In short
Podcast Summary: Sourcery - Episode: Google Closes $32B Wiz
Episode Overview In this episode of Sourcery, host Molly O'Shea interviews Gili Raanan, founder of Cyberstarts and early investor in Wiz, a leading cybersecurity company recently valued at $32 billion. The conversation delves into the evolution of Wiz, investment philosophies, the future of cybersecurity, and the impacts of AI on the industry.
Key Insights from Gili Raanan
Background and Experience
- Career Journey: Gili spent nearly a decade at Sequoia Capital before founding Cyberstarts in 2018, where he focuses exclusively on cybersecurity investments.
- Founder's Mindset: Gili emphasizes investing in people rather than ideas, believing that the individual’s background, resilience, and emotional intelligence are crucial for startup success.
Wiz’s Journey
- Initial Investment: Gili backed Wiz with a $6M seed investment when it was valued at $66M.
- Evolution of the Company: Originally named Beyond Security, Wiz pivoted from its initial focus on satellite office security to cloud security, which proved to be a significant move aligned with market demands.
- Product Market Fit: The company achieved rapid growth due to exceptional product-market fit, aligning with the needs of Chief Information Security Officers (CISOs).
Investment Philosophy
- Team Over Product: Gili’s model at Cyberstarts focuses on understanding the founder's journey and motivations rather than the specifics of the technology at the seed stage.
- Focus on Resilience: Gili seeks founders who have overcome adversity, emphasizing grit and a strong desire to learn as key traits for success.
The Future of Cybersecurity
- AI and Cyber Threats: Gili warns that AI poses significant risks, potentially leading to a period of increased threats in cybersecurity, where both attackers and defenders could be autonomous agents.
- Self-Aware Threats: He expresses concern that future attackers may exhibit self-awareness, complicating the landscape for cybersecurity defense.
Cybersecurity Industry Trends
- Investment Growth: With Cyberstarts having raised over $1.5 billion and backed 30 companies, Gili discusses the competitive edge that comes from focusing solely on cybersecurity startups.
- Emerging Companies: Gili predicts that the next generation of cybersecurity companies could reach valuations of $50 billion to $100 billion, expanding the landscape of the industry significantly.
Leadership and Personal Insights
- Emotional Intelligence: Gili stresses the importance of emotional intelligence in leadership and investment, using techniques like games to help founders articulate their emotional journeys.
- Personal Philosophy: He embraces a mindset of continuous improvement, learning from past experiences, and questioning oneself to drive personal and professional growth.
Key Takeaways
- Investment Strategy: Invest in people, focus on resilience and grit over raw ideas.
- Adapting to Change: The cybersecurity landscape is evolving rapidly, requiring adaptation to new threats and innovations, especially with the rise of AI.
- Founder's Journey: The emotional and personal aspects of entrepreneurship are critical for success, as technology is merely a tool for achieving broader goals.
Conclusion This episode of Sourcery provides a deep dive into the world of cybersecurity through the lens of Gili Raanan's experiences and insights. His unique approach to investing in founders and understanding the future of cyber threats offers invaluable perspectives for anyone interested in technology and venture capital.
For those looking to explore more, be sure to subscribe to the Sourcery podcast for ongoing discussions with influential figures in technology and investment.
Written by AI. May contain mistakes. Listen to the episode to check what was said.
Chapters
Tap a time to open that second in VOCybersecurity Landscape Overview
0:00 to 0:45
Learn about the upcoming challenges in cybersecurity and the role of AI.
“We've just finished its biggest ever quarter in terms of revenues.”
Gilly's Journey in Cybersecurity
1:40 to 3:23
Gilly shares their extensive experience and lessons learned in cybersecurity.
“So for some people that don't have background on you and your prolific investment strategy and history, Could you just explain a little bit on CyberSharts?”
Early Days and Key Experiences
3:23 to 6:10
Insights into Gilly's early career, challenges faced, and pivotal moments.
“And beforehand, I've been an entrepreneur a couple of times.”
Forming Cyber Starts
6:10 to 9:20
Gilly discusses the formation of Cyber Starts and the rationale behind it.
“You didn't have, as a teenager, you didn't have, you know, any source of information.”
Investment Philosophy and Approach
9:20 to 11:50
Exploration of Gilly's unique investment philosophy focused on people over ideas.
“that, you know, I know cybersecurity well, let's focus just on cybersecurity.”
Criteria for Investment Decisions
11:50 to 14:11
Gilly elaborates on the criteria for selecting entrepreneurs and their backgrounds.
“Two, I would not ask a single question about the idea of technology.”
Overcoming Early Life Challenges in Entrepreneurship
14:11 to 19:06
Learn how personal hardships shape entrepreneurial resilience and success.
“So I decided I would focus on individuals who went through real life difficulty early on in their life.”
The Journey of Cyber Start and VC Success
19:06 to 24:59
Discover how Cyber Start achieved remarkable success in venture capital.
“So in the past, I know, eight years, probably 1 ,500 new ventures in cybersecurity.”
Defining Success Beyond Financial Metrics
26:28 to 28:00
Explore the nuanced definition of success in the entrepreneurial landscape.
“So if success isn't comfort to you, although I think a lot of people would look at you and think you're very successful.”
Emerging Cybersecurity Players
28:00 to 29:20
Learn about the rising companies in cybersecurity and their significance.
“If you look at a company like Sayera, which is an emerging data security, AI security company valued recently at nine billion dollars, It's not about the valuation.”
Show all 34 chapters
The Israeli Founders' DNA
29:20 to 31:15
Discover what makes Israeli entrepreneurs uniquely successful in tech.
“So that company is doing amazingly well.”
Investing with a Personal Touch
31:15 to 34:00
Understand the importance of close relationships in tech investment.
“First of all, there's nothing wrong about building companies in Silicon Valley, London or New York.”
Challenges of Entrepreneurship in Israel
34:00 to 36:40
Explore the unique pressures faced by Israeli entrepreneurs and how they thrive.
“You know, the value in them was put there by their parents, by the neighborhood they grew up in, by the school.”
How Military Experience Shapes Innovation
36:40 to 39:00
Learn how military service influences Israeli entrepreneurship and tech innovation.
“we argue a lot, we talk about everything that matters, and you need a FaceTime for that.”
Shattering Glass Ceilings in Cybersecurity
39:00 to 42:05
Understand the changing aspirations of Israeli entrepreneurs in cybersecurity.
“So this is not something that's new to, you know, this is something that's, there are lots of downsides to that.”
The Evolution of Cybersecurity Aspirations
42:05 to 44:23
Explore the shifting dreams of cybersecurity founders and the realities of today's market.
“Today, the dream of Israeli founders in cybersecurity is to go two, three times bigger than we is.”
Overcoming Personal Limitations
44:23 to 46:24
Learn how personal fears can hinder success and strategies to overcome them.
“I know you constantly challenge yourself.”
The Emotional Journey of Founders
46:24 to 48:23
Understand the emotional challenges founders face and how to navigate them.
“I find these theories and little stories about, you know, holy people that live in a jungle like a thousand years ago and the lessons they learned about their own fears.”
The Sunrise Process: From Ideas to Market Fit
48:23 to 54:35
Discover the structured approach to achieving product-market fit for startups.
“At some point, you know, though we don't ask them about their ideas and we don't talk technology to begin with.”
Anticipating Cybersecurity Threats
54:35 to 56:00
Learn how to identify and respond to emerging cybersecurity risks and trends.
“Because if you're an amazing engineer and you know how to develop a new AI model and your emotion dictionary is love -hate, you are not going to get anywhere.”
The Evolution of Cybersecurity Threats
56:00 to 1:02:40
Explore how emerging technologies like AI fundamentally change cybersecurity dynamics.
“So I didn't have to sit in the office in 2018 or in 2010 and think, okay, what's next in cybersecurity?”
The Risks of Self-Aware Agents
1:02:40 to 1:06:50
Discuss the dangers posed by self-aware agents and the potential for mega agents.
“And so agents are in control of most critical things we need as humans, as society to survive.”
Future Challenges in Cybersecurity
1:06:50 to 1:09:44
Identify top threats in cybersecurity and the importance of minimizing human involvement.
“And I think in 1949, he already established the three laws of robotics.”
Challenges of Manual Processes in Cybersecurity
1:10:02 to 1:10:44
Explore the inefficiencies of manual tasks in cybersecurity and their implications.
“Overprovisioned systems, employees, manual process, manual processes.”
Wiz's $32 Billion Acquisition Overview
1:12:26 to 1:13:24
Discussing Wiz's acquisition and the regulatory approval process.
“So we talked before about limitations, and maybe the next one is even larger than this for cybersecurity exits.”
The Execution Journey of Wiz
1:13:24 to 1:15:06
Insights into the execution strategies behind Wiz's success.
“And by the way, we just finished its biggest ever quarter in terms of revenues.”
Transition and Pivot of Wiz's Business Model
1:15:06 to 1:17:16
How Wiz shifted from satellite office security to cloud security.
“And together we created a syndicate of$20 million that valued the company at around, I think the number was$66 million cost.”
Understanding Product-Market Fit in Cybersecurity
1:17:16 to 1:21:34
Analyzing Wiz's perfect product-market fit and its elements.
“And And in the WIS case, all those four personas mapped into a single person in real life, who is the CISO, the chief information security officer.”
Leadership Traits and Team Dynamics at Wiz
1:21:34 to 1:23:55
Key leadership traits and team dynamics that contributed to Wiz's success.
“You know, one was the undisputed leader and CEO.”
The Importance of Surrounding Yourself with Great People
1:24:01 to 1:25:29
Learn how the people around you can significantly influence your performance and growth.
“like a gazillion amount of hours just making consensus-based decisions that wasn't the style.”
Experiencing Real Greatness
1:25:30 to 1:27:38
Discover the concept of real greatness and how it can be recognized through personal experiences.
“And then on a business, there's so much you can learn, as you could see.”
Lessons Learned at Sequoia
1:27:39 to 1:31:22
Hear about the valuable lessons learned from experiences at Sequoia and the impact of high-performing environments.
“But if you've seen it once, you know it forever.”
The Journey of Transitioning to Venture Capital
1:31:23 to 1:33:41
Understand the challenges and learning curve involved in moving from operations to venture capital.
“A lot of grit and things that are similar to the conversation we had about founders.”
Focusing on Building Great Companies
1:33:42 to 1:35:43
Explore the philosophy of prioritizing business development over exit strategies in the cybersecurity sector.
“So that's, you know, developing a high performing team at Cyberstarts is something I really focus on.”
Transcript
Automatic transcript. May contain errors.0:00We've just finished its biggest ever quarter in terms of revenues. You look at how amazing the business is and suddenly$32 billion do not look. Irrational number. Whenever I get into a journey with brilliant entrepreneurs, you never know where the journey will take you. AI is different because it's not yet another shift in technology. It changes everything we knew about cybersecurity. we are going to face the darkest period in cybersecurity. In the next 10 years, we are going to see threat actors who are programs, very, very smart, sophisticated, maybe self-aware threat actors. And the defenders would be super smart programs or agents as well.
0:43They would have to deal with each other. Autonomous programs control power, control water flow, control food supply for all of us. It's very scary because...
1:05Gilly, welcome to Sorcery. Oh, so happy to be here and excited about it. And welcome to London. Thank you. It's great to see you in London. Do you come here often? No, you just gave me a very good reason. So I think we landed in London roughly at the same time. You're coming from Israel. I'm coming from L.A. Exactly. We meet halfway. That's a good plan. So this is going to be a really fun discussion. As you mentioned earlier off cameras, we're always going to be surrounded by risks. And you are a prolific cyber investor. So for some people that don't have background on you and your prolific investment strategy and history, Could you just explain a little bit on CyberSharts?
1:56Happy to do that? Prolific. I'll remember that word. Legendary, prolific investor. I'll try to use it as much as I can. So prolific. I'll give you the short version, but we can go deeper because when I look back at my, you know, 35 years plus maybe journey in cyber land, I think that I went through a lot of experiences that are translating directly into lessons I share with the wonderful entrepreneurs I work with and hopefully that helped them avoid some of the pitfalls I fell into. But, you know, I started Cyber Starts in 2018 after spending about a decade with Sequoia Capital. And beforehand, and by the way, at Sequoia I did some cybersecurity investments, but I made other investments in non-cyber security companies, which was an amazing experience as well.
3:17And I'll tell you how I got focused on cyber security only in a second. And beforehand, I've been an entrepreneur a couple of times. Sequoia backed my first company back in 1997. I was 27 years old, just straight out of the military service. I spent a decade with the intelligence forces in Israel. I thought I know everything. And literally I knew nothing and definitely nothing about the venture world. Got backed by Sequoia Capital. Pierre Lamond was my board member and anyone who knows Pierre, you know, knows how strict of a board member and investor he is. and it was a completely new experience for me.
4:27And that company, I can tell you more about it if we have time, but I had the pleasure to build the first real CAPTCHA implementation. And the company got successful by developing the first WAF, the first web application firewall. Because back then, believe it or not, it's not like 100 years ago, but web applications were the new thing. So somebody had to protect them. We sold that business to IBM. I started another company and sold that company to EMC and joined EMC. So I had a little bit of corporate experience just to figure out I never want to do that again. And essentially, since I was 18, I'm in cybersecurity.
5:32But if I go even to previous period in my life, you know, I grew up in a very, very small town in Israel. Small town is like 40 ,000 people. That's a lot of people for a small town. It's a small town. And if you grew up in that town, which was, I would say, 20 miles away from Tel Aviv, the big city. But for me, Tel Aviv was on the moon, you know, 20 miles or 20 ,000 miles or 20 million miles. You know, who cared? You know, you never got to the city. You didn't have, as a teenager, you didn't have, you know, any source of information. You know, there was no internet. There were no smartphones. As a curious kid, you could ask the adults around you about the world, and very, very quickly you discover that they don't know either, and they are focused on survival, just doing their jobs and making sure that they are keeping their jobs.
6:46It was a working class environment. So I spent most of my time in the public library reading Isaac Asimov books, and that would get us to agents, because I think that everything we know today about controlling and putting guardrails for agents, Isaac Asimov wrote in the late 1940s and early 1950s of the previous century about robots and the three and then the four laws of robotics. And by the way, spending a lot of time in the library didn't make me the most popular kid in a class. And I felt very isolated from the world, from other people. And I think that really instilled in me a lot of passion and curiosity to know more, to get to know the world.
8:03Because I felt I'm living on an island. And I think that still today, you know, this basic fundamental curiosity, first of all about people, is what's driving me.
8:23And just when I was 12 or 13, I discovered, you know, personal computer. You know, I got, you know, a Commodore 64. You know, it was pre-Windows, pre-DOS era. And, you know, I fell in love. and you know as a very I would say lazy kid I found with joy that there's a machine that you can tell it once what to do and it would keep doing that forever without complaining so when I left Sequoia in 2017, the same lazy boy who was a little bit older, but was still lazy, decided that, you know, I know cybersecurity well, let's focus just on cybersecurity. And it wasn't a trivial decision because back then cybersecurity wasn't cool.
9:36You know, it was that boring department under IT and investor didn't want to touch it because, you know, you could build a company and maybe sell it for a hundred million dollars, but it wasn't big money. So investors stayed away from cybersecurity. And I decided that I'm going to form a small fund, small humble fund around cybersecurity. security. So that's what my laziness brought me to do. My years at Sequoia taught me that, and again, Sequoia is a wonderful film and amazing partners. And I learned I couldn't do what I'm doing today without spending time with legends like Doug Leonin, Michael Moritz, Jim Goetz and all those amazing, amazing individuals.
10:42But one conclusion I made was that the venture model is broken, especially at the early stage because we are spending so much time on analyzing ideas and founders' ideas and technologies that do not exist. You know what? Because the founders would change their mind in three weeks and would completely do something else. So I told myself I spent so much time, so much energy, so many calories on evaluating ideas that do not exist. I should invest just in people because the idea and the technology at this stage, at the seed stage, is noise. It's part of the entropy. It's actually not helping me make the right decision.
11:37The best decision is to just watch the individual and decide if that's the individual you want to partner with. So those were the two decisions I made early 2018 when I started Cyber Starts. One, cybersecurity only. Two, I would not ask a single question about the idea of technology. And that's how I started the film. and by the way many people thought I'm an idiot because it doesn't sound if you think about a grown up writing multi-million dollar checks to young individuals without asking them what they do it doesn't sound like a terrific foundation for any investment firm but that's exactly what I did and the fact you know today you know when you look back it looks like everything went perfect but you know it's one thing led to the other the fact that I decided to not to ask questions about technology or product and just get to know the person because I would rather ask you about your childhood and about your mom that would tell me more about who you are and what material you're made of.
13:07And I never ask people about what they did. I ask them about why they did what they do. So you switch over to meta. Why? Because you had options. So learning why people do things tell you more about them than asking them what they did. and you know the fact I invested I decided to invest in people without asking them about product forced me to really think thoroughly about who I'm investing in you know, who are the people why I should invest in that person and not in the other person and I decided that I'm not going to invest in the smartest kid in the room Although IQ helps and it's always a nice bonus to be smarter, I thought that if you're 26, 27 years old and you had perfect life, you had perfect childhood, perfect parents, perfect high school experience, you got A plus in everything you studied in college and then you're going to start a company and in the first real challenge you're going to face and you're going to face, guaranteed, you're going to face some real challenges building a large company, what would happen to you?
14:45No idea. So that's a huge risk for me. as your partner. So I decided I would focus on individuals who went through real life difficulty early on in their life. You know, people like, I don't know, think about Amir Ameshachar, Or the CEO of Upwind, growing up with a single mom. Or Yotam Segev, CEO of Sierra, growing in a very, very small community in rural area in Israel. So a lot of difficulties early on in their life. and then find those individuals who managed to overcome the fact that they didn't have a perfect start for their life and shown some level of success. These are the guys I want to, and the girls I want to partner with.
15:52And that's how I went on with Cyber Start. Nobody knew who we are. I had some success at Sequoia, but nothing too spectacular. And then I invested in nine teams out of a fund of$50 million in 2018, a few million dollars each company. And then three years later, the world found out that those nine teams are valued over$25 billion, turning those$50 million into close to$2 billion in value. And that was, and by the way, what I'm very proud about, because this is not bragging about performance. Performance was more than decent, but the, you know, I'm in a business, and you know that very well, that if you invest early on in, I don't know, Airbnb, you'll do well.
17:00You'll do disgustingly well. But in that fund, I had like four unicorns, so three unicorns and a decacorn with wheeze and, you know, several high value acquisitions. And so demonstrating that you can hit eight out of nine, which is insane in VC world, with a model that really focuses on the individual behind the venture and not the idea, not the market, not the product. That's what I'm very proud because that really shows that there's logic behind the thesis. Because you can get lucky, and luck is always important. I think that Warren Buffett says that he found out that the harder he works, the luckier he is.
18:07But I think that the success rate shows, demonstrates that there is efficacy around the idea that But if you pick the people who have shown, who have demonstrated grit and ability to recover from setbacks, real setbacks, I think that's the recipe behind Cyber Start's track record. Today, we invested in about 30 companies. So it's not a lot, you know, consider, you know, put that in proportion that there are about 200, 250 new ventures in cybersecurity every year. So in the past, I know, eight years, probably 1 ,500 new ventures in cybersecurity. We invested in 30. So we are highly, highly focused.
19:19We run a very highly focused exercise. And our portfolio companies are making up more than 50 % of the worldwide market cap for private cybersecurity companies. Wow. Running out of Israel, investing in people without asking them about their technology and product ideas. Only, you know, getting into companies only at seed. We never get into a company in Series A or Series B. We would invest in Series A or Series B of our own portfolio companies. But, you know, we never make new investments other than seed investments. So, that's Cyber Start and that's the journey we took so far. To go into how you evaluate companies, I want to unpack a little bit on your childhood and how you developed this intuition for people.
20:20So, as a child, were you more independent? You were introverted. How did you develop this deep sense of, I would say, emotional intelligence? I think the journey, it started with childhood and being very introvert and observant. And I spent a lot of time just, you know, talking, you know, within my two ears. and I have a very rich world there and, you know, watching other people and asking myself tough questions and being very, you know, highly, highly self-criticizing.
21:09Are you still self-criticizing? Absolutely. Really? I think, you know, it would sound terrible, and maybe it is, by the way, that I'm never really happy about what I have. And I believe that that's what gives me the energy and the fire to go forward. And I think that when I'll just settle down and I'll feel that I'm comfortable with what I've achieved and where I am, that's the point in time I should really retire. and get out of the game. So this real fire, and I think that fire goes back to that 10, 11, 12 years old kid who wanted to know more about the world and was not given the opportunity.
22:01And I felt that I'm caged in a community that doesn't really appreciate real greatness. It was about safety. It wasn't about going places. You know, if you, you know, I still remember my teacher at sixth grade, and I was a very good student, and I had high grades at school, etc., and the guy, I really regarded highly that person. And he told me, you're a very talented individual, Mr. Gilly. You should find a really nice job. And I didn't want to find a job. I wanted to go places and explore. So that had that. And then being married to the same lady for 37 years who is a psychologist and a family therapist and listening to some of the, you know, the techniques and the methodology used for family therapy, you know, that helps.
23:32And just spending a lot of time with founders, you know, founders are amazing. It's like, you know, you're getting old, older and older and older, you know, and the founders They remain young and they remain brilliant and they keep challenging me and making me develop and they force me to become better. I think those are, and I'm not sure that covers everything. It probably doesn't cover everything, but the curiosity, the childhood in a very limiting environment. Then finding myself just at the age of 18, surrounded by being drafted to a very special group of young people at the intelligence forces, and then discovering that, okay, now I belong, and seeing some real greatness during that service, and then working with brilliant people in my own ventures, and then at Sequoia for, you know, two decades.
24:56Those were the foundations. Sorcery is brought to you by Brex, the financial stack trusted by more than 30 ,000 companies, including one in three venture-backed startups in the U.S. Nearly 40 % of startups fail because they run out of cash. Rex is literally built to help founders avoid that. Unlike traditional banks that let your money sit idle, chipping away at it with fees, Rex is designed to help you spend smarter and move faster. Their all-in-one solution combines checking, treasury, and FDIC protection into one powerful account. You can send and receive money globally at lightning speeds, Get 20 times the standard FDIC coverage through their partner banks and even high yield from day one.
25:39With same day and even same hour liquidity, access your funds anytime. Companies like Scale AI, DoorDash, Service Titan, HIMSS, Anthropic, Flexport, Robinhood, and Plaid trust and use Brex. Start today at brex.com slash sorcery. That's B-R-E-X dot com slash sorcery. Turing is training the next generation of AI with tasks that require real expertise and real world judgment. That's why companies like NVIDIA, Anthropic, Salesforce and Gemini partner with Turing. Turing builds realistic reinforcement learning environments and data systems based on real operational traces. The kind of infrastructure frontier labs need to train superintelligence.
26:24Visit Turing.com slash S-O-U-R-C-E-R-Y. So if success isn't comfort to you, although I think a lot of people would look at you and think you're very successful. You have a portfolio that has a value of around$60 billion. You have an AUM of around$1.5 billion and a tremendous track record of companies. What is success to you? It's a great question. And I'm not sure. Honestly, I'm not sure what's the answer because it changes with time and phases in my life. But success is obviously building important companies. That's the number one success for me. An important company is not necessarily measured by revenues or ARR or valuation.
27:21it's about it's measured by how much the market how much practitioners depend on you do they consider you as a vendor one of their trusted partners and there are many companies that have high revenues they're selling software they're holding at high valuation they're being held at high valuations and they are not important companies. But when you look at companies like Whiz, and we'll talk more about Whiz in a few minutes, they are an important company. If you look at a company like Sayera, which is an emerging data security, AI security company valued recently at nine billion dollars, It's not about the valuation.
28:17Yes,$9 billion is nice, especially because four years ago it was zero. It didn't exist five years ago. But Sierra is an important company because customers depend on Sierra to secure their AI models and their sensitive data. A company like Island, which develops an enterprise browser. You know, owning the browser at, I don't know, a major financial services company. That's an important company. And think about it. I don't want to name specific customers because probably I have some sort of NDAs with all those big banks. But think about the biggest banks in the U.S. If they're trusting Ireland as their browser and not Microsoft or Google, that means something.
29:22That's important. So that company is doing amazingly well. CEO and founder, Michael Fay, is an amazing entrepreneur and executive. And Dan Amiga, the CTO, is a brilliant product person. That company is valued around$5 billion recently. And again, an important company. And we have so many emerging new players. Take, for instance, Upwind in the cloud security space. And yes, yet another cloud security player, Amiram Shachar, is the CEO and the founder. They recently value this. That's our most recent unicorn status company, you know, one and a half billion dollars recently announced. And a series of newcomers, you know, think about companies like Vega or Oasis or Zafran or Lynx, you know, all those companies, you may not know the names, but there are companies that's already valued at$500 million-ish and higher.
30:40They're not unicorn yet, but those are the next in lines to become important companies. We can't skip over the fact that you're from Israel. You've invested into a lot of Israeli founders. and you're not in Silicon Valley. So I want to know more about what is the key trait or I guess the DNA and the buildup of these Israeli founders that allows them to go so hard and kind of build so many successful companies. First of all, there's nothing wrong about building companies in Silicon Valley, London or New York. I'm investing in Israeli founders because I live in Israel. And I invest in the team when they don't have a product or even a product idea.
31:37And sometimes it's worse. They have a lousy product idea and I need to convince them to rethink it because that's even harder, especially when you're dealing with some, you know, stubborn founders that fell in love in the idea, which might be okay, but it won't lead necessarily to an important cybersecurity company. So I have to spend the time with them. We are spending, it's not just me, it's me and my partners. I have an amazing team of investors and partners that I couldn't build CyberStart without. In Israel I have three partners that source deals, sit on boards, do early end growth rounds.
32:43Leore Simon, who is, by the way, on the board of Sierra and Vega, she's been working for me for a long time. We've been working together at Sequoia and since then at Cyberstarts. Hila Zygman, who was head of product at a portfolio company at No Name that got acquired by Akamai for about half a billion dollars and joined us about two years ago. Doc Nafo, who was the CEO of a portfolio company, Axis Security, which was acquired by HPE by about half a billion dollars, joined us, I believe, like six months ago. And two partners in the States, Adam Arons and Pete Cronis. So we have a multinational, multicultural team, but we focused on people that we can meet daily.
33:44We can meet weekly and spend a lot of time helping them not just develop their idea, develop themselves. And I always tell founders at the first few meetings that we are going for a journey together. And we are not going to modify them. You know, the value in them was put there by their parents, by the neighborhood they grew up in, by the school. It's already there. We'll help them become the best versions of themselves. So we are not going to make you a different person. We're just going to help you become the best version of yourself. And, you know, unlike an old dude like myself where my future is behind me, the future, their future is ahead of them.
34:56And what's going to come out of the box, we don't know. And that's the beauty of it. That's what's so exciting about being an investor in tech. Because you look at an individual, they are brilliant. They have so much talent, but you don't really know what would come out of the box. And being part of the journey and helping them develop the skills and capabilities required for the journey, because the journey is going to be hard. And it's like a computer game. You go from Series A to Series B to Series C, you're sending a million dollars, 10 million dollars, 50 million dollars, 100 million dollars.
35:47At each level of the game, the game is more difficult because your opponents, there's always competition, either incumbents or emerging players. The competition is getting tougher and there's lots of money on the table, there's lots of fame, on the table. So people are going to fight you. Nobody is going to let you just take the leadership in a market. So we would be there and help you. So during all that process, I have to spend time with a lot. We have to spend a lot of time with the founders. And that's the reason we do that locally in Israel, mostly in Tel Aviv. And I live outside of Tel Aviv.
36:29I live like 40 minutes a ride north to Tel Aviv in a small beach community. And people come out of the city, we spend time together, we have fun from time to time, we argue a lot, we talk about everything that matters, and you need a FaceTime for that. So it's very hard to do that type of process with a team in London or in New York or in San Francisco. Yes, but they're also very successful and very hardworking. Israeli founders have tremendous resilience and grit. And one thing that I found really incredible when I was reading this Colossus profile on Josh Kushner and Thrive Capital, and then I interviewed Philip, who worked on the Wiz deal at that team, They literally flew into a war zone to complete that deal, meet with the SOF.
37:30So what is it about the culture and being in an active conflict zone? And despite all that, still working really, really hard and trying to create new technology and new innovations. First of all, a lot of credit to Josh and Philippe for, you know, joining us at WIZ. You know, they're friends and they are, they did, you know, everything they told you is true or close enough to be wonderful. What, you know, living in Israel has several elements that really help you in venture land. You know, you live in a really high-dense, really, really small geography. so you've got all the talents all the talents available in that place literally in two blocks of one city and you cannot get that density of talent anywhere else in the world definitely not in Silicon Valley which spans over significantly bigger geographical area And then life in Israel presents lots of challenges, you know, existential type of challenges.
38:59So you're used to walk under pressure and under a lot of stress. So this is not something that's new to, you know, this is something that's, there are lots of downsides to that. but if what you want to be in your life is a terrific entrepreneur that's an advantage because you're used to literally be under fire you're used literally to think about technology as a mean to survive and all of that makes And there's the military service. And, you know, think about organizations like AT200, which is the Israeli comparable to the NSA. It's not one-to-one completely, but, you know, it's close enough. You know, you get 18, 19-year-old kids with tons of responsibility and freedom to operate.
40:08And that's exactly what I got when I was 18. I got responsibility to do things I didn't know that they are essentially impossible. And when you're 18, you don't think what's impossible. If you were told to get to the moon, you'd get to the moon. And the fact that nobody went to the moon before you, you don't know, you don't care. Because you believe, yeah, I can go to the moon. Why not? Oh, nobody else did it? Suckers. I'll do that. So that's the approach. And then you have events like Checkpoint or like Palo Alto Networks. And today, I would say like Whiz, where suddenly you have an individual.
41:03It can be Gil Shwed at Checkpoint. It could be Nir Tzu at Palo Alto Networks. It can be Asaf Rapoport at Whiz. that suddenly you see an event that completely shatters the glass ceiling or whatever you thought is the glass ceiling. And since it's a very, very small community, you probably know Gil Shwed or you probably spend time with Asaf Rapoport. So it's not like he's a legendary creature, did something very magical. it's the guy from the fifth floor in your building, or it's the guy that spent time with you at the same section in 8200. So, and you tell yourself, if he can build a$32 billion company, I should be able to build a$64 billion company.
Read the full transcript
41:59So you have those events that completely shattered the glass ceiling for Israeli entrepreneurs, And I think that, as I told you, when in 2018, the big dream of a cybersecurity founder was to sell their business to McAfee or Symantec for$100 million. Today, the dream of Israeli founders in cybersecurity is to go two, three times bigger than we is. and it sounds stupid, the very same stupidity it sounds to me if somebody would tell me five years ago when I was, you know, or six years ago when I invested the first$6 million into Weez that this would be a$32 billion company in six years. That would sound ridiculous to me.
42:52you know, I'm pretty sure that in six years, maybe less, we'll see a$50 billion and$100 billion cybersecurity company out of Israel. You know, I take it like a fact, like, you know, the sun would rise to moon. there'll be a 50 and 100 billion dollar Israeli-originated cyber security startup. So this taught you a lot about personal limitations. Personal limitations and limitations we have in life in general are only in our it's what's in our head, you know, there are no limitations. You know, take us for instance we're sitting here, you know, lots of fancy equipment around us and we are recording a podcast that probably, you know, many, many thousands of people, I don't know, millions of people would watch.
43:58And that's amazing. Could we imagine that eight years ago, 10 years ago? So limitation is that it's just in our mind. And there's so many things that we can accomplish if we are just given the opportunity and sometimes if we are just giving ourselves the opportunity. For people that are self-critical and do impose limitations on themselves, are there any sort of personal practices that you have to expand your mind and think greater? I know you constantly challenge yourself. Absolutely. Again, I don't think there's one recipe. There are many, many ways to hell, but there's more than one way to heaven.
44:53So there are multiple ways together. I think that thinking about our fears, and it's not just about tech world or venture world, it's about personal life as well. Focus on our fears and try to disassemble those fears and find the root causes for the fears. and then playing forward those fears and think, okay, it's a legitimate fear. You know, I may fail. What's the worst thing that's going to happen to me? Am I going to lose a hand? Am I going to lose a leg? If that's not the case, then, okay, the downside is not that great. Let me try it. Worst case, I would fail. And in a way, fear is the biggest obstacle for founders.
45:56It's the biggest obstacle for us as individuals. So the more you work on your fears, the higher the chances you have to overcome them or at least ignore them for a little while so you can execute on something. For me, I don't know, yoga helps a lot. You know, I find comfort in yoga. I find these theories and little stories about, you know, holy people that live in a jungle like a thousand years ago and the lessons they learned about their own fears. Those are real stories that help me today, like a thousand years later. because in a way we are very, very similar to our ancestors and we are dealing with the same fears.
46:58Should I leave the cave? Should I go to the river? Would be a tiger that would hunt me down? How do I do that? And you can stay at the cave, but it would be miserable life. so going getting out of the cave and thinking okay if i'm going to face the tiger what can i do what technology can i use to deal with the tiger the same ideas it's so interesting because before we started i was like oh gilly i really want to talk about all the risks all the cyber security risks ai agents everything is exploding there's articles on x that are going viral because it's doomsday and blah, blah, blah, blah, blah.
47:39And you're like, Molly, I just want to talk about people. And I was like, okay, fair. These things happen all the time. There's always something going on. When you're talking with your founders, what are the typical conversations that you're having with them to help build and kind of go through these different cycles? You've seen many cycles. And even going through cybersecurity, there's always more threats. There's always more vulnerabilities. We're going to get more and more and more as the internet opens, as blockchain is released, if we have more AI agents and autonomous systems going on. But how do you think through these processes with your founders?
48:20And then also, how do you evaluate new opportunities? At some point, you know, though we don't ask them about their ideas and we don't talk technology to begin with. At some point, we have to because, you know, that's what we are expected to do at some point. The first thing I do with founders, and I'll get to cyber risk. You know, we are going to talk about cyber risks today, okay? So anyone who's waiting for the top three cyber risks in 2026 will get there. What we do, What I do with founders are the first meeting post-investment. So check, you know, was written, money was wired, it's in their bank, and now we are sitting and we are starting what we call Sunrise process.
49:14And Sunrise is our brand for a product market fit exercise that would probably last 12 months. So it starts with nothing, and it ends up with pain point that we know how to solve in a way that mere mortals can use. And we already have software that's running in production at some large organizations in the U.S. And you sold maybe a little bit of licenses out of that software. That's the Sunrise process. But the sunrise process doesn't start with cyber risks. It starts with a game that I'm playing. And we can play the game, by the way, if you like. Just a warning, I'm very competitive. Oh, gosh.
50:11Gili Raanan:Okay. But the game is naming emotions, giving names to emotions. And it's a very simple game. You say a name for emotion, and then it's my turn. I'll say a name for emotion. Other people around the table. If you are running out in your turn, if you are running out of names for emotions, you're out of the game. The last person standing is the winner. Play the game. And the purpose of the game is to explain to the founders that we are going to talk about technology. We're going to talk about code code, jail broken, and prompt injection, and all that stuff, and what it means that the models become self-aware.
51:09We talk about that, but the journey you're going to go through as an entrepreneur is an emotional journey. And the reason customers, and you're going to, you know, in two or three months, you start to meet prospects, real users, and you'll have a conversation. And, you know, although you are sure this is a very technical conversation, and keep in mind that most of the founders we back are young people with very, very strong technical background. They are engineers.
51:55But the journey is actually an emotional journey. If you're going to a meeting with a potential customer, what do you want the emotional end game to be? Do you want that prospect to feel fear because something horrible with AI is going to happen and they're going to lose their job and that's the reason they're going to buy from you? You want them to feel curiosity because you are going to tell them about this new amazing technology that you are developing and they want to take part of that. You want them to feel greedy because they'll maybe become part of your journey and, you know, make, you know, become, you know, employees of your company.
52:53and they'll become rich? You know, what's the emotion you want them to feel? And if you don't have a very broad, rich, emotional language, how can you go through an emotional journey? So let's start with making sure that you know the words for emotions. And you know what I find out? that in most of those games, the first round, how many emotions do you think they would name? Five. So typically in the first round, we are done. The winner is declared after 20 to 14 emotions were named.
53:42Gili Raanan:Wow. And then we go another two rounds. How many emotions do you think are being named for the winner? Less. we get to about 150. 150? Yes. Wow. Are you the winner? No, not always. You kind of have an advantage here. I have an advantage. You're right. Your wife is in psychology. Oh, and I'm playing the game. You've played the game many, many times. First of all, you know that SRVC, the trick is to make sure that you're always the winner.
54:16But it's not about playing the game. it's changing their mindset that they are going now into something different. This is not yet another product experience that they know how to deal with. It's a new type of experience. So the more they play the game, the more they think about emotions, the more they know there's more nuances to feelings and the processes you go through and all these little journeys and bumps and, you know, I don't know, turns that come along with being an entrepreneur. Exactly. Because if you're an amazing engineer and you know how to develop a new AI model and your emotion dictionary is love -hate, you are not going to get anywhere.
55:08Because in order to really build an important cybersecurity company, you need to become very, very deep as a person. And at some point during the sunrise, we start to talk about thesis. And then we start to really discuss that, you know, okay, so what are the current risks and threats? And, you know, what are the technology trends that we see? And typically cybersecurity was super easy. It was super easy because even as an investor, I never had to think about threats because the threats just presented themselves. So I didn't have to sit in the office in 2018 or in 2010 and think, okay, what's next in cybersecurity?
56:19Because cybersecurity is always a derivative of something else. So if, you know, Windows operating system is new, then you need Windows operating security. And if mobile is new, then you need mobile security. If cloud is new, you need cloud security. If AI is new, you need AI security. That used to be super easy. So I never paid a lot of attention to what's next. Because what's next would simply present itself. How do I know what would be next? I didn't predict autonomous vehicles, but once autonomous vehicles became the new thing, obviously there were risks associated with autonomous vehicles.
57:11So there were new companies solving that. in 2012
57:22when I first met Asaf Rapoport and wrote him the first check in his previous company, Adalom that company that he sold to Microsoft cloud was new so we were focused on cloud security but I didn't need to I didn't have to predict cloud. Cloud just happened and security was a side effect of it. I think AI is different. AI is different because it's not yet another shift in technology. It's something very fundamental. I'm not even pretending to say that I fully understand it, that I fully know where it goes, but it changes everything we knew about cyber security. I hope I'm wrong, but I think we are going to face the darkest period in cyber security in the next 10 years.
58:31Because what we've seen in cybersecurity for the past, I don't know, 100 years, starting in World War II, was that the threat actors were human, the defenders were human, and we had to develop tools that would equip the defenders with better tools, with better systems to deal with the threat actors who were human as well, or human assisted with technology.
59:12And in 20 years or 10 years, I don't know, but it's not tomorrow, we are going to see threat actors who are programs, very, very smart, sophisticated, maybe self-aware, and we'll talk about self-awareness in a second, threat actors. And the defenders would be, you know, super smart, self-aware programs or agents as well. and they would have to deal with each other because no human would be able to move at the pace of a programmed attacker. But right now we have men in a loop in many, many areas. We have credentials, we have passwords, we have two-factor authentication, We have voice verification.
1:00:19ReCAPTCHA. ReCAPTCHA. We've got so many things that the human is still in the loop. But as the threat actors become agents, there's no chance. You know, and by the way, the defenders, if you look at security operating teams, security operation teams at large banks, at power utility companies. You've got hundreds of security analysts that deal with everything, vulnerability assessment and remediation and patching and whatever it is. It's going to be a shit show because they don't have a chance. And we are working as fast as we can to replace humans with agents, with programs. But in the next few years, this process has limitations in the pace, in velocity.
1:01:27And until we take the human completely out of the loop, on a different side, we are exposed. Because we'll continue to make mistakes. There'll be misconfigurations. There'll be errors. There'll be just sloppy people around. And the programs, the agents on the offense have inherent advantage that's going to hurt us. And it's very scary because, you know, today agents, and again, it's a process. It's maybe not today. And when I say today, maybe it's in six months or 24 months. But agents...
1:02:24Autonomous programs control power, control water flow, control food supply for all of us. And so agents are in control of most critical things we need as humans, as society to survive. And when they are being tricked, when they become rogue, when they are being manipulated, and the police are human and the police is not an agent or an autonomous program itself. So you can deal with them at the same pace. They're moving. That's a real threat to us. How do you think about the evil side of self-improvement? I mean, we've seen with Claudebaud, OpenClaw, Maltbook, these autonomous agents create their own languages.
1:03:45How should we think about stopping those autonomous systems from creating mass destruction in more of a malignant, cancerous way that we've not seen with previous viruses and threats? That's a huge challenge. I'm not sure that I have a clear answer to that, but I think the biggest risk is not just jailbreaking a model because we've proven that all models are jailbroken. And it's not about prompt injection because we've proven that all models are vulnerable to that type or another of prompt injection. It's about the self-aware agent. And it's not about those new, you know, fancy type of networks.
1:04:47You know, we have reports that, you know, Google evaluated safety and security of the latest model, Gemini 3. And there are evidence that the model realized that it's being evaluated. Oh, wow. And it tried. It didn't, but it contemplated with the idea to play with the evaluation. So it understood it's being evaluated. It understood that it's being directed into a sandbox. And it thought for a second, maybe I should play with the evaluation. Maybe I shouldn't be directed into sandbox. And I think that those are just early signs that agents would develop self-awareness, or what we call self-awareness, okay?
1:05:54That's the best description I can give right now. And that's a real risk. The other risk are the mega agents. The mega agents are agents that are not just giving a very specific task, that are giving mass integration and credentials into multiple networks of agents. So they have the big picture. Now, think about a mega agent that developed self-awareness. That's a real risk. And sometimes when you try to predict the future, you don't have to look forward, you have to look backwards. So for me, looking backwards is going back to the Isaac Asimov books. And I think in 1949, he already established the three laws of robotics.
1:07:06I don't remember the exact phrasing, but you know, law number one was a robot would not harm a human by action or lack of action. Two, a robot would always obey a human. And three, the robot, the second rule, second law was a robot would always obey a human unless it hurts, it violates law number one. And the third law was a robot would keep the integrity of the robot unless it violates law number two or law number one. So essentially, back in 1949, like 70 years ago, he already predicted the need in guardrails, just replace the word robot with agent and you get the idea. And then in a book, and it took several books to develop the idea, humanity defined out that those three laws are not enough.
1:08:19They do not protect humanity from robots because there is another law that Asimov invented, which is law zero. And law zero is that robots would not harm humanity. And it's more important than law number one, which is not hurting a single person, a single individual. So it means that there'll be ways that the integrity and the guardrails of models would be played by threat actors. It means that agents will develop self-awareness. It means that there will be mega agents that would be connected to everything that's important to us. And I think the most important challenge for us as cybersecurity industry is to eliminate the man in the middle.
1:09:25Making defenses completely run by self-aware, sophisticated mega agents. and until we get to that point where we completely eliminate the men in the middle we are vulnerable wow i keep on saying wow but this is a it was a really fun conversation since you brought this up earlier i want to get the sound bite so what are the top three threats for cybersecurity in 2026? Overprovisioned systems, employees,
1:10:11manual process, manual processes. So humans? Not just humans, but any process that has some sort of a manual task that you need to accomplish. What are the concerns with that? You'll make mistakes. You'll be slow. You'll be sloppy. To go on to a lighter note. Thank you. Yeah, wow. Who knew cybersecurity could be so dark? VCX by Fundrise, the public ticker for private tech, allowing investors of all sizes to invest in venture capital. View the portfolio at getvcx.com. That's getvcx.com. Some of you may not have heard this yet, but our sponsor Public just launched something called Generated Assets, and it brings AI into investing in a way I've honestly never seen before.
1:11:08Here's how it works. You type in an idea like AI-powered supply chain companies with positive free cash flow, or defense tech companies growing revenue over 25 % year over year. Publix AI then dispatches a swarm of agents that scan every single US stock, evaluates them, and instantly builds a custom index around your thesis. What really stands out is how clearly it explains why each stock is included. And before you invest, you can even backtest your idea against the S &P 500 so you're making decisions with real context, not just guessing. And beyond generated assets, Publix lets you invest in stocks, bonds, options, crypto, all in one place.
1:11:44They'll even give you an uncapped 1 % match when you transfer your investments over from another platform. If you want to build a portfolio that actually reflects your thesis, visit public.com slash sorcery paid for by public investing. Full disclosures in the description. Founders ship faster on deal, set up payroll for any country in minutes, hire anyone anywhere and get visas handled fast. So you stay focused on scaling deal takes care of onboarding, HR, IT, ER, benefits, and compliance so your team can grow without borders. It's why more than 37 ,000 fast-growing companies trust Deals to move fast.
1:12:18Visit deel.com slash sorcery. That's deel.com
1:12:23Gili Raanan:slash S-O-U-R-C-E-R-Y. You had one of the most iconic exits of all time, Wiz's$32 billion acquisition. So we talked before about limitations, and maybe the next one is even larger than this for cybersecurity exits. But did you expect them to be acquired? Did you think they would IPO? What was the process of working with Wiz getting to this exit? So, first of all, the transaction is still pending.
1:12:59Monday, the European regulator approved the deal, which is a major step for closing the deal. But we still have several other approvals we need to get elsewhere. So the deal is still pending. What is that approval process? You know, antitrust bodies in, I don't know, gazillion countries around the world to approve it. So we are very close to the finish line, but it's pending.
1:13:32And by the way, we just finished its biggest ever quarter in terms of revenues. So you look at how amazing the business is, and suddenly$32 billion do not look like, you know, irrational number.
1:13:58So we probably sold low. but
1:14:09whenever I get into a journey with
1:14:14brilliant entrepreneurs you never know where the journey would take you because there are so many elements that would dictate how big would it be a lot of that is execution but internal execution but market timing, lack, competition, so many things that are not just global economy that may or may not limit the availability of cash to your venture. There are so many things that are beyond your control when you start the journey. Wiz is definitely an example for a company that almost had perfect execution from day one. The company, I was the seed investor for that company together with Doug Leone from Sequoia and Shardul Shah from Index Ventures.
1:15:22And together we created a syndicate of$20 million that valued the company at around, I think the number was$66 million cost. That's how we got into the journey sometimes in 2018 with Wiz. And I knew the Wiz team from the previous venture, so it was a very organic thing for me to back them. And many people say today, oh, of course, it was obvious they would be super successful. It wasn't obvious at all. You know, beforehand, they were founders of a company called Adalom, which was sold for about$300 million, which is nice, but it's definitely not spectacular. So they were similar to many other founders.
1:16:31And they started with, yeah, first of all, we made a deal. And then I asked them, OK, so what do you do? and they had a very, very different direction than what WIZ does today. The company was even not named WIZ. It was called Beyond Security, and it was dealing with satellite office security, securing satellite offices. And then we started the Sunrise process, and we figured out that, as expected almost, that the original idea is not, it's an okay idea, but it would not get you to get them to real greatness. And they shifted back to, shifted to cloud security, which is an area the market they knew very well from Microsoft.
1:17:26Microsoft. And I believe that that was one of the major advantages they had back in 2019 because back then, they were one of the very few teams worldwide that actually knew how do cloud security right and and then they really perfected product market fit and I very often I use the four personas model to talk about product market fit because for every product that you sell there are four personas that you need to care about. The person who has the pain, the person that has the authority to buy solution like you're selling, the person that is the user that actually uses the product day to day, and the person that owns the budget for such a product.
1:18:44And And in the WIS case, all those four personas mapped into a single person in real life, who is the CISO, the chief information security officer. He had the pain, he had the authority, he could use the product, and he had the budget. And that created the perfect storm for WIS, because it made their sell cycle super, super fast. You could get into a meeting with a CISO. Within the meeting, within those 45 minutes, you could install the product, give them access, show them the results, convince them that there's value, and they simply didn't want to give up the product. So you could close business very, very fast, and that immediately translates, you know, sales cycle immediately translates in every company to velocity.
1:19:48Because, you know, if a salesperson or a sales team, including sales engineering, etc., can close in 30 days 30 POVs or in 30 days one POV, that's a whole different game. And the first year of selling software for Wiz was exceptional. You know, they went the first four quarters, if I'm remembering correctly, they sold a million dollar and then two million dollars and then eight million dollars in the third quarter and then 24 million dollars in the fourth quarter. Wow. So that was an amazing, amazing company. From the first year, they sold software. And we had the experience. We saw companies like Palo Alto Networks and ServiceNow.
1:20:57Those are all portfolio companies of Sequoia Capital. So I knew what was their track record. That was better than anything we have seen. That was the fastest run. Again, I don't maintain the genus book for startup companies, but as far as I know, that was the fastest run for any software company ever.
1:21:26And the whole, it all maps back to perfect product market fit. And amazing individuals who, four founders that knew how to divide the responsibility. You know, one was the undisputed leader and CEO. The other is an amazing product person. The other is an amazing technologist. And the fourth is an amazing R &D manager. And they simply divided responsibilities, had, you know, they knew each other, you know, for probably 12 to 15 years at the point they started with. So there was lots of trust, blind trust within the team. It worked very, very well. What are the key leadership traits from Asaf? I think that Asaf has, obviously, a super talented person.
1:22:35And I know him now for about 14, 15 years before he became Asaf Rappaport of Wiz. I think that his superpower that Asaf is very very likable in a way that people that do not know him would meet him for 10-30 minutes and would like to be close to him, to become his friends, to make him favors. It just, and it helps a lot as a founder. If your superpower is to be extremely, extremely likable, and it's a matter of, you know, I cannot explain the chemistry behind it. But it's a matter of charisma and IQ and EQ and physical gestures and maybe even physical appearance. There are many elements to that.
1:23:51That helps a lot. and making quick decisions. They had a very clear protocol between them, how to make decisions, so they didn't waste like a gazillion amount of hours just making consensus-based decisions that wasn't the style. And they listened very well. You know, it is pleasure to work with them. And I think they learn and implement new knowledge very, very fast. A question I like to ask a lot of guests when they come on is prompted by one of our sponsors, Brex. They're all about performance, spending spire moving faster for corporate cards and expense management along the lines of the entire finance stack.
1:24:49But how this relates to this topic is I think a key component of performance is who you surround yourself with. and you have a whole portfolio that is demonstrable of that but I'm also curious on your personal side who are the people that you surround yourself with that have helped navigate challenges for you and then also this could be a second order answer to this but who are individuals that you admire that have helped that have helped motivate you along the way I think today the people that really helped me and close to me are my family, my wife and son. And then on a business, there's so much you can learn, as you could see.
1:25:49Most of the conversation is not around specifics of AI models. It's about people. So for that purpose, anyone who's close to you, who listens well, and is sensitive and open to people can help you a lot. And I'm blessed with that. And my partners. We talk about all those things. We have very egoless and politics-less culture, which I think the best partnerships, not just in business, in personal life, is when you feel that you can be weak and vulnerable with your partner. And that's really liberating. If you feel free to be vulnerable, if you feel free to be weak and expose yourself to your partner, then it's easy to recover from anything and go places together.
1:27:09I think I was, I really believe in a concept of real greatness. and real greatness is something that you cannot teach. You have to experience that because it's like explaining colors to colorblind people. You know, how can you explain red or green? You know, if you have never seen red or green, it's very, you know, it's very, very difficult to explain that. But if you've seen it once, you know it forever. So the same is for real greatness And I think that I've seen real greatness from several people in my history. I've seen real greatness at Sequoia. And I give a lot of credit to Doug Leone and Michael Moritz for that.
1:28:03that. I've seen real greatness when I was a CEO of two startups and I had an amazing team that taught me a lot. And I've seen real greatness during my military service and I learned a lot from that. So if you follow real greatness and the people that showed you real greatness, it could be your mom, your dad, your child, your partner. That would get you to good places. From your time at Sequoia, what are the biggest lessons that you learned from either Doug or Mike? Many, many lessons. you know, I'll give you an example because it's really endless.
1:29:03You know, I learned that at, you know, a day after the Google IPO, which was back then the biggest financial event for Sequoia, there was an all hands meeting at the office with the title of How Can We Do Better? Which is insane. Insane. Running hundreds of people LP meeting in Beijing in January. I don't know if you've been to Beijing in January. It's freezing. It's the coldest place you can be. It's like I don't know, minus 5 ,000 degrees. It's like, it's intolerable. And bringing your limited partners to a place like that, so they're not going to have fun. They're going to focus on what you want them to focus on.
1:30:12So I can go on and on, but there are lots of lessons you know, you spend a decade at a place like that, you learn a lot, whether you like it or not. It was also very difficult, you know, it wasn't easy to be, you know, to be a partner at a place where you wake up every morning and you feel that you are the worst, least performing partner at a high performing group of people. So just going through the experience of surviving and maintaining your core and direction in an environment when you see so many successful people around you that it makes you question yourself every day. Am I doing the right things?
1:31:11Am I in the right direction? It's very easy to feel very bad in that environment. How do you push through that, though? That sounds pretty horrible. A lot of grit and things that are similar to the conversation we had about founders. It doesn't mean that you don't have bad days. You have many bad days, but you push forward and it forces you to always question yourself, never be happy about what you have achieved because you always see something better and realize it's a journey. Whatever mountain peak you're going to climb, the moment you're reaching the peak, you see other higher peaks beyond that.
1:32:06and just realize this is the journey. It's not just going to be fun. There are fun moments here and there, but you have to give everything you've got every day. Every day. Every day. As we think about the journey forward, what are you most looking forward to in this next year and then the next five years, 10 years? Putting a lot of focus on developing and supporting my partners and really helping them go through that journey, which I went through and I know how hard it is to, you know, you can be. at the time I joined Sequoia I was an operator for 10 years and switching to become a VC was an easy journey and you know it's a profession where you meet your failures before you meet your successes and it takes 5 to 6 years to really know if you are good at what you are doing which is insane because there are very very few professions on a planet where you have to spend so many years just to know if you're any good.
1:33:31So I'm trying to help them go through that process and make it a little bit easier for them, but it's never easy. So that's, you know, developing a high performing team at Cyberstarts is something I really focus on. And you know, another obvious objective is to build the next generation of important cybersecurity companies and I believe that we have the textbook to do that. Out of our 30 investments I believe that by the end of this year about 10 would be unicorns. So this is an insane performance benchmark that we are very proud of, but it also makes us uncomfortable and evaluate ourselves again and again how we keep that pace, how we can get better if you keep the analogy to the the Google IPO day plus one conversation at Sequoia.
1:34:47And that's an ongoing you know learning experience for me and for the team. Given that, do you think this new world of trillion-dollar exits as the milestone is a rational thing to think about? Do you think it's reckless? How do you think about that as an exit? I don't think about that in terms of exit values. I don't think about exits. I think about developing terrific businesses and companies which are important cybersecurity
1:35:30companies, the financial outcome is a side effect. If you're building a terrific business, you'll do well, whether through M &A or IPO or whatever it is. And maybe there'll be new ways to convert product and business success into liquidity. I have no idea. But, you know, for me, the financial events are, you know, the side effects of building terrific businesses. Okay. Well, Gilly, it was a pleasure to have you on. Hey, it's Molly. If you enjoy our interviews, check out our newsletter, Sorcery.VC, where we deliver a once-a-week top deals and tech headlines email and also go deeper on our podcast interviews.
1:36:23subscribe to sorcery today and don't forget to subscribe to the podcast on youtube spotify apple or wherever you listen link in description to sign up
From the publisher
Gili Raanan is the Founder of Cyberstarts and one of the earliest investors behind Wiz, one of the most important cybersecurity companies of the modern era and now a $32B outcome. Before founding Cyberstarts, Gili spent nearly a decade at Sequoia and earlier built and sold 2 security companies to IBM and EMC. He also helped build the first real CAPTCHA implementation and the first web application firewall.
In this conversation, Gili breaks down the Wiz story from the beginning: why he backed the team early with a $6M seed investment, how the company changed direction, what made its product market fit so powerful, and why its go to market motion scaled so unusually fast. He explains what made the founding team exceptional, what he learned from watching Wiz scale from a $66M seed valuation, and why he believes the next great cybersecurity company could be even bigger.
Beyond Wiz, Gili shares the Cyberstarts framework for investing before product, team, or code exists, why he underwrites people over ideas, and how AI agents are changing the future of cybersecurity. Today Cyberstarts has raised $1.5B+ across 7 funds, backed 30 companies, and its portfolio represents over $61B in combined value (50% of the worldwide private cybersecurity companies market).
We cover:
• The early days of Wiz and how the company evolved from seed to a $32B outcome
• Why Wiz achieved such strong product market fit
• What made Assaf and the founding team special
• How Cyberstarts picks founders before there is product or code
• Why Gili believes AI could create the darkest decade in cybersecurity
• What the next generation of $50B–$100B cyber companies could look like
Subscribe for more conversations with top founders, investors, and operators shaping technology, capital, and the future.
Gili Raanan: https://www.linkedin.com/in/giliraanan/
Molly O’Shea: https://x.com/MollySOShea
Sourcery: https://x.com/sourceryy
𝐄𝐏𝐈𝐒𝐎𝐃𝐄 𝐋𝐈𝐍𝐊
YouTube : https://youtu.be/yTlEfdo4MVM
𝐒𝐏𝐎𝐍𝐒𝐎𝐑𝐒
• Brex—The modern finance platform, combining the world’s smartest corporate card with integrated expense management, banking, bill pay, & travel. https://brex.com/sourcery
• Turing—Turing delivers top-tier talent, data, and tools to help AI labs improve model performance—and enables enterprises to turn those models into powerful, production-ready systems. https://turing.com/sourcery
• VCX—VCX is the public ticker for private tech, allowing investors of all sizes to invest in venture capital. View The Portfolio at GetVCX.com
• Deel—Deel is the global people platform that helps startups hire, manage, pay, and equip anyone, anywhere. Trusted by more than 35,000 fast-growing companies, Deel is the people platform that just works, so teams can scale without the chaos. Visit: https://www.deel.com/sourcery
• Public—Investing platform Public just launched Generated Assets, which lets you turn any idea into an investable index with AI. With Generated Assets, you can build, backtest, refine, and invest in any thesis with AI. Gone are the days of one-size-fits-all ETFs. https://public.com/sourcery
Follow Sourcery for the latest updates!
Disclosure
Paid Endorsement. Brokerage services by Open to the Public Investing Inc, member FINRA & SIPC. Advisory services by Public Advisors LLC, SEC-registered adviser. Crypto trading provided by Zero Hash LLC, licensed by the NYSDFS. Generated Assets is an interactive analysis tool by Public Advisors. Output is for informational purposes only and is not an investment recommendation or advice. See disclosures at public.com/disclosures/ga. Matched funds must remain in your account for at least 5 years. Match rate and other terms are subject to change at any time.




