(light upbeat music) >> Hey, everyone. Welcome back to theCUBE's day long coverage of Women in Data Science 2023. Live from Stanford University, I'm Lisa Martin. We've had some amazing conversations today with my wonderful co-host, as you've seen. Tracy Zhang joins me next for a very interesting and inspiring conversation. I know we've been bringing them to you, we're bringing you another one here. Dr. Irene Dankwa-Mullan joins us, the Chief Medical Officer at Marti Health, and a speaker at WIDS. Welcome, Irene, it's great to have you. >> Thank you. I'm delighted to be here. Thank you so much for this opportunity. >> So you have an MD and a Master of Public Health. Covid must have been an interesting time for you, with an MPH? >> Very much so. >> Yeah, talk a little bit about you, your background, and Marti Health? This is interesting. This is a brand new startup. This is a digital health equity startup. >> Yes, yes. So, I'll start with my story a little bit about myself. So I was actually born in Ghana. I finished high school there and came here for college. What would I say? After I finished my undergraduate, I went to medical school at Dartmouth and I always knew I wanted to go into public health as well as medicine. So my medical education was actually five years. I did the MPH and my medical degree, at the same time, I got my MPH from Yale School of Public Health. And after I finished, I trained in internal medicine, Johns Hopkins, and after that I went into public health. I am currently living in Maryland, so I'm in Bethesda, Maryland, and that's where I've been. And really enjoyed public health, community health, combining that aspect of sort of prevention and wellness and also working in making sure that we have community health clinics and safety net clinics. So a great experience there. I also had the privilege, after eight years in public health, I went to the National Institute of Health. >> Oh, wow. >> Where I basically worked in clinical research, basically on minority health and health disparities. So, I was in various leadership roles and helped to advance the science of health equity, working in collaboration with a lot of scientists and researchers at the NIH, really to advance the science. >> Where did your interest in health equity come from? Was there a defining moment when you were younger and you thought "There's a lot of inequities here, we have to do something about this." Where did that interest start? >> That's a great question. I think this influence was basically maybe from my upbringing as well as my family and also what I saw around me in Ghana, a lot of preventable diseases. I always say that my grandfather on my father's side was a great influence, inspired me and influenced my career because he was the only sibling, really, that went to school. And as a result, he was able to earn enough money and built, you know, a hospital. >> Oh wow. >> In their hometown. >> Oh my gosh! >> It started as a 20 bed hospital and now it's a 350 bed hospital. >> Oh, wow, that's amazing! >> In our hometown. And he knew that education was important and vital as well for wellbeing. And so he really inspired, you know, his work inspired me. And I remember in residency I went with a group of residents to this hospital in Ghana just to help over a summer break. So during a summer where we went and helped take care of the sick patients and actually learned, right? What it is like to care for so many patients and- >> Yeah. >> It was really a humbling experience. But that really inspired me. I think also being in this country. And when I came to the U.S. and really saw firsthand how patients are treated differently, based on their background or socioeconomic status. I did see firsthand, you know, that kind of unconscious bias. And, you know, drew me to the field of health disparities research and wanted to learn more and do more and contribute. >> Yeah. >> Yeah. So, I was curious. Just when did the data science aspect tap in? Like when did you decide that, okay, data science is going to be a problem solving tool to like all the problems you just said? >> Yeah, that's a good question. So while I was at the NIH, I spent eight years there, and precision medicine was launched at that time and there was a lot of heightened interest in big data and how big data could help really revolutionize medicine and healthcare. And I got the opportunity to go, you know, there was an opportunity where they were looking for physicians or deputy chief health officer at IBM. And so I went to IBM, Watson Health was being formed as a new business unit, and I was one of the first deputy chief health officers really to lead the data and the science evidence. And that's where I realized, you know, we could really, you know, the technology in healthcare, there's been a lot of data that I think we are not really using or optimizing to make sure that we're taking care of our patients. >> Yeah. >> And so that's how I got into data science and making sure that we are building technologies using the right data to advance health equity. >> Right, so talk a little bit about health equity? We mentioned you're with Marti Health. You've been there for a short time, but Marti Health is also quite new, just a few months old. Digital health equity, talk about what Marti's vision is, what its mission is to really help start dialing down a lot of the disparities that you talked about that you see every day? >> Yeah, so, I've been so privileged. I recently joined Marti Health as their Chief Medical Officer, Chief Health Officer. It's a startup that is actually trying to promote a value-based care, also promote patient-centered care for patients that are experiencing a social disadvantage as a result of their race, ethnicity. And were starting to look at and focused on patients that have sickle cell disease. >> Okay. >> Because we realize that that's a population, you know, we know sickle cell disease is a genetic disorder. It impacts a lot of patients that are from areas that are endemic malaria. >> Yeah. >> Yeah. >> And most of our patients here are African American, and when, you know, they suffer so much stigma and discrimination in the healthcare system and complications from their sickle cell disease. And so what we want to do that we feel like sickle cell is a litmus test for disparities. And we want to make sure that they get in patient-centered care. We want to make sure that we are leveraging data and the research that we've done in sickle cell disease, especially on the continent of Africa. >> Okay. >> And provide, promote better quality care for the patients. >> That's so inspiring. You know, we've heard so many great stories today. Were you able to watch the keynote this morning? >> Yes. >> I loved how it always inspires me. This conference is always, we were talking about this all day, how you walk in the Arrillaga Alumni Center here where this event is held every year, the vibe is powerful, it's positive, it's encouraging. >> Inspiring, yeah. >> Absolutely. >> Inspiring. >> Yeah, yeah. >> It's a movement, WIDS is a movement. They've created this community where you feel, I don't know, kind of superhuman. "Why can't I do this? Why not me?" We heard some great stories this morning about data science in terms of applications. You have a great application in terms of health equity. We heard about it in police violence. >> Yes. >> Which is an epidemic in this country for sure, as we know. This happens too often. How can we use data and data science as a facilitator of learning more about that, so that that can stop? I think that's so important for more people to understand all of the broad applications of data science, whether it's police violence or climate change or drug discovery or health inequities. >> Irene: Yeah. >> The potential, I think we're scratching the surface. But the potential is massive. >> Tracy: It is. >> And this is an event that really helps women and underrepresented minorities think, "Why not me? Why can't I get involved in that?" >> Yeah, and I always say we use data to make an make a lot of decisions. And especially in healthcare, we want to be careful about how we are using data because this is impacting the health and outcomes of our patients. And so science evidence is really critical, you know? We want to make sure that data is inclusive and we have quality data. >> Yes. >> And it's transparent. Our clinical trials, I always say are not always diverse and inclusive. And if that's going to form the evidence base or data points then we're doing more harm than good for our patients. And so data science, it's huge. I mean, we need a robust, responsible, trustworthy data science agenda. >> "Trust" you just brought up "trust." >> Yeah. >> I did. >> When we talk about data, we can't not talk about security and privacy and ethics but trust is table stakes. We have to be able to evaluate the data and trust in it. >> Exactly. >> And what it says and the story that can be told from it. So that trust factor is, I think, foundational to data science. >> We all see what happened with Covid, right? I mean, when the pandemic came out- >> Absolutely. >> Everyone wanted information. We wanted data, we wanted data we could trust. There was a lot of hesitancy even with the vaccine. >> Yeah. >> Right? And so public health, I mean, like you said, we had to do a lot of work making sure that the right information from the right data was being translated or conveyed to the communities. And so you are totally right. I mean, data and good information, relevant data is always key. >> Well- >> Is there any- Oh, sorry. >> Go ahead. >> Is there anything Marti Health is doing in like ensuring that you guys get the right data that you can put trust in it? >> Yes, absolutely. And so this is where we are, you know, part of it would be getting data, real world evidence data for patients who are being seen in the healthcare system with sickle cell disease, so that we can personalize the data to those patients and provide them with the right treatment, the right intervention that they need. And so part of it would be doing predictive modeling on some of the data, risk, stratifying risk, who in the sickle cell patient population is at risk of progressing. Or getting, you know, they all often get crisis, vaso-occlusive crisis because the cells, you know, the blood cell sickles and you want to avoid those chest crisis. And so part of what we'll be doing is, you know, using predictive modeling to target those at risk of the disease progressing, so that we can put in preventive measures. It's all about prevention. It's all about making sure that they're not being, you know, going to the hospital or the emergency room where sometimes they end up, you know, in pain and wanting pain medicine. And so. >> Do you see AI as being a critical piece in the transformation of healthcare, especially where inequities are concerned? >> Absolutely, and and when you say AI, I think it's responsible AI. >> Yes. >> And making sure that it's- >> Tracy: That's such a good point. >> Yeah. >> Very. >> With the right data, with relevant data, it's definitely key. I think there is so much data points that healthcare has, you know, in the healthcare space there's fiscal data, biological data, there's environmental data and we are not using it to the full capacity and full potential. >> Tracy: Yeah. >> And I think AI can do that if we do it carefully, and like I said, responsibly. >> That's a key word. You talked about trust, responsibility. Where data science, AI is concerned- >> Yeah. >> It has to be not an afterthought, it has to be intentional. >> Tracy: Exactly. >> And there needs to be a lot of education around it. Most people think, "Oh, AI is just for the technology," you know? >> Yeah, right. >> Goop. >> Yes. >> But I think we're all part, I mean everyone needs to make sure that we are collecting the right amount of data. I mean, I think we all play a part, right? >> We do. >> We do. >> In making sure that we have responsible AI, we have, you know, good data, quality data. And the data sciences is a multi-disciplinary field, I think. >> It is, which is one of the things that's exciting about it is it is multi-disciplinary. >> Tracy: Exactly. >> And so many of the people that we've talked to in data science have these very non-linear paths to get there, and so I think they bring such diversity of thought and backgrounds and experiences and thoughts and voices. That helps train the AI models with data that's more inclusive. >> Irene: Yes. >> Dropping down the volume on the bias that we know is there. To be successful, it has to. >> Definitely, I totally agree. >> What are some of the things, as we wrap up here, that you're looking forward to accomplishing as part of Marti Health? Like, maybe what's on the roadmap that you can share with us for Marti as it approaches the the second half of its first year? >> Yes, it's all about promoting health equity. It's all about, I mean, there's so much, well, I would start with, you know, part of the healthcare transformation is making sure that we are promoting care that's based on value and not volume, care that's based on good health outcomes, quality health outcomes, and not just on, you know, the quantity. And so Marti Health is trying to promote that value-based care. We are envisioning a world in which everyone can live their full life potential. Have the best health outcomes, and provide that patient-centered precision care. >> And we all want that. We all want that. We expect that precision and that personalized experience in our consumer lives, why not in healthcare? Well, thank you, Irene, for joining us on the program today. >> Thank you. >> Talking about what you're doing to really help drive the volume up on health equity, and raise awareness for the fact that there's a lot of inequities in there we have to fix. We have a long way to go. >> We have, yes. >> Lisa: But people like you are making an impact and we appreciate you joining theCUBE today and sharing what you're doing, thank you. >> Thank you. >> Thank you- >> Thank you for having me here. >> Oh, our pleasure. For our guest and Tracy Zhang, this is Lisa Martin from WIDS 2023, the eighth Annual Women in Data Science Conference brought to you by theCUBE. Stick around, our show wrap will be in just a minute. Thanks for watching. (light upbeat music)

(upbeat intro music) >> Hello everyone. Welcome to theCUBE's coverage of International Women's Day. I'm your host, John Furrier, here in Palo Alto, California. Got a special remote guest coming in. Teresa Carlson, President and Chief Commercial Officer at Flexport, theCUBE alumni, one of the first, let me go back to 2013, Teresa, former AWS. Great to see you. Thanks for coming on. >> Oh my gosh, almost 10 years. That is unbelievable. It's hard to believe so many years of theCUBE. I love it. >> It's been such a great honor to interview you and follow your career. You've had quite the impressive run, executive level woman in tech. You've done such an amazing job, not only in your career, but also helping other women. So I want to give you props to that before we get started. Thank you. >> Thank you, John. I, it's my, it's been my honor and privilege. >> Let's talk about Flexport. Tell us about your new role there and what it's all about. >> Well, I love it. I'm back working with another Amazonian, Dave Clark, who is our CEO of Flexport, and we are about 3,000 people strong globally in over 90 countries. We actually even have, we're represented in over 160 cities and with local governments and places around the world, which I think is super exciting. We have over 100 network partners and growing, and we are about empowering the global supply chain and trade and doing it in a very disruptive way with the use of platform technology that allows our customers to really have visibility and insight to what's going on. And it's a lot of fun. I'm learning new things, but there's a lot of technology in this as well, so I feel right at home. >> You quite have a knack from mastering growth, technology, and building out companies. So congratulations, and scaling them up too with the systems and processes. So I want to get into that. Let's get into your personal background. Then I want to get into the work you've done and are doing for empowering women in tech. What was your journey about, how did it all start? Like, I know you had a, you know, bumped into it, you went Microsoft, AWS. Take us through your career, how you got into tech, how it all happened. >> Well, I do like to give a shout out, John, to my roots and heritage, which was a speech and language pathologist. So I did start out in healthcare right out of, you know, university. I had an undergraduate and a master's degree. And I do tell everyone now, looking back at my career, I think it was super helpful for me because I learned a lot about human communication, and it has done me very well over the years to really try to understand what environments I'm in and what kind of individuals around the world culturally. So I'm really blessed that I had that opportunity to work in healthcare, and by the way, a shout out to all of our healthcare workers that has helped us get through almost three years of COVID and flu and neurovirus and everything else. So started out there and then kind of almost accidentally got into technology. My first small company I worked for was a company called Keyfile Corporation, which did workflow and document management out of Nashua, New Hampshire. And they were a Microsoft goal partner. And that is actually how I got into big tech world. We ran on exchange, for everybody who knows that term exchange, and we were a large small partner, but large in the world of exchange. And those were the days when you would, the late nineties, you would go and be in the same room with Bill Gates and Steve Ballmer. And I really fell in love with Microsoft back then. I thought to myself, wow, if I could work for a big tech company, I got to hear Bill on stage about saving, he would talk about saving the world. And guess what my next step was? I actually got a job at Microsoft, took a pay cut and a job downgrade. I tell this story all the time. Took like three downgrades in my role. I had been a SVP and went to a manager, and it's one of the best moves I ever made. And I shared that because I really didn't know the world of big tech, and I had to start from the ground up and relearn it. I did that, I just really loved that job. I was at Microsoft from 2000 to 2010, where I eventually ran all of the U.S. federal government business, which was a multi-billion dollar business. And then I had the great privilege of meeting an amazing man, Andy Jassy, who I thought was just unbelievable in his insights and knowledge and openness to understanding new markets. And we talked about government and how government needed the same great technology as every startup. And that led to me going to work for Andy in 2010 and starting up our worldwide public sector business. And I pinch myself some days because we went from two people, no offices, to the time I left we had over 10,000 people, billions in revenue, and 172 countries and had done really amazing work. I think changing the way public sector and government globally really thought about their use of technology and Cloud computing in general. And that kind of has been my career. You know, I was there till 2020, 21 and then did a small stint at Splunk, a small stint back at Microsoft doing a couple projects for Microsoft with CEO, Satya Nadella, who is also an another amazing CEO and leader. And then Dave called me, and I'm at Flexport, so I couldn't be more honored, John. I've just had such an amazing career working with amazing individuals. >> Yeah, I got to say the Amazon One well-documented, certainly by theCUBE and our coverage. We watched you rise and scale that thing. And like I said at a time, this will when we look back as a historic run because of the build out. I mean as a zero to massive billions at a historic time where government was transforming, I would say Microsoft had a good run there with Fed, but it was already established stuff. Federal business was like, you know, blocking and tackling. The Amazon was pure build out. So I have to ask you, what was your big learnings? Because one, you're a Seattle big tech company kind of entrepreneurial in the sense of you got, here's some working capital seed finance and go build that thing, and you're in DC and you're a woman. What did you learn? >> I learned that you really have to have a lot of grit. You, my mom and dad, these are kind of more southern roots words, but stick with itness, you know. you can't give up and no's not in your vocabulary. I found no is just another way to get to yes. That you have to figure out what are all the questions people are going to ask you. I learned to be very patient, and I think one of the things John, for us was our secret sauce was we said to ourselves, if we're going to do something super transformative and truly disruptive, like Cloud computing, which the government really had not utilized, we had to be patient. We had to answer all their questions, and we could not judge in any way what they were thinking because if we couldn't answer all those questions and prove out the capabilities of Cloud computing, we were not going to accomplish our goals. And I do give so much credit to all my colleagues there from everybody like Steve Schmidt who was there, who's still there, who's the CISO, and Charlie Bell and Peter DeSantis and the entire team there that just really helped build that business out. Without them, you know, we would've just, it was a team effort. And I think that's the thing I loved about it was it was not just sales, it was product, it was development, it was data center operations, it was legal, finance. Everybody really worked as a team and we were on board that we had to make a lot of changes in the government relations team. We had to go into Capitol Hill. We had to talk to them about the changes that were required and really get them to understand why Cloud computing could be such a transformative game changer for the way government operates globally. >> Well, I think the whole world and the tech world can appreciate your work and thank you later because you broke down those walls asking those questions. So great stuff. Now I got to say, you're in kind of a similar role at Flexport. Again, transformative supply chain, not new. Computing wasn't new when before Cloud came. Supply chain, not a new concept, is undergoing radical change and transformation. Online, software supply chain, hardware supply chain, supply chain in general, shipping. This is a big part of our economy and how life is working. Similar kind of thing going on, build out, growth, scale. >> It is, it's very much like that, John, I would say, it's, it's kind of a, the model with freight forwarding and supply chain is fairly, it's not as, there's a lot of technology utilized in this global supply chain world, but it's not integrated. You don't have a common operating picture of what you're doing in your global supply chain. You don't have easy access to the information and visibility. And that's really, you know, I was at a conference last week in LA, and it was, the themes were so similar about transparency, access to data and information, being able to act quickly, drive change, know what was happening. I was like, wow, this sounds familiar. Data, AI, machine learning, visibility, common operating picture. So it is very much the same kind of themes that you heard even with government. I do believe it's an industry that is going through transformation and Flexport has been a group that's come in and said, look, we have this amazing idea, number one to give access to everyone. We want every small business to every large business to every government around the world to be able to trade their goods, think about supply chain logistics in a very different way with information they need and want at their fingertips. So that's kind of thing one, but to apply that technology in a way that's very usable across all systems from an integration perspective. So it's kind of exciting. I used to tell this story years ago, John, and I don't think Michael Dell would mind that I tell this story. One of our first customers when I was at Keyfile Corporation was we did workflow and document management, and Dell was one of our customers. And I remember going out to visit them, and they had runners and they would run around, you know, they would run around the floor and do their orders, right, to get all those computers out the door. And when I think of global trade, in my mind I still see runners, you know, running around and I think that's moved to a very digital, right, world that all this stuff, you don't need people doing this. You have machines doing this now, and you have access to the information, and you know, we still have issues resulting from COVID where we have either an under-abundance or an over-abundance of our supply chain. We still have clogs in our shipping, in the shipping yards around the world. So we, and the ports, so we need to also, we still have some clearing to do. And that's the reason technology is important and will continue to be very important in this world of global trade. >> Yeah, great, great impact for change. I got to ask you about Flexport's inclusion, diversity, and equity programs. What do you got going on there? That's been a big conversation in the industry around keeping a focus on not making one way more than the other, but clearly every company, if they don't have a strong program, will be at a disadvantage. That's well reported by McKinsey and other top consultants, diverse workforces, inclusive, equitable, all perform better. What's Flexport's strategy and how are you guys supporting that in the workplace? >> Well, let me just start by saying really at the core of who I am, since the day I've started understanding that as an individual and a female leader, that I could have an impact. That the words I used, the actions I took, the information that I pulled together and had knowledge of could be meaningful. And I think each and every one of us is responsible to do what we can to make our workplace and the world a more diverse and inclusive place to live and work. And I've always enjoyed kind of the thought that, that I could help empower women around the world in the tech industry. Now I'm hoping to do my little part, John, in that in the supply chain and global trade business. And I would tell you at Flexport we have some amazing women. I'm so excited to get to know all. I've not been there that long yet, but I'm getting to know we have some, we have a very diverse leadership team between men and women at Dave's level. I have some unbelievable women on my team directly that I'm getting to know more, and I'm so impressed with what they're doing. And this is a very, you know, while this industry is different than the world I live in day to day, it's also has a lot of common themes to it. So, you know, for us, we're trying to approach every day by saying, let's make sure both our interviewing cycles, the jobs we feel, how we recruit people, how we put people out there on the platforms, that we have diversity and inclusion and all of that every day. And I can tell you from the top, from Dave and all of our leaders, we just had an offsite and we had a big conversation about this is something. It's a drum beat that we have to think about and live by every day and really check ourselves on a regular basis. But I do think there's so much more room for women in the world to do great things. And one of the, one of the areas, as you know very well, we lost a lot of women during COVID, who just left the workforce again. So we kind of went back unfortunately. So we have to now move forward and make sure that we are giving women the opportunity to have great jobs, have the flexibility they need as they build a family, and have a workplace environment that is trusted for them to come into every day. >> There's now clear visibility, at least in today's world, not withstanding some of the setbacks from COVID, that a young girl can look out in a company and see a path from entry level to the boardroom. That's a big change. A lot than even going back 10, 15, 20 years ago. What's your advice to the folks out there that are paying it forward? You see a lot of executive leaderships have a seat at the table. The board still underrepresented by most numbers, but at least you have now kind of this solidarity at the top, but a lot of people doing a lot more now than I've seen at the next levels down. So now you have this leveled approach. Is that something that you're seeing more of? And credit compare and contrast that to 20 years ago when you were, you know, rising through the ranks? What's different? >> Well, one of the main things, and I honestly do not think about it too much, but there were really no women. There were none. When I showed up in the meetings, I literally, it was me or not me at the table, but at the seat behind the table. The women just weren't in the room, and there were so many more barriers that we had to push through, and that has changed a lot. I mean globally that has changed a lot in the U.S. You know, if you look at just our U.S. House of Representatives and our U.S. Senate, we now have the increasing number of women. Even at leadership levels, you're seeing that change. You have a lot more women on boards than we ever thought we would ever represent. While we are not there, more female CEOs that I get an opportunity to see and talk to. Women starting companies, they do not see the barriers. And I will share, John, globally in the U.S. one of the things that I still see that we have that many other countries don't have, which I'm very proud of, women in the U.S. have a spirit about them that they just don't see the barriers in the same way. They believe that they can accomplish anything. I have two sons, I don't have daughters. I have nieces, and I'm hoping someday to have granddaughters. But I know that a lot of my friends who have granddaughters today talk about the boldness, the fortitude, that they believe that there's nothing they can't accomplish. And I think that's what what we have to instill in every little girl out there, that they can accomplish anything they want to. The world is theirs, and we need to not just do that in the U.S., but around the world. And it was always the thing that struck me when I did all my travels at AWS and now with Flexport, I'm traveling again quite a bit, is just the differences you see in the cultures around the world. And I remember even in the Middle East, how I started seeing it change. You've heard me talk a lot on this program about the fact in both Saudi and Bahrain, over 60% of the tech workers were females and most of them held the the hardest jobs, the security, the architecture, the engineering. But many of them did not hold leadership roles. And that is what we've got to change too. To your point, the middle, we want it to get bigger, but the top, we need to get bigger. We need to make sure women globally have opportunities to hold the most precious leadership roles and demonstrate their capabilities at the very top. But that's changed. And I would say the biggest difference is when we show up, we're actually evaluated properly for those kind of roles. We have a ways to go. But again, that part is really changing. >> Can you share, Teresa, first of all, that's great work you've done and I wan to give you props of that as well and all the work you do. I know you champion a lot of, you know, causes in in this area. One question that comes up a lot, I would love to get your opinion 'cause I think you can contribute heavily here is mentoring and sponsorship is huge, comes up all the time. What advice would you share to folks out there who were, I won't say apprehensive, but maybe nervous about how to do the networking and sponsorship and mentoring? It's not just mentoring, it's sponsorship too. What's your best practice? What advice would you give for the best way to handle that? >> Well yeah, and for the women out there, I would say on the mentorship side, I still see mentorship. Like, I don't think you can ever stop having mentorship. And I like to look at my mentors in different parts of my life because if you want to be a well-rounded person, you may have parts of your life every day that you think I'm doing a great job here and I definitely would like to do better there. Whether it's your spiritual life, your physical life, your work life, you know, your leisure life. But I mean there's, and there's parts of my leadership world that I still seek advice from as I try to do new things even in this world. And I tried some new things in between roles. I went out and asked the people that I respected the most. So I just would say for sure have different mentorships and don't be afraid to have that diversity. But if you have mentorships, the second important thing is show up with a real agenda and questions. Don't waste people's time. I'm very sensitive today. If you're, if you want a mentor, you show up and you use your time super effectively and be prepared for that. Sponsorship is a very different thing. And I don't believe we actually do that still in companies. We worked, thank goodness for my great HR team. When I was at AWS, we worked on a few sponsorship programs where for diversity in general, where we would nominate individuals in the company that we felt that weren't, that had a lot of opportunity for growth, but they just weren't getting a seat at the table. And we brought 'em to the table. And we actually kind of had a Chatham House rules where when they came into the meetings, they had a sponsor, not a mentor. They had a sponsor that was with them the full 18 months of this program. We would bring 'em into executive meetings. They would read docs, they could ask questions. We wanted them to be able to open up and ask crazy questions without, you know, feeling wow, I just couldn't answer this question in a normal environment or setting. And then we tried to make sure once they got through the program that we found jobs and support and other special projects that they could go do. But they still had that sponsor and that group of individuals that they'd gone through the program with, John, that they could keep going back to. And I remember sitting there and they asked me what I wanted to get out of the program, and I said two things. I want you to leave this program and say to yourself, I would've never had that experience if I hadn't gone through this program. I learned so much in 18 months. It would probably taken me five years to learn. And that it helped them in their career. The second thing I told them is I wanted them to go out and recruit individuals that look like them. I said, we need diversity, and unless you all feel that we are in an inclusive environment sponsoring all types of individuals to be part of this company, we're not going to get the job done. And they said, okay. And you know, but it was really one, it was very much about them. That we took a group of individuals that had high potential and a very diverse with diverse backgrounds, held 'em up, taught 'em things that gave them access. And two, selfishly I said, I want more of you in my business. Please help me. And I think those kind of things are helpful, and you have to be thoughtful about these kind of programs. And to me that's more sponsorship. I still have people reach out to me from years ago, you know, Microsoft saying, you were so good with me, can you give me a reference now? Can you talk to me about what I should be doing? And I try to, I'm not pray 100%, some things pray fall through the cracks, but I always try to make the time to talk to those individuals because for me, I am where I am today because I got some of the best advice from people like Don Byrne and Linda Zecker and Andy Jassy, who were very honest and upfront with me about my career. >> Awesome. Well, you got a passion for empowering women in tech, paying it forward, but you're quite accomplished and that's why we're so glad to have you on the program here. President and Chief Commercial Officer at Flexport. Obviously storied career and your other jobs, specifically Amazon I think, is historic in my mind. This next chapter looks like it's looking good right now. Final question for you, for the few minutes you have left. Tell us what you're up to at Flexport. What's your goals as President, Chief Commercial Officer? What are you trying to accomplish? Share a little bit, what's on your mind with your current job? >> Well, you kind of said it earlier. I think if I look at my own superpowers, I love customers, I love partners. I get my energy, John, from those interactions. So one is to come in and really help us build even a better world class enterprise global sales and marketing team. Really listen to our customers, think about how we interact with them, build the best executive programs we can, think about new ways that we can offer services to them and create new services. One of my favorite things about my career is I think if you're a business leader, it's your job to come back around and tell your product group and your services org what you're hearing from customers. That's how you can be so much more impactful, that you listen, you learn, and you deliver. So that's one big job. The second job for me, which I am so excited about, is that I have an amazing group called flexport.org under me. And flexport.org is doing amazing things around the world to help those in need. We just announced this new funding program for Tech for Refugees, which brings assistance to millions of people in Ukraine, Pakistan, the horn of Africa, and those who are affected by earthquakes. We just took supplies into Turkey and Syria, and Flexport, recently in fact, just did sent three air shipments to Turkey and Syria for these. And I think we did over a hundred trekking shipments to get earthquake relief. And as you can imagine, it was not easy to get into Syria. But you know, we're very active in the Ukraine, and we are, our goal for flexport.org, John, is to continue to work with our commercial customers and team up with them when they're trying to get supplies in to do that in a very cost effective, easy way, as quickly as we can. So that not-for-profit side of me that I'm so, I'm so happy. And you know, Ryan Peterson, who was our founder, this was his brainchild, and he's really taken this to the next level. So I'm honored to be able to pick that up and look for new ways to have impact around the world. And you know, I've always found that I think if you do things right with a company, you can have a beautiful combination of commercial-ity and giving. And I think Flexport does it in such an amazing and unique way. >> Well, the impact that they have with their system and their technology with logistics and shipping and supply chain is a channel for societal change. And I think that's a huge gift that you have that under your purview. So looking forward to finding out more about flexport.org. I can only imagine all the exciting things around sustainability, and we just had Mobile World Congress for Big Cube Broadcast, 5Gs right around the corner. I'm sure that's going to have a huge impact to your business. >> Well, for sure. And just on gas emissions, that's another thing that we are tracking gas, greenhouse gas emissions. And in fact we've already reduced more than 300,000 tons and supported over 600 organizations doing that. So that's a thing we're also trying to make sure that we're being climate aware and ensuring that we are doing the best job we can at that as well. And that was another thing I was honored to be able to do when we were at AWS, is to really cut out greenhouse gas emissions and really go global with our climate initiatives. >> Well Teresa, it's great to have you on. Security, data, 5G, sustainability, business transformation, AI all coming together to change the game. You're in another hot seat, hot roll, big wave. >> Well, John, it's an honor, and just thank you again for doing this and having women on and really representing us in a big way as we celebrate International Women's Day. >> I really appreciate it, it's super important. And these videos have impact, so we're going to do a lot more. And I appreciate your leadership to the industry and thank you so much for taking the time to contribute to our effort. Thank you, Teresa. >> Thank you. Thanks everybody. >> Teresa Carlson, the President and Chief Commercial Officer of Flexport. I'm John Furrier, host of theCUBE. This is International Women's Day broadcast. Thanks for watching. (upbeat outro music)

(upbeat music) >> Hello and welcome to theCube's coverage of International Women's Day. I'm John Furrier, your host of "theCUBE." We've got great two remote guests coming into our Palo Alto Studios, some tech athletes, as we say, people that've been in the trenches, years of experience, Lena Smart, CISO at MongoDB, Cube alumni, and Tara Hernandez, VP of Developer Productivity at MongoDB as well. Thanks for coming in to this program and supporting our efforts today. Thanks so much. >> Thanks for having us. >> Yeah, everyone talk about the journey in tech, where it all started. Before we get there, talk about what you guys are doing at MongoDB specifically. MongoDB is kind of gone the next level as a platform. You have your own ecosystem, lot of developers, very technical crowd, but it's changing the business transformation. What do you guys do at Mongo? We'll start with you, Lena. >> So I'm the CISO, so all security goes through me. I like to say, well, I don't like to say, I'm described as the ones throat to choke. So anything to do with security basically starts and ends with me. We do have a fantastic Cloud engineering security team and a product security team, and they don't report directly to me, but obviously we have very close relationships. I like to keep that kind of church and state separate and I know I've spoken about that before. And we just recently set up a physical security team with an amazing gentleman who left the FBI and he came to join us after 26 years for the agency. So, really starting to look at the physical aspects of what we offer as well. >> I interviewed a CISO the other day and she said, "Every day is day zero for me." Kind of goofing on the Amazon Day one thing, but Tara, go ahead. Tara, go ahead. What's your role there, developer productivity? What are you focusing on? >> Sure. Developer productivity is kind of the latest description for things that we've described over the years as, you know, DevOps oriented engineering or platform engineering or build and release engineering development infrastructure. It's all part and parcel, which is how do we actually get our code from developer to customer, you know, and all the mechanics that go into that. It's been something I discovered from my first job way back in the early '90s at Borland. And the art has just evolved enormously ever since, so. >> Yeah, this is a very great conversation both of you guys, right in the middle of all the action and data infrastructures changing, exploding, and involving big time AI and data tsunami and security never stops. Well, let's get into, we'll talk about that later, but let's get into what motivated you guys to pursue a career in tech and what were some of the challenges that you faced along the way? >> I'll go first. The fact of the matter was I intended to be a double major in history and literature when I went off to university, but I was informed that I had to do a math or a science degree or else the university would not be paid for. At the time, UC Santa Cruz had a policy that called Open Access Computing. This is, you know, the late '80s, early '90s. And anybody at the university could get an email account and that was unusual at the time if you were, those of us who remember, you used to have to pay for that CompuServe or AOL or, there's another one, I forget what it was called, but if a student at Santa Cruz could have an email account. And because of that email account, I met people who were computer science majors and I'm like, "Okay, I'll try that." That seems good. And it was a little bit of a struggle for me, a lot I won't lie, but I can't complain with how it ended up. And certainly once I found my niche, which was development infrastructure, I found my true love and I've been doing it for almost 30 years now. >> Awesome. Great story. Can't wait to ask a few questions on that. We'll go back to that late '80s, early '90s. Lena, your journey, how you got into it. >> So slightly different start. I did not go to university. I had to leave school when I was 16, got a job, had to help support my family. Worked a bunch of various jobs till I was about 21 and then computers became more, I think, I wouldn't say they were ubiquitous, but they were certainly out there. And I'd also been saving up every penny I could earn to buy my own computer and bought an Amstrad 1640, 20 meg hard drive. It rocked. And kind of took that apart, put it back together again, and thought that could be money in this. And so basically just teaching myself about computers any job that I got. 'Cause most of my jobs were like clerical work and secretary at that point. But any job that had a computer in front of that, I would make it my business to go find the guy who did computing 'cause it was always a guy. And I would say, you know, I want to learn how these work. Let, you know, show me. And, you know, I would take my lunch hour and after work and anytime I could with these people and they were very kind with their time and I just kept learning, so yep. >> Yeah, those early days remind me of the inflection point we're going through now. This major C change coming. Back then, if you had a computer, you had to kind of be your own internal engineer to fix things. Remember back on the systems revolution, late '80s, Tara, when, you know, your career started, those were major inflection points. Now we're seeing a similar wave right now, security, infrastructure. It feels like it's going to a whole nother level. At Mongo, you guys certainly see this as well, with this AI surge coming in. A lot more action is coming in. And so there's a lot of parallels between these inflection points. How do you guys see this next wave of change? Obviously, the AI stuff's blowing everyone away. Oh, new user interface. It's been called the browser moment, the mobile iPhone moment, kind of for this generation. There's a lot of people out there who are watching that are young in their careers, what's your take on this? How would you talk to those folks around how important this wave is? >> It, you know, it's funny, I've been having this conversation quite a bit recently in part because, you know, to me AI in a lot of ways is very similar to, you know, back in the '90s when we were talking about bringing in the worldwide web to the forefront of the world, right. And we tended to think in terms of all the optimistic benefits that would come of it. You know, free passing of information, availability to anyone, anywhere. You just needed an internet connection, which back then of course meant a modem. >> John: Not everyone had though. >> Exactly. But what we found in the subsequent years is that human beings are what they are and we bring ourselves to whatever platforms that are there, right. And so, you know, as much as it was amazing to have this freely available HTML based internet experience, it also meant that the negatives came to the forefront quite quickly. And there were ramifications of that. And so to me, when I look at AI, we're already seeing the ramifications to that. Yes, are there these amazing, optimistic, wonderful things that can be done? Yes. >> Yeah. >> But we're also human and the bad stuff's going to come out too. And how do we- >> Yeah. >> How do we as an industry, as a community, you know, understand and mitigate those ramifications so that we can benefit more from the positive than the negative. So it is interesting that it comes kind of full circle in really interesting ways. >> Yeah. The underbelly takes place first, gets it in the early adopter mode. Normally industries with, you know, money involved arbitrage, no standards. But we've seen this movie before. Is there hope, Lena, that we can have a more secure environment? >> I would hope so. (Lena laughs) Although depressingly, we've been in this well for 30 years now and we're, at the end of the day, still telling people not to click links on emails. So yeah, that kind of still keeps me awake at night a wee bit. The whole thing about AI, I mean, it's, obviously I am not an expert by any stretch of the imagination in AI. I did read (indistinct) book recently about AI and that was kind of interesting. And I'm just trying to teach myself as much as I can about it to the extent of even buying the "Dummies Guide to AI." Just because, it's actually not a dummies guide. It's actually fairly interesting, but I'm always thinking about it from a security standpoint. So it's kind of my worst nightmare and the best thing that could ever happen in the same dream. You know, you've got this technology where I can ask it a question and you know, it spits out generally a reasonable answer. And my team are working on with Mark Porter our CTO and his team on almost like an incubation of AI link. What would it look like from MongoDB? What's the legal ramifications? 'Cause there will be legal ramifications even though it's the wild, wild west just now, I think. Regulation's going to catch up to us pretty quickly, I would think. >> John: Yeah, yeah. >> And so I think, you know, as long as companies have a seat at the table and governments perhaps don't become too dictatorial over this, then hopefully we'll be in a good place. But we'll see. I think it's a really interest, there's that curse, we're living in interesting times. I think that's where we are. >> It's interesting just to stay on this tech trend for a minute. The standards bodies are different now. Back in the old days there were, you know, IEEE standards, ITF standards. >> Tara: TPC. >> The developers are the new standard. I mean, now you're seeing open source completely different where it was in the '90s to here beginning, that was gen one, some say gen two, but I say gen one, now we're exploding with open source. You have kind of developers setting the standards. If developers like it in droves, it becomes defacto, which then kind of rolls into implementation. >> Yeah, I mean I think if you don't have developer input, and this is why I love working with Tara and her team so much is 'cause they get it. If we don't have input from developers, it's not going to get used. There's going to be ways of of working around it, especially when it comes to security. If they don't, you know, if you're a developer and you're sat at your screen and you don't want to do that particular thing, you're going to find a way around it. You're a smart person. >> Yeah. >> So. >> Developers on the front lines now versus, even back in the '90s, they're like, "Okay, consider the dev's, got a QA team." Everything was Waterfall, now it's Cloud, and developers are on the front lines of everything. Tara, I mean, this is where the standards are being met. What's your reaction to that? >> Well, I think it's outstanding. I mean, you know, like I was at Netscape and part of the crowd that released the browser as open source and we founded mozilla.org, right. And that was, you know, in many ways kind of the birth of the modern open source movement beyond what we used to have, what was basically free software foundation was sort of the only game in town. And I think it is so incredibly valuable. I want to emphasize, you know, and pile onto what Lena was saying, it's not just that the developers are having input on a sort of company by company basis. Open source to me is like a checks and balance, where it allows us as a broader community to be able to agree on and enforce certain standards in order to try and keep the technology platforms as accessible as possible. I think Kubernetes is a great example of that, right. If we didn't have Kubernetes, that would've really changed the nature of how we think about container orchestration. But even before that, Linux, right. Linux allowed us as an industry to end the Unix Wars and as someone who was on the front lines of that as well and having to support 42 different operating systems with our product, you know, that was a huge win. And it allowed us to stop arguing about operating systems and start arguing about software or not arguing, but developing it in positive ways. So with, you know, with Kubernetes, with container orchestration, we all agree, okay, that's just how we're going to orchestrate. Now we can build up this huge ecosystem, everybody gets taken along, right. And now it changes the game for what we're defining as business differentials, right. And so when we talk about crypto, that's a little bit harder, but certainly with AI, right, you know, what are the checks and balances that as an industry and as the developers around this, that we can in, you know, enforce to make sure that no one company or no one body is able to overly control how these things are managed, how it's defined. And I think that is only for the benefit in the industry as a whole, particularly when we think about the only other option is it gets regulated in ways that do not involve the people who actually know the details of what they're talking about. >> Regulated and or thrown away or bankrupt or- >> Driven underground. >> Yeah. >> Which would be even worse actually. >> Yeah, that's a really interesting, the checks and balances. I love that call out. And I was just talking with another interview part of the series around women being represented in the 51% ratio. Software is for everybody. So that we believe that open source movement around the collective intelligence of the participants in the industry and independent of gender, this is going to be the next wave. You're starting to see these videos really have impact because there are a lot more leaders now at the table in companies developing software systems and with AI, the aperture increases for applications. And this is the new dynamic. What's your guys view on this dynamic? How does this go forward in a positive way? Is there a certain trajectory you see? For women in the industry? >> I mean, I think some of the states are trying to, again, from the government angle, some of the states are trying to force women into the boardroom, for example, California, which can be no bad thing, but I don't know, sometimes I feel a bit iffy about all this kind of forced- >> John: Yeah. >> You know, making, I don't even know how to say it properly so you can cut this part of the interview. (John laughs) >> Tara: Well, and I think that they're >> I'll say it's not organic. >> No, and I think they're already pulling it out, right. It's already been challenged so they're in the process- >> Well, this is the open source angle, Tara, you are getting at it. The change agent is open, right? So to me, the history of the proven model is openness drives transparency drives progress. >> No, it's- >> If you believe that to be true, this could have another impact. >> Yeah, it's so interesting, right. Because if you look at McKinsey Consulting or Boston Consulting or some of the other, I'm blocking on all of the names. There has been a decade or more of research that shows that a non homogeneous employee base, be it gender or ethnicity or whatever, generates more revenue, right? There's dollar signs that can be attached to this, but it's not enough for all companies to want to invest in that way. And it's not enough for all, you know, venture firms or investment firms to grant that seed money or do those seed rounds. I think it's getting better very slowly, but socialization is a much harder thing to overcome over time. Particularly, when you're not just talking about one country like the United States in our case, but around the world. You know, tech centers now exist all over the world, including places that even 10 years ago we might not have expected like Nairobi, right. Which I think is amazing, but you have to factor in the cultural implications of that as well, right. So yes, the openness is important and we have, it's important that we have those voices, but I don't think it's a panacea solution, right. It's just one more piece. I think honestly that one of the most important opportunities has been with Cloud computing and Cloud's been around for a while. So why would I say that? It's because if you think about like everybody holds up the Steve Jobs, Steve Wozniak, back in the '70s, or Sergey and Larry for Google, you know, you had to have access to enough credit card limit to go to Fry's and buy your servers and then access to somebody like Susan Wojcicki to borrow the garage or whatever. But there was still a certain amount of upfrontness that you had to be able to commit to, whereas now, and we've, I think, seen a really good evidence of this being able to lease server resources by the second and have development platforms that you can do on your phone. I mean, for a while I think Africa, that the majority of development happened on mobile devices because there wasn't a sufficient supply chain of laptops yet. And that's no longer true now as far as I know. But like the power that that enables for people who would otherwise be underrepresented in our industry instantly opens it up, right? And so to me that's I think probably the biggest opportunity that we've seen from an industry on how to make more availability in underrepresented representation for entrepreneurship. >> Yeah. >> Something like AI, I think that's actually going to take us backwards if we're not careful. >> Yeah. >> Because of we're reinforcing that socialization. >> Well, also the bias. A lot of people commenting on the biases of the large language inherently built in are also problem. Lena, I want you to weigh on this too, because I think the skills question comes up here and I've been advocating that you don't need the pedigree, college pedigree, to get into a certain jobs, you mentioned Cloud computing. I mean, it's been around for you think a long time, but not really, really think about it. The ability to level up, okay, if you're going to join something new and half the jobs in cybersecurity are created in the past year, right? So, you have this what used to be a barrier, your degree, your pedigree, your certification would take years, would be a blocker. Now that's gone. >> Lena: Yeah, it's the opposite. >> That's, in fact, psychology. >> I think so, but the people who I, by and large, who I interview for jobs, they have, I think security people and also I work with our compliance folks and I can't forget them, but let's talk about security just now. I've always found a particular kind of mindset with security folks. We're very curious, not very good at following rules a lot of the time, and we'd love to teach others. I mean, that's one of the big things stem from the start of my career. People were always interested in teaching and I was interested in learning. So it was perfect. And I think also having, you know, strong women leaders at MongoDB allows other underrepresented groups to actually apply to the company 'cause they see that we're kind of talking the talk. And that's been important. I think it's really important. You know, you've got Tara and I on here today. There's obviously other senior women at MongoDB that you can talk to as well. There's a bunch of us. There's not a whole ton of us, but there's a bunch of us. And it's good. It's definitely growing. I've been there for four years now and I've seen a growth in women in senior leadership positions. And I think having that kind of track record of getting really good quality underrepresented candidates to not just interview, but come and join us, it's seen. And it's seen in the industry and people take notice and they're like, "Oh, okay, well if that person's working, you know, if Tara Hernandez is working there, I'm going to apply for that." And that in itself I think can really, you know, reap the rewards. But it's getting started. It's like how do you get your first strong female into that position or your first strong underrepresented person into that position? It's hard. I get it. If it was easy, we would've sold already. >> It's like anything. I want to see people like me, my friends in there. Am I going to be alone? Am I going to be of a group? It's a group psychology. Why wouldn't? So getting it out there is key. Is there skills that you think that people should pay attention to? One's come up as curiosity, learning. What are some of the best practices for folks trying to get into the tech field or that's in the tech field and advancing through? What advice are you guys- >> I mean, yeah, definitely, what I say to my team is within my budget, we try and give every at least one training course a year. And there's so much free stuff out there as well. But, you know, keep learning. And even if it's not right in your wheelhouse, don't pick about it. Don't, you know, take a look at what else could be out there that could interest you and then go for it. You know, what does it take you few minutes each night to read a book on something that might change your entire career? You know, be enthusiastic about the opportunities out there. And there's so many opportunities in security. Just so many. >> Tara, what's your advice for folks out there? Tons of stuff to taste, taste test, try things. >> Absolutely. I mean, I always say, you know, my primary qualifications for people, I'm looking for them to be smart and motivated, right. Because the industry changes so quickly. What we're doing now versus what we did even last year versus five years ago, you know, is completely different though themes are certainly the same. You know, we still have to code and we still have to compile that code or package the code and ship the code so, you know, how well can we adapt to these new things instead of creating floppy disks, which was my first job. Five and a quarters, even. The big ones. >> That's old school, OG. There it is. Well done. >> And now it's, you know, containers, you know, (indistinct) image containers. And so, you know, I've gotten a lot of really great success hiring boot campers, you know, career transitioners. Because they bring a lot experience in addition to the technical skills. I think the most important thing is to experiment and figuring out what do you like, because, you know, maybe you are really into security or maybe you're really into like deep level coding and you want to go back, you know, try to go to school to get a degree where you would actually want that level of learning. Or maybe you're a front end engineer, you want to be full stacked. Like there's so many different things, data science, right. Maybe you want to go learn R right. You know, I think it's like figure out what you like because once you find that, that in turn is going to energize you 'cause you're going to feel motivated. I think the worst thing you could do is try to force yourself to learn something that you really could not care less about. That's just the worst. You're going in handicapped. >> Yeah and there's choices now versus when we were breaking into the business. It was like, okay, you software engineer. They call it software engineering, that's all it was. You were that or you were in sales. Like, you know, some sort of systems engineer or sales and now it's,- >> I had never heard of my job when I was in school, right. I didn't even know it was a possibility. But there's so many different types of technical roles, you know, absolutely. >> It's so exciting. I wish I was young again. >> One of the- >> Me too. (Lena laughs) >> I don't. I like the age I am. So one of the things that I did to kind of harness that curiosity is we've set up a security champions programs. About 120, I guess, volunteers globally. And these are people from all different backgrounds and all genders, diversity groups, underrepresented groups, we feel are now represented within this champions program. And people basically give up about an hour or two of their time each week, with their supervisors permission, and we basically teach them different things about security. And we've now had seven full-time people move from different areas within MongoDB into my team as a result of that program. So, you know, monetarily and time, yeah, saved us both. But also we're showing people that there is a path, you know, if you start off in Tara's team, for example, doing X, you join the champions program, you're like, "You know, I'd really like to get into red teaming. That would be so cool." If it fits, then we make that happen. And that has been really important for me, especially to give, you know, the women in the underrepresented groups within MongoDB just that window into something they might never have seen otherwise. >> That's a great common fit is fit matters. Also that getting access to what you fit is also access to either mentoring or sponsorship or some sort of, at least some navigation. Like what's out there and not being afraid to like, you know, just ask. >> Yeah, we just actually kicked off our big mentor program last week, so I'm the executive sponsor of that. I know Tara is part of it, which is fantastic. >> We'll put a plug in for it. Go ahead. >> Yeah, no, it's amazing. There's, gosh, I don't even know the numbers anymore, but there's a lot of people involved in this and so much so that we've had to set up mentoring groups rather than one-on-one. And I think it was 45% of the mentors are actually male, which is quite incredible for a program called Mentor Her. And then what we want to do in the future is actually create a program called Mentor Them so that it's not, you know, not just on the female and so that we can live other groups represented and, you know, kind of break down those groups a wee bit more and have some more granularity in the offering. >> Tara, talk about mentoring and sponsorship. Open source has been there for a long time. People help each other. It's community-oriented. What's your view of how to work with mentors and sponsors if someone's moving through ranks? >> You know, one of the things that was really interesting, unfortunately, in some of the earliest open source communities is there was a lot of pervasive misogyny to be perfectly honest. >> Yeah. >> And one of the important adaptations that we made as an open source community was the idea, an introduction of code of conducts. And so when I'm talking to women who are thinking about expanding their skills, I encourage them to join open source communities to have opportunity, even if they're not getting paid for it, you know, to develop their skills to work with people to get those code reviews, right. I'm like, "Whatever you join, make sure they have a code of conduct and a good leadership team. It's very important." And there are plenty, right. And then that idea has come into, you know, conferences now. So now conferences have codes of contact, if there are any good, and maybe not all of them, but most of them, right. And the ideas of expanding that idea of intentional healthy culture. >> John: Yeah. >> As a business goal and business differentiator. I mean, I won't lie, when I was recruited to come to MongoDB, the culture that I was able to discern through talking to people, in addition to seeing that there was actually women in senior leadership roles like Lena, like Kayla Nelson, that was a huge win. And so it just builds on momentum. And so now, you know, those of us who are in that are now representing. And so that kind of reinforces, but it's all ties together, right. As the open source world goes, particularly for a company like MongoDB, which has an open source product, you know, and our community builds. You know, it's a good thing to be mindful of for us, how we interact with the community and you know, because that could also become an opportunity for recruiting. >> John: Yeah. >> Right. So we, in addition to people who might become advocates on Mongo's behalf in their own company as a solution for themselves, so. >> You guys had great successful company and great leadership there. I mean, I can't tell you how many times someone's told me "MongoDB doesn't scale. It's going to be dead next year." I mean, I was going back 10 years. It's like, just keeps getting better and better. You guys do a great job. So it's so fun to see the success of developers. Really appreciate you guys coming on the program. Final question, what are you guys excited about to end the segment? We'll give you guys the last word. Lena will start with you and Tara, you can wrap us up. What are you excited about? >> I'm excited to see what this year brings. I think with ChatGPT and its copycats, I think it'll be a very interesting year when it comes to AI and always in the lookout for the authentic deep fakes that we see coming out. So just trying to make people aware that this is a real thing. It's not just pretend. And then of course, our old friend ransomware, let's see where that's going to go. >> John: Yeah. >> And let's see where we get to and just genuine hygiene and housekeeping when it comes to security. >> Excellent. Tara. >> Ah, well for us, you know, we're always constantly trying to up our game from a security perspective in the software development life cycle. But also, you know, what can we do? You know, one interesting application of AI that maybe Google doesn't like to talk about is it is really cool as an addendum to search and you know, how we might incorporate that as far as our learning environment and developer productivity, and how can we enable our developers to be more efficient, productive in their day-to-day work. So, I don't know, there's all kinds of opportunities that we're looking at for how we might improve that process here at MongoDB and then maybe be able to share it with the world. One of the things I love about working at MongoDB is we get to use our own products, right. And so being able to have this interesting document database in order to put information and then maybe apply some sort of AI to get it out again, is something that we may well be looking at, if not this year, then certainly in the coming year. >> Awesome. Lena Smart, the chief information security officer. Tara Hernandez, vice president developer of productivity from MongoDB. Thank you so much for sharing here on International Women's Day. We're going to do this quarterly every year. We're going to do it and then we're going to do quarterly updates. Thank you so much for being part of this program. >> Thank you. >> Thanks for having us. >> Okay, this is theCube's coverage of International Women's Day. I'm John Furrier, your host. Thanks for watching. (upbeat music)

>>The Cube presents Ignite 22, brought to you by Palo Alto Networks. >>Welcome back to Vegas. Guys. We're happy that you're here. Lisa Martin here covering with Dave Valante, Palo Alto Networks Ignite 22. We're at MGM Grand. This is our first day, Dave of two days of cube coverage. We've been having great conversations with the ecosystem with Palo Alto executives, with partners. One of the things that they have is unit 42. We're gonna be talking with them next about cyber intelligence. And the threat data that they get is >>Incredible. Yeah. They have all the data, they know what's going on, and of course things are changing. The state of play changes. Hold on a second. I got a text here. Oh, my Netflix account was frozen. Should I click on this link? Yeah. What do you think? Have you had a, it's, have you had a little bit more of that this holiday season? Yeah, definitely. >>Unbelievable, right? A lot of smishing going on. >>Yeah, they're very clever. >>Yeah, we're very pleased to welcome back one of our alumni to the queue. Wendy Whitmore is here, the SVP of Unit 42. Welcome back, Wendy. Great to have >>You. Thanks Lisa. So >>Unit 42 created back in 2014. One of the things that I saw that you said in your keynote this morning or today was everything old is still around and it's co, it's way more prolific than ever. What are some of the things that Unit 42 is seeing these days with, with respect to cyber threats as the landscape has changed so much the last two years alone? >>You know, it, it has. So it's really interesting. I've been responding to these breaches for over two decades now, and I can tell you that there are a lot of new and novel techniques. I love that you already highlighted Smishing, right? In the opening gate. Right. Because that is something that a year ago, no one knew what that word was. I mean, we, it's probably gonna be invented this year, right? But that said, so many of the tactics that we have previously seen, when it comes to just general espionage techniques, right? Data act filtration, intellectual property theft, those are going on now more than ever. And you're not hearing about them as much in the news because there are so many other things, right? We're under the landscape of a major war going on between Russia and Ukraine of ransomware attacks, you know, occurring on a weekly basis. And so we keep hearing about those, but ultimately these nations aid actors are using that top cover, if you will, as a great distraction. It's almost like a perfect storm for them to continue conducting so much cyber espionage work that like we may not be feeling that today, but years down the road, they're, the work that they're doing today is gonna have really significant impact. >>Ransomware has become a household word in the last couple of years. I think even my mom knows what it is, to some degree. Yeah. But the threat actors are far more sophisticated than they've ever written. They're very motivated. They're very well funded. I think I've read a stat recently in the last year that there's a ransomware attack once every 11 seconds. And of course we only hear about the big ones. But that is a concern that goes all the way up to the board. >>Yeah. You know, we have a stat in our ransomware threat report that talks about how often victims are posted on leak sites. And I think it's once every seven minutes at this point that a new victim is posted. Meaning a victim has had their data, a victim organization had their data stolen and posted on some leak site in the attempt to be extorted. So that has become so common. One of the shifts that we've seen this year in particular and in recent months, you know, a year ago when I was at Ignite, which was virtual, we talked about quadruple extortion, meaning four different ways that these ransomware actors would go out and try to make money from these attacks in what they're doing now is often going to just one, which is, I don't even wanna bother with encrypting your data now, because that means that in order to get paid, I probably have to decrypt it. Right? That's a lot of work. It's time consuming. It's kind of painstaking. And so what they've really looked to do now is do the extortion where they simply steal the data and then threaten to post it on these leak sites, you know, release it other parts of the web and, and go from there. And so that's really a blending of these techniques of traditional cyber espionage with intellectual property theft. Wow. >>How trustworthy are those guys in terms of, I mean, these are hackers, right? In terms of it's really the, the hacker honor system, isn't it? I mean, if you get compromised like that, you really beholden to criminals. And so, you >>Know, so that's one of the key reasons why having the threat intelligence is so important, right? Understanding which group that you're dealing with and what their likelihood of paying is, what's their modus operandi. It's become even more important now because these groups switch teams more frequently than NFL trades, you know, free agents during the regular season, right? Or players become free agents. And that's because their infrastructure. So the, you know, infrastructure, the servers, the systems that they're using to conduct these attacks from is actually largely being disrupted more from law enforcement, international intelligence agencies working together with public private partnerships. So what they're doing is saying, okay, great. All that infrastructure that I just had now is, is burned, right? It's no longer effective. So then they'll disband a team and then they'll recruit a new team and it's constant like mixing and matching in players. >>All that said, even though that's highly dynamic, one of the other areas that they pride themselves on is customer service. So, and I think it's interesting because, you know, when I said they're not wanting to like do all the decryption? Yeah. Cuz that's like painful techni technical slow work. But on the customer service side, they will create these customer service portals immediately stand one up, say, you know, hey it's, it's like an Amazon, you know, if you've ever had to return a package on Amazon for example, and you need to click through and like explain, you know, Hey, I didn't receive this package. A portal window pops up, you start talking to either a bot or a live agent on the backend. In this case they're hu what appeared to be very much humans who are explaining to you exactly what happened, what they're asking for, super pleasant, getting back within minutes of a response. And they know that in order for them to get paid, they need to have good customer service because otherwise they're not going to, you know, have a business. How, >>So what's the state of play look like from between nation states, criminals and how, how difficult or not so difficult is it for you to identify? Do you have clear signatures? My understanding in with Solar Winds it was a little harder, but maybe help us understand and help our audience understand what the state of play is right now. >>One of the interesting things that I think is occurring, and I highlighted this this morning, is this idea of convergence. And so I'll break it down for one example relates to the type of malware or tools that these attackers use. So traditionally, if we looked at a nation state actor like China or Russia, they were very, very specific and very strategic about the types of victims that they were going to go after when they had zero day. So, you know, new, new malware out there, new vulnerabilities that could be exploited only by them because the rest of the world didn't know about it. They might have one organization that they would target that at, at most, a handful and all very strategic for their objective. They wanted to keep that a secret as long as possible. Now what we're seeing actually is those same attackers going towards one, a much larger supply chain. >>So, so lorenzen is a great example of that. The Hafnia attacks towards Microsoft Exchange server last year. All great examples of that. But what they're also doing is instead of using zero days as much, or you know, because those are expensive to build, they take a lot of time, a lot of funding, a lot of patience and research. What they're doing is using commercially available tools. And so there's a tool that our team identified earlier this year called Brute Rael, C4 or BRC four for short. And that's a tool that we now know that nation state actors are using. But just two weeks ago we invested a ransomware attack where the ransomware actor was using that same piece of tooling. So to your point, yak can get difficult for defenders when you're looking through and saying, well wait, they're all using some of the same tools right now and some of the same approaches when it comes to nation states, that's great for them because they can blend into the noise and it makes it harder to identify as >>Quickly. And, and is that an example of living off the land or is that B BRC four sort of a homegrown hacker tool? Is it, is it a, is it a commercial >>Off the shelf? So it's a tool that was actually, so you can purchase it, I believe it's about 2,500 US dollars for a license. It was actually created by a former Red teamer from a couple well-known companies in the industry who then decided, well hey, I built this tool for work, I'm gonna sell this. Well great for Red teamers that are, you know, legitimately doing good work, but not great now because they're, they built a, a strong tool that has the ability to hide amongst a, a lot of protocols. It can actually hide within Slack and teams to where you can't even see the data is being exfiltrated. And so there's a lot of concern. And then now the reality that it gets into the wrong hands of nation state actors in ransomware actors, one of the really interesting things about that piece of malware is it has a setting where you can change wallpaper. And I don't know if you know offhand, you know what that means, but you know, if that comes to mind, what you would do with it. Well certainly a nation state actor is never gonna do something like that, right? But who likes to do that are ransomware actors who can go in and change the background wallpaper on a desktop that says you've been hacked by XYZ organization and let you know what's going on. So pretty interesting, obviously the developer doing some work there for different parts of the, you know, nefarious community. >>Tremendous amount of sophistication that's gone on the last couple of years alone. I was just reading that Unit 42 is now a founding member of the Cyber Threat Alliance includes now more than 35 organizations. So you guys are getting a very broad picture of today's threat landscape. How can customers actually achieve cyber resilience? Is it achievable and how do you help? >>So I, I think it is achievable. So let me kind of parse out the question, right. So the Cyber Threat Alliance, the J C D C, the Cyber Safety Review Board, which I'm a member of, right? I think one of the really cool things about Palo Alto Networks is just our partnerships. So those are just a handful. We've got partnerships with over 200 organizations. We work closely with the Ukrainian cert, for example, sharing information, incredible information about like what's going on in the war, sharing technical details. We do that with Interpol on a daily basis where, you know, we're sharing information. Just last week the Africa cyber surge operation was announced where millions of nodes were taken down that were part of these larger, you know, system of C2 channels that attackers are using to conduct exploits and attacks throughout the world. So super exciting in that regard and it's something that we're really passionate about at Palo Alto Networks in terms of resilience, a few things, you know, one is visibility, so really having a, an understanding of in a real, as much of real time as possible, right? What's happening. And then it goes into how you, how can we decrease operational impact. So that's everything from network segmentation to wanna add the terms and phrases I like to use a lot is the win is really increasing the time it takes for the attackers to get their work done and decreasing the amount of time it takes for the defenders to get their work done, right? >>Yeah. I I call it increasing the denominator, right? And the ROI equation benefit over or value, right? Equals equals or benefit equals value over cost if you can increase the cost to go go elsewhere, right? Absolutely. And that's the, that's the game. Yeah. You mentioned Ukraine before, what have we learned from Ukraine? I, I remember I was talking to Robert Gates years ago, 2016 I think, and I was asking him, yeah, but don't we have the best cyber technology? Can't we attack? He said, we got the most to lose too. Yeah. And so what have we learned from, from Ukraine? >>Well, I, I think that's part of the key point there, right? Is you know, a great offense essentially can also be for us, you know, deterrent. So in that aspect we have as an, as a company and or excuse me, as a country, as a company as well, but then as partners throughout all parts of the world have really focused on increasing the intelligence sharing and specifically, you know, I mentioned Ukrainian cert. There are so many different agencies and other sorts throughout the world that are doing everything they can to share information to help protect human life there. And so what we've really been concerned with, with is, you know, what cyber warfare elements are going to be used there, not only how does that impact Ukraine, but how does it potentially spread out to other parts of the world critical infrastructure. So you've seen that, you know, I mentioned CS rrb, but cisa, right? >>CISA has done a tremendous job of continuously getting out information and doing everything they can to make sure that we are collaborating at a commercial level. You know, we are sharing information and intelligence more than ever before. So partners like Mania and CrowdStrike, our Intel teams are working together on a daily basis to make sure that we're able to protect not only our clients, but certainly if we've got any information relevant that we can share that as well. And I think if there's any silver lining to an otherwise very awful situation, I think the fact that is has accelerated intelligence sharing is really positive. >>I was gonna ask you about this cause I think, you know, 10 or so years ago, there was a lot of talk about that, but the industry, you know, kind of kept things to themselves, you know, a a actually tried to monetize some of that private data. So that's changing is what I'm hearing from you >>More so than ever more, you know, I've, I mentioned I've been in the field for 20 years. You know, it, it's tough when you have a commercial business that relies on, you know, information to, in order to pay people's salaries, right? I think that has changed quite a lot. We see the benefit of just that continuous sharing. There are, you know, so many more walls broken down between these commercial competitors, but also the work on the public private partnership side has really increased some of those relationships. Made it easier. And you know, I have to give a whole lot of credit and mention sisa, like the fact that during log four J, like they had GitHub repositories, they were using Slack, they were using Twitter. So the government has really started pushing forward with a lot of the newer leadership that's in place to say, Hey, we're gonna use tools and technology that works to share and disseminate information as quickly as we can. Right? That's fantastic. That's helping everybody. >>We knew that every industry, no, nobody's spared of this. But did you notice in the last couple of years, any industries in particular that are more vulnerable? Like I think of healthcare with personal health information or financial services, any industries kind of jump out as being more susceptible than others? >>So I think those two are always gonna be at the forefront, right? Financial services and healthcare. But what's been really top of mind is critical infrastructure, just making sure right? That our water, our power, our fuel, so many other parts of right, the ecosystem that go into making sure that, you know, we're keeping, you know, houses heated during the winter, for example, that people have fresh water. Those are extremely critical. And so that is really a massive area of focus for the industry right now. >>Can I come back to public-private partnerships? My question is relates to regulations because the public policy tends to be behind tech, the technology industry as an understatement. So when you take something like GDPR is the obvious example, but there are many, many others, data sovereignty, you can't move the data. Are are, are, is there tension between your desire as our desire as an industry to share data and government's desire to keep data private and restrict that data sharing? How is that playing out? How do you resolve that? >>Well I think there have been great strides right in each of those areas. So in terms of regulation when it comes to breaches there, you know, has been a tendency in the past to do victim shaming, right? And for organizations to not want to come forward because they're concerned about the monetary funds, right? I think there's been tremendous acceleration. You're seeing that everywhere from the fbi, from cisa, to really working very closely with organizations to, to have a true impact. So one example would be a ransomware attack that occurred. This was for a client of ours within the United States and we had a very close relationship with the FBI at that local field office and made a phone call. This was 7:00 AM Eastern time. And this was an organization that had this breach gone public, would've made worldwide news. There would've been a very big impact because it would've taken a lot of their systems offline. >>Within the 30 minutes that local FBI office was on site said, we just saw this piece of malware last week, we have a decryptor for it from another organization who shared it with us. Here you go. And within 60 minutes, every system was back up and running. Our teams were able to respond and get that disseminated quickly. So efforts like that, I think the government has made a tremendous amount of headway into improving relationships. Is there always gonna be some tension between, you know, competing, you know, organizations? Sure. But I think that we're doing a whole lot to progress it, >>But governments will make exceptions in that case. Especially for something as critical as the example that you just gave and be able to, you know, do a reach around, if you will, on, on onerous regulations that, that ne aren't helpful in that situation, but certainly do a lot of good in terms of protecting privacy. >>Well, and I think there used to be exceptions made typically only for national security elements, right? And now you're seeing that expanding much more so, which I think is also positive. Right. >>Last question for you as we are wrapping up time here. What can organizations really do to stay ahead of the curve when it comes to, to threat actors? We've got internal external threats. What can they really do to just be ahead of that curve? Is that possible? >>Well, it is now, it's not an easy task so I'm not gonna, you know, trivialize it. But I think that one, having relationships with right organizations in advance always a good thing. That's a, everything from certainly a commercial relationships, but also your peers, right? There's all kinds of fantastic industry spec specific information sharing organizations. I think the biggest thing that impacts is having education across your executive team and testing regularly, right? Having a plan in place, testing it. And it's not just the security pieces of it, right? As security responders, we live these attacks every day, but it's making sure that your general counsel and your head of operations and your CEO knows what to do. Your board of directors, do they know what to do when they receive a phone call from Bloomberg, for example? Are they supposed supposed to answer? Do your employees know that those kind of communications in advance and training can be really critical and make or break a difference in an attack. >>That's a great point about the testing but also the communication that it really needs to be company wide. Everyone at every level needs to know how to react. Wendy, it's been so great having, >>Wait one last question. Sure. Do you have a favorite superhero growing up? >>Ooh, it's gotta be Wonder Woman. Yeah, >>Yeah, okay. Yeah, so cuz I'm always curious, there's not a lot of women in, in security in cyber. How'd you get into it? And many cyber pros like wanna save the world? >>Yeah, no, that's a great question. So I joined the Air Force, you know, I, I was a special agent doing computer crime investigations and that was a great job. And I learned about that from, we had an alumni day and all these alumni came in from the university and they were in flight suits and combat gear. And there was one woman who had long blonde flowing hair and a black suit and high heels and she was carrying a gun. What did she do? Because that's what I wanted do. >>Awesome. Love it. We >>Blonde >>Wonder Woman. >>Exactly. Wonder Woman. Wendy, it's been so great having you on the program. We, we will definitely be following unit 42 and all the great stuff that you guys are doing. Keep up the good >>Work. Thanks so much Lisa. Thank >>You. Day our pleasure. For our guest and Dave Valante, I'm Lisa Martin, live in Las Vegas at MGM Grand for Palo Alto Ignite, 22. You're watching the Cube, the leader in live enterprise and emerging tech coverage.

(upbeat music) >> Hello, beautiful cloud community, and welcome back to AWS reInvent. It is day four here in fabulous Las Vegas, Nevada. My voice can feel it, clearly. I'm Savannah Peterson with my co-host Paul Gillin. Paul, how you doing? >> Doing fine, Savannah. >> Are your feet about where my voice is? >> Well, getting little rest here as we have back to back segments. >> Yeah, yeah, we'll keep you off those. Very excited about this next segment. We get to have a chat with one of our very favorite analysts, Keith Townsend. Welcome back to theCUBE. >> Savannah Page. I'm going to use your south names, Savannah Page. Thank you for having me, Paul. Good to see you again. It's been been too long since CubeCon Valencia. >> Valencia. >> Valencia. >> Well at that beautiful lisp, love that. Keith, how's the show been for you so far? >> It has been great. I tweeted it a couple of days ago. Amazon reInvent is back. >> Savannah: Whoo! Love that. >> 50, 60 thousand people, you know? After 40 thousand, I stop countin'. It has been an amazing show. I don't know if it's just the assignment of returning, but easily the best reInvent of the four that I've attended. >> Savannah: Love that. >> Paul: I love that we have you here because, you know, we tend to get anchored to these desks, and we don't really get a sense of what's going on out there. You've been spending the last four days traversing the floor and talking to people. What are you hearing? Are there any mega themes that are emerging? >> Keith: So, a couple of mega themes is... We were in the Allen session with Adam, and Adam bought up the idea of hybrid cloud. At the 2019 show, that would be unheard of. There's only one cloud, and that's the AWS cloud, when you're at the Amazon show. Booths, folks, I was at the VMware booth and there's a hybrid cloud sign session. People are talking about multicloud. Yes, we're at the AWS show, but the reality that most customers' environments are complex. Adam mentioned that it's hybrid today and more than likely to be hybrid in the future in Amazon, and the ecosystem has adjusted to that reality. >> Paul: Now, is that because they want sell more outposts? >> You know, outpost is definitely a part of the story, but it's a tactile realization that outposts alone won't get it. So, you know, from Todd Consulting, to Capgemini, to PWC, to many of the integrations on the show floor... I even saw company that's doing HP-UX in the cloud or on-prem. The reality is these, well, we've deemed these legacy systems aren't going anywhere. AWS announced the mainframe service last year for converting mainframe code into cloud workloads, and it's just not taking on the, I think, the way that the Amazon would like, and that's a reality that is too complex for all of it to run in the cloud. >> Paul: So it sounds like the strategy is to envelop and consume then if you have mainframe conversion services and HP-UX in the cloud, I mean, you're talking about serious legacy stuff there. >> Keith: You're talking about serious legacy stuff. They haven't de-emphasized their relationship with VMware. You know, hybrid is not a place, it is a operating model. So VMware cloud on AWS allows you to do both models concurrently if you have those applications that need layer two. You have these workloads that just don't... SAP just doesn't... Sorry, AWS, SAP in the cloud and EC2 just doesn't make financial sense. It's a reality. It's accepting of that and meeting customers where they're at. >> And all the collaboration, I mean, you've mentioned so many companies in that answer, and I think it's very interesting to see how much we're all going to have to work together to make the cloud its own operating system. Cloud as an OS came up on our last conversation here and I think it's absolutely fascinating. >> Keith: Yeah, cloud is the OS I think is a thing. This idea that I'm going to use the cloud as my base layer of abstraction. I've talked to a really interesting startup... Well actually it's a open source project cross plane of where they're taking that cloud model and now I can put my VMware vsphere, my AWS, GCP, et cetera, behind that and use that operating model to manage my overall infrastructure. So, the maturity of the market has fascinated me over the past year, year and a half. >> It really feels like we're at a new inflection point. I totally agree. I want to talk about something completely different. >> Keith: Okay. >> Because I know that we both did this challenge. So one of the things that's really inspiring quite frankly about being here at AWS reInvent, and I know you all at home don't have an opportunity to walk the floor and get the experience and get as many steps as Paul gets in, but there's a real emphasis on giving back. This community cares about giving back and AWS is doing a variety of different activations to donate to a variety of different charities. And there's a DJ booth. I've been joking. It kind of feels like you're arriving at a rave when you get to reInvent. And right next to that, there is a hydrate and help station with these reusable water bottles. This is actually firm. It's not one of those plastic ones that's going to end up in the recycled bin or the landfill. And every single time that you fill up your water bottle, AWS will donate $3 to help women in Kenya get access to water. One of the things that I found really fascinating about the activation is women in sub-Saharan Africa spend 16 million hours carrying water a day, which is a wild concept to think about, and water is heavy. Keith, my man, I know that you did the activation. They had you carrying two 20 pound jugs of water. >> Keith: For about 15 feet. It's not the... >> (laughs) >> 20 pound jugs of water, 20 gallons, whatever the amount is. It was extremely heavy. I'm a fairly sizeable guy. Six four, six five. >> You're in good shape, yeah. >> Keith: Couple of a hundred pounds. >> Yeah. >> Keith: And I could not imagine spending that many hours simply getting fresh water. We take it for granted. Every time I run the water in the sink, my family gets on me because I get on them when they leave the sink water. It's like my dad's left the light on. If you leave the water on in my house, you are going to hear it from me because, you know, things like this tickle in my mind like, wow, people walk that far. >> Savannah: That's your whole day. >> Just water, and that's probably not even enough water for the day. >> Paul: Yeah. We think of that as being, like, an 18th century phenomenon, but it's very much today in parts of Sub-Saharan Africa. >> I know, and we're so privileged. For me, it was just, we work in technology. Everyone here is pretty blessed, and to do that activation really got my head in the right space to think, wow I'm so lucky. The team here, the fabulous production team, can go refill my water bottle. I mean, so simple. They've also got a fitness activation going on. You can jump on a bike, a treadmill, and if you work out for five minutes, they donate $5 to Fred Hutch up in Seattle. And that was nice. I did a little cross-training in between segments yesterday and I just, I really love seeing that emphasis. None of this matters if we're not taking care of community. >> Yeah, I'm going to go out and google Fred Hutch, and just donate the five bucks. 'Cause I'm not, I'm not. >> (laughs) >> I'll run forever, but I'm not getting on a bike. >> This from a guy who did 100 5Ks in a row last year. >> Yeah. I did 100 5Ks in a row, and I'm not doing five minutes on a bike. That's it. That's crazy, right? >> I mean there is a treadmill And they have the little hands workout thing too if you want. >> About five minutes though. >> Savannah: I know. >> Like five minutes is way longer than what you think it is. >> I mean, it's true. I was up there in a dress in sequence. Hopefully, I didn't scar any anyone on the show floor yesterday. It's still toss up. >> I'm going to take us back to back. >> Take us back Paul. >> Back to what we were talking about. I want to know what you're hearing. So we've had a lot of people on this show, a lot of vendors on the show who have said AWS is our most important cloud partner, which would imply that AWS's lead is solidifying its lead and pulling away from the pack as the number one. Do you hear that as well? Or is that lip service? >> Keith: So I always think about AWS reInvent as the Amazon victory lap. This is where they come and just thumb their noses at all the other cloud providers and just show how far ahead they're are. Werner Vogels, CTO at Amazon's keynotes, so I hadn't watched it yet, but at that keynote, this is where they literally take the victory lap and say that we're going to expose what we did four or five years ago on stage, and what we did four or five years ago is ahead of every cloud provider with maybe the exception of GCP and they're maybe three years behind. So customers are overwhelmingly choosing Amazon for these reasons. Don't get me wrong, Corey Quinn, Gardner folks, really went at Adam yesterday about Amazon had three majors outages in December last year. AWS has way too many services that are disconnected, but from the pure capability, I talked to a born in the cloud data protection company who could repatriate their data protection and storage on-prem private data center, save money. Instead, they double down on Amazon. They're using, they modernize their application and they're reduced their cost by 60 to 70%. >> Massive. >> This is massive. AWS is keeping up with customers no matter where they're at on the spectrum. >> Savannah: I love that you use the term victory lap. We've had a lot of folks from AWS here up on the show this week, and a couple of them have said they live for this. I mean, and it's got to be pretty cool. You've got 70 thousand plus people obsessed with your product and so many different partners doing so many different things from the edge to hospital to the largest companies on earth to the Israeli Ministry of Defense we were just talking about earlier, so everybody needs the cloud. I feel like that's where we're at. >> Keith: Yeah, and the next step, I think the next level opportunity for AWS is to get to that analyst or that citizen developer, being able to enable the end user to use a lambda, use these data services to create new applications, and the meanwhile, there's folks on the show floor filling that gap that enable develop... the piece of owner, the piece of parlor owner, to create a web portal that compares his prices and solutions to other vendors in his area and adjust dynamically. You go into a restaurant now and there is no price menu. There's a QR code that Amazon is powering much of that dynamic relationship between the restaurateur, the customer, and even the menu and availability. It's just a wonderful time. >> I always ask for the print menu. I'm sorry. >> Yeah. You want the printed menu. >> Look down, my phone doesn't work. >> Gimme something I could shine my light on. >> I know you didn't have have a chance to look at Vogel's keynote yet, but I mean you mentioned citizen developer. One of the things they announced this morning was essentially a low code lambda interface. So you can plug, take your lamb dysfunctions and do drag and drop a connection between them. So they are going after that market. >> Keith: So I guess I'll take my victory lap because that was my prediction. That's where Amazon's next... >> Well done, Keith. >> Because Lambda is that thing when you look at what server list was and the name of the concept of being, not having to have to worry about servers in your application development, the logical next step, I won't take too much of a leap. That logical first step is, well, code less code. This is something that Kelsey Hightower has talked about a lot. Low code, no code, the ability to empower people without having these artificial barriers, learning how to code in a different language. This is the time where I can go to Valencia, it's pronounced, where I can go to Valencia and not speak Spanish and just have my phone. Why can't we do, at business value, for people who have amazing ideas and enable those amazing ideas before I have to stick a developer in between them and the system. >> Paul: Low-code market is growing 35% a year. It's not surprising, given the potential that's out there. >> And as a non-technical person, who works in technology, I've been waiting for this moment. So keep predicting this kind of thing, Keith. 'Cause hopefully it'll keep happening. Keith, I'm going to give you the challenge we've been giving all of our guests this week. >> Keith: Okay. >> And I know you're going to absolutely crush this. So we are looking for your 32nd Instagram real, sizzle hot take, biggest takeaway from this year's show. >> So 32nd Instagram, I'll even put it on TikTok. >> Savannah: Heck yeah. >> Hybrid cloud, hybrid infrastructure. This is way bigger than Amazon. Whether we're talking about Amazon, AWS, I mean AWS's solutions, Google Cloud, Azure, OCI, on-prem. Customers want it all. They want a way to manage it all, and they need the skill and tools to enable their not-so-growing work force to do it. That is, that's AWS reInvent 2019 to 2022. >> Absolutely nailed it. Keith Townsend, it is always such a joy to have you here on theCUBE. Thank you for joining us >> Savannah Page. Great to have you. Paul, you too. You're always a great co-host. >> (laughs) We co-hosted for three days. >> We've got a lot of love for each other here. And we have even more love for all of you tuning into our fabulous livestream from AWS reInvent Las Vegas, Nevada, with Paul Gillin. I'm Savannah Peterson. You're watching theCUBE, the leader in high tech coverage. (upbeat music)

>>Hello friends and welcome back to Fabulous Las Vegas, Nevada, where we are live from the show floor at AWS Reinvent. My name is Savannah Peterson, joined by my fabulous co-host John Furrier. John, how was your lunch? >>My lunch was great. Wasn't very complex like it is today, so it was very easy, >>Appropriate for the conversation we're about >>To have. Great, great guests coming up Cube alumni and great question around complexity and how is wellbeing teams be good? >>Yes. And, and and on that note, let's welcome John from DeWit as well as Danny from Inox. I swear I'll be able to say that right by the end of this. Thank you guys so much for being here. How's the show going for you? >>Excellent so far. It's been a great, a great event. You know, back back to pre Covid days, >>You're still smiling day three. That's an awesome sign. John, what about you? >>Fantastic. It's, it's been busier than ever >>That that's exciting. I, I think we certainly feel that way here on the cube. We're doing dozens of videos, it's absolutely awesome. Just in case. So we can dig in a little deeper throughout the rest of the segment just in case the audience isn't familiar, let's get them acquainted with your companies. Let's start with do it John. >>Yeah, thanks Savannah. So do it as a global technology company and we're partnering with deleted cloud providers around the world and digital native companies to provide value and solve complexity. John, to your, to your introductory point with all of the complexities associated with operating in the cloud, scaling a business in the cloud, a lot of companies are just looking to sort of have somebody else take care of that problem for them or have somebody they can call when they run into, you know, into problems scaling. And so with a combination of tech, advanced technology, some of the best cloud experts in the world and unlimited tech support or we're offloading a lot of those problems for our customers and we're doing that on a global basis. So it's, it's an exciting time. >>I can imagine pretty much everyone here on the show floor is dealing with that challenge of complexity. So a couple customers for you in the house. What about you Danny? >>I, I come from a company which operates in a financial industry market. So we essentially a global broker, financial trading broker. Which what this means for those people who don't really understand, essentially we allow clients to be able to trade digitally and speculate with different pricing, pricing tools online. We offer a different products for different type of clients. We have institutional clients, we've got our affiliates, partners programs and we've got a retail clients and this is where AWS and Doit comes handy allows us to offer our products digitally across the globe. And one of the key values for us here is that we can actually offer a product in regions where other people don't. So for example, we don't compete in North America, we don't compete in EME in Europe, but we just do it in AWS to solve our complex challenges in regions that naturally by, depending on where they base, they have like issues and that's how we deliver our product. >>And which regions, Latin >>America, Latin, the entire Africa, subcontinent, middle East, southeast Asia, the culture is just demographic is different. And what you used to have here is not exactly what you have over there. And obviously that brings a lot of challenges with onboarding and clients, deposit, trading activities, CDN latency, all of >>That stuff. It's interesting how each region's different in their, their posture with the cloud. Someone roll their own, someone outta the box. So again, this brings up this theme this year guys, which is about end to end seeing purpose built like specialty solutions. A lot of solutions going end to end with data makes kind of makes it more complicated. So again, we got more complexity coming, but the greatest the cloud is, you can abstract that away. So we are seeing this is a big opportunity for partners to innovate. You're seeing a lot of joint engineering, a lot more complexities coming still, but still end to end is the end game so to speak. >>A absolutely John, I mean one, one of the sort of ways we describe what we try to do for our customers like Equinox is to be your co-pilot in the cloud, which essentially means, you know, >>What an apt analogy. >>I think so, yeah, >>Well, well >>Done there. I think it works. Yvanna. Yeah, so, so as I mentioned, these are the majority or almost all of our customers are pretty sophisticated tech savvy companies. So they don't, you know, they know for most, for the most part what they're trying to achieve. They're approaching scale, they're at scale or they're, or they're through that scale point and they, they just wanna have somebody they can call, right? They need technology to help abstract away the complex problem. So they're not doing so much manual cloud operational work or sometimes they just need help picking the next tech right to solve the end to end use case that that they're, that they're dealing with >>In business. And Danny, you're rolling out solutions so you're on, you're on the front lines, you gotta make it easier. You didn't want to get in the weeds on something that should be taken care of. >>Correct. I mean one of the reasons we go do it is you need to, in order to involve do it, you need to know your problems, understand your challenges, also like a self review only. And you have to be one way halfway through the cloud journey. You need to know your problems, what you want to achieve, where you want to end up a roadmap for the next five years, what you want to achieve. Are we fixing or developing a building? And then involve those guys to come and help you because they cannot just come with magic one and fix all your problems. You need to do that yourself. It's not like starting the journey by yourself. >>Yeah. One thing that's not played up in this event, I will say they may, I don't, they missed, maybe Verner will hit it tomorrow, but I think they kind of missed it a little bit. But the developer productivity's been a big issue. We've seen that this year. One of the big themes on the cube is developer productivity, more velocity on the development side to keep pace with what's on, what solutions are rolling out the customers. And the other one is skills gap. So, and people like, and people have old skills, like we see VMware being bought by Broadcom for instance, got a lot of IT operators at VMware, they gotta go cloud somewhere. So you got new talent, existing talent, skill gaps, people are comfortable, yet the new stuff's there, developers gotta be more productive. How do you guys see that? Cuz that's gonna be how that plays now, it's gonna impact the channel, the partnership relationship, your ability to deliver. >>What's your reaction to that first? Well I think we obviously have a tech savvy team. We've got developers, we've got dev, we've got infrastructure guys, but we only got so much resource that we can afford. And essentially by evolving due it, I've doubled our staff. So we got a tech savvy senior solution architects which comes to do the sexy stuff, actually develop and design a new better offering, better product that makes us competitive. And this is where we involved, essentially we use the due IT staff as an staff employees that our demand is richly army of qualified people. We can actually cherry pick who we want for the call to do X, Y, and Z. And they're there to, to support you. We just have to ask for help. And this is how we fill our gap from technical skills or budget constrained within, you know, within recruitment. >>And I think, I think what, what Danny is touching on, John, what you mentioned is, is really the, the sort of the core family principle of the company, right? It's hard enough for companies like Equinox to hire staff that can help them build their business and deliver the value proposition that they're, that they see, right? And so our reason for existence is to sort of take care of the rest, right? We can help, you know, operate your cloud, show you the most effective way to do that. Whether they're finops problems, whether they're DevOps problems, whether dev SEC ops problems, all of these sort of classic operational problems that get 'em the way of the core business mission. You're not in the business of running the cloud, you're in the business of delivering customer value. We can help you, you know, manage your cloud >>And it's your job to do it. >>It is to do it >>Can, couldn't raise this upon there. How long have y'all been working together? >>I would say 15 months. We took, we took a bit of a conservative approach. We hope for the baseball, prepare for the worst. So I didn't trust do it. I give them one account, start with DEF U A C because you cannot, you just have to learn the journey yourself. So I think I would, my advice for clients is give it the six months. Once you establish a relationship, build a relationship, give them one by one start slowly. You actually understand by yourself the skills, the capacity that they have. And also the, for me consultants is really important And after that just opens up and we are now involving them. We've got new project, we've got problem statement. The first thing we do, we don't Google it, we just say do it. Log a ticket, we got the team. You're >>A verb. >>Yeah. So >>In this case we have >>The puns are on list here on the Cuban general. But with something like that, it's great. >>I gotta ask you a question cuz this is interesting John. You know, we talked last year on the cube and, and again this is an example of how innovations playing out. If you look at the announcements, Adam Celski did and then sw, he had 13 or so announcements. I won't say it's getting boring, but when you hear boring, boring is good. When you start getting into these, these gaps in the platforms as it grows. I won't say they was boring cause that really wasn't boring. I like the data >>Itself. It's all fascinating, John, >>But it, but it's a lot of gap filling, you know, 50 connectors you got, you know, yeah. All glue layers being built in AI's critical. The match cloud is there. What's the innovation? You got a lot of gaps being filled, boring is good. Like Kubernetes, we say there boring means, it's being invisible. That means it's going away. What's the exciting things from your perspective in cloud here? >>Well, I think, I mean, boring is an interesting word to use cuz a company with the heritage of AWS is constantly evolving. I mean, at the core of that company's culture is innovation, technology, development and innovation. And they're building for builders as, as you know, just as well as I do. Yeah. And so, but what we find across our customer base is that companies that are scaling or at scale are using maybe a smaller set of those services, but they're really leveraging them in interesting ways. And there is a very long tail of deeper, more sophisticated fit for purpose, more specific services. And Adam announced, you know, who knows him another 20 or 30 services and it's happening year after year after year. And I think one of the things that, that Danny might attest to is, I, I spoke about the reason we exist and the reason we form the company is we hold it very, a very critical part of our mission is to stay abreast of all of those developments as they emerge so that Danny and and his crew don't have to, right? And so when they have a, a, a question about SageMaker or they have a question about sort of the new big data service that Adam has announced, we take it very seriously. Our job is to be able to answer that question quickly and >>Accurately. And I notice your shirt, if you could just give a little shirt there, ops, cloud ops, DevOps do it. The intersection of the finance, the tuning is now we're hearing a lot of price performance, cost recovery, not cost recovery, but cost management. Yeah. Optimizing. So we're seeing building scale, but now, now tuning almost a craft, the craft of the cloud is here. What's your reaction to that? It, >>It absolutely is. And this is a story as old as the cloud, honestly. And companies, you know, they'll, they'll, companies tend to follow the same sort of maturity journey when they first start, whether they're migrating to the cloud or they were born in the cloud as most of our customers are. There's a, there's a, there's an, there's an access to visibility and understanding and optimization to tuning a craft to use your term. And, and cost management truly is a 10 year old problem that is as prevalent and relevant today as it was, you know, 10 years ago. And there's a lot of talk about the economics associated with the cloud and it's not, certainly not always cheaper to run. In fact, it rarely is cheaper to run your business from any of the public cloud providers. The key is to do it and right size it and make sure it's operating in accordance and alignment with your business, right? It's okay for cloud process to go up so long as your top line is also >>Selling your proportion. You spend more cloud to save cloud. That's it's >>Penny wise, pound full. It's always a little bit, always a little bit of a, of a >>Dilemma on, on the cost saving. We didn't want to just save money. If you want to save money, just shut down your services, right? So it's about making money. So this is where do it comes, like we actually start making, okay, we spend a bit more now, but in about six months time I will be making more money. And we've just did that. We roll out the new application for all the new product offering host to AWS fully with the guys support, a lot of long, boring, boring, boring calls, but they're productive because we actually now have a better product, competitive, it's tailored for our clients, it's cost effective. And we are actually making money >>When something's invisible. It's working, you know, talking about it means it's, it's, it's operational. >>It's exactly, it's, >>Well to that point, John, one of the things we're most proud of in, you know, know this year was, was the launch of our product we called Flex Save, which essentially does exactly what you've described. It's, it's looking for automation and, and, and, and automatic ways of, yes. Saving money, but offering the opportunities to, to to improve the economics associated with your cloud infrastructure. >>Yeah. And improving the efficiency across the board. A hundred percent. It, it's, oh, it's awesome. Let's, and, and it's, it's my understanding there's some reporting and insights that you're able to then translate through from do it to your CTO and across the company. Denny, what's that like? What do you get to see working >>With them? Well, the problem is, like the CTO asked me to do all of that. It is funny he thinks that he's doing it, but essentially they have a excellent portal that basically looks up all of our instances on the one place. You got like good analytics on your cost, cost, anomalies, budget, costal location. But I didn't want to do that either. So what I have done is taken the next step. I actually sold this to the, to my company completely. So my finance teams goes there, they do it themselves, they log in, check, check, all the billing, the costal location. I actually has zero iteration with them if I don't hear anything from them, which is one of the benefits. But also there is lot of other products like the Flexe is virtually like you just click a finger and you start saving money just like that. Easy >>Is that easy button we've been talking about on >>The show? Yeah, exactly, exactly how it is. But there is obviously outside of the cost management, you actually can look at what is the resource you using do actually need it, how often you use it, think about the long term goal, what you're trying to achieve, and use the analytics to, and actually I have to say the analytics much better than AWS in, in, in, in cmp. It's, it's just more user friendly, more interactive as opposed to, you know, building the one in aws. >>It's good business model. Make things easy for your customers. Easy, simple >>To use. >>It's gotta be nice to hear John. >>Well, so first of all, thank you daddy. >>We, we work, but in all seriousness, you know, we, we work, Danny mentioned the trust word earlier. This is at the core of if we don't, if we're not able to build trust with our clients, our business is dead. It, it just doesn't exist. It can't scale. In fact, it'll go the opposite direction. And so we're, we work very, very hard to earn that trust and we're willing to start small to Danny's example, start small and grow. And that's why we're very, one of the things we're most proud of is, is how few customers tend to leave us year over year. We have customers that have been with us for 10 years. >>You know, Andy, Jesse always has, I just saw an interview, he was on the New York Times event in New York today as a CEO of Amazon. But he's always said in these build out phases, you gotta work backwards from the customer and innovate on behalf of the customer. Cause that's the answer that will always be a good answer for the outcome versus optimizing for just profit, you know what I'm saying? Or other things. So we're still in build out mode, >>You know, as a, as a, as a core fundamental sort of product concept. If you're not solving important problems for our customer, what are you, why, why are you investing? It just >>Doesn't make it. This is the beauty we do it. We actually, they wait for you to come to do the next step. They don't sell me anything. They don't bug me with emails. They're ready. When you're ready to make that journey, you just log a ticket and then come and help you. And this is the beauty. You just, it's just not your, your journey. >>I love it. That's a, that's a beautiful note to lead us to our new tradition on the cube. We have a little bit of a challenge for the both of you. We're looking for your 32nd Instagram real thought leadership sizzle anecdote. Either one of you wanna go first. John looks a little nauseous. Danny, you wanna give it a go? >>Well, we've got a few expressions, but we don't Google it. We just do it. And the key take, that's what we do now at, at, and also what we do is actually using their stuff as an influence employees richly. Like that's what we do. >>Well done, well done. Didn't even need the 30 seconds. Fantastic work, Danny. I love that. All right, John, now you do have to go. Okay, >>I'll goodness. You know, I'll, I'll, I'll, I'll I'll go back to what I mentioned earlier, if that's okay. I think we, you know, we exist as a company to sort of help our customers get back to focusing on why they started the business in the first place, which is innovating and delivering value to customers. And we'll help you take care of the rest. It's as simple as that. Awesome. >>Well done. You absolutely nailed it. I wanna just acknowledge your fan club over there watching. Hello everyone from the doit team. Good job team. I love, it's very cute when guests show up with an entourage to the cube. We like to see it. You obviously deserve the entourage. You're, you're both wonderful. Thanks again for being here on the show with Oh yeah, go ahead >>John. Well, I would just like to thank Danny for, for agreeing to >>Discern, thankfully >>Great to spend time with you. Absolutely. Let's do it. >>Thank you. Yeah, >>Yeah. Fantastic gentlemen. Well thank you all for tuning into this wonderful start to the afternoon here from AWS Reinvent. We are in Las Vegas, Nevada with John Furier. My name's Savannah Peterson, you're watching The Cube, the leader in high tech coverage.

(relaxing intro music) >> Welcome back to theCUBE's Coverage here live at reinvent 2022. We're here at the Executive Summit upstairs with the Accenture Set three sets broadcasting live four days with theCUBE. I'm John Furrier your host, with two great guests, cube alumnis, back Tanuja Randery, managing director Amazon web service for Europe middle East and Africa, known as EMEA. Welcome back to the Cube. >> Thank you. >> Great to see you. And Karthik Narain, who's the Accenture first cloud lead. Great to see you back again. >> Thank you. >> Thanks for coming back on. All right, so business transformation is all about digital transformation taken to its conclusion. When companies transform, they are now a digital business. Technologies powering value proposition, data security all in the keynotes higher level service at industry specific solutions. The dynamics of the industry are changing radically in front of our eyes for for the better. Karthik, what's your position on this as Accenture looks at this, we've covered all your successes during the pandemic with AWS. What, what do you guys see out there now as this next layer of power dynamics in the industry take place? >> I think cloud is getting interesting and I think there's a general trend towards specialization that's happening in the world of cloud. And cloud is also moving from a general purpose technology backbone to providing specific industry capabilities for every customer within various industries. But the industry cloud is not a new term. It has been used in the past and it's been used in the past in various degrees, whether that's building horizontal solutions, certain specialized SaaS software or providing capabilities that are horizontal for certain industries. But we see the evolution of industry cloud a little differently and a lot more dynamic, which is we see this as a marketplace where ecosystem of capabilities are going to come together to interact with a common data platform data backbone, data model with workflows that'll come together and integrate all of this stuff and help clients reinvent their industry with newer capabilities, but at the same time use the power of democratized innovation that's already there within that industry. So that's the kind of change we are seeing where customers in their strategy are going to implement industry cloud as one of the tenants as they go through their strategy. >> Yeah, and I see in my notes, fit for purposes is a buzzword people are talking about right size in the cloud and then just building on that. And what's interesting, Tanuja I want to get your thoughts because in the US we're one country, so yeah, integrating is kind of within services. You have purview over countries and these regions it's global impact. This is now a global environment. So it's not just the US North America, it's Latin America it's EMEA, this is another variable in the cross connecting of these fit for purpose. What's your view of the these industry specific solutions? >> Yeah, no and thanks Karthik 'cause I'm a hundred percent aligned. You know, I mean, you know this better than me, John, but 90% of workloads have not yet moved to the cloud. And the only way that we think that's going to happen is by bringing together business and IT. So what does that mean? It means starting with business use cases whether that's digital banking or smart connected factories or frankly if it's predictive maintenance or connected beds. But how do we take those use cases leverage them to really drive outcomes with the technology behind them? I think that's the key unlock that we have to get to. And very specifically, and Adam talked about this a lot today, but data, data is the single unifier for all of business and IT coming together to drive value, right? However, the issue is there's a ton of it, (John Furrier chuckling) right? In fact, fun fact if you put all the data that's going to be created over the next five years, which is more than the last 30 years, on a one terabyte little floppy, disk drive, remember those? Well that's going to be 15 round trips to the moon (John Furrier chuckling) and back. That's how much data it is. So our perspective is you got to unify, single data lake, you got to modernize with AI and ML, and then you're going to have to drive innovation on that. Now, I'll give you one tiny example if I may which I love Ryanair, big airline, 150 million passengers. They are also the largest supplier of ham and cheese sandwiches in the air. And catering at that scale is really difficult, right? If you have too much food wastage, sustainability issues, too little customers are really unhappy. So we work with them leveraging AWS cloud and AI ML to build a panini predictor. And in essence, it's taking the data they've got, data we've got, and actually giving them the opportunity to have just the right number of paninis. >> I love the lock and and the key is data to unlock the value. We heard that in the keynote. Karthik, you guys have been working together with AWS and a lot of successes. We've covered some of those on the cube. As you look at these industry solutions they're not the obvious big problems. They're like businesses, you know it could be the pizza shop it could be the dentist office, it could be any business any industry specific carries over. What is the key to unlock it? Is it the data? Is it the solution? What's that key? >> I think, you know the easier answer is all of the about, but like Tanuja said it all starts by bringing the data together and this is a funny thing. It's not creating new data. This data is there within enterprises. Our clients have these data the industries have the data, but for ages these data has been trapped in functional silos and organizations have been doing analytics within those functions. It's about bringing the data together whether that's a single data warehouse or a data mesh. Those are architectural considerations. But it's about bringing cross-functional data together as step one. Step two, is about utilizing the power of cloud for democratized innovation. It's no longer about one company trying to reinvent the wheel, or create a a new wheel within their enterprise. It's about looking around through the power of cloud marketplace to see if there's a solution that is already existing can we use that? Or if I've created something within my company can I use that as a service for others to use? So, the number one thing is using the power of democratized innovation. Second thing is how do you standardize and digitize functions that does not need to be reinvented every single time so that, you know, your organization can do it or you could use that or take that from elsewhere. And the third element is using the power of the platform economy or platforms to find new avenues of revenue opportunity, customer engagement and experiences. So these are all the things that differentiates organization, but all of this is underpinned by a unified data model that helps, you know, use all the (indistinct) there. >> Tanuja, you have mentioned earlier that not everyone has their journey of the cloud looks the same and certainly in the US and EMEA you have different countries and different areas. >> Yep. >> Their journeys are different. Some want speed and fees, some will roll their own. I mean data brick CEO, when I interviewed them that last week, they started database on a credit card swiped it and they didn't want any support. Amazon's knocking on their door saying, "you want support?" "No, we got it covered." Obviously they're from Berkeley and they're nerds, and they're cool. They can roll their own, but not everyone can. >> Yeah. >> And so you have a mix of customer profiles. How do you view that and what's your strategy? How do you get them over productive seeing that business value? What's that transformation look like? >> Yeah, John, you're absolutely right. So you've got those who are born in cloud, they're very savvy, they know exactly what they need. However, what I do find increasingly, even with these digital native customers, is they're also starting to talk business use cases. So they're talking about, "okay how do I take my platform and build a whole bunch of new services on top of that platform?" So, we still have to work with them on this business use case dimension for the next curve of growth that they want to drive. Currently with the global macroeconomic factors obviously they're also very concerned about profitability and costs. So that's one model. In the enterprise space, you have differences. >> Yeah. >> Right, You have the sort of very, very, very savvy enterprises, right? Who know exactly what they're looking for. But for them then it's about how do I lean into sustainability? In fact, we did a survey, and 77% of users that we surveyed said that they could accelerate their sustainably goals by using cloud. So in many cases they haven't cracked that and we can help them do that. So it's really about horses for courses there. And then, then with some other companies, they've done a lot of the basic infrastructure modernization. However, what they haven't been able to yet do is figure out how they're going to actually become a tech company. So I keep getting asked, can I become a tech company? How do I do that? Right? And then finally there are companies which don't have the skills. So if I go to the SMB segment, they don't always have the skills or the resources. And there using scalable market platforms like AWS marketplace, >> Yeah. >> Allows them to get access to solutions without having to have all the capabilities. So it really is- >> This is where partner network really kind of comes in. >> Absolutely. >> Huge value. Having that channel of solution providers I use that term specifically 'cause you're providing the solution for those folks. >> Yeah. Exact- >> And then the folks at the enterprise, we had a quote on the analyst segment earlier on our Cube, "spend more, save more." >> Yeah. >> That's the cloud equations, >> Yeah. because you're going to get it on sustainability you're going to save it on, you're going to save on cost recovery for revenue, time to revenue. So the cloud is the answer for a lot of enterprises out of the recession. >> Absolutely, and in fact, we need to lean in now you heard Adam say this, right? I mean the cost savings potential alone from on-prem to cloud is between 40 and 60 percent. Just that. But I don't think that's it John. >> The bell tightening he said is reigning some right size. Okay, but then also do more, he didn't say that, but analysts are generally saying, if you spend right on the cloud, you'll save more. That's a general thesis. >> Yeah. >> Do you agree with that? >> I absolutely think so. And by the way, usage is, people use it differently as they get smarter. We're constantly working with our customers by the way though, to continuously cost optimize. So you heard about our Graviton3 instances for example. We're using that to constantly optimize, but at the same time, what are the workloads that you haven't yet brought over to the cloud? (John Furrier chuckling) And so supply chain is a great idea. Our health cloud initiative. So we worked with Accenture on the Accenture Health Insights platform, which runs on AWS as an example or the Goldman Sachs one last year, if you remember. >> I do >> The financial cloud. So those, those are some of the things that I think make it easier for people to consume cloud and reimagine their businesses. >> It's funny, I was talking with Adam and we had a little debate about what an ISV is and I talked to the CEO of Mongo. They don't see themselves on the ISV. As they grew up on the cloud, they become platforms, they have their own ISVs and data bricks and Snowflake and others are developing that dynamic. But there's still ISVs out there. So there's a dynamic of growth going on and the need for partners and our belief is that the ecosystem is going to start doubling in size we believe, because of the demand for purpose built or so out of the box. I hate to use that word "out of the box", but you know turnkey solutions that you can buy another one if it breaks. But use the building blocks if you want to build the foundation. That is more durable, more customizable. Do that if you can. >> Well, >> but- >> we've got a phenomenal, >> shall we talk about this? >> Yeah, go get into- >> So, we've built a five year vision together, Accenture and us. which is called Velocity and you'll be much better in describing it, but I'll give you the simple version of Velocity which is taking AWS powered industry solutions and bringing it to market faster, more repeatable and at lower cost. And so think about vertical solutions sitting on a horizontal accelerator platform able to be deployed making transformation less complex. >> Yeah. >> Karthik, weight in on this, because I've talked to you about this before. We've said years ago the horizontal scalability of the cloud's a beautiful thing but verticals where the ML works great too. Now you got ML in all aspects of it. Horizontal verticals here now. >> Yeah, Yeah, absolutely. Again, the power of this kind of platform that we are launching, by the way we're launching tomorrow we are very excited about it, is, create a platform- >> What are you launching tomorrow? Hold on, I got news out there. What's launching? >> We are going to launch a giant platform, which will help clients accelerate their journey to industry cloud. So that's going to happen tomorrow. So what this platform would provide is that this is going to provide the horizontal capabilities that will help clients bootstrap their launch into cloud. And once they get into cloud, they would be able to build industry solutions on this. The way I imagine this is create the chassis that you need for your industry and then add the cartridges, industry cartridges, which are going to be solutions that are going to be built on top of it. And we are going to do this across various industries starting from, you know, healthcare, life sciences to energy to, you know, public services and so on and so forth >> You're going to create a channel machine. A channel creation machine, you're going to allow people to build their own solutions on top of that platform. And that's launching tomorrow. Make sure we get the news on that. >> Exactly. And- >> Ah, No, >> Sorry, and we genuinely believe the power of industry cloud, if you think about it in the past to create a solution one had to be an ISV to create a solution. What cloud is providing for industry today in the concept of industry clouds, this, industry companies are creating industry solution. The best example is, along with, you know, AWS and Accenture, Ecopetrol, which is a leader in the energy industry, has created a platform, you know called Water Intelligence and Management platform. And through this platform, they are attacking the audacious goal of water sustainability, which is going to be a huge problem for humanity that everybody needs to solve. As part of this platform, the goal is to reduce, you know, fresh water usage by 66% or zero, you know, you know, impact to, you know, groundwater is going to be the goal or ambition of Ecopetrol. So all of this is possible because industry players want to jump to the bandwagon because they have all the toolkit of of the cloud that's available with which they could build a software platform with which they can power their entire industry. >> And make money and have a good business. You guys are doing great. Final word, partnership. Where's it go next? You're doing great. Put a plugin for the Accenture AWS partnership. >> Well, I mean we have a phenomenal relationship and partnership, which is amazing. We really believe in the power of three which is the GSI, the ISV, and us together. And I have to go back to the thing I keep focused on 90% of workloads not in cloud. I think together we can enable those companies to come into the cloud. Very importantly, start to innovate launch new products and refuel the economy. So I think- >> We'll have to check on that >> Very, very optimistic. >> We'll have to check on that number. >> That seems a little- >> You got to check on that number. >> 90 seems a little bit amazing. >> 90% of workloads. >> That sounds, maybe, I'd be surprised. Maybe a little bit lower than that. Maybe. We'll see. >> We got to start turning it. >> It's still a lot. >> (laughs) It's still a lot. >> A lot more. Still first, still early days. Thanks so much for the conversation Karthik great to see you again Tanuja, thanks for your time. >> Thank you, John. >> Congratulations, on your success. Okay, this is theCube up here in the executive summit. You're watching theCube, the leader in high tech coverage, we'll be right back with more coverage here, and the Accenture set after the short break. (calm outro music)

>>We're back at Supercomputing 22 in Dallas, winding down day four of this conference. I'm Paul Gillan, my co-host Dave Nicholson. We are talking, we've been talking super computing all week and you hear a lot about what's going on in the United States, what's going on in China, Japan. What we haven't talked a lot about is what's going on in Europe and did you know that two of the top five supercomputers in the world are actually from European countries? Well, our guest has a lot to do with that. Florian, bearish, I hope I pronounce that correctly. My German is, German is not. My strength is the operations director for price, ais, S B L. And let's start with that. What is price? >>So, hello and thank you for the invitation. I'm Flon and Price is a partnership for Advanced Computing in Europe. It's a non-profit association with the seat in Brussels in Belgium. And we have 24 members. These are representatives from different European countries dealing with high performance computing in at their place. And we, so far, we provided the resources for our European research communities. But this changed in the last year, this oral HPC joint undertaking who put a lot of funding in high performance computing and co-funded five PET scale and three preis scale systems. And two of the preis scale systems. You mentioned already, this is Lumi and Finland and Leonardo in Bologna in Italy were in the place for and three and four at the top 500 at least. >>So why is it important that Europe be in the top list of supercomputer makers? >>I think Europe needs to keep pace with the rest of the world. And simulation science is a key technology for the society. And we saw this very recently with a pandemic, with a covid. We were able to help the research communities to find very quickly vaccines and to understand how the virus spread around the world. And all this knowledge is important to serve the society. Or another example is climate change. Yeah. With these new systems, we will be able to predict more precise the changes in the future. So the more compute power you have, the better the smaller the grid and there is resolution you can choose and the lower the error will be for the future. So these are, I think with these systems, the big or challenges we face can be addressed. This is the climate change, energy, food supply, security. >>Who are your members? Do they come from businesses? Do they come from research, from government? All of the >>Above. Yeah. Our, our members are public organization, universities, research centers, compute sites as a data centers, but But public institutions. Yeah. And we provide this services for free via peer review process with excellence as the most important criteria to the research community for free. >>So 40 years ago when, when the idea of an eu, and maybe I'm getting the dates a little bit wrong, when it was just an idea and the idea of a common currency. Yes. Reducing friction between, between borders to create a trading zone. Yes. There was a lot of focus there. Fast forward to today, would you say that these efforts in supercomputing, would they be possible if there were not an EU super structure? >>No, I would say this would not be possible in this extent. I think when though, but though European initiatives are, are needed and the European Commission is supporting these initiatives very well. And before praise, for instance 2008, there were research centers and data centers operating high performance computing systems, but they were not talking to each other. So it was isolated praise created community of operation sites and it facilitated the exchange between them and also enabled to align investments and to, to get the most out of the available funding. And also at this time, and still today for one single country in Europe, it's very hard to provide all the different architectures needed for all the different kind of research communities and applications. If you want to, to offer always the latest technologies, though this is really hardly possible. So with this joint action and opening the resources for other research groups from other countries, you, we, we were able to, yeah, get access to the latest technology for different communities at any given time though. And >>So, so the fact that the two systems that you mentioned are physically located in Finland and in Italy, if you were to walk into one of those facilities and meet the people that are there, they're not just fins in Finland and Italians in Italy. Yeah. This is, this is very much a European effort. So this, this is true. So, so in this, in that sense, the geography is sort of abstracted. Yeah. And the issues of sovereignty that make might take place in in the private sector don't exist or are there, are there issues with, can any, what are the requirements for a researcher to have access to a system in Finland versus a system in Italy? If you've got a EU passport, Hmm. Are you good to go? >>I think you are good to go though. But EU passport, it's now it becomes complicated and political. It's, it's very much, if we talk about the recent systems, well first, let me start a praise. Praise was inclusive and there was no any constraints as even we had users from US, Australia, we wanted just to support excellence in science. And we did not look at the nationality of the organization, of the PI and and so on. There were quotas, but these quotas were very generously interpreted. So, and if so, now with our HPC joint undertaking, it's a question from what European funds, these systems were procured and if a country or being country are associated to this funding, the researchers also have access to these systems. And this addresses basically UK and and Switzerland, which are not in the European Union, but they were as created to the Horizon 2020 research framework. And though they could can access the systems now available, Lumi and Leono and the Petascale system as well. How this will develop in the future, I don't know. It depends to which research framework they will be associated or not. >>What are the outputs of your work at price? Are they reference designs? Is it actual semiconductor hardware? Is it the research? What do you produce? >>So the, the application we run or the simulation we run cover all different scientific domains. So it's, it's science, it's, but also we have industrial let projects with more application oriented targets. Aerodynamics for instance, for cars or planes or something like this. But also fundamental science like the physical elementary physics particles for instance or climate change, biology, drug design, protein costa, all these >>Things. Can businesses be involved in what you do? Can they purchase your, your research? Do they contribute to their, I'm sure, I'm sure there are many technology firms in Europe that would like to be involved. >>So this involving industry though our calls are open and is, if they want to do open r and d, they are invited to submit also proposals. They will be evaluated and if this is qualifying, they will get the access and they can do their jobs and simulations. It's a little bit more tricky if it's in production, if they use these resources for their business and do not publish the results. They are some, well, probably more sites who, who are able to deal with these requests. Some are more dominant than others, but this is on a smaller scale, definitely. Yeah. >>What does the future hold? Are you planning to, are there other countries who will be joining the effort, other institutions? Do you plan to expand your, your scope >>Well, or I think or HPC joint undertaking with 36 member states is quite, covers already even more than Europe. And yeah, clearly if, if there are other states interest interested to join that there is no limitation. Although the focus lies on European area and on union. >>When, when you interact with colleagues from North America, do you, do you feel that there is a sort of European flavor to supercomputing that is different or are we so globally entwined? No. >>So research is not national, it's not European, it's international. This is also clearly very clear and I can, so we have a longstanding collaboration with our US colleagues and also with Chap and South Africa and Canada. And when Covid hit the world, we were able within two weeks to establish regular seminars inviting US and European colleagues to talk to to other, to each other and exchange the results and find new collaboration and to boost the research activities. So, and I have other examples as well. So when we, we already did the joint calls US exceed and in Europe praise and it was a very interesting experience. So we received applications from different communities and we decided that we will review this on our side, on European, with European experts and US did it in US with their experts. And you can guess what the result was at the meeting when we compared our results, it was matching one by one. It was exactly the same. Recite >>That it, it's, it's refreshing to hear a story of global collaboration. Yeah. Where people are getting along and making meaningful progress. >>I have to mention you, I have to to point out, you did not mention China as a country you were collaborating with. Is that by, is that intentional? >>Well, with China, definitely we have less links and collaborations also. It's also existing. There, there was initiative to look at the development of the technologies and the group meet on a regular basis. And there, there also Chinese colleagues involved. It's on a lower level, >>Yes, but is is the con conversations are occurring. We're out of time. Florian be operations director of price, European Super Computing collaborative. Thank you so much for being with us. I'm always impressed when people come on the cube and submit to an interview in a language that is not their first language. Yeah, >>Absolutely. >>Brave to do that. Yeah. Thank you. You're welcome. Thank you. We'll be right back after this break from Supercomputing 22 in Dallas.

>>Hello >>Everyone and welcome back to Dallas where we're live from, Super computing. My name is Savannah Peterson, joined with my co-host David, and we have a rocket of a show for you this afternoon. The doctors are in the house and we are joined by nasa, ladies and gentlemen. So excited. Please welcome Dr. Dan Duffy and Dr. Bill Putman. Thank you so much for being here, guys. I know this is kind of last minute. How's it to be on the show floor? What's it like being NASA here? >>What's exciting? We haven't, we haven't been here for three years, so this is actually really exciting to come back and see everybody, to see the showroom floor, see the innovations that have happened over the last three years. It's pretty exciting. >>Yeah, it's great. And, and so, because your jobs are so cool, and I don't wanna even remotely give even too little of the picture or, or not do it justice, could you give the audience a little bit of background on what you do as I think you have one of the coolest jobs ever. YouTube bill. >>I, I appreciate that. I, I, I run high Performance Computing Center at NASA Goddard for science. It's high performance information technology. So we do everything from networking to security, to high performance computing, to data sciences, artificial intelligence and machine learning is huge for us now. Yeah, large amounts of data, big data sets, but we also do scientific visualizations and then cloud and commercial cloud computing, as well as on premises cloud computing. And quite frankly, we support a lot of what Bill and his team does. >>Bill, why don't you tell us what your team >>Does? Yeah, so I'm a, I'm an earth scientist. I work as the associate chief at the global modeling assimilation office. And our job is to really, you know, maximize the use of all the observations that NASA takes from space and build that into a coherent, consistent physical system of the earth. Right? And we're focused on utilizing the HC that, that Dan and the folks at the nccs provide to us, to the best of our abilities to integrate those observations, you know, on time scales from hours, days to, to seasonal to to monthly time scales. That's, that's the essence of our focus at the GMA o >>Casual modeling, all of NASA's earth data. That, that in itself as a sentence is pretty wild. I imagine you're dealing with a ton of data. >>Oh, massive amounts of data. Yes, >>Probably, I mean, as much as one probably could, now that I'm thinking about it. I mean, and especially with how far things have to travel. Bill, sticking with you, just to open us up, what technology here excites you the most about the future and that will make your job easier? Let's put it that way. >>To me, it's the accelerator technologies, right? So there's the limited, the limiting factor for, for us as scientists is how fast we can get an answer. And if we can get our answer faster through accelerated technologies, you know, with the support of the, of the nccs and the computing centers, but also the software engineers enabling that for us, then we can do more, right. And push the questions even further, you know, so once we've gotten fast enough to do what we want to do, there's always something next that we wanna look for. So, >>I mean, at nasa you have to exercise such patience, whether that be data, coming back, images from a rover, doesn't matter what it is. Sometimes there's a lot of time, days, hours, years, depending on the situation. Right? I really, I really admire that. What about you, Dan? What's got you really excited about the future here? So >>Bill talked about the, the accelerated technology, which is absolutely true and, and, and is needed to get us not to only to the point where we have the compute resources to do the simulations that Bill wants to do, and also do it in a energy efficient way. But it's really the software frameworks that go around that and the software frameworks, the technology that dealing with how to use those in an energy efficient and and most efficient way is extremely important. And that's some of the, you know, that's what I'm really here to try to understand better about is how can I support these scientists with not just the hardware, but the software frameworks by which they can be successful. >>Yeah. We've, we've had a lot of kind of philosophical discussion about this, the difference between the quantitative increases in power in computing that we're seeing versus the question of whether or not we need truly qualitative changes moving forward. Where do you see the limits of, of, of, you know, if you, if you're looking at the ability to gather more data and process more data more quickly, what you can do with that data changes when you're getting updates every second versus every month seems pretty obvious. Is there a, is there, but is there, is there a near term target that you have specifically where once you reach that target, if you weren't thinking ahead of that target, you'd kind of be going, Okay, well we solved that problem, we're getting the data in so fast that you can, you can ask me, what is the temperature in this area? And you can go, Oh, well, huh, an hour ago the data said this. Beyond that, do you need a qualitative change in our ability to process information and tease insight into out of chaos? Or do you just need more quantity to be able to get to the point where you can do things like predict weather six months in advance? What are, what are your thoughts on that? Yeah, >>It's an interesting question, right? And, and you ended it with predicting whether six months in advance, and actually I was thinking the other way, right? I was thinking going to finer and finer scales and shorter time scales when you talk about having data more frequently, right? So one of the things that I'm excited about as a modeler is going to hire resolution and representing smaller scale processes at nasa, we're, we're interested in observations that are global. So our models are global and we'd like to push those to as fine a resolution as possible to do things like severe storm predictions and so forth. So the faster we can get the data, the more data we can have, and that area would improve our ability to do that as well. So, >>And your background is in meteorology, right? >>Yes, I'm a meteorologist. >>Excellent. Okay. Yeah, yeah, >>Yeah. So, so I have to ask a question, and I'm sure all the audience cares about this. And I went through this when I was talking about the ghost satellites as well. What, what is it about weather that makes it so hard to predict? >>Oh, it's the classic chaos problem. The, the butterfly effects problem, and it's just true. You know, you always hear the story of a butterfly in Africa flaps, its rings and wings, and the weather changes in, in New York City, and it's just, computers are an excellent example of that, right? So we have a model of the earth, we can run it two times in a row and get the exact same answer, but if we flip a bit somewhere, then the answer changes 10 days later significantly. So it's a, it's a really interesting problem. So, >>Yeah. So do you have any issue with the fact that your colleague believes that butterflies are responsible for weather? No, I does that, does that, is it responsible for climate? Does that bother you at all? >>No, it doesn't. As a matter of fact, they actually run those butterfly like experi experiments within the systems where they do actually flip some bits and see what the uncertainties are that happen out 7, 8, 9 days out in advance to understand exactly what he's saying, to understand the uncertainties, but also the sensitivity with respect to the observations that they're taking. So >>Yeah, it's fascinating. It is. >>That is fascinating. Sticking with you for a second, Dan. So you're at the Center for Climate Simulation. Is that the center that's gonna help us navigate what happens over the next decade? >>Okay, so I, no one center is gonna help us navigate what's gonna happen over the next decade or the next 50 or a hundred years, right. It's gonna be everybody together. And I think NASA's role in that is really to pioneer the, the, the models that that bill and others are doing to understand what's gonna happen in not just the seasonal sub, but we also work with G, which is the God Institute for Space Studies. Yeah. Which does the decatal and, and the century long studies. Our, our job is to really help that research, understand what's happening with the client, but then feed that back into what observations we need to make next in order to better understand and better quantify the risks that we have to better quantify the mitigations that we can make to understand how and, and, and affect how the climate is gonna go for the future. So that's really what we trying to do. We're trying to do that research to understand the climate, understand what mitigations we can have, but also feedback into what observations we can make for the future. >>Yeah. And and what's the partnership ecosystem around that? You mentioned that it's gonna take all of us, I assume you work with a lot of >>Partners, Probably both of you. I mean, obviously the, the, the federal agencies work huge amounts together. Nasa, Noah is our huge partnerships. Sgs, a huge partnerships doe we've talked to doe several times this, so this, this this week already. So there's huge partnerships that go across the federal agency. We, we work also with Europeans as much as we can given the, the, the, you know, sort of the barriers of the countries and the financials. But we do collaborate as much as we can with, And the nice thing about NASA, I would say is the, all the observations that we take are public, they're paid for by the public. They're public, everybody can down them, anybody can down around the world. So that's also, and they're global measurements as Bill said, they're not just regional. >>Do you have, do you have specific, when you think about improving your ability to gain insights from data that that's being gathered? Yeah. Do you set out specific milestones that you're looking for? Like, you know, I hope by June of next year we will have achieved a place where we are able to accomplish X. Yeah. Do you, do you, Yeah. Bill, do you put, what, >>What milestones do we have here? So, yeah, I mean, do you have >>Yeah. Are, are you, are you sort of kept track of that way? Do you think of things like that? Like very specific things? Or is it just so fluid that as long as you're making progress towards the future, you feel okay? >>No, I would say we absolutely have milestones that we like to keep in track, especially from the modeling side of things, right? So whether it's observations that exist now that we want to use in our system, milestones to getting those observations integrated in, but also thinking even further ahead to the observations that we don't have yet. So we can use the models that we have today to simulate those kind of observations that we might want in the future that can help us do things that we can do right now. So those missions are, are aided by the work that we do at the GBO and, and the nccs, but, >>Okay, so if we, if we extrapolate really to the, to the what if future is really trying to understand the entire earth system as best as we can. So all the observations coming in, like you said, in in near real time, feeding that into an earth system model and to be able to predict short term, midterm or even long term predictions with, with some degree of certainty. And that may be things like climate change or it may be even more important, shorter term effects of, of severe weather. Yeah. Which is very important. And so we are trying to work towards that high resolution, immediate impact model that we can, that we can, you know, really share with the world and share those results as best, as best we can. >>Yeah. I, I have a quick, I have a quick follow up on that. I I bet we both did. >>So, so if you think about AI and ml, artificial intelligence and machine learning, something that, you know, people, people talk about a lot. Yeah. There's the concept of teaching a machine to go look for things, call it machine learning. A lot of it's machine teaching we're saying, you know, hit, you know, hit the rack on this side with a stick or the other side with the stick to get it to, to kind of go back and forth. Do you think that humans will be able to guide these systems moving forward enough to tease out the insights that we want? Or do you think we're gonna have to rely on what people think of as artificial intelligence to be able to go in with this massive amount of information with an almost infinite amount of variables and have the AI figure out that, you know what, it was the butterfly, It really was the butterfly. We all did models with it, but, but you understand the nuance that I'm saying. It's like we, we, we think we know what all the variables are and that it's chaotic because there's so many variables and there's so much data, but maybe there's something we're not taking into >>A account. Yeah, I I, I'm, I'm, I'm sure that's absolutely the case. And I'll, I'll start and let Bill, Bill jump in here. Yeah, there's a lot of nuances with a aiml. And so the, the, the, the real approach to get to where we want to be with this earth system model approach is a combination of both AI ML train models as best as we can and as unbiased way as we can. And there's a, there's a big conversation we have around that, but also with a physics or physical based model as well, Those two combined with the humans or the experts in the loop, we're not just gonna ask the artificial intelligence to predict anything and everything. The experts need to be in the loop to guide the training in as best as we, as, as we can in an unbiased, equitable way, but also interpret the results and not just give over to the ai. But that's the combination of that earth system model that we really wanna see. The future's a combination of AI l with physics based, >>But there's, there's a, there's an obvious place for a AI and ML in the modeling world that is in the parameterizations of the estimations that we have to do in our systems, right? So when we think about the earth system and modeling the earth system, there are many things like the equations of motions and thermodynamics that have fixed equations that we know how to solve on a computer. But there's a lot of things that happen physically in the atmosphere that we don't have equations for, and we have to estimate them. And machine learning through the use of high resolution models or observations in training the models to understand and, and represent that, yeah, that that's the place where it's really useful >>For us. There's so many factors, but >>We have to, but we have to make sure that we have the physics in that machine learning in those, in those training. So physics informed training isn't very important. So we're not just gonna go and let a model go off and do whatever it wants. It has to be constrained within physical constraints that the, that the experts know. >>Yeah. And with the wild amount of variables that affect our, our earth, quite frankly. Yeah, yeah. Which is geez. Which is insane. My god. So what's, what, what technology or what advancement needs to happen for your jobs to get easier, faster for our ability to predict to be even more successful than it is currently? >>You know, I think for me, the vision that I have for the future is that at some point, you know, all data is centrally located, essentially shared. We have our applications are then services that sit around all that data. I don't have to sit as a user and worry about, oh, is this all this data in place before I run my application? It's already there, it's already ready for me. My service is prepared and I just launch it out on that service. But that coupled with the performance that I need to get the result that I want in time. And I don't know when that's gonna happen, but at some point it might, you know, I don't know rooting for you, but that's, >>So there are, there are a lot of technologies we can talk about. What I'd like to mention is, is open science. So NASA is really trying to make a push and transformation towards open science. 2023 is gonna be the year of open science for nasa. And what does that mean? It means a lot of what Bill just said is that we have equity and fairness and accessibility and you can find the data, it's findability, it's fair data, you know, a fair findability accessibility reproducibility, and I forget what the eye stands for, but these are, these are tools and, and, and things that we need to, as, as a computing centers and including all the HC centers here, as well as the scientists need to support, to be as transparent as possible with the data sets and the, and the research that we're doing. And that's where I think is gonna be the best thing is if we can get this data out there that anybody can use in an equitable way and as transparent as possible, that's gonna eliminate, in my opinion, the bias over time because mistakes will be found and mistakes will be corrected over time. >>I love that. Yeah. The open source science end of this. No, it's great. And the more people that have access people I find in the academic world, especially people don't know what's going on in the private sector and vice versa. And so I love that you just brought that up. Closing question for you, because I suspect there might be some members of our audience who maybe have fantasized about working at nasa. You've both been working there for over a decade. Is it as cool as we all think of it? It is on the outside. >>I mean, it's, it's definitely pretty cool. >>You don't have to be modest about it, you know, >>I mean, just being at Goddard and being at the center where they build the James web web telescope and you can go to that clean room and see it, it's just fascinating. So it, it's really an amazing opportunity. >>Yeah. So NASA Goddard as a, as a center has, you know, information technologist, It has engineers, it has scientists, it has support staff, support team members. We have built more things, more instruments that have flown in this space than any other place in the world. The James Lab, we were part of that, part of a huge group of people that worked on James. We and James, we came through and was assembled in our, our, our clean room. It's one of the biggest clean rooms in, in, in the world. And we all took opportunities to go over and take selfies with this as they put those loveness mirrors on them. Yeah, it was awesome. It was amazing. And to see what the James we has done in such a short amount of time, the successes that they've gone through is just incredible. Now, I'm not a, I'm not a part of the James web team, but to be a, to be at the same center, to to listen to scientists like Bill talk about their work, to listen to scientists that, that talk about James, we, that's what's inspiring. And, and we get that all the time. >>And to have the opportunity to work with the astronauts that service the, the Hubble Telescope, you know, these things are, >>That's literally giving me goosebumps right now. I'm sitting over >>Here just, just an amazing opportunity. And woo. >>Well, Dan, Bill, thank you both so much for being on the show. I know it was a bit last minute, but I can guarantee we all got a lot out of it. David and I both, I know I speak for us in the whole cube audience, so thank you. We'll have you, anytime you wanna come talk science on the cube. Thank you all for tuning into our supercomputing footage here, live in Dallas. My name is Savannah Peterson. I feel cooler having sat next to these two gentlemen for the last 15 minutes and I hope you did too. We'll see you again soon.

>>Hey everyone, welcome to this Cube's special program series Women of the Cloud, brought to you by aws. I'm your host for the series, Lisa Martin. Very pleased to be joined by Patty Jordan, the VP of enabling processes and technology at Optimus. My next guest, Patty, welcome to the program. >>Hi Lisa. Thank you for having me. >>Tell me a little bit about yourself, a little bit about your role so the audience gets that understanding of exactly who you are. >>Sure thing. Hi, my name is Patty Jordan. As we mentioned, I am originally from Cameroon, Central Africa, but I was raised in the DC area. I'm called and what you call a bank brat. My father worked for an international organization, the the World Bank. Lived in, like I said, grew up in dc, moved to Austin, Texas about seven years ago. Been with Optum for the last nine years of my working career. And I've had multiple roles, but currently my role as is with the enabling technologies and processes, which means that I manage teams that support the platform of a lot of analytics products in Optum. >>Got it. All right. Bank Brett, that's a new one to me. I hadn't heard that. I love that you're a bank, Brit and proud of it. I can tell. Talk to me a little bit about your, the career path that you have navigated and what are some of your sort of tactical and also strategic recommendations for the audiences looking to grow their career in tech? >>So the interesting thing is, I did not start in tech. My background is as an economist. I have a bachelor's of economics from the women, from the College of Women, Mary. I also have a financial master's in public policy from American University. However, I did take some IT classes and as a kid I'm probably dating myself a little bit, but I programmed in dos, so I, I was always excited by it and I had internships as a programmer that helped me pay for my master's degree in when I graduated. I just felt like I was having fun and I was getting paid very well and I was able to pay off my graduate schools. So I just stayed with tech. >>Love that. But it sounds like you had that interest from when you were quite young and as a lot of us and end up in tech, we didn't start there originally. There's a lot of zigzaggy paths to get there. Sounds like you had that as well. What are some of your recommendations for people, either those that are in tech now or aren't who want to get into it and really expand and climb that ladder? >>So definitely, so one of the things to understand is tech could be many different things. Like one of the things could be programming, which I started doing and now dislike intensely. And then another thing could be like being in the business analyst in tech, getting the business requirements versus product management or even, you know, management. And what I would encourage people to do is really focus on what you feel happy doing, which for me is problem solving and collaborating and getting the right people together to solve very complex problems. And if you focus on that then you'll find your, your the role for you even in tech. >>I love that problem solving is such an important skill to be able to have and to cultivate regardless of the industry that you're in. But I'd love to know a little bit more about some of the successes that you've had helping organizations really navigate their cloud journeys, their migration to cloud as we've seen the last couple of years, a massive acceleration to the cloud that was really born outta the pandemic. Talk to me about some of the successes that you've been able to achieve. >>So the first, I guess most obvious thing is understanding the technology. What do you have at your disposal? What do you need for your team to succeed in the cloud or even OnPrem? But what I've learned most in the last four to five years with the projects that I work on, whether it was migrating from a host data center to one that we owned ourselves or migrating from that data center to AWS recently was you really need to get the business organization engaged. And that's not just getting the sponsorship and getting them this to write that check, but really helping them understand how this journey to the cloud is a combined journey between both organizations, right? And they will be able to be more successful as well with us going to the cloud with improved processing with revenue protection because we, there's more tools available with revenue expansion because now we can now expand faster address client needs faster. And you know, so there's various different aspects of going to cloud that are more than just we're using the coolest technology. >>You're a problem solver, has there. And one of the challenges with organizations and from a cloud migration standpoint that we often talk about is it's a cultural migration as well, which is really challenging to do for any type of organization regardless of industry. Do you have a favorite example where as a, as the problem solver, you came in and really helped the organization, the business side understand, be able to transform their cultural direction, understand why cloud migration can be such a facilitator of the business from the top line in a bottom line perspective. >>So from a bottom line perspective, I think the hardest thing for them to understand or what does not compute for them is you can't give them a set. This is what you're gonna cost in the cloud, right? Because the benefit of being in the cloud is being able to scale shrink, et cetera. So that's one hurdle that we're still fighting to be a hundred percent candid. But from a a top line perspective, what's what's been great is we've been able to ramp up more clients with the same, right? So we haven't had to go out and procure more servers, more storage, hire more staff because we're in the cloud and we've actually been able to scale our teams as well because we incorporated the DevOps functions and we do not need a team to manage a data center anymore. So that they absolutely understood, you know, savings ratified, but really just how do we get to market faster? How do we get to revenue faster and how do we get more revenue with the same pool of resources is something that they've really, really resonated with. >>Well, you're starting to speak their language so that to your point that resonates well, but there's so much productivity improvements, efficiencies to be gained by leveraging cloud computing that that really hit the bottom line of an organization that businesses, if you put it in the right way. And it sounds like as the problem solver you have, they understand the immense value and competitive advantage that cloud can bring to their organization and become sort of a ah, the blinders are off. I get it. >>Exactly. Exactly. You're just not trying to, to play with the latest toys, you are actually solving a business problem even before it happens. >>And that's the key solving business problems before they happen. Being able to predict and forecast is huge for businesses, especially as we've seen the last couple of years. Everybody racing to digital, to to pivot, to survive Now to be competitive. If they don't do that and embrace that emerging technology suite, there's a competitor that's right back here that if they're more culturally willing and able to, to be more agile, they're gonna take the place of a competing organization. So yeah, so it absolutely is a huge differentiator for organizations. And it sounds like you've had some great successes there in helping organizations really navigate the challenges, the cultural challenges, but the benefits of cloud computing. Yes. I do wanna talk to you a little bit about in your expertise, diversity is something that is talked about in every industry. We talk about it in tech all the time, there's still challenges there. What are, what's, what are your thoughts on diversity? What are you seeing and what are some of those challenges that are still sitting on the table? >>So I guess the first thing I would say is there's multiple facets to diversity, right? The first one we always lean to is gender and race, but there's also diversity of thought. And being in the healthcare industry is very important for us to have a diversity of thought and experiences so that we can target a lot of these health equity issues that are, you know, that, that are ongoing. So that's one thing that we've, we've been trying to do is making sure that I don't just have people that think like me on the team. And typically that also means not having people that look like me. So making sure that we have the right pipelines to hire for partnering with our, with some of our vendors. AWS for example, is a good one where they had avenues and they had non-profits that they worked with and they connected us with some of our staff augmentation people also did the same thing, really just expanding the scope of where we're looking for talent and, and that helps also bring that diversity of thought and the diversity of gender race into the, into the full >>It is. And it and, and there's also, there's so much data if we follow the data and of course in tech we're all about data. Every company these days, regardless of industry needs to be a data company. If we follow the data, we can see that organizations with, for example, females within the C-suite are far more profitable than those organizations that don't have that even that element of diversity. So the data is demonstrating there's tremendous business value, tremendous competitive advantage, faster time to market, more products and services that can be delivered if there is thought diversity among the entire organization, not just the C-suite. >>Exactly. And and since we have an impact on what is being delivered as an engineering organization, we also need that in engineering, right? One of the things that's very keen right now is machine language and ai. If we don't have the right models for example, then we either introduced bias or perpetuate by it. So we definitely need people on our teams as well that understand how these technologies work, how we can leverage 'em on our data sets so that we could run counter to this bias >>And countering that bias is incredibly important. Machine learning ai, so driven by data, the volumes of data, but the data needs to be as clean and and non-biased as possible. And that's a big challenge for organizations to undertake. Is there advice that you have for those folks watching who might be, I, I don't see me in this organization, I don't feel represented. How can I change that? >>Well, one would be to speak up, right? Even if you don't see you apply for the job, right? And one of the things that we're trying to address even in the DEI space is making sure that our job descriptions are not introducing any biases so that people will eliminate themselves immediately, right? But really just if you have the skill set and you feel like you can ramp up to the talent, then just apply for the job. Talk to somebody. You do have a network whether you realize it or not. So leverage that network. But really like there's this expression that my kid taught me saying, you miss a hundred percent of the shots you don't take, right? So if you don't try, you're not gonna make it by default. If you do try, there's a chance to make it right. At the very least, you build a connection with someone who can potentially help you down the line. >>That is one of my absolute favorite sayings. You miss a hundred percent of the shots that you don't take. So encouraging people to raise their hand there, there are stats, data, speaking of data we've been talking about that, that demonstrate that women are far less likely to apply for jobs like on LinkedIn for example, unless they need 100% of the job requirements, which we all know are quite stringent and not necessary in a lot of cases. So I love your advice of just try raise your hand, ask the question. All the can say is no. And at the end of the day, what is that? It's a word but can also be directional and and really guiding for people on their journey to wherever that, if it's an engineering, cloud, engineering, DevOps, whatever happen that happens to be, raise your hand the question. And to your point, you have a network, it is there, open that up. There's so much potential for people that just raise, I think that's to raise their hand and ask the question. >>And the corollary to that though is I would also encourage people who are in leader leadership roles to be strong allies, right? Like we need to be aware of what biases we might be introducing or candidates that we might be leaving on the table because we're being too stringent because we're not expanding our, our our search, right? So definitely that's something that I've started doing about five, six years old shortly after I moved to Austin, which I kind of beat myself up about not having done before, is really contributing to that community, helping out, being a mentor, being a coach, being a guide. Sometimes it's just reviewing somebody's resume. Other times it's talking to 'em about a role that I have and helping them map their current state to that role. But really just being an ally to everyone and anyone who wants to come into this space. >>I love that. I, and I have a feeling, Patty, that you're a great mentor and ally for those in your organization across organizations and those out there that may not know yet. Patty can be an ally for me. I'd love to get your take in our final minutes on a couple things. One, the, what's next in cloud from your perspective, the things that you've seen, what you've been able to achieve, and how do you see your role evolving in the industry at Optum? >>So what's next in cloud, and we've talked about that a lot, is data. How do we manage all this data? How do we catalog this data, how to reuse this data, how to reshift this data? We have data in various different environments. We're a multi-cloud company. So how do we make sure that we don't have the same data everywhere? Or even if we do, how do we reconcile that? So data, data, data, right? And from data, get to information so that we can monetize it and we can share it. So that's the, that's for me is really next step. I mean we, we know the applications that we can build, we know the analytics that we can build, but if we don't have the right data, we're limiting ourselves. So that's definitely one aspect that I know that we wanna drive. And as far as my role, I was fortunate enough to be provided with the leadership of development of a platform for analytics, which yes, involves data. >>So I'm very excited about this, right? Cuz that's, that's next level for me. I've been typically in roles that protect revenue in the DevOps and operations role. And now I'm in a revenue generating role and it has a shift in mindset. But I, I really appreciate it and I'm really taking everything I've learned up to now as a DevOps team. I knew when the bad things came. So now I'm trying to prevent, prevent my team from pushing bad things down the pipe, right? So I'm just really excited about what's, what's, what's to come because there's so many opportunities for improving the products that we build. And I'm so excited to be part of this platform. >>There are the, the horizon of opportunities is really endless, which is exciting. And to your point about data, like I mentioned, for every company, whether it's your grocery store, a retailer, the postal service has to become a data driven company. Cuz as consumers we expect that we bring that into our business lives and we expect to be able to transact in business as easily as we do on the consumer side. And that all requires organizations to not just have access to data, but to be able to build the right data infrastructure, toing insights to act on that, to feed the AI and ML models so that products services can get better, more personalized and meet the demands of the ever demanding consumer, which I know I, one of them. I wanna ask you one more final question and that is, what do you think some of the biggest challenges have been with, with respect to tech innovation in the workforce over the past five years? What are some of those things that, that you've seen that you think we're on the right track moving forward to eliminate some of these? >>That is a good question. I think one of the biggest challenges for me has been not to remain in the status quo, right? Like not to do something because it's what we've been doing, but being in the cloud allows us with so many opportunities where we can fail fast. That let's give it a shot, let's do a quick sprint, let's figure out whether it is a possibility or not. Eliminate it if it's not, and then keep moving, right? Like we don't have the same development methodology before that we had to do three months, five months, six months. You can iterate in two week chunks, get it done, confirm your, your statement or not, or negate it, but at the very least have an answer, right? So that for me is the biggest challenge. We're aware of the thinking we're just not doing. So it'd be very exciting when we, when we pivot from that and really start innovating because we have the time >>Innovating because we have the time, as I mentioned, you know, with the demand of consumers, whether it's consumer in, in on the personal side, business side, those demands are there. But the, the exciting thing is to your point, the innovations are there. The capabilities are there, the data is there. We have a lot of what we need to be able to take advantage of that. So it's gonna be exciting to see what happens over the next few years. Patty, it's been such a pleasure having you on the cube today. Thank you so much for joining. You are clearly a, a leader in terms of women in the cloud. We appreciate what you're doing, your insights, your recommendations, and your insights as to what you see in the future. You've been a great guest. Thank you so much for joining me today. >>Thank you for having me Lisa. >>My pleasure For Patty Jordan, I'm Lisa Martin. You're watching The Cubes coverage of Women of the Cloud, brought to you by aws, a special program series. We thank you so much for watching. Take care.

>>The Cube presents UI Path Forward five. Brought to you by UI Path. >>Welcome back to The Cube's, continuous coverage with day two of UI Path forward. Five. My name is Dave Ante. I'm here with my co-host Dave Nicholson. And you are watching The Cube. It's all about the robots, the automations, the transformations and beyond. Audi Gana is here. She's group executive at Vodacom and Niva is back. She's senior director of telecommunications industry for UiPath. Ladies, welcome to the Cube. >>I thank you very much. >>So Vodacom a leading telco in in Africa across the continent. Tell us more about the company. >>The company is a traditionally telecommunications company, but our vision 2025 is first to transition from being a telco to a technology company. So you'll find that a lot of the use cases that we've actually started embarking on, combined the combination of telco and FinTech. And we've got a lot of RPA bot also supporting the FinTech platform, which is quite a major step in our strategy. >>So, you know, it's interesting Mark Andreessen's famous comment, Every company's a software company. I like to think every company's a technology company, technology driven. So what does that actually mean for you? Is it like a split brain between FinTech? Cuz it's pretty clear that FinTech is always a highly, you know, technology oriented and telecom. Are they sort of together driving a, a technology business? How does that >>Work? It's, it's a, it's a converge use of the technology to add value to the customer. So what we wanna do is to get to the point where we have converged services where the Telecommunicate, cuz at the end of the day in the African market, you'll find that there's a lot of markets that are unbanked. So you find that a cell phone is a means of communication and a a mobile platform for the users. So it's a natural progression for our company to actually play in both spaces. And I think one of the things I find quite interesting is the levels of trust that a lot of citizens have in our financial platform. In that even some of the governments are paying social grants using the platform. And so it almost becomes, without the phones a lot of people cannot function type of scenario. >>Nevas is your role a global role? >>Yes, it is a global role. >>Okay. So it's interesting cause you're I think based down under, right? I am. Is that true? Okay. Obviously spent some time in, in, in the African continent. How are you, what are you seeing in terms of the, the trends in, in telecommunications that, and are you noticing there's gotta be differences across different regions? You know, a lot of times you hear, oh no, there's really kind of a global world out and I know it is, but telco seems to be one of the industries that has some uniqueness within the different breaches. What are you seeing? >>Look, we are privileged to work with more than 200 telecoms around the world. But clearly from a technology perspective, there are some regions that have embraced technology sooner than the others, particularly when it comes to automation. Now we do have use cases with all of them that we are, you know, the 200 we are working with. But the extent to which they become strategic partners, Varie is, you know, what I find is in, in the US we are doing a lot in the customer experience space with the telecoms in aj it's more back of house. And with telecoms like Vodacom, it's really strategic. You know, automation is being applied practically in every facet of work. And you know, sometimes that could be because the demand is just so great for connectivity, you know, at times there's a skills gap, but it does vary. But what's reassuring is that there is a journey and you know, at this event what I have seen is telecoms wanting to learn from other telecoms. And I must say Artie has been in huge demand. We did about 22 meetings yesterday with others wanting to know, which again is that strategic trend. >>Artie, my understanding is you've been at this for a while, this automation journey for quite some time and p i pass. Interesting. I mean it's a company that's founded in 2005 and kind of did sort of its own thing for a long time and then realized it had lightning in a bottle Yeah. For a mid last decade. But my understanding is you've seen it all. You've seen the, the legacy platforms. And so tell me about your personal journey with automation and then the companies. >>Okay, so there's the automation pre rpa, which was strangely enough, I come from banking, got a finance degree, did automated ations in one of the bigger banks. And somehow I transitioned. And I mean from a history perspective, the one of the previous platforms, which was the biggest one at the time, that's where I got to learn about rpa. And then there's another vendor that we then use in another company. So this is almost my third vendor that I'm experiencing in the RPA space. Having joined RPA space in 2015, apparently I'm kind of a veteran, >>So, So what are you seeing is what's the difference between, I mean let's call UI path, that was sort of a modern focus on simple to deploy. That's really how they get started when I first found them. How do you compare what UiPath has? And there are others, there are other modern platforms to sort of the legacy platforms. What's the >>Difference? I think it's the diversity and the applicability of the technology across multiple industries is something that still amazes me up until today. Because the kind of customers I've been meeting today, I, I would not, I met a guy who owns an ice cream company and I'm like, where would automation come in here? But he's actually quite a big customer of, of UiPath, you know. So I think that's one thing I appreciate. I think the ease of use, it has actually allowed for a lot of people to be part of the digital transformation. I think in the his, in the past technology has been seen as something that was a bit elite and that you needed to have X amount of skills and level of education. Whereas the RPA industry has almost bridged that gap in actually bringing along as many people in the journey in terms of digital transformation. And the fourth industrial revolution is now starting to become more inclusive >>Horizontal across industries. >>Yeah. >>So Vodacom headquartered in South Africa. Okay. But presence throughout the continent. Yes. I imagine that various geographies have various twists and quirks to them and different needs. But as a general premise, the African continent has led the rest of the world in terms of embracing these little mobile devices for the most mission. Critical from a personal perspective things, right? Yeah. So if you, if you're already trusting all of your finances and even interaction with your government from a financial perspective. Yeah. When you say technology platform technology is moving forward, what's more critical from that? Or how do you, how do you, how do you branch off from that? What are some of the other things that you can share with us that you're looking towards in the future that may, that that may trickle over here eventually? >>So I think what one of the things we started playing around with quite well is actually the convergence of machine learning, AI and rpa. You would find that a lot of research will tell you that this is the future of the automation and for us, we are actually living the future in that we have civil use cases that are actually extracting a lot of business value. Where we've realized that RPA in of itself, and this is obviously oversimplifying the technology is almost the unlimited hands on keyboards that you could ever have, right? And then machine learning and AI almost the becomes the unlimited brains. So when you then combine the tool, you almost have this strong technology that can revolutionize how we operate and service our customers. >>Well how do, how does that translate? Can you translate that into a user experience at this point? So I mean, we're talking about people who they, they have a motor license, they don't have a desktop computer at home. Yeah. This is their portal into the world. >>So you find that if you're speaking pure telco, and I'm obviously over simplifying there some nowhere an engineer, right? But I think at, at a very simplified level, there's a lot of legacy technology that is used in the telco space and you'll find that because of that, there's a lot of lack of integration. And you'll find that the reasons why a lot of customers call corners is because there's poor integration in a lot of instances. And it's, it's, it's, it's ad hoc. So it's not as if the system is failed completely. So what we've now done is to try and see how do we use machine learning to pick up on those anomalies on the network, right? And because each time something breaks, right, it's almost a fixed way to fix it and therefore the machine learning picking up there normally almost the hands over to the RPA bot to fix the problem within the network element. But that means is that from a customer experience perspective, instead of you actually realizing there's a problem, we've fixed it before you even know that there's a problem. And therefore, and as you can imagine, it means that you then call the course into less because now you don't have the reason to complain because we've proactively identified the problem and we proactively use RPA then to fix it. So we almost have the almost like a self-healing element in within the, the, the RPA AI space. >>You know, I think of, we don't talk about the data, we haven't talked about the data much this week. I think in many respects this industry is, is data industry. Our automation is all about what you can do with the data. You said unlimited hands, unlimited brains. Cuz to me you have unlimited data and a lot of times you just can't handle it. Yeah. So what's the data angle on all this? >>So firstly, I know a lot of people will say data is the new oil. No, >>Right? So I would never >>Say that. I always though, I think I always ask people if I give you a bucket of brain crude oil, right? What are you gonna do with it? Right? Right. And similar to data, right? So I want to almost equate data to that crude oil element, but if you don't know how to refine it, process it, get it to be reliable, it's very useless in of its natural sense. So I think one of the things we've realized is that leveraging of the analogy of the, the machine learning in the brain, if you are in the sales space, you forever trying to push new sales, right? And then chances are when a customer leaves you, you are almost in a reactor state. So, and I imagine a world where you could proactively identify a customer with the propensity to leave your company because a lot of customers don't just, they are situations where they'll be walking down the street competitor calls them, they leave, not because they were unhappy, but a lot of customers actually had several engagements with us that were not pleasant, whatever the definition is. >>So we then saw there was almost five types of attributes that resulted in customers leaving us. So what then that said was imagine if you are an account manager, right? And you got told UiPath P two I limited has experienced 1, 2, 3, 4. Right? Actually, please go engage with them because something is happening. It means that as an account manager, you are then equipped to have a meaningful engagement with the customer because you're saying, hi UiPath, I see you've had X amount of job calls and you've had x amount of complaints in our call center. What is happening is it could be, could be your network, maybe the tower where you are, do you, And then the conversation becomes so meaningful. And I think even during covid what we found is lot of customers started using less of our data, not because they were unhappy, but it became an affordability thing, right? >>Because this is a thousands and thousands of, of data elements and pieces around Yeah. About customer transactions. There's no way one human would be able to go through all of the data and make me meaningful decisions out of it. So we then found that some customers were complaining about affordability. So we then built another model that says if an account manager is talking to a customer and they're struggling from an affordability perspective, what's the next best offer you can make to your customer while you're engaging? And then if in, if, if now your UiPath takes up that offer, then you'd find that the bot does the post engagement provisioning on the system. Because now if you then said, I've only, I can only afford 10 lines, but only pay 10 gigs, but not 10 lines and 20 gigs, that is at least better than us losing the customer. >>Yeah. Right? And we offering them almost a downward migration type of situation. Then the bot does that on the system. So you would find that we almost playing in the space of a human, human centered, intelligent automation where machine learning becomes the brain, the person is amplified in how they operate at the customer. And then the RPA bot becomes the hands that executes on that. And as the account manager you focusing on engagement and convincing, which is really what people are great and selling as opposed to going through all of the pro cause VOCA is a lot of products. So as opposed to having a person going through the products and trying to find the best product for you, you know, so we, we are using machine learning to assist the >>Humans. I I mean in every, every interaction is consistent in that case. I know I sometimes have to call three or four times to find a professional that knows enough that can help me. Yes. Such a frustrating thing as a consumer. So you are, are you, you're attacking churn with automation. So we haven't even talked about how you guys are working together, your journey and all that stuff, but, but how are you guys working here? What are you, what are you doing? You know, in addition to what you just described with with ui. iPad? >>So I think my portfolio's quite wide. So I am, my team is in every single vertical in the organization from customer care to the consumer enterprise business units to finance technology, network compliance. And we do all of this in about six countries, right? So one of the things we've actually realized is that if we are looking at customer service, we wanted to understand why do customers call us? And I think I came from a point of ignorance because I'm not from telco, so I actually realized that if we're talking billing and finance revenue assurance, customers call us because we build them arly. But technically speaking it's our systems that there's something that resulted in the customer calling us. So why do we not know about our own systems? Why are we waiting for the customers to call us? And literally those are the questions I was asking cuz I felt like why are we, why are we waiting for the customers to call us? >>So we then then found a way to try and see within the billing systems where do the breakages happen, right? So that we fix them before the customer has to call us again. So then again from a billing perspective, it means that cuz it the billing element can come in two ways where we are giving you a service and not charging you for it. We then have revenue leakage or we, you are consuming something and we are overcharging you. Then you call us and say, Whatcom is stealing my data. Yeah, you're right out there. I promise you nobody wakes up in the morning and wants to take one gig of your data. So it almost becomes a day integrity initiative that results in good customer service but then result in eradication of course. As opposed to us waiting for customers to tell us what the problem is and trying to help them fast. Cuz that's generally always been what I've picked up the energy around customer service. How do we help you fast? I'm saying why must you call us when our systems had fail that? So we almost trying to see how do we use the technology internally to give customers a better experience and then also have the financial benefits that we are now starting to see happening in the, >>What's the scope of, of your like how many automations, how many bots? Can you give us a sense >>Of this? So right now I think we over on with all of the four, five countries that we are in, we over 400 bots. Wow. Okay. So we started in 2004 years ago, this is my fourth year in Voca. We, and we are not using just one product with UiPath. It became a platform because as we became across more kinds of problems, I think what I've appreciated about part is how we've actually created a partnership. Instead of them trying to sell me products for the sake of consuming products, it became a, this is my problem, right? And then somehow they would whip out the product that solves my problem type of thing. So it became a ecosystem of solutions that >>You must love hanging out with Artie. >>I absolutely do and love, you know, I've spent a career in telecommunications myself and you know, the best days were when you could deliver an outstanding customer experience. And as you can see from what Artie has achieved when you were more proactive and predictive, you can serve your customers so much more effectively and that just lift the morale of the team because we all, you know, have this purpose in doing our jobs. But this is automation and AI built into every part of that customer journey. So end to end, you know, the customer's much happier. You know there's a problem before the customer knows you can solve the problem in most cases before they even know. And that's just what we are all in business to do to make things better. >>Great story. Thank you so much for sharing. Appreciate coming back >>In the queue. Thank you very much. Thank >>You. Thank you for watching. Keep it right there. Don't forget, go to silicon angle.com, all the news, go to the cube.net. You'll see me all these videos are available on demand as well as the other events that we do. Dave VTE for Dave Nicholson. Keep it right there. Right back at forward five UI.

hello I'm John Furrier with thecube and welcome to this special presentation of the cube and Horizon 3.ai they're announcing a global partner first approach expanding their successful pen testing product Net Zero you're going to hear from leading experts in their staff their CEO positioning themselves for a successful Channel distribution expansion internationally in Europe Middle East Africa and Asia Pacific in this Cube special presentation you'll hear about the expansion the expanse partner program giving Partners a unique opportunity to offer Net Zero to their customers Innovation and Pen testing is going International with Horizon 3.ai enjoy the program [Music] welcome back everyone to the cube and Horizon 3.ai special presentation I'm John Furrier host of thecube we're here with Jennifer Lee head of Channel sales at Horizon 3.ai Jennifer welcome to the cube thanks for coming on great well thank you for having me so big news around Horizon 3.aa driving Channel first commitment you guys are expanding the channel partner program to include all kinds of new rewards incentives training programs help educate you know Partners really drive more recurring Revenue certainly cloud and Cloud scale has done that you got a great product that fits into that kind of Channel model great Services you can wrap around it good stuff so let's get into it what are you guys doing what are what are you guys doing with this news why is this so important yeah for sure so um yeah we like you said we recently expanded our Channel partner program um the driving force behind it was really just um to align our like you said our Channel first commitment um and creating awareness around the importance of our partner ecosystems um so that's it's really how we go to market is is through the channel and a great International Focus I've talked with the CEO so you know about the solution and he broke down all the action on why it's important on the product side but why now on the go to market change what's the what's the why behind this big this news on the channel yeah for sure so um we are doing this now really to align our business strategy which is built on the concept of enabling our partners to create a high value high margin business on top of our platform and so um we offer a solution called node zero it provides autonomous pen testing as a service and it allows organizations to continuously verify their security posture um so we our company vision we have this tagline that states that our pen testing enables organizations to see themselves Through The Eyes of an attacker and um we use the like the attacker's perspective to identify exploitable weaknesses and vulnerabilities so we created this partner program from a perspective of the partner so the partner's perspective and we've built It Through The Eyes of our partner right so we're prioritizing really what the partner is looking for and uh will ensure like Mutual success for us yeah the partners always want to get in front of the customers and bring new stuff to them pen tests have traditionally been really expensive uh and so bringing it down in one to a service level that's one affordable and has flexibility to it allows a lot of capability so I imagine people getting excited by it so I have to ask you about the program What specifically are you guys doing can you share any details around what it means for the partners what they get what's in it for them can you just break down some of the mechanics and mechanisms or or details yeah yep um you know we're really looking to create business alignment um and like I said establish Mutual success with our partners so we've got two um two key elements that we were really focused on um that we bring to the partners so the opportunity the profit margin expansion is one of them and um a way for our partners to really differentiate themselves and stay relevant in the market so um we've restructured our discount model really um you know highlighting profitability and maximizing profitability and uh this includes our deal registration we've we've created deal registration program we've increased discount for partners who take part in our partner certification uh trainings and we've we have some other partner incentives uh that we we've created that that's going to help out there we've we put this all so we've recently Gone live with our partner portal um it's a Consolidated experience for our partners where they can access our our sales tools and we really view our partners as an extension of our sales and Technical teams and so we've extended all of our our training material that we use internally we've made it available to our partners through our partner portal um we've um I'm trying I'm thinking now back what else is in that partner portal here we've got our partner certification information so all the content that's delivered during that training can be found in the portal we've got deal registration uh um co-branded marketing materials pipeline management and so um this this portal gives our partners a One-Stop place to to go to find all that information um and then just really quickly on the second part of that that I mentioned is our technology really is um really disruptive to the market so you know like you said autonomous pen testing it's um it's still it's well it's still still relatively new topic uh for security practitioners and um it's proven to be really disruptive so um that on top of um just well recently we found an article that um that mentioned by markets and markets that reports that the global pen testing markets really expanding and so it's expected to grow to like 2.7 billion um by 2027. so the Market's there right the Market's expanding it's growing and so for our partners it's just really allows them to grow their revenue um across their customer base expand their customer base and offering this High profit margin while you know getting in early to Market on this just disruptive technology big Market a lot of opportunities to make some money people love to put more margin on on those deals especially when you can bring a great solution that everyone knows is hard to do so I think that's going to provide a lot of value is there is there a type of partner that you guys see emerging or you aligning with you mentioned the alignment with the partners I can see how that the training and the incentives are all there sounds like it's all going well is there a type of partner that's resonating the most or is there categories of partners that can take advantage of this yeah absolutely so we work with all different kinds of Partners we work with our traditional resale Partners um we've worked we're working with systems integrators we have a really strong MSP mssp program um we've got Consulting partners and the Consulting Partners especially with the ones that offer pen test services so we they use us as a as we act as a force multiplier just really offering them profit margin expansion um opportunity there we've got some technology partner partners that we really work with for co-cell opportunities and then we've got our Cloud Partners um you'd mentioned that earlier and so we are in AWS Marketplace so our ccpo partners we're part of the ISP accelerate program um so we we're doing a lot there with our Cloud partners and um of course we uh we go to market with uh distribution Partners as well gotta love the opportunity for more margin expansion every kind of partner wants to put more gross profit on their deals is there a certification involved I have to ask is there like do you get do people get certified or is it just you get trained is it self-paced training is it in person how are you guys doing the whole training certification thing because is that is that a requirement yeah absolutely so we do offer a certification program and um it's been very popular this includes a a seller's portion and an operator portion and and so um this is at no cost to our partners and um we operate both virtually it's it's law it's virtually but live it's not self-paced and we also have in person um you know sessions as well and we also can customize these to any partners that have a large group of people and we can just we can do one in person or virtual just specifically for that partner well any kind of incentive opportunities and marketing opportunities everyone loves to get the uh get the deals just kind of rolling in leads from what we can see if our early reporting this looks like a hot product price wise service level wise what incentive do you guys thinking about and and Joint marketing you mentioned co-sell earlier in pipeline so I was kind of kind of honing in on that piece sure and yes and then to follow along with our partner certification program we do incentivize our partners there if they have a certain number certified their discount increases so that's part of it we have our deal registration program that increases discount as well um and then we do have some um some partner incentives that are wrapped around meeting setting and um moving moving opportunities along to uh proof of value gotta love the education driving value I have to ask you so you've been around the industry you've seen the channel relationships out there you're seeing companies old school new school you know uh Horizon 3.ai is kind of like that new school very cloud specific a lot of Leverage with we mentioned AWS and all the clouds um why is the company so hot right now why did you join them and what's why are people attracted to this company what's the what's the attraction what's the vibe what do you what do you see and what what do you use what did you see in in this company well this is just you know like I said it's very disruptive um it's really in high demand right now and um and and just because because it's new to Market and uh a newer technology so we are we can collaborate with a manual pen tester um we can you know we can allow our customers to run their pen test um with with no specialty teams and um and and then so we and like you know like I said we can allow our partners can actually build businesses profitable businesses so we can they can use our product to increase their services revenue and um and build their business model you know around around our services what's interesting about the pen test thing is that it's very expensive and time consuming the people who do them are very talented people that could be working on really bigger things in the in absolutely customers so bringing this into the channel allows them if you look at the price Delta between a pen test and then what you guys are offering I mean that's a huge margin Gap between street price of say today's pen test and what you guys offer when you show people that they follow do they say too good to be true I mean what are some of the things that people say when you kind of show them that are they like scratch their head like come on what's the what's the catch here right so the cost savings is a huge is huge for us um and then also you know like I said working as a force multiplier with a pen testing company that offers the services and so they can they can do their their annual manual pen tests that may be required around compliance regulations and then we can we can act as the continuous verification of their security um um you know that that they can run um weekly and so it's just um you know it's just an addition to to what they're offering already and an expansion so Jennifer thanks for coming on thecube really appreciate you uh coming on sharing the insights on the channel uh what's next what can we expect from the channel group what are you thinking what's going on right so we're really looking to expand our our Channel um footprint and um very strategically uh we've got um we've got some big plans um for for Horizon 3.ai awesome well thanks for coming on really appreciate it you're watching thecube the leader in high tech Enterprise coverage [Music] [Music] hello and welcome to the Cube's special presentation with Horizon 3.ai with Raina Richter vice president of emea Europe Middle East and Africa and Asia Pacific APAC for Horizon 3 today welcome to this special Cube presentation thanks for joining us thank you for the invitation so Horizon 3 a guy driving Global expansion big international news with a partner first approach you guys are expanding internationally let's get into it you guys are driving this new expanse partner program to new heights tell us about it what are you seeing in the momentum why the expansion what's all the news about well I would say uh yeah in in international we have I would say a similar similar situation like in the US um there is a global shortage of well-educated penetration testers on the one hand side on the other side um we have a raising demand of uh network and infrastructure security and with our approach of an uh autonomous penetration testing I I believe we are totally on top of the game um especially as we have also now uh starting with an international instance that means for example if a customer in Europe is using uh our service node zero he will be connected to a node zero instance which is located inside the European Union and therefore he has doesn't have to worry about the conflict between the European the gdpr regulations versus the US Cloud act and I would say there we have a total good package for our partners that they can provide differentiators to their customers you know we've had great conversations here on thecube with the CEO and the founder of the company around the leverage of the cloud and how successful that's been for the company and honestly I can just Connect the Dots here but I'd like you to weigh in more on how that translates into the go to market here because you got great Cloud scale with with the security product you guys are having success with great leverage there I've seen a lot of success there what's the momentum on the channel partner program internationally why is it so important to you is it just the regional segmentation is it the economics why the momentum well there are it's there are multiple issues first of all there is a raising demand in penetration testing um and don't forget that uh in international we have a much higher level in number a number or percentage in SMB and mid-market customers so these customers typically most of them even didn't have a pen test done once a year so for them pen testing was just too expensive now with our offering together with our partners we can provide different uh ways how customers could get an autonomous pen testing done more than once a year with even lower costs than they had with with a traditional manual paint test so and that is because we have our uh Consulting plus package which is for typically pain testers they can go out and can do a much faster much quicker and their pain test at many customers once in after each other so they can do more pain tests on a lower more attractive price on the other side there are others what even the same ones who are providing um node zero as an mssp service so they can go after s p customers saying okay well you only have a couple of hundred uh IP addresses no worries we have the perfect package for you and then you have let's say the mid Market let's say the thousands and more employees then they might even have an annual subscription very traditional but for all of them it's all the same the customer or the service provider doesn't need a piece of Hardware they only need to install a small piece of a Docker container and that's it and that makes it so so smooth to go in and say okay Mr customer we just put in this this virtual attacker into your network and that's it and and all the rest is done and within within three clicks they are they can act like a pen tester with 20 years of experience and that's going to be very Channel friendly and partner friendly I can almost imagine so I have to ask you and thank you for calling the break calling out that breakdown and and segmentation that was good that was very helpful for me to understand but I want to follow up if you don't mind um what type of partners are you seeing the most traction with and why well I would say at the beginning typically you have the the innovators the early adapters typically Boutique size of Partners they start because they they are always looking for Innovation and those are the ones you they start in the beginning so we have a wide range of Partners having mostly even um managed by the owner of the company so uh they immediately understand okay there is the value and they can change their offering they're changing their offering in terms of penetration testing because they can do more pen tests and they can then add other ones or we have those ones who offer 10 tests services but they did not have their own pen testers so they had to go out on the open market and Source paint testing experts um to get the pen test at a particular customer done and now with node zero they're totally independent they can't go out and say okay Mr customer here's the here's the service that's it we turn it on and within an hour you're up and running totally yeah and those pen tests are usually expensive and hard to do now it's right in line with the sales delivery pretty interesting for a partner absolutely but on the other hand side we are not killing the pain testers business we do something we're providing with no tiers I would call something like the foundation work the foundational work of having an an ongoing penetration testing of the infrastructure the operating system and the pen testers by themselves they can concentrate in the future on things like application pen testing for example so those Services which we we're not touching so we're not killing the paint tester Market we're just taking away the ongoing um let's say foundation work call it that way yeah yeah that was one of my questions I was going to ask is there's a lot of interest in this autonomous pen testing one because it's expensive to do because those skills are required are in need and they're expensive so you kind of cover the entry level and the blockers that are in there I've seen people say to me this pen test becomes a blocker for getting things done so there's been a lot of interest in the autonomous pen testing and for organizations to have that posture and it's an overseas issue too because now you have that that ongoing thing so can you explain that particular benefit for an organization to have that continuously verifying an organization's posture yep certainly so I would say um typically you are you you have to do your patches you have to bring in new versions of operating systems of different Services of uh um operating systems of some components and and they are always bringing new vulnerabilities the difference here is that with node zero we are telling the customer or the partner package we're telling them which are the executable vulnerabilities because previously they might have had um a vulnerability scanner so this vulnerability scanner brought up hundreds or even thousands of cves but didn't say anything about which of them are vulnerable really executable and then you need an expert digging in one cve after the other finding out is it is it really executable yes or no and that is where you need highly paid experts which we have a shortage so with notes here now we can say okay we tell you exactly which ones are the ones you should work on because those are the ones which are executable we rank them accordingly to the risk level how easily they can be used and by a sudden and then the good thing is convert it or indifference to the traditional penetration test they don't have to wait for a year for the next pain test to find out if the fixing was effective they weren't just the next scan and say Yes closed vulnerability is gone the time is really valuable and if you're doing any devops Cloud native you're always pushing new things so pen test ongoing pen testing is actually a benefit just in general as a kind of hygiene so really really interesting solution really bring that global scale is going to be a new new coverage area for us for sure I have to ask you if you don't mind answering what particular region are you focused on or plan to Target for this next phase of growth well at this moment we are concentrating on the countries inside the European Union Plus the United Kingdom um but we are and they are of course logically I'm based into Frankfurt area that means we cover more or less the countries just around so it's like the total dark region Germany Switzerland Austria plus the Netherlands but we also already have Partners in the nordics like in Finland or in Sweden um so it's it's it it's rapidly we have Partners already in the UK and it's rapidly growing so I'm for example we are now starting with some activities in Singapore um um and also in the in the Middle East area um very important we uh depending on let's say the the way how to do business currently we try to concentrate on those countries where we can have um let's say um at least English as an accepted business language great is there any particular region you're having the most success with right now is it sounds like European Union's um kind of first wave what's them yes that's the first definitely that's the first wave and now we're also getting the uh the European instance up and running it's clearly our commitment also to the market saying okay we know there are certain dedicated uh requirements and we take care of this and and we're just launching it we're building up this one uh the instance um in the AWS uh service center here in Frankfurt also with some dedicated Hardware internet in a data center in Frankfurt where we have with the date six by the way uh the highest internet interconnection bandwidth on the planet so we have very short latency to wherever you are on on the globe that's a great that's a great call outfit benefit too I was going to ask that what are some of the benefits your partners are seeing in emea and Asia Pacific well I would say um the the benefits is for them it's clearly they can they can uh talk with customers and can offer customers penetration testing which they before and even didn't think about because it penetrates penetration testing in a traditional way was simply too expensive for them too complex the preparation time was too long um they didn't have even have the capacity uh to um to support a pain an external pain tester now with this service you can go in and say even if they Mr customer we can do a test with you in a couple of minutes within we have installed the docker container within 10 minutes we have the pen test started that's it and then we just wait and and I would say that is we'll we are we are seeing so many aha moments then now because on the partner side when they see node zero the first time working it's like this wow that is great and then they work out to customers and and show it to their typically at the beginning mostly the friendly customers like wow that's great I need that and and I would say um the feedback from the partners is that is a service where I do not have to evangelize the customer everybody understands penetration testing I don't have to say describe what it is they understand the customer understanding immediately yes penetration testing good about that I know I should do it but uh too complex too expensive now with the name is for example as an mssp service provided from one of our partners but it's getting easy yeah it's great and it's great great benefit there I mean I gotta say I'm a huge fan of what you guys are doing I like this continuous automation that's a major benefit to anyone doing devops or any kind of modern application development this is just a godsend for them this is really good and like you said the pen testers that are doing it they were kind of coming down from their expertise to kind of do things that should have been automated they get to focus on the bigger ticket items that's a really big point so we free them we free the pain testers for the higher level elements of the penetration testing segment and that is typically the application testing which is currently far away from being automated yeah and that's where the most critical workloads are and I think this is the nice balance congratulations on the international expansion of the program and thanks for coming on this special presentation really I really appreciate it thank you you're welcome okay this is thecube special presentation you know check out pen test automation International expansion Horizon 3 dot AI uh really Innovative solution in our next segment Chris Hill sector head for strategic accounts will discuss the power of Horizon 3.ai and Splunk in action you're watching the cube the leader in high tech Enterprise coverage foreign [Music] [Music] welcome back everyone to the cube and Horizon 3.ai special presentation I'm John Furrier host of thecube we're with Chris Hill sector head for strategic accounts and federal at Horizon 3.ai a great Innovative company Chris great to see you thanks for coming on thecube yeah like I said uh you know great to meet you John long time listener first time caller so excited to be here with you guys yeah we were talking before camera you had Splunk back in 2013 and I think 2012 was our first splunk.com and boy man you know talk about being in the right place at the right time now we're at another inflection point and Splunk continues to be relevant um and continuing to have that data driving Security in that interplay and your CEO former CTO of his plug as well at Horizon who's been on before really Innovative product you guys have but you know yeah don't wait for a breach to find out if you're logging the right data this is the topic of this thread Splunk is very much part of this new international expansion announcement uh with you guys tell us what are some of the challenges that you see where this is relevant for the Splunk and Horizon AI as you guys expand uh node zero out internationally yeah well so across so you know my role uh within Splunk it was uh working with our most strategic accounts and so I looked back to 2013 and I think about the sales process like working with with our small customers you know it was um it was still very siled back then like I was selling to an I.T team that was either using this for it operations um we generally would always even say yeah although we do security we weren't really designed for it we're a log management tool and we I'm sure you remember back then John we were like sort of stepping into the security space and and the public sector domain that I was in you know security was 70 of what we did when I look back to sort of uh the transformation that I was witnessing in that digital transformation um you know when I look at like 2019 to today you look at how uh the IT team and the security teams are being have been forced to break down those barriers that they used to sort of be silent away would not commute communicate one you know the security guys would be like oh this is my box I.T you're not allowed in today you can't get away with that and I think that the value that we bring to you know and of course Splunk has been a huge leader in that space and continues to do Innovation across the board but I think what we've we're seeing in the space and I was talking with Patrick Coughlin the SVP of uh security markets about this is that you know what we've been able to do with Splunk is build a purpose-built solution that allows Splunk to eat more data so Splunk itself is ulk know it's an ingest engine right the great reason people bought it was you could build these really fast dashboards and grab intelligence out of it but without data it doesn't do anything right so how do you drive and how do you bring more data in and most importantly from a customer perspective how do you bring the right data in and so if you think about what node zero and what we're doing in a horizon 3 is that sure we do pen testing but because we're an autonomous pen testing tool we do it continuously so this whole thought I'd be like oh crud like my customers oh yeah we got a pen test coming up it's gonna be six weeks the week oh yeah you know and everyone's gonna sit on their hands call me back in two months Chris we'll talk to you then right not not a real efficient way to test your environment and shoot we saw that with Uber this week right um you know and that's a case where we could have helped oh just right we could explain the Uber thing because it was a contractor just give a quick highlight of what happened so you can connect the doctor yeah no problem so um it was uh I got I think it was yeah one of those uh you know games where they would try and test an environment um and with the uh pen tester did was he kept on calling them MFA guys being like I need to reset my password we need to set my right password and eventually the um the customer service guy said okay I'm resetting it once he had reset and bypassed the multi-factor authentication he then was able to get in and get access to the building area that he was in or I think not the domain but he was able to gain access to a partial part of that Network he then paralleled over to what I would assume is like a VA VMware or some virtual machine that had notes that had all of the credentials for logging into various domains and So within minutes they had access and that's the sort of stuff that we do you know a lot of these tools like um you know you think about the cacophony of tools that are out there in a GTA architect architecture right I'm gonna get like a z-scale or I'm going to have uh octum and I have a Splunk I've been into the solar system I mean I don't mean to name names we have crowdstriker or Sentinel one in there it's just it's a cacophony of things that don't work together they weren't designed work together and so we have seen so many times in our business through our customer support and just working with customers when we do their pen tests that there will be 5 000 servers out there three are misconfigured those three misconfigurations will create the open door because remember the hacker only needs to be right once the defender needs to be right all the time and that's the challenge and so that's what I'm really passionate about what we're doing uh here at Horizon three I see this my digital transformation migration and security going on which uh we're at the tip of the spear it's why I joined sey Hall coming on this journey uh and just super excited about where the path's going and super excited about the relationship with Splunk I get into more details on some of the specifics of that but um you know well you're nailing I mean we've been doing a lot of things on super cloud and this next gen environment we're calling it next gen you're really seeing devops obviously devsecops has already won the it role has moved to the developer shift left is an indicator of that it's one of the many examples higher velocity code software supply chain you hear these things that means that it is now in the developer hands it is replaced by the new Ops data Ops teams and security where there's a lot of horizontal thinking to your point about access there's no more perimeter huge 100 right is really right on things one time you know to get in there once you're in then you can hang out move around move laterally big problem okay so we get that now the challenges for these teams as they are transitioning organizationally how do they figure out what to do okay this is the next step they already have Splunk so now they're kind of in transition while protecting for a hundred percent ratio of success so how would you look at that and describe the challenge is what do they do what is it what are the teams facing with their data and what's next what are they what are they what action do they take so let's use some vernacular that folks will know so if I think about devsecops right we both know what that means that I'm going to build security into the app it normally talks about sec devops right how am I building security around the perimeter of what's going inside my ecosystem and what are they doing and so if you think about what we're able to do with somebody like Splunk is we can pen test the entire environment from Soup To Nuts right so I'm going to test the end points through to its I'm going to look for misconfigurations I'm going to I'm going to look for um uh credential exposed credentials you know I'm going to look for anything I can in the environment again I'm going to do it at light speed and and what what we're doing for that SEC devops space is to you know did you detect that we were in your environment so did we alert Splunk or the Sim that there's someone in the environment laterally moving around did they more importantly did they log us into their environment and when do they detect that log to trigger that log did they alert on us and then finally most importantly for every CSO out there is going to be did they stop us and so that's how we we do this and I think you when speaking with um stay Hall before you know we've come up with this um boils but we call it fine fix verifying so what we do is we go in is we act as the attacker right we act in a production environment so we're not going to be we're a passive attacker but we will go in on credentialed on agents but we have to assume to have an assumed breach model which means we're going to put a Docker container in your environment and then we're going to fingerprint the environment so we're going to go out and do an asset survey now that's something that's not something that Splunk does super well you know so can Splunk see all the assets do the same assets marry up we're going to log all that data and think and then put load that into this long Sim or the smoke logging tools just to have it in Enterprise right that's an immediate future ad that they've got um and then we've got the fix so once we've completed our pen test um we are then going to generate a report and we can talk about these in a little bit later but the reports will show an executive summary the assets that we found which would be your asset Discovery aspect of that a fix report and the fixed report I think is probably the most important one it will go down and identify what we did how we did it and then how to fix that and then from that the pen tester or the organization should fix those then they go back and run another test and then they validate like a change detection environment to see hey did those fixes taste play take place and you know snehaw when he was the CTO of jsoc he shared with me a number of times about it's like man there would be 15 more items on next week's punch sheet that we didn't know about and it's and it has to do with how we you know how they were uh prioritizing the cves and whatnot because they would take all CBDs it was critical or non-critical and it's like we are able to create context in that environment that feeds better information into Splunk and whatnot that brings that brings up the efficiency for Splunk specifically the teams out there by the way the burnout thing is real I mean this whole I just finished my list and I got 15 more or whatever the list just can keeps growing how did node zero specifically help Splunk teams be more efficient like that's the question I want to get at because this seems like a very scale way for Splunk customers and teams service teams to be more so the question is how does node zero help make Splunk specifically their service teams be more efficient so so today in our early interactions we're building customers we've seen are five things um and I'll start with sort of identifying the blind spots right so kind of what I just talked about with you did we detect did we log did we alert did they stop node zero right and so I would I put that you know a more Layman's third grade term and if I was going to beat a fifth grader at this game would be we can be the sparring partner for a Splunk Enterprise customer a Splunk Essentials customer someone using Splunk soar or even just an Enterprise Splunk customer that may be a small shop with three people and just wants to know where am I exposed so by creating and generating these reports and then having um the API that actually generates the dashboard they can take all of these events that we've logged and log them in and then where that then comes in is number two is how do we prioritize those logs right so how do we create visibility to logs that that um are have critical impacts and again as I mentioned earlier not all cves are high impact regard and also not all or low right so if you daisy chain a bunch of low cves together boom I've got a mission critical AP uh CPE that needs to be fixed now such as a credential moving to an NT box that's got a text file with a bunch of passwords on it that would be very bad um and then third would be uh verifying that you have all of the hosts so one of the things that splunk's not particularly great at and they'll literate themselves they don't do asset Discovery so dude what assets do we see and what are they logging from that um and then for from um for every event that they are able to identify one of the cool things that we can do is actually create this low code no code environment so they could let you know Splunk customers can use Splunk sword to actually triage events and prioritize that event so where they're being routed within it to optimize the Sox team time to Market or time to triage any given event obviously reducing MTR and then finally I think one of the neatest things that we'll be seeing us develop is um our ability to build glass cables so behind me you'll see one of our triage events and how we build uh a Lockheed Martin kill chain on that with a glass table which is very familiar to the community we're going to have the ability and not too distant future to allow people to search observe on those iocs and if people aren't familiar with it ioc it's an instant of a compromise so that's a vector that we want to drill into and of course who's better at Drilling in the data and smoke yeah this is a critter this is an awesome Synergy there I mean I can see a Splunk customer going man this just gives me so much more capability action actionability and also real understanding and I think this is what I want to dig into if you don't mind understanding that critical impact okay is kind of where I see this coming got the data data ingest now data's data but the question is what not to log you know where are things misconfigured these are critical questions so can you talk about what it means to understand critical impact yeah so I think you know going back to the things that I just spoke about a lot of those cves where you'll see um uh low low low and then you daisy chain together and they're suddenly like oh this is high now but then your other impact of like if you're if you're a Splunk customer you know and I had it I had several of them I had one customer that you know terabytes of McAfee data being brought in and it was like all right there's a lot of other data that you probably also want to bring but they could only afford wanted to do certain data sets because that's and they didn't know how to prioritize or filter those data sets and so we provide that opportunity to say hey these are the critical ones to bring in but there's also the ones that you don't necessarily need to bring in because low cve in this case really does mean low cve like an ILO server would be one that um that's the print server uh where the uh your admin credentials are on on like a printer and so there will be credentials on that that's something that a hacker might go in to look at so although the cve on it is low is if you daisy chain with somebody that's able to get into that you might say Ah that's high and we would then potentially rank it giving our AI logic to say that's a moderate so put it on the scale and we prioritize those versus uh of all of these scanners just going to give you a bunch of CDs and good luck and translating that if I if I can and tell me if I'm wrong that kind of speaks to that whole lateral movement that's it challenge right print serve a great example looks stupid low end who's going to want to deal with the print server oh but it's connected into a critical system there's a path is that kind of what you're getting at yeah I use Daisy Chain I think that's from the community they came from uh but it's just a lateral movement it's exactly what they're doing in those low level low critical lateral movements is where the hackers are getting in right so that's the beauty thing about the uh the Uber example is that who would have thought you know I've got my monthly Factor authentication going in a human made a mistake we can't we can't not expect humans to make mistakes we're fallible right the reality is is once they were in the environment they could have protected themselves by running enough pen tests to know that they had certain uh exposed credentials that would have stopped the breach and they did not had not done that in their environment and I'm not poking yeah but it's an interesting Trend though I mean it's obvious if sometimes those low end items are also not protected well so it's easy to get at from a hacker standpoint but also the people in charge of them can be fished easily or spearfished because they're not paying attention because they don't have to no one ever told them hey be careful yeah for the community that I came from John that's exactly how they they would uh meet you at a uh an International Event um introduce themselves as a graduate student these are National actor States uh would you mind reviewing my thesis on such and such and I was at Adobe at the time that I was working on this instead of having to get the PDF they opened the PDF and whoever that customer was launches and I don't know if you remember back in like 2008 time frame there was a lot of issues around IP being by a nation state being stolen from the United States and that's exactly how they did it and John that's or LinkedIn hey I want to get a joke we want to hire you double the salary oh I'm gonna click on that for sure you know yeah right exactly yeah the one thing I would say to you is like uh when we look at like sort of you know because I think we did 10 000 pen tests last year is it's probably over that now you know we have these sort of top 10 ways that we think and find people coming into the environment the funniest thing is that only one of them is a cve related vulnerability like uh you know you guys know what they are right so it's it but it's it's like two percent of the attacks are occurring through the cves but yeah there's all that attention spent to that and very little attention spent to this pen testing side which is sort of this continuous threat you know monitoring space and and this vulnerability space where I think we play a such an important role and I'm so excited to be a part of the tip of the spear on this one yeah I'm old enough to know the movie sneakers which I loved as a you know watching that movie you know professional hackers are testing testing always testing the environment I love this I got to ask you as we kind of wrap up here Chris if you don't mind the the benefits to Professional Services from this Alliance big news Splunk and you guys work well together we see that clearly what are what other benefits do Professional Services teams see from the Splunk and Horizon 3.ai Alliance so if you're I think for from our our from both of our uh Partners uh as we bring these guys together and many of them already are the same partner right uh is that uh first off the licensing model is probably one of the key areas that we really excel at so if you're an end user you can buy uh for the Enterprise by the number of IP addresses you're using um but uh if you're a partner working with this there's solution ways that you can go in and we'll license as to msps and what that business model on msps looks like but the unique thing that we do here is this C plus license and so the Consulting plus license allows like a uh somebody a small to mid-sized to some very large uh you know Fortune 100 uh consulting firms use this uh by buying into a license called um Consulting plus where they can have unlimited uh access to as many IPS as they want but you can only run one test at a time and as you can imagine when we're going and hacking passwords and um checking hashes and decrypting hashes that can take a while so but for the right customer it's it's a perfect tool and so I I'm so excited about our ability to go to market with uh our partners so that we understand ourselves understand how not to just sell to or not tell just to sell through but we know how to sell with them as a good vendor partner I think that that's one thing that we've done a really good job building bring it into the market yeah I think also the Splunk has had great success how they've enabled uh partners and Professional Services absolutely you know the services that layer on top of Splunk are multi-fold tons of great benefits so you guys Vector right into that ride that way with friction and and the cool thing is that in you know in one of our reports which could be totally customized uh with someone else's logo we're going to generate you know so I I used to work in another organization it wasn't Splunk but we we did uh you know pen testing as for for customers and my pen testers would come on site they'd do the engagement and they would leave and then another release someone would be oh shoot we got another sector that was breached and they'd call you back you know four weeks later and so by August our entire pen testings teams would be sold out and it would be like well even in March maybe and they're like no no I gotta breach now and and and then when they do go in they go through do the pen test and they hand over a PDF and they pack on the back and say there's where your problems are you need to fix it and the reality is that what we're going to generate completely autonomously with no human interaction is we're going to go and find all the permutations of anything we found and the fix for those permutations and then once you've fixed everything you just go back and run another pen test it's you know for what people pay for one pen test they can have a tool that does that every every Pat patch on Tuesday and that's on Wednesday you know triage throughout the week green yellow red I wanted to see the colors show me green green is good right not red and one CIO doesn't want who doesn't want that dashboard right it's it's exactly it and we can help bring I think that you know I'm really excited about helping drive this with the Splunk team because they get that they understand that it's the green yellow red dashboard and and how do we help them find more green uh so that the other guys are in red yeah and get in the data and do the right thing and be efficient with how you use the data know what to look at so many things to pay attention to you know the combination of both and then go to market strategy real brilliant congratulations Chris thanks for coming on and sharing um this news with the detail around the Splunk in action around the alliance thanks for sharing John my pleasure thanks look forward to seeing you soon all right great we'll follow up and do another segment on devops and I.T and security teams as the new new Ops but and super cloud a bunch of other stuff so thanks for coming on and our next segment the CEO of horizon 3.aa will break down all the new news for us here on thecube you're watching thecube the leader in high tech Enterprise coverage [Music] yeah the partner program for us has been fantastic you know I think prior to that you know as most organizations most uh uh most Farmers most mssps might not necessarily have a a bench at all for penetration testing uh maybe they subcontract this work out or maybe they do it themselves but trying to staff that kind of position can be incredibly difficult for us this was a differentiator a a new a new partner a new partnership that allowed us to uh not only perform services for our customers but be able to provide a product by which that they can do it themselves so we work with our customers in a variety of ways some of them want more routine testing and perform this themselves but we're also a certified service provider of horizon 3 being able to perform uh penetration tests uh help review the the data provide color provide analysis for our customers in a broader sense right not necessarily the the black and white elements of you know what was uh what's critical what's high what's medium what's low what you need to fix but are there systemic issues this has allowed us to onboard new customers this has allowed us to migrate some penetration testing services to us from from competitors in the marketplace But ultimately this is occurring because the the product and the outcome are special they're unique and they're effective our customers like what they're seeing they like the routineness of it many of them you know again like doing this themselves you know being able to kind of pen test themselves parts of their networks um and the the new use cases right I'm a large organization I have eight to ten Acquisitions per year wouldn't it be great to have a tool to be able to perform a penetration test both internal and external of that acquisition before we integrate the two companies and maybe bringing on some risk it's a very effective partnership uh one that really is uh kind of taken our our Engineers our account Executives by storm um you know this this is a a partnership that's been very valuable to us [Music] a key part of the value and business model at Horizon 3 is enabling Partners to leverage node zero to make more revenue for themselves our goal is that for sixty percent of our Revenue this year will be originated by partners and that 95 of our Revenue next year will be originated by partners and so a key to that strategy is making us an integral part of your business models as a partner a key quote from one of our partners is that we enable every one of their business units to generate Revenue so let's talk about that in a little bit more detail first is that if you have a pen test Consulting business take Deloitte as an example what was six weeks of human labor at Deloitte per pen test has been cut down to four days of Labor using node zero to conduct reconnaissance find all the juicy interesting areas of the of the Enterprise that are exploitable and being able to go assess the entire organization and then all of those details get served up to the human to be able to look at understand and determine where to probe deeper so what you see in that pen test Consulting business is that node zero becomes a force multiplier where those Consulting teams were able to cover way more accounts and way more IPS within those accounts with the same or fewer consultants and so that directly leads to profit margin expansion for the Penn testing business itself because node 0 is a force multiplier the second business model here is if you're an mssp as an mssp you're already making money providing defensive cyber security operations for a large volume of customers and so what they do is they'll license node zero and use us as an upsell to their mssb business to start to deliver either continuous red teaming continuous verification or purple teaming as a service and so in that particular business model they've got an additional line of Revenue where they can increase the spend of their existing customers by bolting on node 0 as a purple team as a service offering the third business model or customer type is if you're an I.T services provider so as an I.T services provider you make money installing and configuring security products like Splunk or crowdstrike or hemio you also make money reselling those products and you also make money generating follow-on services to continue to harden your customer environments and so for them what what those it service providers will do is use us to verify that they've installed Splunk correctly improved to their customer that Splunk was installed correctly or crowdstrike was installed correctly using our results and then use our results to drive follow-on services and revenue and then finally we've got the value-added reseller which is just a straight up reseller because of how fast our sales Cycles are these vars are able to typically go from cold email to deal close in six to eight weeks at Horizon 3 at least a single sales engineer is able to run 30 to 50 pocs concurrently because our pocs are very lightweight and don't require any on-prem customization or heavy pre-sales post sales activity so as a result we're able to have a few amount of sellers driving a lot of Revenue and volume for us well the same thing applies to bars there isn't a lot of effort to sell the product or prove its value so vars are able to sell a lot more Horizon 3 node zero product without having to build up a huge specialist sales organization so what I'm going to do is talk through uh scenario three here as an I.T service provider and just how powerful node zero can be in driving additional Revenue so in here think of for every one dollar of node zero license purchased by the IT service provider to do their business it'll generate ten dollars of additional revenue for that partner so in this example kidney group uses node 0 to verify that they have installed and deployed Splunk correctly so Kitty group is a Splunk partner they they sell it services to install configure deploy and maintain Splunk and as they deploy Splunk they're going to use node 0 to attack the environment and make sure that the right logs and alerts and monitoring are being handled within the Splunk deployment so it's a way of doing QA or verifying that Splunk has been configured correctly and that's going to be internally used by kidney group to prove the quality of their services that they've just delivered then what they're going to do is they're going to show and leave behind that node zero Report with their client and that creates a resell opportunity for for kidney group to resell node 0 to their client because their client is seeing the reports and the results and saying wow this is pretty amazing and those reports can be co-branded where it's a pen testing report branded with kidney group but it says powered by Horizon three under it from there kidney group is able to take the fixed actions report that's automatically generated with every pen test through node zero and they're able to use that as the starting point for a statement of work to sell follow-on services to fix all of the problems that node zero identified fixing l11r misconfigurations fixing or patching VMware or updating credentials policies and so on so what happens is node 0 has found a bunch of problems the client often lacks the capacity to fix and so kidney group can use that lack of capacity by the client as a follow-on sales opportunity for follow-on services and finally based on the findings from node zero kidney group can look at that report and say to the customer you know customer if you bought crowdstrike you'd be able to uh prevent node Zero from attacking and succeeding in the way that it did for if you bought humano or if you bought Palo Alto networks or if you bought uh some privileged access management solution because of what node 0 was able to do with credential harvesting and attacks and so as a result kidney group is able to resell other security products within their portfolio crowdstrike Falcon humano Polito networks demisto Phantom and so on based on the gaps that were identified by node zero and that pen test and what that creates is another feedback loop where kidney group will then go use node 0 to verify that crowdstrike product has actually been installed and configured correctly and then this becomes the cycle of using node 0 to verify a deployment using that verification to drive a bunch of follow-on services and resell opportunities which then further drives more usage of the product now the way that we licensed is that it's a usage-based license licensing model so that the partner will grow their node zero Consulting plus license as they grow their business so for example if you're a kidney group then week one you've got you're going to use node zero to verify your Splunk install in week two if you have a pen testing business you're going to go off and use node zero to be a force multiplier for your pen testing uh client opportunity and then if you have an mssp business then in week three you're going to use node zero to go execute a purple team mssp offering for your clients so not necessarily a kidney group but if you're a Deloitte or ATT these larger companies and you've got multiple lines of business if you're Optive for instance you all you have to do is buy one Consulting plus license and you're going to be able to run as many pen tests as you want sequentially so now you can buy a single license and use that one license to meet your week one client commitments and then meet your week two and then meet your week three and as you grow your business you start to run multiple pen tests concurrently so in week one you've got to do a Splunk verify uh verify Splunk install and you've got to run a pen test and you've got to do a purple team opportunity you just simply expand the number of Consulting plus licenses from one license to three licenses and so now as you systematically grow your business you're able to grow your node zero capacity with you giving you predictable cogs predictable margins and once again 10x additional Revenue opportunity for that investment in the node zero Consulting plus license my name is Saint I'm the co-founder and CEO here at Horizon 3. I'm going to talk to you today about why it's important to look at your Enterprise Through The Eyes of an attacker the challenge I had when I was a CIO in banking the CTO at Splunk and serving within the Department of Defense is that I had no idea I was Secure until the bad guys had showed up am I logging the right data am I fixing the right vulnerabilities are my security tools that I've paid millions of dollars for actually working together to defend me and the answer is I don't know does my team actually know how to respond to a breach in the middle of an incident I don't know I've got to wait for the bad guys to show up and so the challenge I had was how do we proactively verify our security posture I tried a variety of techniques the first was the use of vulnerability scanners and the challenge with vulnerability scanners is being vulnerable doesn't mean you're exploitable I might have a hundred thousand findings from my scanner of which maybe five or ten can actually be exploited in my environment the other big problem with scanners is that they can't chain weaknesses together from machine to machine so if you've got a thousand machines in your environment or more what a vulnerability scanner will do is tell you you have a problem on machine one and separately a problem on machine two but what they can tell you is that an attacker could use a load from machine one plus a low from machine two to equal to critical in your environment and what attackers do in their tactics is they chain together misconfigurations dangerous product defaults harvested credentials and exploitable vulnerabilities into attack paths across different machines so to address the attack pads across different machines I tried layering in consulting-based pen testing and the issue is when you've got thousands of hosts or hundreds of thousands of hosts in your environment human-based pen testing simply doesn't scale to test an infrastructure of that size moreover when they actually do execute a pen test and you get the report oftentimes you lack the expertise within your team to quickly retest to verify that you've actually fixed the problem and so what happens is you end up with these pen test reports that are incomplete snapshots and quickly going stale and then to mitigate that problem I tried using breach and attack simulation tools and the struggle with these tools is one I had to install credentialed agents everywhere two I had to write my own custom attack scripts that I didn't have much talent for but also I had to maintain as my environment changed and then three these types of tools were not safe to run against production systems which was the the majority of my attack surface so that's why we went off to start Horizon 3. so Tony and I met when we were in Special Operations together and the challenge we wanted to solve was how do we do infrastructure security testing at scale by giving the the power of a 20-year pen testing veteran into the hands of an I.T admin a network engineer in just three clicks and the whole idea is we enable these fixers The Blue Team to be able to run node Zero Hour pen testing product to quickly find problems in their environment that blue team will then then go off and fix the issues that were found and then they can quickly rerun the attack to verify that they fixed the problem and the whole idea is delivering this without requiring custom scripts be developed without requiring credential agents be installed and without requiring the use of external third-party consulting services or Professional Services self-service pen testing to quickly Drive find fix verify there are three primary use cases that our customers use us for the first is the sock manager that uses us to verify that their security tools are actually effective to verify that they're logging the right data in Splunk or in their Sim to verify that their managed security services provider is able to quickly detect and respond to an attack and hold them accountable for their slas or that the sock understands how to quickly detect and respond and measuring and verifying that or that the variety of tools that you have in your stack most organizations have 130 plus cyber security tools none of which are designed to work together are actually working together the second primary use case is proactively hardening and verifying your systems this is when the I that it admin that network engineer they're able to run self-service pen tests to verify that their Cisco environment is installed in hardened and configured correctly or that their credential policies are set up right or that their vcenter or web sphere or kubernetes environments are actually designed to be secure and what this allows the it admins and network Engineers to do is shift from running one or two pen tests a year to 30 40 or more pen tests a month and you can actually wire those pen tests into your devops process or into your detection engineering and the change management processes to automatically trigger pen tests every time there's a change in your environment the third primary use case is for those organizations lucky enough to have their own internal red team they'll use node zero to do reconnaissance and exploitation at scale and then use the output as a starting point for the humans to step in and focus on the really hard juicy stuff that gets them on stage at Defcon and so these are the three primary use cases and what we'll do is zoom into the find fix verify Loop because what I've found in my experience is find fix verify is the future operating model for cyber security organizations and what I mean here is in the find using continuous pen testing what you want to enable is on-demand self-service pen tests you want those pen tests to find attack pads at scale spanning your on-prem infrastructure your Cloud infrastructure and your perimeter because attackers don't only state in one place they will find ways to chain together a perimeter breach a credential from your on-prem to gain access to your cloud or some other permutation and then the third part in continuous pen testing is attackers don't focus on critical vulnerabilities anymore they know we've built vulnerability Management Programs to reduce those vulnerabilities so attackers have adapted and what they do is chain together misconfigurations in your infrastructure and software and applications with dangerous product defaults with exploitable vulnerabilities and through the collection of credentials through a mix of techniques at scale once you've found those problems the next question is what do you do about it well you want to be able to prioritize fixing problems that are actually exploitable in your environment that truly matter meaning they're going to lead to domain compromise or domain user compromise or access your sensitive data the second thing you want to fix is making sure you understand what risk your crown jewels data is exposed to where is your crown jewels data is in the cloud is it on-prem has it been copied to a share drive that you weren't aware of if a domain user was compromised could they access that crown jewels data you want to be able to use the attacker's perspective to secure the critical data you have in your infrastructure and then finally as you fix these problems you want to quickly remediate and retest that you've actually fixed the issue and this fine fix verify cycle becomes that accelerator that drives purple team culture the third part here is verify and what you want to be able to do in the verify step is verify that your security tools and processes in people can effectively detect and respond to a breach you want to be able to integrate that into your detection engineering processes so that you know you're catching the right security rules or that you've deployed the right configurations you also want to make sure that your environment is adhering to the best practices around systems hardening in cyber resilience and finally you want to be able to prove your security posture over a time to your board to your leadership into your regulators so what I'll do now is zoom into each of these three steps so when we zoom in to find here's the first example using node 0 and autonomous pen testing and what an attacker will do is find a way to break through the perimeter in this example it's very easy to misconfigure kubernetes to allow an attacker to gain remote code execution into your on-prem kubernetes environment and break through the perimeter and from there what the attacker is going to do is conduct Network reconnaissance and then find ways to gain code execution on other machines in the environment and as they get code execution they start to dump credentials collect a bunch of ntlm hashes crack those hashes using open source and dark web available data as part of those attacks and then reuse those credentials to log in and laterally maneuver throughout the environment and then as they loudly maneuver they can reuse those credentials and use credential spraying techniques and so on to compromise your business email to log in as admin into your cloud and this is a very common attack and rarely is a CV actually needed to execute this attack often it's just a misconfiguration in kubernetes with a bad credential policy or password policy combined with bad practices of credential reuse across the organization here's another example of an internal pen test and this is from an actual customer they had 5 000 hosts within their environment they had EDR and uba tools installed and they initiated in an internal pen test on a single machine from that single initial access point node zero enumerated the network conducted reconnaissance and found five thousand hosts were accessible what node 0 will do under the covers is organize all of that reconnaissance data into a knowledge graph that we call the Cyber terrain map and that cyber Terrain map becomes the key data structure that we use to efficiently maneuver and attack and compromise your environment so what node zero will do is they'll try to find ways to get code execution reuse credentials and so on in this customer example they had Fortinet installed as their EDR but node 0 was still able to get code execution on a Windows machine from there it was able to successfully dump credentials including sensitive credentials from the lsas process on the Windows box and then reuse those credentials to log in as domain admin in the network and once an attacker becomes domain admin they have the keys to the kingdom they can do anything they want so what happened here well it turns out Fortinet was misconfigured on three out of 5000 machines bad automation the customer had no idea this had happened they would have had to wait for an attacker to show up to realize that it was misconfigured the second thing is well why didn't Fortinet stop the credential pivot in the lateral movement and it turned out the customer didn't buy the right modules or turn on the right services within that particular product and we see this not only with Ford in it but we see this with Trend Micro and all the other defensive tools where it's very easy to miss a checkbox in the configuration that will do things like prevent credential dumping the next story I'll tell you is attackers don't have to hack in they log in so another infrastructure pen test a typical technique attackers will take is man in the middle uh attacks that will collect hashes so in this case what an attacker will do is leverage a tool or technique called responder to collect ntlm hashes that are being passed around the network and there's a variety of reasons why these hashes are passed around and it's a pretty common misconfiguration but as an attacker collects those hashes then they start to apply techniques to crack those hashes so they'll pass the hash and from there they will use open source intelligence common password structures and patterns and other types of techniques to try to crack those hashes into clear text passwords so here node 0 automatically collected hashes it automatically passed the hashes to crack those credentials and then from there it starts to take the domain user user ID passwords that it's collected and tries to access different services and systems in your Enterprise in this case node 0 is able to successfully gain access to the Office 365 email environment because three employees didn't have MFA configured so now what happens is node 0 has a placement and access in the business email system which sets up the conditions for fraud lateral phishing and other techniques but what's especially insightful here is that 80 of the hashes that were collected in this pen test were cracked in 15 minutes or less 80 percent 26 of the user accounts had a password that followed a pretty obvious pattern first initial last initial and four random digits the other thing that was interesting is 10 percent of service accounts had their user ID the same as their password so VMware admin VMware admin web sphere admin web Square admin so on and so forth and so attackers don't have to hack in they just log in with credentials that they've collected the next story here is becoming WS AWS admin so in this example once again internal pen test node zero gets initial access it discovers 2 000 hosts are network reachable from that environment if fingerprints and organizes all of that data into a cyber Terrain map from there it it fingerprints that hpilo the integrated lights out service was running on a subset of hosts hpilo is a service that is often not instrumented or observed by security teams nor is it easy to patch as a result attackers know this and immediately go after those types of services so in this case that ILO service was exploitable and were able to get code execution on it ILO stores all the user IDs and passwords in clear text in a particular set of processes so once we gain code execution we were able to dump all of the credentials and then from there laterally maneuver to log in to the windows box next door as admin and then on that admin box we're able to gain access to the share drives and we found a credentials file saved on a share Drive from there it turned out that credentials file was the AWS admin credentials file giving us full admin authority to their AWS accounts not a single security alert was triggered in this attack because the customer wasn't observing the ILO service and every step thereafter was a valid login in the environment and so what do you do step one patch the server step two delete the credentials file from the share drive and then step three is get better instrumentation on privileged access users and login the final story I'll tell is a typical pattern that we see across the board with that combines the various techniques I've described together where an attacker is going to go off and use open source intelligence to find all of the employees that work at your company from there they're going to look up those employees on dark web breach databases and other forms of information and then use that as a starting point to password spray to compromise a domain user all it takes is one employee to reuse a breached password for their Corporate email or all it takes is a single employee to have a weak password that's easily guessable all it takes is one and once the attacker is able to gain domain user access in most shops domain user is also the local admin on their laptop and once your local admin you can dump Sam and get local admin until M hashes you can use that to reuse credentials again local admin on neighboring machines and attackers will start to rinse and repeat then eventually they're able to get to a point where they can dump lsas or by unhooking the anti-virus defeating the EDR or finding a misconfigured EDR as we've talked about earlier to compromise the domain and what's consistent is that the fundamentals are broken at these shops they have poor password policies they don't have least access privilege implemented active directory groups are too permissive where domain admin or domain user is also the local admin uh AV or EDR Solutions are misconfigured or easily unhooked and so on and what we found in 10 000 pen tests is that user Behavior analytics tools never caught us in that lateral movement in part because those tools require pristine logging data in order to work and also it becomes very difficult to find that Baseline of normal usage versus abnormal usage of credential login another interesting Insight is there were several Marquee brand name mssps that were defending our customers environment and for them it took seven hours to detect and respond to the pen test seven hours the pen test was over in less than two hours and so what you had was an egregious violation of the service level agreements that that mssp had in place and the customer was able to use us to get service credit and drive accountability of their sock and of their provider the third interesting thing is in one case it took us seven minutes to become domain admin in a bank that bank had every Gucci security tool you could buy yet in 7 minutes and 19 seconds node zero started as an unauthenticated member of the network and was able to escalate privileges through chaining and misconfigurations in lateral movement and so on to become domain admin if it's seven minutes today we should assume it'll be less than a minute a year or two from now making it very difficult for humans to be able to detect and respond to that type of Blitzkrieg attack so that's in the find it's not just about finding problems though the bulk of the effort should be what to do about it the fix and the verify so as you find those problems back to kubernetes as an example we will show you the path here is the kill chain we took to compromise that environment we'll show you the impact here is the impact or here's the the proof of exploitation that we were able to use to be able to compromise it and there's the actual command that we executed so you could copy and paste that command and compromise that cubelet yourself if you want and then the impact is we got code execution and we'll actually show you here is the impact this is a critical here's why it enabled perimeter breach affected applications will tell you the specific IPS where you've got the problem how it maps to the miter attack framework and then we'll tell you exactly how to fix it we'll also show you what this problem enabled so you can accurately prioritize why this is important or why it's not important the next part is accurate prioritization the hardest part of my job as a CIO was deciding what not to fix so if you take SMB signing not required as an example by default that CVSs score is a one out of 10. but this misconfiguration is not a cve it's a misconfig enable an attacker to gain access to 19 credentials including one domain admin two local admins and access to a ton of data because of that context this is really a 10 out of 10. you better fix this as soon as possible however of the seven occurrences that we found it's only a critical in three out of the seven and these are the three specific machines and we'll tell you the exact way to fix it and you better fix these as soon as possible for these four machines over here these didn't allow us to do anything of consequence so that because the hardest part is deciding what not to fix you can justifiably choose not to fix these four issues right now and just add them to your backlog and surge your team to fix these three as quickly as possible and then once you fix these three you don't have to re-run the entire pen test you can select these three and then one click verify and run a very narrowly scoped pen test that is only testing this specific issue and what that creates is a much faster cycle of finding and fixing problems the other part of fixing is verifying that you don't have sensitive data at risk so once we become a domain user we're able to use those domain user credentials and try to gain access to databases file shares S3 buckets git repos and so on and help you understand what sensitive data you have at risk so in this example a green checkbox means we logged in as a valid domain user we're able to get read write access on the database this is how many records we could have accessed and we don't actually look at the values in the database but we'll show you the schema so you can quickly characterize that pii data was at risk here and we'll do that for your file shares and other sources of data so now you can accurately articulate the data you have at risk and prioritize cleaning that data up especially data that will lead to a fine or a big news issue so that's the find that's the fix now we're going to talk about the verify the key part in verify is embracing and integrating with detection engineering practices so when you think about your layers of security tools you've got lots of tools in place on average 130 tools at any given customer but these tools were not designed to work together so when you run a pen test what you want to do is say did you detect us did you log us did you alert on us did you stop us and from there what you want to see is okay what are the techniques that are commonly used to defeat an environment to actually compromise if you look at the top 10 techniques we use and there's far more than just these 10 but these are the most often executed nine out of ten have nothing to do with cves it has to do with misconfigurations dangerous product defaults bad credential policies and it's how we chain those together to become a domain admin or compromise a host so what what customers will do is every single attacker command we executed is provided to you as an attackivity log so you can actually see every single attacker command we ran the time stamp it was executed the hosts it executed on and how it Maps the minor attack tactics so our customers will have are these attacker logs on one screen and then they'll go look into Splunk or exabeam or Sentinel one or crowdstrike and say did you detect us did you log us did you alert on us or not and to make that even easier if you take this example hey Splunk what logs did you see at this time on the VMware host because that's when node 0 is able to dump credentials and that allows you to identify and fix your logging blind spots to make that easier we've got app integration so this is an actual Splunk app in the Splunk App Store and what you can come is inside the Splunk console itself you can fire up the Horizon 3 node 0 app all of the pen test results are here so that you can see all of the results in one place and you don't have to jump out of the tool and what you'll show you as I skip forward is hey there's a pen test here are the critical issues that we've identified for that weaker default issue here are the exact commands we executed and then we will automatically query into Splunk all all terms on between these times on that endpoint that relate to this attack so you can now quickly within the Splunk environment itself figure out that you're missing logs or that you're appropriately catching this issue and that becomes incredibly important in that detection engineering cycle that I mentioned earlier so how do our customers end up using us they shift from running one pen test a year to 30 40 pen tests a month oftentimes wiring us into their deployment automation to automatically run pen tests the other part that they'll do is as they run more pen tests they find more issues but eventually they hit this inflection point where they're able to rapidly clean up their environment and that inflection point is because the red and the blue teams start working together in a purple team culture and now they're working together to proactively harden their environment the other thing our customers will do is run us from different perspectives they'll first start running an RFC 1918 scope to see once the attacker gained initial access in a part of the network that had wide access what could they do and then from there they'll run us within a specific Network segment okay from within that segment could the attacker break out and gain access to another segment then they'll run us from their work from home environment could they Traverse the VPN and do something damaging and once they're in could they Traverse the VPN and get into my cloud then they'll break in from the outside all of these perspectives are available to you in Horizon 3 and node zero as a single SKU and you can run as many pen tests as you want if you run a phishing campaign and find that an intern in the finance department had the worst phishing behavior you can then inject their credentials and actually show the end-to-end story of how an attacker fished gained credentials of an intern and use that to gain access to sensitive financial data so what our customers end up doing is running multiple attacks from multiple perspectives and looking at those results over time I'll leave you two things one is what is the AI in Horizon 3 AI those knowledge graphs are the heart and soul of everything that we do and we use machine learning reinforcement techniques reinforcement learning techniques Markov decision models and so on to be able to efficiently maneuver and analyze the paths in those really large graphs we also use context-based scoring to prioritize weaknesses and we're also able to drive collective intelligence across all of the operations so the more pen tests we run the smarter we get and all of that is based on our knowledge graph analytics infrastructure that we have finally I'll leave you with this was my decision criteria when I was a buyer for my security testing strategy what I cared about was coverage I wanted to be able to assess my on-prem cloud perimeter and work from home and be safe to run in production I want to be able to do that as often as I wanted I want to be able to run pen tests in hours or days not weeks or months so I could accelerate that fine fix verify loop I wanted my it admins and network Engineers with limited offensive experience to be able to run a pen test in a few clicks through a self-service experience and not have to install agent and not have to write custom scripts and finally I didn't want to get nickeled and dimed on having to buy different types of attack modules or different types of attacks I wanted a single annual subscription that allowed me to run any type of attack as often as I wanted so I could look at my Trends in directions over time so I hope you found this talk valuable uh we're easy to find and I look forward to seeing seeing you use a product and letting our results do the talking when you look at uh you know kind of the way no our pen testing algorithms work is we dynamically select uh how to compromise an environment based on what we've discovered and the goal is to become a domain admin compromise a host compromise domain users find ways to encrypt data steal sensitive data and so on but when you look at the the top 10 techniques that we ended up uh using to compromise environments the first nine have nothing to do with cves and that's the reality cves are yes a vector but less than two percent of cves are actually used in a compromise oftentimes it's some sort of credential collection credential cracking uh credential pivoting and using that to become an admin and then uh compromising environments from that point on so I'll leave this up for you to kind of read through and you'll have the slides available for you but I found it very insightful that organizations and ourselves when I was a GE included invested heavily in just standard vulnerability Management Programs when I was at DOD that's all disa cared about asking us about was our our kind of our cve posture but the attackers have adapted to not rely on cves to get in because they know that organizations are actively looking at and patching those cves and instead they're chaining together credentials from one place with misconfigurations and dangerous product defaults in another to take over an environment a concrete example is by default vcenter backups are not encrypted and so as if an attacker finds vcenter what they'll do is find the backup location and there are specific V sender MTD files where the admin credentials are parsippled in the binaries so you can actually as an attacker find the right MTD file parse out the binary and now you've got the admin credentials for the vcenter environment and now start to log in as admin there's a bad habit by signal officers and Signal practitioners in the in the Army and elsewhere where the the VM notes section of a virtual image has the password for the VM well those VM notes are not stored encrypted and attackers know this and they're able to go off and find the VMS that are unencrypted find the note section and pull out the passwords for those images and then reuse those credentials across the board so I'll pause here and uh you know Patrick love you get some some commentary on on these techniques and other things that you've seen and what we'll do in the last say 10 to 15 minutes is uh is rolled through a little bit more on what do you do about it yeah yeah no I love it I think um I think this is pretty exhaustive what I like about what you've done here is uh you know we've seen we've seen double-digit increases in the number of organizations that are reporting actual breaches year over year for the last um for the last three years and it's often we kind of in the Zeitgeist we pegged that on ransomware which of course is like incredibly important and very top of mind um but what I like about what you have here is you know we're reminding the audience that the the attack surface area the vectors the matter um you know has to be more comprehensive than just thinking about ransomware scenarios yeah right on um so let's build on this when you think about your defense in depth you've got multiple security controls that you've purchased and integrated and you've got that redundancy if a control fails but the reality is that these security tools aren't designed to work together so when you run a pen test what you want to ask yourself is did you detect node zero did you log node zero did you alert on node zero and did you stop node zero and when you think about how to do that every single attacker command executed by node zero is available in an attacker log so you can now see you know at the bottom here vcenter um exploit at that time on that IP how it aligns to minor attack what you want to be able to do is go figure out did your security tools catch this or not and that becomes very important in using the attacker's perspective to improve your defensive security controls and so the way we've tried to make this easier back to like my my my the you know I bleed Green in many ways still from my smoke background is you want to be able to and what our customers do is hey we'll look at the attacker logs on one screen and they'll look at what did Splunk see or Miss in another screen and then they'll use that to figure out what their logging blind spots are and what that where that becomes really interesting is we've actually built out an integration into Splunk where there's a Splunk app you can download off of Splunk base and you'll get all of the pen test results right there in the Splunk console and from that Splunk console you're gonna be able to see these are all the pen tests that were run these are the issues that were found um so you can look at that particular pen test here are all of the weaknesses that were identified for that particular pen test and how they categorize out for each of those weaknesses you can click on any one of them that are critical in this case and then we'll tell you for that weakness and this is where where the the punch line comes in so I'll pause the video here for that weakness these are the commands that were executed on these endpoints at this time and then we'll actually query Splunk for that um for that IP address or containing that IP and these are the source types that surface any sort of activity so what we try to do is help you as quickly and efficiently as possible identify the logging blind spots in your Splunk environment based on the attacker's perspective so as this video kind of plays through you can see it Patrick I'd love to get your thoughts um just seeing so many Splunk deployments and the effectiveness of those deployments and and how this is going to help really Elevate the effectiveness of all of your Splunk customers yeah I'm super excited about this I mean I think this these kinds of purpose-built integration snail really move the needle for our customers I mean at the end of the day when I think about the power of Splunk I think about a product I was first introduced to 12 years ago that was an on-prem piece of software you know and at the time it sold on sort of Perpetual and term licenses but one made it special was that it could it could it could eat data at a speed that nothing else that I'd have ever seen you can ingest massively scalable amounts of data uh did cool things like schema on read which facilitated that there was this language called SPL that you could nerd out about uh and you went to a conference once a year and you talked about all the cool things you were splunking right but now as we think about the next phase of our growth um we live in a heterogeneous environment where our customers have so many different tools and data sources that are ever expanding and as you look at the as you look at the role of the ciso it's mind-blowing to me the amount of sources Services apps that are coming into the ciso span of let's just call it a span of influence in the last three years uh you know we're seeing things like infrastructure service level visibility application performance monitoring stuff that just never made sense for the security team to have visibility into you um at least not at the size and scale which we're demanding today um and and that's different and this isn't this is why it's so important that we have these joint purpose-built Integrations that um really provide more prescription to our customers about how do they walk on that Journey towards maturity what does zero to one look like what does one to two look like whereas you know 10 years ago customers were happy with platforms today they want integration they want Solutions and they want to drive outcomes and I think this is a great example of how together we are stepping to the evolving nature of the market and also the ever-evolving nature of the threat landscape and what I would say is the maturing needs of the customer in that environment yeah for sure I think especially if if we all anticipate budget pressure over the next 18 months due to the economy and elsewhere while the security budgets are not going to ever I don't think they're going to get cut they're not going to grow as fast and there's a lot more pressure on organizations to extract more value from their existing Investments as well as extracting more value and more impact from their existing teams and so security Effectiveness Fierce prioritization and automation I think become the three key themes of security uh over the next 18 months so I'll do very quickly is run through a few other use cases um every host that we identified in the pen test were able to score and say this host allowed us to do something significant therefore it's it's really critical you should be increasing your logging here hey these hosts down here we couldn't really do anything as an attacker so if you do have to make trade-offs you can make some trade-offs of your logging resolution at the lower end in order to increase logging resolution on the upper end so you've got that level of of um justification for where to increase or or adjust your logging resolution another example is every host we've discovered as an attacker we Expose and you can export and we want to make sure is every host we found as an attacker is being ingested from a Splunk standpoint a big issue I had as a CIO and user of Splunk and other tools is I had no idea if there were Rogue Raspberry Pi's on the network or if a new box was installed and whether Splunk was installed on it or not so now you can quickly start to correlate what hosts did we see and how does that reconcile with what you're logging from uh finally or second to last use case here on the Splunk integration side is for every single problem we've found we give multiple options for how to fix it this becomes a great way to prioritize what fixed actions to automate in your soar platform and what we want to get to eventually is being able to automatically trigger soar actions to fix well-known problems like automatically invalidating passwords for for poor poor passwords in our credentials amongst a whole bunch of other things we could go off and do and then finally if there is a well-known kill chain or attack path one of the things I really wish I could have done when I was a Splunk customer was take this type of kill chain that actually shows a path to domain admin that I'm sincerely worried about and use it as a glass table over which I could start to layer possible indicators of compromise and now you've got a great starting point for glass tables and iocs for actual kill chains that we know are exploitable in your environment and that becomes some super cool Integrations that we've got on the roadmap between us and the Splunk security side of the house so what I'll leave with actually Patrick before I do that you know um love to get your comments and then I'll I'll kind of leave with one last slide on this wartime security mindset uh pending you know assuming there's no other questions no I love it I mean I think this kind of um it's kind of glass table's approach to how do you how do you sort of visualize these workflows and then use things like sore and orchestration and automation to operationalize them is exactly where we see all of our customers going and getting away from I think an over engineered approach to soar with where it has to be super technical heavy with you know python programmers and getting more to this visual view of workflow creation um that really demystifies the power of Automation and also democratizes it so you don't have to have these programming languages in your resume in order to start really moving the needle on workflow creation policy enforcement and ultimately driving automation coverage across more and more of the workflows that your team is seeing yeah I think that between us being able to visualize the actual kill chain or attack path with you know think of a of uh the soar Market I think going towards this no code low code um you know configurable sore versus coded sore that's going to really be a game changer in improve or giving security teams a force multiplier so what I'll leave you with is this peacetime mindset of security no longer is sustainable we really have to get out of checking the box and then waiting for the bad guys to show up to verify that security tools are are working or not and the reason why we've got to really do that quickly is there are over a thousand companies that withdrew from the Russian economy over the past uh nine months due to the Ukrainian War there you should expect every one of them to be punished by the Russians for leaving and punished from a cyber standpoint and this is no longer about financial extortion that is ransomware this is about punishing and destroying companies and you can punish any one of these companies by going after them directly or by going after their suppliers and their Distributors so suddenly your attack surface is no more no longer just your own Enterprise it's how you bring your goods to Market and it's how you get your goods created because while I may not be able to disrupt your ability to harvest fruit if I can get those trucks stuck at the border I can increase spoilage and have the same effect and what we should expect to see is this idea of cyber-enabled economic Warfare where if we issue a sanction like Banning the Russians from traveling there is a cyber-enabled counter punch which is corrupt and destroy the American Airlines database that is below the threshold of War that's not going to trigger the 82nd Airborne to be mobilized but it's going to achieve the right effect ban the sale of luxury goods disrupt the supply chain and create shortages banned Russian oil and gas attack refineries to call a 10x spike in gas prices three days before the election this is the future and therefore I think what we have to do is shift towards a wartime mindset which is don't trust your security posture verify it see yourself Through The Eyes of the attacker build that incident response muscle memory and drive better collaboration between the red and the blue teams your suppliers and Distributors and your information uh sharing organization they have in place and what's really valuable for me as a Splunk customer was when a router crashes at that moment you don't know if it's due to an I.T Administration problem or an attacker and what you want to have are different people asking different questions of the same data and you want to have that integrated triage process of an I.T lens to that problem a security lens to that problem and then from there figuring out is is this an IT workflow to execute or a security incident to execute and you want to have all of that as an integrated team integrated process integrated technology stack and this is something that I very care I cared very deeply about as both a Splunk customer and a Splunk CTO that I see time and time again across the board so Patrick I'll leave you with the last word the final three minutes here and I don't see any open questions so please take us home oh man see how you think we spent hours and hours prepping for this together that that last uh uh 40 seconds of your talk track is probably one of the things I'm most passionate about in this industry right now uh and I think nist has done some really interesting work here around building cyber resilient organizations that have that has really I think helped help the industry see that um incidents can come from adverse conditions you know stress is uh uh performance taxations in the infrastructure service or app layer and they can come from malicious compromises uh Insider threats external threat actors and the more that we look at this from the perspective of of a broader cyber resilience Mission uh in a wartime mindset uh I I think we're going to be much better off and and will you talk about with operationally minded ice hacks information sharing intelligence sharing becomes so important in these wartime uh um situations and you know we know not all ice acts are created equal but we're also seeing a lot of um more ad hoc information sharing groups popping up so look I think I think you framed it really really well I love the concept of wartime mindset and um I I like the idea of applying a cyber resilience lens like if you have one more layer on top of that bottom right cake you know I think the it lens and the security lens they roll up to this concept of cyber resilience and I think this has done some great work there for us yeah you're you're spot on and that that is app and that's gonna I think be the the next um terrain that that uh that you're gonna see vendors try to get after but that I think Splunk is best position to win okay that's a wrap for this special Cube presentation you heard all about the global expansion of horizon 3.ai's partner program for their Partners have a unique opportunity to take advantage of their node zero product uh International go to Market expansion North America channel Partnerships and just overall relationships with companies like Splunk to make things more comprehensive in this disruptive cyber security world we live in and hope you enjoyed this program all the videos are available on thecube.net as well as check out Horizon 3 dot AI for their pen test Automation and ultimately their defense system that they use for testing always the environment that you're in great Innovative product and I hope you enjoyed the program again I'm John Furrier host of the cube thanks for watching

(light music) >> Hello, and welcome to theCUBE's special presentation with Horizon3.ai with Rainer Richter, Vice President of EMEA, Europe, Middle East and Africa, and Asia Pacific, APAC Horizon3.ai. Welcome to this special CUBE presentation. Thanks for joining us. >> Thank you for the invitation. >> So Horizon3.ai, driving global expansion, big international news with a partner-first approach. You guys are expanding internationally. Let's get into it. You guys are driving this new expanse partner program to new heights. Tell us about it. What are you seeing in the momentum? Why the expansion? What's all the news about? >> Well, I would say in international, we have, I would say a similar situation like in the US. There is a global shortage of well-educated penetration testers on the one hand side. On the other side, we have a raising demand of network and infrastructure security. And with our approach of an autonomous penetration testing, I believe we are totally on top of the game, especially as we have also now starting with an international instance. That means for example, if a customer in Europe is using our service, NodeZero, he will be connected to a NodeZero instance, which is located inside the European Union. And therefore, he doesn't have to worry about the conflict between the European GDPR regulations versus the US CLOUD Act. And I would say there, we have a total good package for our partners that they can provide differentiators to their customers. >> You know, we've had great conversations here on theCUBE with the CEO and the founder of the company around the leverage of the cloud and how successful that's been for the company. And obviously, I can just connect the dots here, but I'd like you to weigh in more on how that translates into the go-to-market here because you got great cloud scale with the security product you guys are having success with. Great leverage there, I'm seeing a lot of success there. What's the momentum on the channel partner program internationally? Why is it so important to you? Is it just the regional segmentation? Is it the economics? Why the momentum? >> Well, there are multiple issues. First of all, there is a raising demand in penetration testing. And don't forget that in international, we have a much higher level number or percentage in SMB and mid-market customers. So these customers, typically, most of them even didn't have a pen test done once a year. So for them, pen testing was just too expensive. Now with our offering together with our partners, we can provide different ways how customers could get an autonomous pen testing done more than once a year with even lower costs than they had with a traditional manual pen test, and that is because we have our Consulting PLUS package, which is for typically pen testers. They can go out and can do a much faster, much quicker pen test at many customers after each other. So they can do more pen test on a lower, more attractive price. On the other side, there are others or even the same one who are providing NodeZero as an MSSP service. So they can go after SMP customers saying, "Okay, you only have a couple of hundred IP addresses. No worries, we have the perfect package for you." And then you have, let's say the mid-market. Let's say the thousand and more employees, then they might even have an annual subscription. Very traditional, but for all of them, it's all the same. The customer or the service provider doesn't need a piece of hardware. They only need to install a small piece of a Docker container and that's it. And that makes it so smooth to go in and say, "Okay, Mr. Customer, we just put in this virtual attacker into your network, and that's it and all the rest is done." And within three clicks, they can act like a pen tester with 20 years of experience. >> And that's going to be very channel-friendly and partner-friendly, I can almost imagine. So I have to ask you, and thank you for calling out that breakdown and segmentation. That was good, that was very helpful for me to understand, but I want to follow up, if you don't mind. What type of partners are you seeing the most traction with and why? >> Well, I would say at the beginning, typically, you have the innovators, the early adapters, typically boutique-size of partners. They start because they are always looking for innovation. Those are the ones, they start in the beginning. So we have a wide range of partners having mostly even managed by the owner of the company. So they immediately understand, okay, there is the value, and they can change their offering. They're changing their offering in terms of penetration testing because they can do more pen tests and they can then add others ones. Or we have those ones who offered pen test services, but they did not have their own pen testers. So they had to go out on the open market and source pen testing experts to get the pen test at a particular customer done. And now with NodeZero, they're totally independent. They can go out and say, "Okay, Mr. Customer, here's the service. That's it, we turn it on. And within an hour, you are up and running totally." >> Yeah, and those pen tests are usually expensive and hard to do. Now it's right in line with the sales delivery. Pretty interesting for a partner. >> Absolutely, but on the other hand side, we are not killing the pen tester's business. We are providing with NodeZero, I would call something like the foundational work. The foundational work of having an ongoing penetration testing of the infrastructure, the operating system. And the pen testers by themselves, they can concentrate in the future on things like application pen testing, for example. So those services, which we are not touching. So we are not killing the pen tester market. We are just taking away the ongoing, let's say foundation work, call it that way. >> Yeah, yeah. That was one of my questions. I was going to ask is there's a lot of interest in this autonomous pen testing. One because it's expensive to do because those skills are required are in need and they're expensive. (chuckles) So you kind of cover the entry-level and the blockers that are in there. I've seen people say to me, "This pen test becomes a blocker for getting things done." So there's been a lot of interest in the autonomous pen testing and for organizations to have that posture. And it's an overseas issue too because now you have that ongoing thing. So can you explain that particular benefit for an organization to have that continuously verifying an organization's posture? >> Certainly. So I would say typically, you have to do your patches. You have to bring in new versions of operating systems, of different services, of operating systems of some components, and they are always bringing new vulnerabilities. The difference here is that with NodeZero, we are telling the customer or the partner the package. We're telling them which are the executable vulnerabilities because previously, they might have had a vulnerability scanner. So this vulnerability scanner brought up hundreds or even thousands of CVEs, but didn't say anything about which of them are vulnerable, really executable. And then you need an expert digging in one CVE after the other, finding out is it really executable, yes or no? And that is where you need highly-paid experts, which where we have a shortage. So with NodeZero now, we can say, "Okay, we tell you exactly which ones are the ones you should work on because those are the ones which are executable. We rank them accordingly to risk level, how easily they can be used." And then the good thing is converted or in difference to the traditional penetration test, they don't have to wait for a year for the next pen test to find out if the fixing was effective. They run just the next scan and say, "Yes, closed. Vulnerability is gone." >> The time is really valuable. And if you're doing any DevOps, cloud-native, you're always pushing new things. So pen test, ongoing pen testing is actually a benefit just in general as a kind of hygiene. So really, really interesting solution. Really bringing that global scale is going to be a new coverage area for us, for sure. I have to ask you, if you don't mind answering, what particular region are you focused on or plan to target for this next phase of growth? >> Well, at this moment, we are concentrating on the countries inside the European Union plus United Kingdom. And of course, logically, I'm based in the Frankfurt area. That means we cover more or less the countries just around. So it's like the so-called DACH region, Germany, Switzerland, Austria, plus the Netherlands. But we also already have partners in the Nordic, like in Finland and Sweden. So we have partners already in the UK and it's rapidly growing. So for example, we are now starting with some activities in Singapore and also in the Middle East area. Very important, depending on let's say, the way how to do business. Currently, we try to concentrate on those countries where we can have, let's say at least English as an accepted business language. >> Great, is there any particular region you're having the most success with right now? Sounds like European Union's kind of first wave. What's the most- >> Yes, that's the first. Definitely, that's the first wave. And now with also getting the European INSTANCE up and running, it's clearly our commitment also to the market saying, "Okay, we know there are certain dedicated requirements and we take care of this." And we are just launching, we are building up this one, the instance in the AWS service center here in Frankfurt. Also, with some dedicated hardware, internet, and a data center in Frankfurt, where we have with the DE-CIX, by the way, the highest internet interconnection bandwidth on the planet. So we have very short latency to wherever you are on the globe. >> That's a great call out benefit too. I was going to ask that. What are some of the benefits your partners are seeing in EMEA and Asia Pacific? >> Well, I would say, the benefits for them, it's clearly they can talk with customers and can offer customers penetration testing, which they before even didn't think about because penetration testing in a traditional way was simply too expensive for them, too complex, the preparation time was too long, they didn't have even have the capacity to support an external pen tester. Now with this service, you can go in and even say, "Mr. Customer, we can do a test with you in a couple of minutes. We have installed a Docker container. Within 10 minutes, we have the pen test started. That's it and then we just wait." And I would say we are seeing so many aha moments then. On the partner side, when they see NodeZero the first time working, it's like they say, "Wow, that is great." And then they walk out to customers and show it to their typically at the beginning, mostly the friendly customers like, "Wow, that's great, I need that." And I would say the feedback from the partners is that is a service where I do not have to evangelize the customer. Everybody understands penetration testing, I don't have to describe what it is. The customer understanding immediately, "Yes. Penetration testing, heard about that. I know I should do it, but too complex, too expensive." Now for example, as an MSSP service provided from one of our partners, it's getting easy. >> Yeah, and it's great benefit there. I mean, I got to say I'm a huge fan of what you guys are doing. I like this continuous automation. That's a major benefit to anyone doing DevOps or any kind of modern application development. This is just a godsend for them, this is really good. And like you said, the pen testers that are doing it, they were kind of coming down from their expertise to kind of do things that should have been automated. They get to focus on the bigger ticket items. That's a really big point. >> Exactly. So we free them, we free the pen testers for the higher level elements of the penetration testing segment, and that is typically the application testing, which is currently far away from being automated. >> Yeah, and that's where the most critical workloads are, and I think this is the nice balance. Congratulations on the international expansion of the program, and thanks for coming on this special presentation. I really appreciate it. Thank you very much. >> You're welcome. >> Okay, this is theCUBE special presentation, you know, checking on pen test automation, international expansion, Horizon3.ai. A really innovative solution. In our next segment, Chris Hill, Sector Head for Strategic Accounts, will discuss the power of Horizon3.ai and Splunk in action. You're watching theCUBE, the leader in high tech enterprise coverage. (steady music)

>>Okay, welcome back. Everyone. Live cube coverage here in Las Vegas for Amazon re Mars hot event, machine learning, automation, robotics, and space. Two days of live coverage. We're talking to all the hot technologists. We got all the action startups and segment on sustainability and F pan hero for vet global lead, Amazon sustainability data initiative. Thanks for coming on the cube. Can I get that right? Can >>You, you, you did. >>Absolutely. Okay, great. <laugh> thank >>You. >>Great to see you. We met at the analyst, um, mixer and, um, blown away by the story going on at Amazon around sustainability data initiative, because we were joking. Everything's a data problem now, cuz that's cliche. But in this case you're using data in your program and it's really kind of got a bigger picture. Take a minute to explain what your project is, scope of it on the sustainability. >>Yeah, absolutely. And thank you for the opportunity to be here. Yeah. Um, okay. So, um, I, I lead this program that we launched several years back in 2018 more specifically, and it's a tech for good program. And when I say the tech for good, what that means is that we're trying to bring our technology and our infrastructure and lend that to the world specifically to solve the problems related to sustainability. And as you said, sustainability, uh, inherently needs data. You need, we need data to understand the baseline of where we are and also to understand the progress that we are making towards our goals. Right? But one of the big challenges that the data that we need is spread everywhere. Some of it is too large for most people to be able to, um, access and analyze. And so, uh, what we're trying to tackle is really the data problem in the sustainability space. >>Um, what we do more specifically is focus on Democrat democratizing access to data. So we work with a broader community and we try to understand what are those foundational data sets that most people need to use in the space to solve problems like climate change or food security or think about sustainable development goals, right? Yeah. Yeah. Like all the broad space. Um, and, and we basically then work with the data providers, bring the data to the cloud, make it free and open to everybody in the world. Um, I don't know how deep you want me to go into it. There's many other layers into that. So >>The perspective is zooming out. You're, you're, you're looking at creating a system where the democratizing data means making it freely available so that practitioners or citizens, data, Wrangler, people interested in helping the world could get access to it and then maybe collaborate with people around the world. Is that right? >>Absolutely. So one of the advantages of using the cloud for this kind of, uh, effort is that, you know, cloud is virtually accessible from anywhere where you have, you know, internet or bandwidth, right? So, uh, when, when you put data in the cloud in a centralized place next to compute, it really, uh, removes the, the need for everybody to have their own copy. Right. And to bring it into that, the traditional way is that you bring the data next to your compute. And so we have this multiple copies of data. Some of them are on the petabyte scale. There's obviously the, the carbon footprint associated with the storage, but there's also the complexity that not everybody's able to actually analyze and have that kind of storage. So by putting it in the cloud, now anyone in the world independent of where of their computer capabilities can have access to the same type of data to solve >>The problems. You don't remember doing a report on this in 2018 or 2017. I forget what year it was, but it was around public sector where it was a movement with universities and academia, where they were doing some really deep compute where Amazon had big customers. And there was a movement towards a open commons of data, almost like a national data set like a national park kind of vibe that seems to be getting momentum. In fact, this kind of sounds like what you're doing some similar where it's open to everybody. It's kinda like open source meets data. >>Uh, exactly. And, and the truth is that these data, the majority of it's and we primarily work with what we call authoritative data providers. So think of like NASA Noah, you came me office organizations whose mission is to create the data. So they, their mandate is actually to make the data public. Right. But in practice, that's not really the case. Right. A lot of the data is stored like in servers or tapes or not accessible. Um, so yes, you bring the data to the cloud. And in this model that we use, Amazon never actually touches the data and that's very intentional so that we preserve the integrity of the data. The data provider owns the data in the cloud. We cover all the costs, but they commit to making it public in free to anybody. Um, and obviously the computer is next to it. So that's, uh, evaluated. >>Okay. Anna. So give me some examples of, um, some successes. You've had some of the challenges and opportunities you've overcome, take me through some of the activities because, um, this is really needed, right? And we gotta, sustainability is top line conversation, even here at the conference, re Mars, they're talking about saving climate change with space mm-hmm <affirmative>, which is legitimate. And they're talking about all these new things. So it's only gonna get bigger. Yeah. This data, what are some of the things you're working on right now that you can share? >>Yeah. So what, for me, honestly, the most exciting part of all of this is, is when I see the impact that's creating on customers and the community in general, uh, and those are the stories that really bring it home, the value of opening access to data. And, and I would just say, um, the program actually offers in addition to the data, um, access to free compute, which is very important as well. Right? You put the data in the cloud. It's great. But then if you wanna analyze that, there's the cost and we want to offset that. So we have a, basically an open call for proposals. Anybody can apply and we subsidize that. But so what we see by putting the data in the cloud, making it free and putting the compute accessible is that like we see a lot, for instance, startups, startups jump on it very easily because they're very nimble. They, we basically remove all the cost of investing in the acquisition and storage of the data. The data is connected directly to the source and they don't have to do anything. So they easily build their applications on top of it and workloads and turn it on and off if you know, >>So they don't have to pay for it. >>They have to pay, they basically just pay for the computes whenever they need it. Right. So all the data is covered. So that makes it very visible for, for a lot of startups. And then we see anything like from academia and nonprofits and governments working extensively on the data, what >>Are some of the coolest things you've seen come out of the woodwork in terms of, you know, things that built on top of the, the data, the builders out there are creative, all that heavy, lifting's gone, they're being creative. I'm sure there's been some surprises, um, or obvious verticals that jump healthcare jumps out at me. I'm not sure if FinTech has a lot of data in there, but it's healthcare. I can see, uh, a big air vertical, obviously, you know, um, oil and gas, probably concern. Um, >>So we see it all over the space, honestly. But for instance, one of the things that is very, uh, common for people to use this, uh, Noah data like weather data, because no, basically weather impacts almost anything we do, right? So you have this forecast of data coming into the cloud directly streamed from Noah. And, um, a lot of applications are built on top of that. Like, um, forecasting radiation, for instance, for the solar industry or helping with navigation. But I would say some of the stories I love to mention because are very impactful are when we take data to remote places that traditionally did not have access to any data. Yeah. And for instance, we collaborate with a, with a program, a nonprofit called digital earth Africa where they, this is a basically philanthropically supported program to bring earth observations to the African continents in making it available to communities and governments and things like illegal mining fighting, illegal mining are the forestation, you know, for mangroves to deep forest. Um, it's really amazing what they are doing. And, uh, they are managing >>The low cost nature of it makes it a great use case there >>Yes. Cloud. So it makes it feasible for them to actually do this work. >>Yeah. You mentioned the Noah data making me think of the sale drone. Mm-hmm <affirmative> my favorite, um, use case. Yes. Those sales drones go around many them twice on the queue at reinvent over the years. Yeah. Um, really good innovation. That vibe is here too at the show at Remar this week at the robotics showcases you have startups and growing companies in the ML AI areas. And you have that convergence of not obvious to many, but here, this culture is like, Hey, we have, it's all coming together. Mm-hmm <affirmative>, you know, physical, industrial space is a function of the new O T landscape. Mm-hmm <affirmative>. I mean, there's no edge in space as they say, right. So the it's unlimited edge. So this kind of points to the major trend. It's not stopping this innovation, but sustainability has limits on earth. We have issues. >>We do have issues. And, uh, and I, I think that's one of my hopes is that when we come to the table with the resources and the skills we have and others do as well, we try to remove some of these big barriers, um, that make it things harder for us to move forward as fast as we need to. Right. We don't have time to spend that. Uh, you know, I've been accounted that 80% of the effort to generate new knowledge is spent on finding the data you need and cleaning it. Uh, we, we don't have time for that. Right. So can we remove that UN differentiated, heavy lifting and allow people to start at a different place and generate knowledge and insights faster. >>So that's key, that's the key point having them innovate on top of it, right. What are some things that you wanna see happen over the next year or two, as you look out, um, hopes, dreams, KPIs, performance metrics, what are you, what are you driving to? What's your north star? What are some of those milestones? >>Yeah, so some, we are investing heavily in some areas. Uh, we support, um, you know, we support broadly sustainability, which as, you know, it's like, it's all over, <laugh> the space, but, uh, there's an area that is, uh, becoming more and more critical, which is climate risk. Um, climate risk, you know, for obvious reasons we are experienced, but also there's more regulatory pressures on, uh, business and companies in general to disclose their risks, not only the physical, but also to transition risks. And that's a very, uh, data heavy and compute heavy space. Right. And so we are very focusing in trying to bring the right data and the right services to support that kind of, of activity. >>What kind of break was you looking for? >>Um, so I think, again, it goes back to this concept that there's all that effort that needs to be done equally by so many people that we are all repeating the effort. So I'll put a plug here actually for a project we are supporting, which is called OS climates. Um, I don't know if you're familiar with it, but it's the Linux foundation effort to create an open source platform for climate risk. And so they, they bought the SMP global Airbus, you know, Alliance all these big companies together. And we are one of the funding partners to basically do that basic line work. What are the data that is needed? What are the basic tools let's put it there and do the pre-competitive work. So then you can do the build the, the, the competitive part on top of it. So >>It's kinda like a data clean room. >>It kind of is right. But we need to do those things, right. So >>Are they worried about comp competitive data or is it more anonymized out? How do you, >>It has both actually. So we are primarily contributing, contributing with the open data part, but there's a lot of proprietary data that needs to be behind the whole, the walls. So, yeah, >>You're on the cutting edge of data engineering because, you know, web and ad tech technologies used to be where all that data sharing was done. Mm-hmm <affirmative> for the commercial reasons, you know, the best minds in our industry quoted by a cube alumni are working on how to place ads better. Yeah. Jeff Acker, founder of Cloudera said that on the cube. Okay. And he was like embarrassed, but the best minds are working on how to make ads get more efficient. Right. But that tech is coming to problem solving and you're dealing with data exchange data analysis from different sources, third parties. This is a hard problem. >>Well, it is a hard problem. And I'll, I'll my perspective is that the hardest problem with sustainability is that it goes across all kinds of domains. Right. We traditionally been very comfortable working in our little, you know, swimming lanes yeah. Where we don't need to deal with interoperability and, uh, extracting knowledge. But sustainability, you, you know, you touch the economic side, it touches this social or the environmental, it's all connected. Right. And you cannot just work in the little space and then go sets the impact in the other one. So it's going to force us to work in a different way. Right. It's, uh, big data complex data yeah. From different domains. And we need to somehow make sense of all of it. And there's the potential of AI and ML and things like that that can really help us right. To go beyond the, the modeling approaches we've been done so >>Far. And trust is a huge factor in all this trust. >>Absolutely. And, and just going back to what I said before, that's one of the main reasons why, when we bring data to the cloud, we don't touch it. We wanna make sure that anybody can trust that the data is nowhere data or NASA data, but not Amazon data. >>Yes. Like we always say in the cube, you should own your data plane. Don't give it up. <laugh> well, that's cool. Great. Great. To hear the update. Is there any other projects that you're working on you think might be cool for people that are watching that you wanna plug or point out because this is an area people are, are leaning into yeah. And learning more young, younger talents coming in. Um, I, whether it's university students to people on side hustles want to play with data, >>So we have plenty of data. So we have, uh, we have over a hundred data sets, uh, petabytes and petabytes of data all free. You don't even need an AWS account to access the data and take it out if you want to. Uh, but I, I would say a few things that are exciting that are happening at Mars. One is that we are actually got integrated into ADX. So the AWS that exchange and what that means is that now you can find the open data, free data from a STI in the same searching capability and service as the paid data, right. License data. So hopefully we'll make it easier if I, if you wanna play with data, we have actually something great. We just announced a hackathon this week, uh, in partnership with UNESCO, uh, focus on sustainable development goals, uh, a hundred K in prices and, uh, so much data <laugh> you >>Too years, they get the world is your oyster to go check that out at URL at website, I'll see it's on Amazon. It use our website or a project that can join, or how do people get in touch with you? >>Yeah. So, uh, Amazon SDI, like for Amazon sustainability, that initiative, so Amazon sdi.com and you'll find, um, all the data, a lot of examples of customer stories that are using the data for impactful solutions, um, and much more >>So, and these are, there's a, there's a, a new kind of hustle going out there, seeing entrepreneurs do this. And very successfully, they pick a narrow domain and they, they own it. Something really obscure that could be off the big player's reservation. Mm-hmm <affirmative> and they just become fluent in the data. And it's a big white space for them, right. This market opportunities. And at the minimum you're playing with data. So this is becoming kind of like a long tail domain expertise, data opportunity. Yeah, absolutely. This really hot. So yes. Yeah. Go play around with the data, check it outs for good cause too. And it's free. >>It's all free. >>Almost free. It's not always free. Is it >>Always free? Well, if you, a friend of mine said is only free if your time is worth nothing. <laugh>. Yeah, >>Exactly. Well, Anna, great to have you on the cube. Thanks for sharing the stories. Sustainability is super important. Thanks for coming on. Thank you for the opportunity. Okay. Cube coverage here in Las Vegas. I'm Sean. Furier, we've be back with more day one. After this short break.

(digital music) >> Welcome back to VeeamON 2022. We're in the home stretch, actually, Dave Nicholson and Dave Vellante here. Daniel Fried is the general manager and senior vice president for EMEA and Worldwide Channel. Daniel, welcome to theCUBE. You got a big job. >> No, I don't have a big job. I have a job that I love. (chuckles) >> Yeah, a job you love. But seriously Veeam, all channel. I mean it has been. >> Yeah, I mean, it's something which just, just a few seconds on, on that piece here, the channel piece, it's something that I love because the ecosystem of partners, an ecosystem of partners, is something which is spending its time moving and developing and changing. You've got a lot of partners changing their roles, their missions, the type of services, type of product that they offer. They all adapt to what the market needs and all the markets around the world are very different because of all these different cultures, languages, and everything. So it's very interesting. In the middle of all that, you know, these tens of thousands of partners and you try to create and try to understand how you can organize, how you can make them happy. So this is fantastic. >> So you're a native of the continent in Europe, obviously. We heard Anton, today, who couldn't be here or chose not to be here, cause he's supporting family and friends in Ukraine. What's the climate like now? Can you share with us what's it like Europe? Just the overall climate and obviously the business climate. >> So the overall climate, the way I see it or I feel it, and obviously there may be some different opinions, that I will always appreciate as also very good opinions. My view is that it seems in Europe that there are a distinction between what people do for businesses, Their thinking for the business, which may be impacted by the situations that we know in Europe between, because of obviously the issues between Ukraine, because of Russia, let's put it this way. And then there is the personal view, which is okay. That happens from time to time, but life continues and we just continue pushing things and enjoying life, and getting the families together and so on and so forth. So, this is in most of the countries in Europe. Obviously, there are a number of countries, which are a little bit more sensitive, a little bit more impacted. All the ones who are next to Russia, or Belarus, so on and so forth. From an emotional standpoint, which is totally understandable. But overall, I'm pretty impressed by how the economy, how people, how the businesses are, you know, continue to thrive in Europe. >> Has Brexit had any...? What impact, if any, has it had? >> So for us Veeam, the impact is... So first there is an impact which is on the currencies. So all the European currencies are no, have slowed down and, and the US dollar is becoming much stronger. >> Despite its debt. >> Right. >> Shouldn't be, but yeah. >> But that doesn't impact on the business. I just... >> Yeah. Right. >> So everything which is economical, macroeconomical is impacted. We have the inflation also, which has an impact, which also has increased because of the oil, because of the gas of everything that they have been stuck, to be stuck. But people get used to it. As Veeam from a business standpoint, one of the big things is we stopped sales, selling into Russia and into Belarus and we are giving our technology, our product, our solutions for free to Ukraine. And that was a piece of the business that we were doing, within EMEA, which was non-neglectable. So it's, I would say a business hole, now that we need to try to fill with accelerating the business service in the other countries of Europe. >> I mean, okay. So thank you for that but we really didn't see it in last quarter's numbers that you guys shared with I mean, IBM. Similarly IBM said, it's noticeable, but it's not really a big impact on our business, but given the cultural ties that you had to Russia and the affinity, I mean you knew how to do business in Russia. It's quite remarkable that you're able to sort of power through that. How about privacy in, around data, in Europe, particularly versus the US? it seems like Europe is setting the trend on things like privacy, certainly on things like acquisitions, we saw the arm acquisition fail. >> Yeah. So there is a big difference. Effectively, there is a big difference between, I would say North America and the rest of the world. And I would say that EMEA, and within EMEA would say the EU is leading very much on what we call server sovereign cloud. So data privacy, which in other words, data is to as much as possible is to remain within either the EU or better within each of the countries, which means that there is again... It's I would say for in EMEA it's good, I would say for the business, for the partners, because then they have to develop around the cloud a number of functions to ensure that because of this data privacy, because of this GDPR or rules and things, all the data remains and resides in a given geographical environment. So it's, which is good because it creates a number of opportunities for the partners. It makes obviously the life of customers and their self a bit more difficult. But again, I think it's good. It's good. It's part of all the way we structure and we organize. And I think that it's going to expand because data is becoming so key, a key limit, a key asset of companies that we absolutely need to take care of it. And it is where Veeam plays a big role in that because we help paying companies managing their data and secure the data in sort of way. >> Yeah. Ransomware has been a big topic of conversation this week. Do you sense that the perception of that as a threat is universal? Are there, are there differences between North America and the EU and other parts of the world? Universal? >> Yeah, it is universal. We see that everywhere. And I think this is a good point, a good question too, is that it's very interesting because we need to get acquainted to the fact that we are going to ever. And so we are going to be attacked. No way out, no. There... Anybody the morning, is waking up, is going on emails and click clicking on an email. Too late. Was a run somewhere. What can you do against that? You know, all humans make mistakes. You can't so it'll happen, but where, where it's absolutely very important and where Veeam plays a big role and where our partners are going to play an even bigger role with our technology is that they can educate the customers to understand that, to have run somewhere is not an issue. What has, what happened is not a problem. What they have to do is to organize so that if they have run somewhere, their letter is safe. And this is where our place a big place. A couple hours back, I was, I was doing a kind of bar with something else. It's totally crazy, but that's okay. I'm going to say it. It's about the COVID. What, no, what do we do? Do we have, do we have something against COVID? No. People were going to get COVID, certainly many people still doing it, but what is important is to be capable of not being too sick. So it is the prevention, which is important. It's the same thing here. So there is this mindset we have psychologically with the partners and they have, they have to provide that services to their customers on how to organize their data using the technology of Veeam in order to be safe, if anything happens. >> So another related question, if I may. When Snowden blew the whistle on the NSA and divulged that the NSA was listening to all the phone calls, there was seemed to be at the time, as I recall, a backlash sentiment in Europe, particularly toward big tech and cloud providers and skepticism toward the cloud. Has the pandemic and the reliance on cloud and the rise of ransomware changed that sentiment? Had the sentiment changed before then? Obviously plenty of Cloud going on in Europe. But can you describe that dynamic? >> Yeah, no, I think that's... Yeah. I think that people were too... You know, as usual. It absolutely reminds me when I was at VMware, when we went from the physical boxes to the virtual machines. I remember the IT people in the company said, "No, I want to be capable of touching." Something here. When you talk about cloud, you talk about something which is virtual, but virtual outside, even outside somewhere. So there is a resistance, psychological resistance to where is my data? How do I control my data? And that is, I think that is very human. Then you need to, you know, it takes time. And again, depending on the cultures, you need to get acquainted to it. So that's what happened be before the pandemic, but then the pandemic took place. And then there was a big problem. There was nobody anymore in the data centers because they couldn't work there and then people were starting to, to work remotely. So the IT needed to be organized to compensate for all these different changes. And cloud was one of them where the data could be stored, where the data could reside, where things could happen. And that's how actually it has accelerated at least in a number of countries where people are a bit leg out to accept the adoption of cloud, cloud-based data. >> So is there a difference in terms of the level of domination by a small group of hyperscale clouds versus smaller service providers? You know, in theory, you have EU behaving in a unified way in sort of the same way that the United States behaves in sort of a federated way. Do you have that same level of domination or is there more, is there more market share available for smaller players in cloud? Any regional differences? >> Yeah. There are big differences. There are big differences again, because of this sovereignty, which is absolutely approved very much in Europe. I'm tell you, I'm going... I'm giving you an example that it was in, I think in October last year, somewhere. The French, the French administration said, "We don't want anymore. Any administration investing in Microsoft 365, because the data is in Azure. The data is out in the cloud." That's what they said. So now these last days, this last week that has changed because Microsoft, you know, introduced a number of technologies, data centers in France, and so on and so forth. So things are going to get better. But the sovereignty, the fact that the data, the privacy of data, everything has to remain in the countries is doing something like the technology of the hyperscalers is used locally wrapped by local companies like systematic writers, local systematic writers, to ensure that the sovereign is set and that the privacy of the data is for real and according to GDPR. So again, it's a value add. It makes things more complex. It doesn't mean that the Google, the Google cloud, the Azure, or the AWS are not going to exist in Europe, but there are going to be a number of layers between them and the customers in order to make sure that everything is totally brought up and that it complies with the EU regulations. >> Help us understand the numbers, Daniel. So the number of customers is mind-boggling it's over 400,000 now, is that right? >> Yeah. Correct. >> Yes. Comparable to VMware, which is again, pretty astounding and the partner ecosystem. Can you help us understand the scope of that? Part one. part two is how do you service and provide that partnership love to all those companies? >> The partners. So yeah, we have about 35,000 around the world, 35,000 partners, but again, it's 10 times less than Microsoft, by the way. So, and this is very interesting. I often have the questions, how do we manage? So first of all, we do tiering, like anybody does. >> Sure. >> We have an organization for that. And we have a two chair sales motion. That means that we use the distributors to take care of the mass, the volume of the smaller, smaller partners. We help the distributors, we help. So it's a leverage system. And we take care obviously more directly, of the large partners or the more complex partners or the ones of interest. But we don't want to forget any of those because even the small one is very important to us because he has these customers maybe in the middle of nowhere, but he's got a few of them. And again, to have a few of these customers, when you adapt, you know, it makes.. At the end, it makes a big business. You know, one plus one plus 1 million times makes, you know, makes huge things. And plus we are in the recurring business now, now that we've introduced three, four years ago, our subscription licenses, which means that it's only incremental. So it's just like the know the telephony, know the telephony business, where the number, the cell phone plans, you know, it's always grabbing as many as possible consumers in this case. So it was the same thing or I have the same, the same kind of, I do a parallel with the French, the French bakery, the French Boulangerie where I say they do their business with the baguette. And then from time to time, they sell the patisserie or they sell the cake, cookie or something, but the same of small things makes a big things. So it is important to have all these small partners everywhere that, that have their small customers or big customers, and that can serve them. So that's that's way. We segment by geography and what we do now is, it is something which is new. We segment by competencies. So it's what I call the soft segmentation. Because if not, we will have a lot of these partners competing to each other, just to sell Veeam. Veeam being number one in many countries, that is what is taking place. And we want them to be happy. We want, we don't want them to fight against each other. So what we do is we do soft segmentation and soft segmentation is this partner is competent in this field with that kind of use case doing this or this or this or this. It's just like you, when you go to the restaurant, you want the restaurant next to your place. So you click for the geography and then you want to, to go for Indian food. So you click restaurant Indian food, and then you want something. So we want to give that possibility to the customers to say, "Yeah, I think I know what I want." And then you can just click and get the partners or the list of partners, which are the most suited for, for his needs. So it's what I call the soft segmentation. The other thing which is important is the network. It's very interesting because when we look at a lot of companies, it's not the network. You've got VARs, you've got cloud and service providers. You've got SARs, you've got all the things. But if you take each of those individually, they don't have the competencies to answer all the request of the customer. So the networking is partnering with partner. That means to have the, the connection so that the partner A who has his customer, but these customer's are requests that this partner cannot fulfill because it's not its competency. That it's going to find the partners or the other partners that can feel this competency and work together. And then it's between them to have the model that they want so that together they can please the customer with their requests. >> Do you ever want to have VeeamON... I mean, I'm happy it's in the US and I like going to Europe, but you, have you ever want to have VeeamON in Europe? >> Yeah, we have VeeamON. We have many VeeamONs in Europe. >> Yeah. The mini ones. Okay. >> VeeamON tours. >> Globally. So where do you have them? >> Europe in APJ, that's what we do. Yes. >> Where do you do it in a APJ? In Japan, obviously in... >> Yeah. I don't know all the locations, tens and tens of them. >> A lot of them. Okay. >> The small ones. What we do, replicate what is done here on one day and then it goes. >> And you'll do that in UK. France, Germany. >> Yeah. Yeah. >> Local. >> And also small countries in Saudi, in South Africa, in Israel, in Bulgaria, in all these countries. Because, you know, we can be virtual. That's nice. >> Oh, right. >> But I love to be having a breakfast or a lunch or drink next to a partner or a customer because you learn so much more. The informal information is so important to understand how the business and how the market develops and what the needs are of customers and so on and so forth. >> How was the European attendance this year? It must have been down. It's hard to get into US. It's actually easier to go back to Europe. >> Virtually I, don't have the numbers, but I- >> No. Virtual. I'm sure it was huge. Yeah. But physical. >> Physical here, we've got about 300, 300 Europeans. >> Yeah. Okay. Out of, do we know? What are the numbers here? Do we know? Have we heard numbers? >> I know 45 was supposed to be around 45K combined. >> That's hybrid. >> So, yeah. >> It's hard to get into the US. We're still figuring that out. So I'm not surprised, but now you... >> But it's complimentary. Yeah. >> Do you go to 'em all? >> No >> You can't. >> No. That's not possible. I cannot. I actually, I would love... >> But some, yes. >> I would love to be capable of duplicate myself, but- >> You go to the one. >> I'm unique. >> You go to the one in France, obviously. Yeah? >> Yeah. Usually in France. Well... >> Depends if you're home. >> Yeah. You know, that is interesting is, the way we organize, the way we organize in Europe is I really want the local leaders to be the ones managing the countries. I'm there to support. I'm not there to be, you know? Yeah. The big boss is coming, he showing. No. It is not that. Again, if they request me to come, if they want me to pass a message to certain type of customer partners, I'll do that. But I don't want to run the show. It's not the way I manage that. >> Yeah. I get that. You want to respect that as if you show up in France and that's your home country, it's like rat man showing up here. It's like taking over the stage. You'll be like, you know, it's our turn. >> But it's just like, you know, I give you another example. So obviously we have... It's even the headquarters, the EMEA headquarters is in France. Right? But it is the French office. And I don't go there. I try not to be there because it is the place for the French people taking care of the French market. And for the French manager, if I go there, everybody's going to come and ask me questions and ask me to make decisions and things. No, they have to run their business. >> So where do you spend, where and how do you spend your time? >> In airports and in planes. (indistinct) What are you asking? >> Of course. >> Do you have another question? >> Actually, if we have time really quickly on just on that subject of sovereignty, we are here in Nevada just across the border, California. People in California have no problem at all, replicating things here for disaster recovery, because it's in the US. Now, is there sort of a cultural sense that tearing down those borders from a sovereignty perspective within Europe would fundamentally change the business climate and maybe tilt things in favor of the AWS and GCPs of the world instead of local regional business? The joke that I heard recently from someone, I thought it was funny. I don't know if it would offend either Germans or French, but it was that it was that AWS was confused and they were planning on putting a data center in Strasbourg, because they thought it was in Germany and it was- >> A joke. >> But the point is, the point is it's like, it's a gum bear. >> Is it true? >> No. But it was a dumb American joke. This was told by a French person basically saying... >> But this person was certainly not from- >> Yes. Right. >> Tell you, because I would've been a very bad way. >> But the point is this idea that you have these mega hyper clouds coming in and saying, "Okay, boom, we're putting one here and you're going to use us regardless of the country you're in." How does that, you know... Is there a push within the EU to tear those barriers down? Or are those sovereignty walls enjoyed by the majority because of the way that it changes the business climate? Any thoughts from that perspective? >> Oh yeah. Yeah. To me, it's very simple. It is a hybrid thing. That means that these big hyperscalers are there, not going to be used but what they do is they're going to partition themselves and work with these local people. So that their big thing appears as being independent, smaller data centers. That's the only thing, you know. You build a house and then you put walls between the different, between the different rooms. That's the only thing that happens. So it's not at all, no. At all to Azures or Google cloud. No, it's not that. It just means that there is a structure and organization that has to be put in place in order that the data resides in given geographical locations using their infrastructures, their technologies. That make, does it make sense? >> Yeah. Except that it puts them in the position of having to have a physical presence in each place, which is advantageous in one way and maybe less efficient in another. >> Yeah. But there are some big markets. >> Yeah. And they eventually got to get there. Right. I mean... >> Yeah. >> They started it. One patient in the world where they restarted was in ANZ. And that's what they did. You know, what, 5, 6, 7 years ago. They put their data centers over there because they wanted to gain the Australian market and the New Zealand market. >> So build it and they will come. Daniel, thanks so much for coming to the theCUBE. Very interesting conversation. >> Pleasure. >> Appreciate it. >> Thank you very much. >> All right, we're wrapping up. Day two at VeeamON 2022. Keep it right there. Dave and I will be back right after this break. (vibrant music)