Dan Lorenc on fixing the 'crappy' CVE ecosystem

November 14th, 2023  |  41 mins 45 secs

chainguard, cve, sboms, supply chain, venture capital

Episode sponsors:

• Binarly, the firmware security experts (https://binarly.io)
• FwHunt (https://fwhunt.run)

Dan Lorenc is CEO and co-founder of Chainguard, a company that raised $116 million in less than two years to tackle open source supply chain security problems. In this episode, Dan joins Ryan to chat about the demands of building a "growth mode" startup, massive funding rounds and VC expectations, fixing the "crappy" CVE and CVSS ecosystems, managing expectations around SBOMs, and how politicians and lobbyists are framing cybersecurity issues in strange ways.