1 00:00:00,240 --> 00:00:01,950 Michael Novinson: Hello, this is Michael Novinson with 2 00:00:01,950 --> 00:00:05,640 Information Security Media Group. I'm joined today by Ruvi 3 00:00:05,640 --> 00:00:10,020 Kitov. He is the co-founder, chairman and CEO of Tufin. Good 4 00:00:10,020 --> 00:00:11,400 morning, Ruvi. How are you? 5 00:00:12,210 --> 00:00:14,130 Ruvi Kitov: I am very good. Thank you very much, Michael, 6 00:00:14,130 --> 00:00:14,880 for having me on. 7 00:00:15,600 --> 00:00:17,760 Michael Novinson: Of course, you're very welcome. It's been a 8 00:00:17,760 --> 00:00:22,770 big year for Tufin. Just about two weeks ago, you were acquired 9 00:00:22,800 --> 00:00:26,790 by Turn/River Capital for $570 million, taking the company 10 00:00:26,790 --> 00:00:29,610 private. What's the significance of that acquisition for your 11 00:00:29,610 --> 00:00:31,020 customers and your partners? 12 00:00:32,320 --> 00:00:35,470 Ruvi Kitov: It's a significant acquisition for the company, in 13 00:00:35,470 --> 00:00:41,440 general. The company was founded 18 years ago. It was private for 14 00:00:41,440 --> 00:00:45,760 a long time and then we went public in April 2019. So we were 15 00:00:45,760 --> 00:00:49,240 public for about three years and then we got acquired by 16 00:00:49,270 --> 00:00:52,900 Turn/River and closing actually took place about a week ago. So, 17 00:00:53,770 --> 00:00:57,760 for customers and partners, some of the changes that we started 18 00:00:57,760 --> 00:01:00,700 making are going to accelerate. So the move to subscription - 19 00:01:00,970 --> 00:01:05,320 that transition that we announced early 2021 - we're 20 00:01:05,320 --> 00:01:08,740 going to accelerate that transition. I think that's 21 00:01:09,070 --> 00:01:13,720 important because subscription, on the one hand, allows us to 22 00:01:13,720 --> 00:01:17,020 have more consistent recurring revenue. But on the other hand, 23 00:01:17,020 --> 00:01:22,210 for customers, I think customers have a way with vendors to 24 00:01:22,270 --> 00:01:26,320 monitor what's going on. They know, every year when that 25 00:01:26,320 --> 00:01:30,370 renewal comes out that vendor needs to make sure that customer 26 00:01:30,370 --> 00:01:34,990 success is really followed. So I think customers actually like 27 00:01:35,320 --> 00:01:39,700 vendors moving to subscription. So we're going to focus even 28 00:01:39,700 --> 00:01:43,180 more so on customer success than we have before. We need to make 29 00:01:43,180 --> 00:01:45,490 sure that we're on top of the game, and that we're delivering 30 00:01:45,820 --> 00:01:49,570 all the value that customers expect us to deliver. And from 31 00:01:49,570 --> 00:01:51,970 the partner perspective, I think partners are very happy with 32 00:01:52,390 --> 00:01:55,630 where we're going as well. We've gotten very good feedback and 33 00:01:55,630 --> 00:01:58,270 update calls that we've had with partners. Probably, there's 34 00:01:58,270 --> 00:02:00,100 going to be any significant changes there. 35 00:02:01,830 --> 00:02:04,440 Michael Novinson: In terms of some of those priorities you 36 00:02:04,440 --> 00:02:07,740 outlined here - the transition to subscription, focus on 37 00:02:07,740 --> 00:02:11,340 customer success - why do you feel it'll be easier to do that 38 00:02:11,340 --> 00:02:13,770 under the ownership of Turn/River than as a public 39 00:02:13,770 --> 00:02:14,310 company? 40 00:02:14,870 --> 00:02:19,670 Ruvi Kitov: So as a public company, the expectations are 41 00:02:19,700 --> 00:02:24,020 from quarter to quarter, that you hit certain milestones, and 42 00:02:24,170 --> 00:02:27,020 a company that goes through a transition from switching from 43 00:02:27,020 --> 00:02:30,080 perpetual license to subscription, a lot of times 44 00:02:30,080 --> 00:02:36,950 that carries with it a degree of uncertainty. So being able to 45 00:02:38,090 --> 00:02:42,170 predict exactly what your revenue and Opex is going to be 46 00:02:42,170 --> 00:02:46,730 on every single quarter, that's tough to do when you're going 47 00:02:46,730 --> 00:02:49,460 through a transition like that, because it's difficult to tell 48 00:02:49,460 --> 00:02:52,580 ahead of time what is the pace of the transition? Will 49 00:02:52,580 --> 00:02:56,330 customers move? Will customers want to transition immediately 50 00:02:56,330 --> 00:03:00,380 or not? Some customers might want to do, you know, longer 51 00:03:00,440 --> 00:03:06,020 duration deals or shorter deals. So there's a lot of unknowns on 52 00:03:06,020 --> 00:03:09,500 that kind of a transition. And when you're a private company, 53 00:03:09,530 --> 00:03:14,480 you don't have that microscope that the public markets put on a 54 00:03:14,540 --> 00:03:17,450 company that goes through the transition. So it's a lot easier 55 00:03:17,450 --> 00:03:20,510 to do as a private company than as a public company. 56 00:03:23,060 --> 00:03:24,710 Michael Novinson: Very interesting. I did want to ask 57 00:03:25,040 --> 00:03:29,270 specifically, what the appeal was of Turn/River versus another 58 00:03:29,270 --> 00:03:32,990 financial or strategic buyer? I realized that Turn/River 59 00:03:33,020 --> 00:03:36,290 historically hasn't done too much in cybersecurity. What's 60 00:03:36,290 --> 00:03:38,330 the appeal of them in particular? 61 00:03:38,600 --> 00:03:40,580 Ruvi Kitov: Yeah, so they've actually had several 62 00:03:40,580 --> 00:03:44,120 acquisitions in cybersecurity, but maybe, you know, not a lot 63 00:03:44,120 --> 00:03:46,700 of people have heard about it, but they have owned and they own 64 00:03:46,700 --> 00:03:51,140 some cybersecurity assets. And specifically, they're 65 00:03:51,980 --> 00:03:56,240 interesting to Tufin from several perspectives. One is 66 00:03:56,240 --> 00:04:00,140 they've really specialized in transitions from perpetual to 67 00:04:00,140 --> 00:04:03,470 subscription. They've done multiple transitions like that 68 00:04:03,470 --> 00:04:06,740 very successfully. They focus primarily on software companies. 69 00:04:07,100 --> 00:04:10,520 They're very good at it. And their track record is really 70 00:04:10,520 --> 00:04:17,240 phenomenal. And when you look at how they operate, you know, 71 00:04:17,720 --> 00:04:22,310 their whole process is different from other piece. They have a 72 00:04:22,310 --> 00:04:25,340 lot more people in the operations team. And the 73 00:04:25,340 --> 00:04:28,550 founders themselves actually have managed software companies 74 00:04:28,550 --> 00:04:32,540 before. They're not necessarily finance people. So they come 75 00:04:32,540 --> 00:04:35,210 with a lot of knowledge and a lot of best practices. So they 76 00:04:35,210 --> 00:04:40,250 have playbooks on the transition itself and how to drive growth 77 00:04:40,280 --> 00:04:44,900 in the market, how to align go-to-market better. So you 78 00:04:44,900 --> 00:04:48,710 know, they've honed these tactics over the years, and 79 00:04:48,710 --> 00:04:52,430 they're adjusting them with every company that they acquire. 80 00:04:52,580 --> 00:04:56,930 So that's how they were introduced to us and our 81 00:04:56,930 --> 00:04:59,720 process. And now that we've been working with them for a few 82 00:04:59,720 --> 00:05:03,680 months, I can tell you that, you know, we really work well with 83 00:05:03,680 --> 00:05:07,670 them. I think Turn/River culture and Tufin culture have a lot of 84 00:05:07,670 --> 00:05:11,630 similarities between them. They're very curious. They want 85 00:05:11,630 --> 00:05:14,840 to know, you know, what's the reality, what's the truth, what 86 00:05:14,840 --> 00:05:19,850 is the right thing to do. And they're focused on getting that. 87 00:05:19,910 --> 00:05:23,540 They don't have big egos, which is super helpful to be working 88 00:05:23,540 --> 00:05:26,360 with. So we really enjoy working with them so far. 89 00:05:28,040 --> 00:05:30,320 Michael Novinson: That's great. Want to ask about this 90 00:05:30,320 --> 00:05:35,630 transition from perpetual to subscription revenue model. What 91 00:05:35,630 --> 00:05:37,670 are some of the biggest challenges associated with 92 00:05:37,670 --> 00:05:40,910 making that transition? What are some of the ways you feel that 93 00:05:40,910 --> 00:05:42,950 Turn/River can be helpful in that? 94 00:05:43,650 --> 00:05:46,770 Ruvi Kitov: So you know, one of the things that we did when we 95 00:05:46,770 --> 00:05:52,080 started was we still kept some perpetual sales on. And when you 96 00:05:52,080 --> 00:05:55,050 have a mixture of perpetual and subscription, that's very 97 00:05:55,050 --> 00:05:57,930 difficult to manage. So one of the things we're moving towards 98 00:05:57,930 --> 00:06:01,740 is stopping new perpetual sales altogether. And it's going to 99 00:06:01,740 --> 00:06:06,390 help to kind of peel the band aid off, and focus 100% just on 100 00:06:06,390 --> 00:06:09,930 subscription business moving forward. So that's one change. 101 00:06:10,080 --> 00:06:13,260 The other change that we're looking at is aligning what the 102 00:06:13,260 --> 00:06:17,010 product portfolio looks like, how are we licensing all of it. 103 00:06:17,010 --> 00:06:20,430 You know, we have four main products, but we have 104 00:06:20,460 --> 00:06:23,730 marketplace apps as well. It's quite complicated; if you look 105 00:06:23,730 --> 00:06:28,080 at our price list, it's very long. And even for our sales 106 00:06:28,080 --> 00:06:31,980 team, it takes a while to learn the pricing and licensing and 107 00:06:32,250 --> 00:06:36,180 all the nuances. So we're simplifying the price list, and 108 00:06:36,180 --> 00:06:39,060 making it easier to digest both for the salespeople, for the 109 00:06:39,060 --> 00:06:40,770 customers and for the partners. 110 00:06:42,790 --> 00:06:48,340 Michael Novinson: Gotcha! So, in terms of the transition over to 111 00:06:48,340 --> 00:06:52,390 subscription, what's the significance for customers? How 112 00:06:52,390 --> 00:06:55,360 are customers impacted or how do they potentially benefit from 113 00:06:55,660 --> 00:06:58,240 procuring Tufin on a subscription basis, rather than 114 00:06:58,240 --> 00:06:59,530 on a perpetual basis? 115 00:06:59,000 --> 00:07:04,700 Ruvi Kitov: So you know, for us, it's part of a bear change. So 116 00:07:05,540 --> 00:07:09,230 moving forward, we're only going to sell subscription licenses. 117 00:07:09,590 --> 00:07:12,440 But also, we're changing the way that we're packaging the 118 00:07:12,440 --> 00:07:17,600 products. So if previously, you could buy all sorts of different 119 00:07:17,600 --> 00:07:20,360 elements; you can buy, for example, SecureTrack and 120 00:07:20,360 --> 00:07:23,900 SecureChange, and provisioning in SecureChange and SecureApp, 121 00:07:23,930 --> 00:07:27,890 and then the various marketplace apps, high availability was 122 00:07:27,890 --> 00:07:32,150 different. So there's dozens of different licenses. We 123 00:07:32,150 --> 00:07:36,860 standardize on three tiers now and each tier has certain things 124 00:07:36,860 --> 00:07:39,530 that are part of that tier. So people that used to buy 125 00:07:39,560 --> 00:07:43,400 SecureTrack, they're now in a certain tier, and they get all 126 00:07:43,400 --> 00:07:47,030 sorts of apps that they didn't have before. And people that had 127 00:07:47,030 --> 00:07:50,150 SecureChange previously, that they were going to buy 128 00:07:50,150 --> 00:07:54,860 SecureChange, now, there's a tier that aligns with that, that 129 00:07:54,920 --> 00:07:59,900 has SecureChange plus a lot more things. And people that were 130 00:07:59,900 --> 00:08:02,990 buying additional things, we have a tier called Enterprise, 131 00:08:03,230 --> 00:08:06,890 where we're bundling a lot more things into the Enterprise, like 132 00:08:06,890 --> 00:08:11,870 high availability, and a lot more different licenses that 133 00:08:11,870 --> 00:08:15,710 people used to buy separately. So it's a lot simpler. It's 134 00:08:15,710 --> 00:08:18,650 simpler to manage. There's also more flexibility that we're 135 00:08:18,650 --> 00:08:24,500 building into the licensing. So I think for customers, there's a 136 00:08:24,500 --> 00:08:27,380 lot of benefits in making it simpler, easier to understand 137 00:08:27,380 --> 00:08:30,260 what they're buying, how that's going to expand and having the 138 00:08:30,260 --> 00:08:32,960 flexibility as they're growing their network. 139 00:08:32,000 --> 00:08:38,330 Michael Novinson: In terms of the Tufin product portfolio - I 140 00:08:38,330 --> 00:08:40,610 know you've mentioned there being four products. What 141 00:08:41,090 --> 00:08:44,600 product or what technology are you seeing the fastest growth in 142 00:08:44,600 --> 00:08:47,810 or the highest increase in demand in right now and why? 143 00:08:48,650 --> 00:08:58,850 Ruvi Kitov: Yeah, so automation has always been the main reason 144 00:08:58,850 --> 00:09:03,680 people buy Tufin. In our market, we're clearly the leader in 145 00:09:03,680 --> 00:09:07,790 automation, especially when you get to the high end in terms of 146 00:09:08,120 --> 00:09:11,240 large organizations. And I would say the fastest growth that 147 00:09:11,240 --> 00:09:16,340 we're seeing right now is in the cloud, both in TOS cloud and 148 00:09:16,370 --> 00:09:19,760 cloud-native applications. So people are buying a lot more 149 00:09:19,790 --> 00:09:23,480 firewalls in the cloud, and they're expanding to the cloud 150 00:09:23,810 --> 00:09:25,100 much faster than before. 151 00:09:27,430 --> 00:09:30,160 Michael Novinson: I see. I know we've talked quite a bit about 152 00:09:30,160 --> 00:09:33,820 your strategy, your focus in terms of the go-to-market, this 153 00:09:33,820 --> 00:09:38,470 shift to the subscription-based licensing. Want to hear a little 154 00:09:38,470 --> 00:09:41,800 bit about your R&D or your technology roadmap. What are 155 00:09:42,010 --> 00:09:45,070 some of the key landmarks and milestones coming up there under 156 00:09:45,100 --> 00:09:46,660 Turn/River's ownership? 157 00:09:47,230 --> 00:09:49,900 Ruvi Kitov: Sure. So we're continuing to invest a lot in 158 00:09:49,900 --> 00:09:52,390 technology. We're probably investing more than any other 159 00:09:52,390 --> 00:09:57,010 company in our space. The cloud is a major investment area for 160 00:09:57,010 --> 00:10:00,760 us. Also, SASE and the SD-WAN are major investment areas. So 161 00:10:01,570 --> 00:10:07,180 I'd say one area of focus for us is extending visibility and 162 00:10:07,180 --> 00:10:11,350 automation into the cloud, even more so than before. So that 163 00:10:11,350 --> 00:10:15,820 means understanding the cloud network and topology in depth, 164 00:10:16,780 --> 00:10:19,990 and understanding all the different elements in the cloud, 165 00:10:19,990 --> 00:10:22,750 and all the different layers of segmentation. So that's one 166 00:10:22,750 --> 00:10:27,400 area. The other one is advanced automation for next-generation 167 00:10:27,400 --> 00:10:31,360 networks. We have a lot of work around that, a lot of customer 168 00:10:31,360 --> 00:10:36,130 demand from different scenarios of next-gen firewalls and their 169 00:10:36,130 --> 00:10:40,210 automation. And the third, I would say, is the ability to add 170 00:10:40,210 --> 00:10:43,630 new platforms more rapidly. So building the infrastructure to 171 00:10:43,630 --> 00:10:47,200 be able to add new vendors, primarily in the cloud and 172 00:10:47,530 --> 00:10:51,430 SD-WAN-SASE space, because there's many vendors and want to 173 00:10:51,430 --> 00:10:54,790 be able to have those capabilities faster than before. 174 00:10:56,680 --> 00:10:59,290 Michael Novinson: In terms of the cloud piece, obviously, a 175 00:10:59,290 --> 00:11:03,070 lot of security vendors are investing in the cloud right 176 00:11:03,070 --> 00:11:05,350 now. What do you feel is different about what you're 177 00:11:05,350 --> 00:11:09,820 doing at Tufin around cloud security than what some of your 178 00:11:09,820 --> 00:11:11,170 peers in the industry are doing? 179 00:11:11,870 --> 00:11:14,330 Ruvi Kitov: Yes, I think a lot of people are focused just in 180 00:11:14,330 --> 00:11:19,220 general on trying to secure workloads and secure the 181 00:11:19,220 --> 00:11:24,230 environment. And we've always been focused on access policies 182 00:11:24,230 --> 00:11:29,960 and connectivity. So for us, the fundamental question is who owns 183 00:11:29,960 --> 00:11:33,860 really access control end to end, both on the cloud and the 184 00:11:33,890 --> 00:11:37,700 on-prem., and how can you bring the two together? So our thesis 185 00:11:37,700 --> 00:11:42,230 is that you need a single control plan, where you'll be 186 00:11:42,230 --> 00:11:45,650 able to manage the connectivity both for the on-premise, the 187 00:11:45,650 --> 00:11:50,030 cloud hub, and the edge. And the question is, who gets to define 188 00:11:50,030 --> 00:11:55,250 and enforce that security policy? So we have built, you 189 00:11:55,250 --> 00:11:58,490 know, it's an overused term, but a single pane of glass, in terms 190 00:11:58,490 --> 00:12:04,280 of policy, to be able to define a policy, both for the on-prem 191 00:12:04,310 --> 00:12:09,140 and the cloud, including CI/CD pipelines, and how all of that 192 00:12:09,140 --> 00:12:13,760 work in tandem. So that is the difference really to be able to 193 00:12:13,760 --> 00:12:18,170 define who can talk to whom and what can talk to what, both 194 00:12:18,200 --> 00:12:21,920 on-prem and in the cloud, and have that in a single platform. 195 00:12:24,490 --> 00:12:26,470 Michael Novinson: And the days leading up to the Turn/River 196 00:12:27,640 --> 00:12:30,730 acquisition closer, you had disclosed layoffs, affecting 197 00:12:30,730 --> 00:12:35,950 roughly 10% of your workforce or roughly 55 employees. How are 198 00:12:35,950 --> 00:12:39,730 those job reductions affect your strategy and your roadmap going 199 00:12:39,730 --> 00:12:40,210 forward? 200 00:12:40,900 --> 00:12:43,450 Ruvi Kitov: So they don't really affect the strategy and the 201 00:12:43,450 --> 00:12:48,040 roadmap in a significant way. For us, you know, if we look at, 202 00:12:48,580 --> 00:12:52,300 when we were a public company, we were losing money. We had a 203 00:12:52,660 --> 00:12:56,770 budget where we're expecting losses this year, and also next 204 00:12:56,770 --> 00:13:02,650 year. So you know, as the market is headed likely toward the 205 00:13:02,650 --> 00:13:06,880 recession, we need to make sure that we're working toward 206 00:13:06,880 --> 00:13:10,330 profitable growth. So making that change is something that 207 00:13:10,600 --> 00:13:13,330 many, many public companies and private companies have done. 208 00:13:13,420 --> 00:13:19,780 And, you know, we needed to make sure that we're losing less, and 209 00:13:19,780 --> 00:13:23,410 we're moving toward being a cash-positive company, as we 210 00:13:23,410 --> 00:13:24,340 made those changes. 211 00:13:25,990 --> 00:13:28,210 Michael Novinson: Power for you then. So what areas within the 212 00:13:28,210 --> 00:13:31,390 organization were most affected by the layoffs? And what's the 213 00:13:31,390 --> 00:13:32,560 impact for customers? 214 00:13:33,340 --> 00:13:36,040 Ruvi Kitov: It's, I would say, across the board, so different 215 00:13:36,040 --> 00:13:40,450 departments, really. But, you know, most of it was in sales 216 00:13:40,720 --> 00:13:44,050 and marketing, and R&D. But those are just the two biggest 217 00:13:44,050 --> 00:13:48,940 parts of the organization. But even after the changes, I think 218 00:13:48,970 --> 00:13:52,270 if you look at technology, we are the biggest R&D organization 219 00:13:52,270 --> 00:13:54,100 than any of the vendors in our space. We're the biggest 220 00:13:54,100 --> 00:13:59,590 vendors. So I don't think it's going to impact our technology 221 00:13:59,590 --> 00:14:00,670 and roadmap moving forward. 222 00:14:02,530 --> 00:14:04,510 Michael Novinson: Wanted to talk a little bit about industry 223 00:14:04,510 --> 00:14:07,090 trends. What are some of the biggest things that you're 224 00:14:07,090 --> 00:14:11,590 keeping an eye on in the broader industry, threat landscape, 225 00:14:11,590 --> 00:14:12,580 etc., this year? 226 00:14:13,450 --> 00:14:16,480 Ruvi Kitov: Sure. So, you know, from our perspective, we're very 227 00:14:16,510 --> 00:14:20,800 focused on access, and especially as people adopt more 228 00:14:21,190 --> 00:14:28,300 SD-WAN and SASE, we're seeing how SD-WAN and SASE and 229 00:14:28,300 --> 00:14:31,390 firewalls are really blurring the edges between each other. So 230 00:14:31,600 --> 00:14:35,890 there's SASE vendors that are adding firewall capabilities, 231 00:14:36,040 --> 00:14:38,290 which is interesting and firewall vendors that are adding 232 00:14:38,290 --> 00:14:44,080 SASE capabilities. So we see them as merging into single 233 00:14:44,080 --> 00:14:47,680 platforms. And the other trend that we're seeing is that 234 00:14:48,640 --> 00:14:51,790 there's now firewall as a service in the cloud. So AWS and 235 00:14:51,790 --> 00:14:55,690 Azure have their own firewalls. I'm not sure they're at the 236 00:14:55,840 --> 00:14:59,650 level of the enterprise firewalls, but some people will 237 00:14:59,650 --> 00:15:02,170 use them as well. So we're seeing more and more 238 00:15:02,500 --> 00:15:06,400 segmentation technology being used. And there's even more 239 00:15:06,400 --> 00:15:12,040 complexity. So we're seeing even further increase in complexity 240 00:15:12,370 --> 00:15:15,610 of enterprise networks, as they're straddling on-prem and 241 00:15:15,610 --> 00:15:18,370 the cloud, and the cloud is changing. So those are some of 242 00:15:18,370 --> 00:15:20,620 the trends that we find interesting and that we're 243 00:15:20,620 --> 00:15:22,000 seeing in customer networks. 244 00:15:23,260 --> 00:15:25,210 Michael Novinson: One of those developments made for Tufin in 245 00:15:25,210 --> 00:15:29,380 terms of firewall vendors moving into SASE, SASE or SD-WAN 246 00:15:29,380 --> 00:15:32,230 vendors developing firewalls of their own, I know Tufin's 247 00:15:32,260 --> 00:15:35,980 focused on that network management space. So what a lot 248 00:15:35,980 --> 00:15:37,330 of these departments mean for you? 249 00:15:38,020 --> 00:15:40,780 Ruvi Kitov: Well, to us, it means that customers actually 250 00:15:40,780 --> 00:15:44,680 have additional things they need to manage. And they're asking us 251 00:15:44,680 --> 00:15:47,800 to do that, right? So we added support for Zscaler. And they're 252 00:15:47,800 --> 00:15:52,840 asking for support for more SD-WAN and SASE vendors. So we 253 00:15:52,840 --> 00:15:56,470 want to support whatever networks and cloud platforms 254 00:15:56,470 --> 00:15:59,440 that customers have. So there's more and more platforms. Hence 255 00:15:59,470 --> 00:16:02,800 what I mentioned earlier, some of our focus on adding some of 256 00:16:02,800 --> 00:16:08,530 those platforms faster to Tufin. So that's an important trend 257 00:16:08,590 --> 00:16:11,440 that we're carefully monitoring. We're adding more and more 258 00:16:11,440 --> 00:16:17,860 capabilities. We want to help customers manage everything on 259 00:16:17,860 --> 00:16:22,720 their entire enterprise network, whether it's on-premise, and 260 00:16:22,780 --> 00:16:27,250 let's say SD-WAN or the cloud. So we're adding more and more 261 00:16:27,250 --> 00:16:30,460 capabilities there. And that's a major focus area for us. 262 00:16:31,930 --> 00:16:34,390 Michael Novinson: Finally, from the standpoint of the chief 263 00:16:34,390 --> 00:16:36,730 information security officer, what do you feel is the biggest 264 00:16:36,730 --> 00:16:39,790 thing they're overlooking right now? Where do they need to 265 00:16:40,270 --> 00:16:42,940 invest more time, more energy than they are today? 266 00:16:43,900 --> 00:16:46,210 Ruvi Kitov: It's a good question. I think that, you 267 00:16:46,210 --> 00:16:49,390 know, they're sort of running around and trying to do 268 00:16:49,390 --> 00:16:54,850 everything. It's one of the toughest jobs out there to be a 269 00:16:54,850 --> 00:16:59,380 CISO. Because you're inundated both with threats and with 270 00:16:59,380 --> 00:17:02,680 different solutions to those threats. I think one of the 271 00:17:03,010 --> 00:17:05,350 things that people are overlooking is that they might 272 00:17:05,350 --> 00:17:11,410 have actually too many vendors. You know, we have some CISOs 273 00:17:11,410 --> 00:17:15,520 that we speak with that have already 50 different vendors for 274 00:17:15,550 --> 00:17:17,500 different solutions, that I think it becomes almost 275 00:17:17,500 --> 00:17:21,850 unmanageable for the security team. So I think one of the 276 00:17:21,850 --> 00:17:26,950 things that we're seeing is that, you know, with the 277 00:17:26,980 --> 00:17:32,140 economic challenges that we're seeing for the global economy, I 278 00:17:32,140 --> 00:17:34,720 have a feeling that some of the really small vendors might not 279 00:17:34,720 --> 00:17:39,490 survive. And when you're thinking of, "Okay, I need a 280 00:17:39,490 --> 00:17:41,500 solution for a certain challenge," and you're looking 281 00:17:41,500 --> 00:17:45,460 at vendors, I would say one of the things being overlooked is 282 00:17:45,460 --> 00:17:49,690 vendor viability. Who's going to survive three or four or five 283 00:17:49,690 --> 00:17:54,190 years from now? You might be buying a solution that ends up 284 00:17:54,190 --> 00:17:58,570 being vaporware, not because of the product, but just because 285 00:17:58,570 --> 00:18:02,230 the company no longer exists three years from now. So I would 286 00:18:02,230 --> 00:18:06,490 say that is an area that CISOs should be looking at as they're 287 00:18:06,490 --> 00:18:09,700 thinking of criteria when they're buying solutions. 288 00:18:10,990 --> 00:18:12,880 Michael Novinson: Very interesting. Ruvi, thank you so 289 00:18:12,880 --> 00:18:13,870 much for the time. 290 00:18:14,620 --> 00:18:16,120 Ruvi Kitov: Thank you very much. Really appreciate it. 291 00:18:16,690 --> 00:18:18,550 Michael Novinson: You're very welcome. We've been speaking 292 00:18:18,550 --> 00:18:22,120 with Ruvi Kitov. He is co-founder, chairman and CEO of 293 00:18:22,120 --> 00:18:25,690 Tufin. For Information Security Media Group, this is Michael 294 00:18:25,690 --> 00:18:27,580 Novinson. Have a nice day.