Nocode Security Automation – Torq, Ofer Smadari
Torq CEO Ofer Smadari explains how nocode tools will drive security automation.
Transcript
This is Textron TV. Hey guys. Thanks for the throw.
We're here with offer smadari. Who's the CEO for torque and they're a specialist in the land of security Automation and have some Innovative stuff in the no code category and they just raised 80 million dollars in additional funding. Hey over welcome the show.
Hey, thank you. Thank you for having me. We haven't been talking about security automation for years and it seems like it's never quite got the level of acceptance or adoption that you would think that it would based on all our issues of the day and including the shortage of people that we don't have in the space.
From your perspective what's been the challenge in terms of getting more security processes automated? So if that is simple until a few years ago. Building every any security process would demand like heavily engineering effort.
Meaning that you you will need engineer. To teach by a code all of you like security product. Okay, and then code just by hand all the operation processes and that acquired like something that of people just walk on, you know commission platform like different generation of automation.
And due to that. At least it was according to what I heard from gather only 10% of the organization adopted in automation platform. Because like there is something that you need just to deal with it cost so much and didn't have like enough Engineers to build that.
And you know the way we we are doing today, we we build kind of like in a fashion layer that's health and skills Engineers or only will automation just like driving job motion. meaning no engineering so I don't have to be a programmer per seed automate things. Whereas in the past.
I have to find a security engineer who knew how to write code and that was part of the challenge. Of course, huh as we go along. How much do I need to know about the underlying processes to automate them?
And I'm asking the question because the processes seem to be changing more frequently than ever. So, how do I keep Pace with the changes in the environment and still automate things? so You know our bathroom.
It's not required any any plugins or connectors. You can just connect to anything that has like API. Okay, meaning that you can change your playbooks of workflows every day every hour and you know build something that is suitable for your needs.
We are providing something called templates Library, which means that like like a every template like a new idea. Okay on a process that you can automate we got the song. Okay, and it can be in production in if you are maybe less.
Does that include a set of templates? I mean, how much do I need to know where there's some common practices that you guys have already automated and all I'm doing is reusing them within the context of a no-code platform or how does it work? So we have rebuilt templates.
We have a hundreds of them that almost out of the box. You just need to do some kind of like configuration. That is very easy.
No coding. Just just you know, let's say you need to coordinate your own integration. We which takes like minutes to do.
And you can be on production very fast. What allowed you guys to do this per se because the challenge has been around forever. So what's the secret sauce that enabled you guys to build a new code approach to security automation.
So if merely because almost everything has API today for like the past like three beautiful years almost every security platform. In fact of planning. If you can connect to any any kind of event or from cross track to Army with two Microsoft unlike a very very easy Manner and and again time is changed since the last five years in Canada is rising very fast.
So everything can be very easy to connect. Who's using this tool? Do you think it's gonna be the security operations team or are we seeing more of the responsibility for automating the back-end processes shifting over to more of the mainstream it operations folks and this gives them a tool that allows them to find the whole thing more accessible.
So that's a good question. So first thing we have today, you know, like customers. We have more than 10 15 different things that are in the platform.
We have the classic Unity the threat hunting teams. So guys devil Dev pick up and it security so we created like like a single language that you can walk on together that the platform has like a Equilibration option, okay, which meaning that you can walk on a single workflow 10 15 people? Okay.
A single Stanley which different permissions and you can build your things with like whole bunch of things that are usually don't work together. We hear a lot about devsecops lately. Do you think that we're gonna see more of a melding of security operations and devops and network operations.
And this is kind of part of that larger Trend that we're seeing and how far of a shift left for that matter will we see? So that depends on building Edition. Usually when you're walking with company that like boning the cloud you see more like devset cops guys, but you know, I guess is always you will adopt more a lot of applications and you will be Cloud native applications, you know cloudy very like traditional Enterprise.
We will see more their thick off roles. And I think I think today they take a very centralized role today in almost like every every company that I adopting cake rapidly. do you think that part of our problem is that we're so fragmented when it comes to security and then each team is doing its own little thing that we don't have a cohesive approach and the bad guys are exploiting that Sure, I guess every organization adopting.
In different security framework some some of them. Can you see some mindment other ones? Can you like niece or other sort of security if I walk and they're trying to adopt, you know dictation to go any any poster.
That's that's these in you know, again that depends on The Bachelor everything but I believe in this like an endless motion, you will always need to cover your infrastructure or applications or endpoints with new detection platform. We think capabilities and then you will need no tournament processes because you cannot you know, you cannot change. Alerts all day.
We hear a lot about Ai, and the context of automation is that for real or is that just wishful thinking or what's the state of the industry right now? So today I think we should thinking I believe that as long as we will have a commodity that we can you know, establish AI processes in our platform. Well about to do that, but we'll leave like more data.
Do that. What's the challenge in getting more data? Is it just pulling it from those apis?
I mean, is it accessible and it's just now a question of effort or is there another challenge? So both it's a matter of like Focus. Your area like if you start up you have your own Target, you need to achieve them and alongside that you need to build your technology.
So I guess that like different steps on how you're building your your Tech stack. Okay, and when you're training after the job like very high-end Technologies, it's like a beginning investment. Obviously, you can use like a third party angels that can help you we are doing that today, but we will have some some of you know, Let's go AI, you know platform in the next like next year.
So what's next for you guys? What's the plan for the funding? What do you guys thinking about in terms of the next challenges for the company?
So we are we'll funded we are. Super world capitalized. We have a great investors.
We are growing rapidly in the US. We just don't feeling so third quarter of selling. We we did 40 customers.
of them Fortune 50 into like small medium Enterprises From any any interest from the security industry from the e-commerce from you know? Financing fintech almost like it's across industry cross size. refrigerants we feel like method option.
You know, just just to give you give you like an example in like six months. We have customers and build more than 200 automations in production. For like figure classes.
without any engineering All right, folks here heard it here. The long held promise of automation is coming this way. Thanks to a no code platform and hopefully that will mitigate some of this chronic shortage of folks that we're seeing out there offer.
Thanks for being on the show. Thank you. All right back to you guys in the studio.