walk across a bridge. You can walk across a bridge. Maybe get stuck there. Yeah. I learned to drive a forklift a mile and a half from here. I was 11 years old. Yeah. Oh, my gosh. That's great. Well, so we're at Reindustrialize, the heart of this industrialization movement of America. We need to talk about Galvanic. This is what you're building now after your tour of duty in and out of the White House, in and out of service.

32:33How did we get here? It was the number one problem that kept me up at night when I was in the White House. We have connected the most essential equipment in our world, in our lives, in our economy. to the internet. And that has huge follow-on effects, many of them positive and then some of them negative. And so, you know, for four years, I was the guy that had to get the phone call at 3 a.m. Do we wake up the president when weird things are happening on our critical infrastructure, strange, you know, digital actors trying to undermine X or Y or, oh, we found someone in this system, very sensitive.

33:13And when I was in the military, I also had some exposure to that problem as well. And so left the White House, took a breather, went out, talked to some friends and figured let's do something at the intersection of cybersecurity and industry. And this is what we came up with. Just to make it a little bit more tangible, what are the real threats that we're facing. Give an example. Several months ago, unknown actors took over several Iranian steel mills remotely. And you know, you have a steel mill, you have a huge cauldron of molten metal moving on gantry cranes across a big space, pouring molten metal into molds and things like that.

34:03These attackers took over several of those steel mills and just started pouring the molten metal on the floor of those facilities. Essentially ruined the Iranian steel industry for multiple months, if not years. Most data moves over industrial networks unencrypted. Most industrial equipment simply receives any instruction sent to it with the proper protocol and just starts executing it. And so this is a huge problem. There's no security on industrial facilities, on almost any industrial facility worldwide. And as hackers have gotten much better over time attacking what we call IT systems, information technology systems, there's been a huge investment.

34:49you know, CrowdStrike's a$100 billion company to secure IT systems. And on the OT side, operational technology, there's almost zero. It's almost zero. And so we set out to protect those systems. Those systems actually, like, make sure that we have, like, clean water, you know, that the sewer systems work. They cool and freeze our food so that it can be transported over long distances. They're the robots that make the airplanes that we fly on. You know, you could just go down the list, you know, they're refining the oil that goes into creating plastics and creates gasoline for cars and just go down the list of literally everything that exists.

35:30And those systems basically exist because people don't want to do bad things to them. And that is changing. So what is Galvanic providing? So Galvanic takes any data source off of an industrial facility and pulls it together, correlates it together, analyzes it in real time. And we replicate the work of a team of analysts that would have to manually go in and pull those data sources and try and find out, you know, when they see one small indicator of potential malicious activity, you have to go to a whole investigation. That can take hours, it can take days, it can take weeks, it can take months.

36:08Like when you have to call someone up at some remote facility and say, hey, you know, to some, non-technical person, hey, can you take a thumb drive and go over to this computer, plug it in, and then pull up the terminal, and I'm going to give you a bunch of commands to run, and you're going to pull logs off of that machine and then send them back to me. Almost impossible to do in large industrial facilities. So those investigations can take a very long time. Because we're tapped into all those systems live, we auto-generate those investigations in about two to five minutes. So we have essentially replicated a significant portion of the workforce that exists on the IT cybersecurity side for the OT cybersecurity sort of apparatus.

36:54And the problem is that there just aren't enough Americans that do OT cybersecurity. In fact, when I was at the White House, I chartered a study. You have like researchers that work for you there. And we found less than 10 ,000 Americans that do that. And so So the problem is, like, I would love it if there were Americans that could do those jobs. They don't exist. Training for those jobs takes years. And there are multiple skill sets where if you get one of those skill sets, you're going to get a great paying job. So really the people that get into OT cybersecurity are deeply passionate about it because they've seen what happens when someone hacks into a water treatment facility and starts to change the chemical dials or what have you.

37:34And so, yeah, we've replicated that and we can deploy it anywhere. Talking about team, we need to talk about your team. Yeah, rock star team. So my co-founder, two co-founders, Brandon Park, Felix Pleszinski. Brandon stood up as the first hire on Amazon's OT cybersecurity team. So there were four people responsible for 700 facilities worldwide. So think an Amazon Fulfillment Center. It's basically robots, right? It's robots and a few humans. So those robots, you know, it is possible to give them nonstandard instructions. So Brandon and his team were responsible for trying to protect those facilities.

38:20Felix Blizinski, our COO, Felix and I went to college together. I recruited him down from New York. He was a hedge fund trader, joined the Department of Labor as the deputy chief economist, and then pulled him over to the White House. And we worked on the intersection of economics, markets, and national security together. How big is the overall team? Is it just E3? You have more? No, we have 15 people. Okay. Yeah. And some big hires coming in soon. I'll announce once they hit, but just signed paperwork. So things are going great. Super exciting. Quite the intense team. It's great. Yeah, so we obviously pulled a lot of folks out of Amazon and then some other great, you know, OT Cyber, it's so small.

39:03You kind of, like, know where all the players are. So, yeah, pulled some really fantastic folks out of Google and Uber and a few other niche shops around town. I think taking a step back, what role do you think this team and this company has in re-industrialization? I've said to several people today, the easiest way to defeat a weapon system is on the factory floor. And so the defense industrial base is where the fight is happening right now. That's why re-industrialization is so important. And if you can't manufacture things and know that the way in which they were manufactured is the way that you wanted them to be manufactured, the software that's being deployed onto them is what you wanted to be deployed onto them.

39:49They're made to the specs that you wanted. And in the steel example, you want to make sure that those systems continue to function and can continue to function. It's critical. If you don't have a secure industrial base, you don't have an industrial base. It means that industrial base exists because your adversaries allow it to exist. So unless we're able to protect that, all of it's for naught. Between all of the geopolitical tensions, which ones do you think are the highest threats for the U.S.? I think the president is very deftly handling the situation in Russia and Ukraine, very much opposed to escalating an eventually nuclear conflict.

40:32Obviously, he's thinking a lot about the situation in the South China Sea and also with the Iranian nuclear program. From a cyber perspective, I believe that the most critical friction points exist between us and the Chinese Communist Party. you can look on the news there are reports to congress open testimony by directors of national intelligence that the chinese and the russians and the iranians and the north koreans but especially the chinese have been prolific in their efforts in the cyber domain to essentially pre-position themselves on america's critical infrastructure they are there now and their goal is at a time in place of their choosing to be able to flip off things that we rely on.

41:26Again, water, power, sewer, transportation, manufacturing, just go down the list. This is publicly acknowledged at an unclassified level. I'm not breaching any confidences. It is announced in Congress every year. Just read the DNI's, the Director of National Intelligence's report to Congress every year. You can look up Salt Typhoon and Volt Typhoon. These are two Chinese intrusion sets, we call it, and prolific in hacking things like telecommunications networks. And so I think that fight is happening now. I mean, that's a war that is literally happening right now that people don't understand because it's sort of hidden.

42:08But I think that's where the fight is, and that's certainly why we're doing what we're doing. How do you resolve that or how do you keep it at bay? Good defense and good offense. So I can't do the offense part now. I used to, but I can do the defense part. Felix wanted me to ask you about your take on Taiwan. When do you think we're going to go to war? Or when do you think Taiwan's going to get overtaken? I desperately want the Taiwanese people to want to defend themselves. And so my gauge on that potential conflict has to do with what I see the Taiwanese people doing. Are they equipping every military age male from 15 to 50 with AK-47s, thousand rounds of ammunition, body armor, and then forcing them to go out?

42:57Not forcing, but asking them to go out and drill and train and learn how to operate those and other weapons systems. Are they going out and procuring things that are going to survive the first 24 hours of an absolute onslaught of the Chinese Communist Party's People's Liberation Army and People's Liberation Army Navy, is what it's called. And that's how I gauge whether or not I think they are going to want to actually preserve their way of life. It really is a fight in their own hearts and minds. Like, they have to make the decision. and I think America has always tried to be a friend to free peoples everywhere and so we'll see I certainly don't have the most up-to-date information on what it is that they're procuring and buying but when I do talk and do engage with folks that is exactly where I go it's like tell me about tell me about the official you know National Guard militia type entities that they have there and let's talk through you know what training is happening what are they doing who's interested.

43:59When you start working with customers, what are the first things that you always check? What can companies do to make sure that they have some sort of defensible infrastructure? Network architecture is really important. And so there are certain companies where you go in and they're running email and a production system on the same network. That's inadvisable. because it means that if you have, you know, someone that visits an illicit website from their laptop or computer and a malicious actor happens to get onto that work computer, they have a straight line over to a CNC machine or a robot arm or what have you.

44:42So the biggest thing that we always recommend, even when we're not working with a company, is what we call network segmentation. And then beyond that, you know, there's a whole bunch of other very technical things that you can do. You can do firewalls. You can create further segmentation. But at the end of the day, what Galvanic does is deeply monitor what's happening on the industrial side on that OT network. And from our perspective, that's going to be the gold standard going forward because unless you're doing that, you have no idea what's happening on the network that actually produces what your company does.

45:20Like right now, some of our customers you know what did it look like before in terms of monitoring and what does it look like after before is if you want to know what's happening on that production on that production network you go to a paper logbook and you look to see if anyone's from the outside is like logged in meaning like oh i've got a contractor who's going to come and you know do a system update for some large press that we have you know name date maybe it says the company time in time out that's it Other than that, it's like your people know what's going on. Oh, yeah, I operated that piece of equipment yesterday.

45:56Oh, yeah, it's on the regular production cycle, et cetera, et cetera. But, like, you want to know what's actually happening on those computers? No idea. Once they deploy Galvanic, we have incredibly granular visibility into what's happening from moment to moment. Oh, a strange laptop was just plugged into this machine. Ah, look, it just reached out to a strange website we've never seen. It pulled down an executable file and installed a firmware update or what have you. Someone's trying to extract credentials out of this machine right here. We've never seen that. Just go down the list. Unless you know what's happening, you don't know what's happening.

46:34I want to talk about the vulnerabilities and new exposures that we'll have as AI advances more. AGI becomes a thing. A company I recently came across is Turing and they help build and deploy next-gen AGI within real-world problems across industries. How is AGI either going to help you or what do you now need to consider? So part of what we do is extract and organize one of the most unique data sets in the world, which is for our customers. We don't hold on to that data ourselves. It's their data, but we're extracting the information off their production system. So certainly in the future, you're going to need those types of structured data elements in order to understand and then build those types of capabilities.

47:29From a security perspective, you know, AGI is very interesting, AI is very interesting, whatever you want to call it, because the vulnerability side of the cybersecurity world is really critical to running many operations, not all, but some significant portion. So finding holes in code is an art. There's some science, there's a lot of art. And very smart people have been doing it for a very long time. And one of the biggest things that people talk about in terms of AI and cybersecurity is that you can essentially now do this at a certain degree of scale with these artificial intelligence platforms.

48:15We're starting to see some of that stuff come online. So what it really means is, one, the discovery of vulnerabilities in systems is very likely going to experience this, like, Cambrian explosion, people say, right? What took a single person or a group of people, you know, a lot of time, a lot of energy to try and find a way into a system, you're going to be able to point one of these, you know, egregores at, be like, find new ways into this, right? then the question is, okay, are you going to then be able to run operations at that level of scale? And I think that we'll see. It stands to reason at some point, maybe the answer is yes.

49:00All this for us at Galvanic is really just about, okay, you have to know what's going on on your systems. You can't trust that what you assume is happening is happening. What we say in the military is trust but verify. and that's what we're building to do is have that deep visibility into everything that's happening at all times. And as we see one, two, maybe three unconnected random things happening, we can correlate that together in real time and then immediately produce the analytic product. Like, hey, we saw these three things. It just happened here. These are your next steps. This is what it could be.

49:36You need to go look at this right now. Wow, that's a good way to segment into our final section we're gonna go a little bit faster on these ones we only have like three minutes left first sorcery's partnered with rex we're gonna get you one of these hats they're really cool they're like technical they they're reflective they're sweet but rex is all about performance spending smarter moving faster making sure that you actually can track performance over time and make sure that the operations are running at full speed it seems like that's exactly what you're doing with Galvanic. For you in particular, like what are some of the components that you like to measure and track for performance within these infrastructure systems?

50:21It really varies system by system. With people, I keep a index card for every person that we hire and that index card has like three to five things that I expect that person to be cranking on every year. And that's how we run our check-ins on our team is like you have big goals and every week you're meeting with someone. It's like, okay, how much closer are we to this? What are the blockers that you have? And how can we get rid of those blockers? Go faster. Great. Now we're going to go into these really fun Kalshi questions, a little bit spicier. Do you think Trump will make a new free trade agreement with China?

51:01What are the odds on that? I think he is certainly looking to do a trade agreement with China. But, you know, he's in no rush. I think there's plenty of other people that we can trade with as well. Okay, right now it's at 29%. 29 %? Yeah, I'd say I'd give it like mid-30s. Am I going to move the market? You're going to, yeah, you're a size mover. Yeah, yeah. And then will the US government mandate security clearances for top AI employees this year? I think they should. I don't think they will. You think they should, but they won't. It's just really hard, right? Like you're going to go to a private company and say these people have to have clearances.

51:44I feel like they're like very obvious though. Like now that we're seeing all these huge like talent trades, like security clearance. Yeah, it's hard. It's hard. clearances and the law around that are very strange. So I put that on a wish list. Explain. They're granted when you have what's called a need to know. And I'm just not sure under what auspices you would say, because a need to know is generated by having like a program that the information within it, if disclosed would cause grave harm to the United States government. and it's usually downstream of you know employment or a contract so could could you mandate that senior engineers at companies that are doing business with the United States government have clearances yes there probably are some right now but those are contract dependent and so it's like if a company has a contract with the United States government and they're like these three bullets have to have clearances, then they can go through the process.

52:54But like to mandate every top AI, you know, engineer to have one, I just, that'd be hard. This is why we ask you these questions. Yeah. Straight to the source. Yeah. Sorry. It's at about like 15 % right now. So that's a zero. You know, it's a zero. Free money right there. Free money. Well, perfect. This was so much fun. Thank you so much for taking the time. I've learned so much. Thank you, Joshua. Thanks Molly. Hey, it's Molly. If you enjoy our interviews, check out our newsletter, sorcery.bc, where we deliver a once a week top deals and tech headlines email, and also go deeper on our podcast interviews.

53:32Subscribe to Sorcery today. And don't forget to subscribe to the podcast on YouTube, Spotify, Apple, or wherever you listen. Link in description to sign up.

From the publisher

Andy Lowery, CEO of Epirus, & Joshua Steinman, CEO of Galvanick, join Molly O’Shea to break down the next frontier of defense, from drone swarms to industrial cyber threats.


Epirus has raised over $550M from StepStone, General Dynamics, T. Rowe Price, Gaingels, and 8VC, building its Leonidas™ solid-state, high-power microwave weapon to counter drones and drone swarms. Lowery explains how Epirus is pioneering the “sixth domain of warfare”—physical cyber attacks—and how their “one-to-many” defense approach gives the U.S. a strategic edge against mass drone threats.


Galvanick, meanwhile, is tackling the cyber front. Steinman, who served four years in the Trump White House on the National Security Council, breaks down why industrial control systems (ICS/SCADA) are America’s greatest vulnerability—and how Galvanick’s platform detects and neutralizes attacks that could cripple manufacturing, energy, and defense supply chains.


Together, we explore:

  • What the sixth domain of warfare means for modern conflict.

  • How Epirus’ Gen 2 systems are extending range and production readiness.

  • Why cybersecurity for industrial infrastructure is mission-critical.

  • The role of defense tech in America’s reindustrialization.

  • Where geopolitics, AI, and national security intersect in the decade ahead.


This conversation is part of Sourcery’s “Made in America” Mini-Series recorded at the Reindustrialize 2025 Summit. 


1. Andy Lowery: https://www.linkedin.com/in/andylowery/

2. Joshua Steinman: https://www.linkedin.com/in/jmsteinman/

3. Molly O’Shea: ⁠https://x.com/MollySOShea⁠

4. Sourcery: ⁠https://x.com/sourceryvc⁠


Brought to you by:

• Brex—The modern finance platform, combining the world’s smartest corporate card with integrated expense management, banking, bill pay, & travel.


As a Sourcery Listener you get: 75,000 points after spending $3,000 on Brex card(s), white-glove onboarding, $5,000 in AWS credits, $2,500 in OpenAI credits, & access to $180k+ in SaaS discounts. On top of $500 toward Brex travel, $300 in cashback, plus exclusive perks (like billboards..) visit → https://brex.com/sourcery


• Turing—Turing delivers top-tier talent, data, and tools to help AI labs improve model performance—and enables enterprises to turn those models into powerful, production-ready systems. Visit: https://turing.com/sourcery


• Kalshi—The largest prediction market and the only legal platform in the US where people can trade directly on the outcomes of future events: https://kalshi.com/sourcery


Follow Sourcery for the latest updates!
https://www.sourcery.vc/


Chapters:

(00:00) Future of Defense & Cyberattacks

(01:25) Origins of Epirus & next-gen jamming roots at Raytheon

(03:55) Defining the sixth domain of warfare

(06:35) America’s edge: cleverness, phased arrays, & underdog strategy

(08:47) Drones, consumer electronics, & the “one-to-many” defense approach

(11:15) Epirus’ Gen 2 Leonidas system: extended range and readiness

(15:00) Reindustrialization: manufacturing bottlenecks in amplifiers & rocket motors

(19:00) U.S. talent and supply chain challenges in electronics

(21:45) Epirus milestones & next Army tests

(23:15) Transition to Joshua Steinman, CEO of Galvanick

(24:00) Steinman’s background: Navy, Iraq, White House National Security Council

(27:00) Lessons from working under Trump at the NSC

(32:25) Galvanick’s mission: defending America’s industrial base from cyber threats

(34:00) Real-world ICS/SCADA attack examples (Iranian steel mills)

(39:15) The role of cybersecurity in reindustrialization and U.S. resilience

More from Sourcery

All 190 episodes
Epirus & Galvanick CEOs on the Future of Defense & CyberattacksSourcery · 54 min
Listen in VO