Go back

Pitching security startups to VCs in the AI era

from Risky Business Features

35m 15s

Pitching security startups to VCs in the AI era

The podcast explores how AI has transformed the process of pitching cybersecurity startups to venture capitalists. While AI accelerates product development and allows faster proof-of-concept creation, simply adding AI to a pitch deck no longer stands out—true differentiation comes from uniquely directed, meaningful innovation. The barrier to entry in startup creation has lowered, but competition remains fierce, with only founders who solve hard, defensible problems and demonstrate genuine uniqueness standing out. Decibel Partners emphasizes investing early in technical founders, valuing deep technical expertise, founder story, and authenticity over flashy metrics. Early-stage investment decisions are built over years of relationship-building, with VCs often meeting founders long before funding. The episode stresses that successful startups don’t require massive funding—small, targeted investments can be more effective based on market fit and risk. Founders are advised to focus on storytelling, clearly articulate their unique motivation and product edge, and avoid generic solutions. Ultimately, the core of a compelling pitch remains founder conviction, technical depth, and the authenticity of a solution that's both novel and sustainable—values that remain central to cybersecurity innovation.

Transcription

6828 Words, 36238 Characters

English
(upbeat music) - Hey everyone and welcome to this special edition of Risky Business Features, my name's Patrick Gray. And today we're doing something a little bit different. My colleague, James Wilson, will be joining me for this one. And we're both chatting with John Sakota, who is the, I believe, the managing partner over at Decibel Partners, which is a VC firm based in Bay Area in the United States. Now, of course, Decibel Partners actually owns a chunk of Risky Business media and we work pretty closely across Decibel's portfolio companies. Actually, the way that all came together is we were already working with a bunch of Decibel companies already and we thought we'd just formalize the arrangement more or less. And now these days, I scope out some investments for them and what not and I've done a couple of them with Decibel so far. And we thought it would be a good idea to bring John onto the show. And we could have really a conversation about how it is that you, dear listener, can pitch a venture capitalist on your wonderful cyber security startup idea. And not only that, but we can hear from John about how AI has changed that process because obviously the window for what's possible has really changed a lot. Thanks to the emergence of large language models. So first of all, James, John, thank you for joining me. - Thanks for that, great to be here. - Thank you so much, Pat. - Long time listener, so excited that we're finally doing our first show together. So I'm really grateful for the partnership and was excited that we were gonna tackle this topic together. - Yeah, so let's just jump right into it. And I guess, I mean, it's a big topic, right? Like how do you pitch your cyber security startup? But I think really what we're gonna be doing in this podcast is talking about how pitching a cyber security startup to a venture capitalist has changed. And it really has because everything in some ways has just got so much easier. It's a lot easier to build software, to build applications. So I guess in some ways, the bar has been really raised in terms of like how cool your idea needs to be to get up. I mean, do you agree with that statement? I suppose that's a good place to start. - Well, let's talk about what AI is and what it isn't first. Just to make sure that we're clear about how it's helping people and then maybe some of the myths around like how magical it can be. So obviously if you have a really interesting and unique idea and you are really great at directing AI to help accelerate the production and the development of that product, you can compress the timescale by which perhaps you can generate an idea, create a proof of concept, and maybe even create a product and put in people's hands. So that timescale may be a long time ago used to be months, maybe even quarters. Sometimes you had to raise the money in order to show people the proof of concept. The truth in the beginning is like, you have a PowerPoint, you have an idea. I'm trying to see what's in your eyes. The investor world is trying to imagine the world that you see. And it could be incredibly frustrating when you can't actually show people what that looks like until you actually build it. And then once you build it, sometimes people say, ah, like that starts to look more magical and starts to look more genuine. You can show off that genius a lot faster. So I do think the timescale by which you can create that is compressing, you don't need as much money. And so in sometimes days or weeks, you can show people a proof of concept and that is magical. Now, I don't think AI magically creates unique ideas. I think if you don't really know how to direct AI in a unique way, you can build very generic products and generic products I don't think necessarily stand out in markets. So in some ways, if you think about AI as being generalizable intelligence and you think about startups as being like the expression of really unique ideas, they don't always go hand in hand. And I think sometimes people get confused when they put them together because in some ways, like the more generic an idea comes across, the harder it is for a founder to stand out in the crowd. And it harder it is for a VC to believe that that idea will be durable. - I mean, we've seen also this SaaS apocalypse stuff, right? The idea that like SaaS is in all sorts of trouble thanks to people being able to vibe code SaaS replacements. I don't personally buy into that theory so much. However, I think if anything, there is something to that when it comes to startups, which is the barrier to entry now is a lot lower, right? Which makes, I guess, the barrier to getting funding probably a little bit higher because you must see some ideas that you look at and say, well, that's cool, but someone else can come along and just throw that together vibe code that and then off they go, you're just gonna be swamped with competitors. So is that something that you have to think about now as an investor that you didn't have to think about previously? - Well, to maybe take pieces of that point that you made and try and address them individually. First is this concept that the barrier to entry is low and that maybe AI made it even lower because now we can vibe code or use AI to kind of get into the game with a relatively small amount of money. That's been true in software and in Silicon Valley startups for decades. I mean, you think about the cloud evolution, right? I used to go out and actually buy servers. You have to buy servers. You have to buy Oracle licenses. You have to buy Microsoft licenses. If you didn't do that, you actually-- - I do, I'm old. - Yeah, I know, I'm sorry Pat. Sometimes I have to tell these stories just to remind everybody what it was once like. But yeah, you used to go out and buy hardware and you bought proprietary software and we used to say to people, if you didn't have tens of millions of dollars, it was even just hard to go into a customer like JP Morgan or Morgan Stanley and say, hey, I've run my software on your environment because you needed to own Oracle and Son even to do that. So that changed with cloud and open source and made, you know, so the democratized access for everyone to build in the 2000s and 2010s. And now I think in the air, in the air of AI, you're seeing the acceleration of that trend. So just even more people can get in the game. But maybe the analogy I would use is, it still is like the Olympics. So just because you have maybe 100,000 people that want to run a race instead of 1,000 people that want to race, there still are only eight lanes. And so everyone's got to qualify to get, you know, into the top eight lanes to even get to the semi-finals or to get to the finals. So I think- - Can we call the LLM's like performance enhancing drugs in this metaphor because that'd make it a lot funnier? - I guess what I would say is like the LLM's and AI, it will make the best people on the field even better. But it does not necessarily change the math for everybody. So if you were not really destined to be a founder, and this is not really the game that you were intended to win, AI is not going to solve that. And I think that that is where I would say, yes, it can be a distraction to have 10,000 more people running your race. But the truth is if you put everyone in the New York City marathon, the same seven or eight people are still going to win, even though you just opened up the qualifying to everybody. - Well, maybe try to delve into that a little bit more. Like I take the point that when it's so easy to create a startup, you've got to really excel. But we're still sort of talking about in aggregate. And I wonder if there's differences in how AI is used that might help to, I guess, separate people outright. I can think of sort of three broad categories of how AI is used. Either you're using AI to get your product to market faster, better, whatever the metric is that you're looking for. You might be using AI directly in your product, and that's a particular selling point that's a differentiator for it. And then there's even, I guess, entirely new classes or products that are required because of either companies that are developing frontier AI capabilities or that they're using it so heavily. So if we think about across those three different lenses, right, and feel free to add more if there's others that come to mind, are there certain aspects of those different use cases or, I guess, formulas for what might be behind a startup that are more interesting to you at the moment? Maybe James, to reflect on your question for a second, I think that there's this moment in time, or everyone feels like AI is changing everything. But if you, for a second, remind yourself that the entire world has been obsessing about this technology now for years, right? I mean, chat GPT is three and a half years from the magical chat GPT moment. And then I think almost every founder and everybody in software has been obsessing over foundation models and their capabilities and coding agents for years. So I think it is fair to say that the diffusion of this idea into the startup ecosystem is relatively pervasive at this point. So I would say it's maybe not so helpful to fixate anymore on AI being this massive differentiator or even a massive new investment opportunity or sector area because it is so diffuse. And so I guess that takes me back to this point of like, what was the unique problem that you were trying to solve with or without AI? And then if AI is an accelerant great or if AI makes you an even better founder great, or if AI is the new frontier area that somebody else is deploying and therefore you can help because you've got some bespoke expertise. Those are all obviously great investment theses. But as a catch all category, I think. it no longer has the same meaning that it once had years ago. - So there was no longer true that I simply slapped AI on my pitch and I get millions of dollars from a VC. - It's not clear. And it's not clear even when it was true that that was a good idea, right? So I think when you look at the-- - Well, I think plenty of us realized that was not a good idea. - Well, I think if you look at the haves and have nots, you know, there was a separation of those who really knew what they were doing with AI and maybe those who maybe were just trying to fast follow. And those that really knew what they were doing are starting to really stand out from the crowd. And those that are fast following are finding that their products are not as successful. Maybe the co-pilot era looks like everyone had a chat but on their product and that doesn't seem to stand out anymore. You know, I think people are now, you know, they're very aware that it's very expensive to have inefficiently run language models. So, you know, if it costs a ton of money and takes a ton of time for AI to do its job 'cause you weren't really great at AI engineering, these things are starting to show now. And I think that that is the lesson learned in all this which is, you know, to the extent you were doing something unique, it can stand out. But if you weren't really doing anything unique, the market can see it now. - It's funny, right? Like I was having this conversation the other day where I was saying maybe we can think of AI, or AI coding is just another level of abstraction, right? So, you know, no one's written in machine code for a long time, right? But we don't say those people are, you know, don't know how to, right, we compute a code, you know, 'cause they're not doing assembly. Whereas, you know, now we get into the point where I think James, you said it didn't you, where it's the people who understand the level they're working at and a couple of layers lower in abstraction who tend to be the real expert. So, I guess what we're all saying here is, AI is just me, now, it's just normal, it's me. - Well, I don't know that it's meh as much as it is magical to the extent that the person using it has a magic power. But if the person using it doesn't have a magic power, then I think it is a just generalizable intelligence or generalizable capability, which might be great in certain work environments where you're really just trying to create efficiency around work that might have been commoditized to begin with. But the startup world does not work that way. The startup world is the exact opposite. It is trying to express human ingenuity and uniqueness in packaging that the world can consume in a short period of time as possible, where people have a window to exploit being unique and new. And if you're not doing that, then you're likely going to run into a commonization and competition. - Right, so I guess the first lesson we're talking about today is just slapping now with added AI into your pitch deck is not going to get a lot of attention. - I mean, it may still work for some, but I think it's a false sense of security. - Yeah, so look, so let's move on to talking about how one, how does one come in successfully pitch you on an idea? Because decibel, I think one of the things that's really interesting about decibel and one of the reasons I was interested in working with decibel is because you do the really early stage stuff, right? So you're not turning up once the business is rolling, once they've got a million bucks in ARR. I mean, you do a little bit of that as well, right? But most of what decibel does is it's like a couple of people with an idea, with a slide deck on a resume and a bit of experience who say, we've seen a problem, we've got a solution for the problem. And then I guess, I mean, how would you describe the fundamentals of what your role is in the process of sort of deciding whether or not that progresses or not? Because it's an interesting idea because there's so many little different things that you have to consider before you decide to tip money into a slide deck with a team behind it, right? So why don't you share a bit of light for the listeners on what your thought process is when you're weighing up an investment? - Yeah, first just to demystify this, I think everyone thinks that there's this magical process where you create an amazing deck. You set up a meeting, there's this magical meeting, and if you do everything right in that meeting, then there's a romance we decide to invest and everything is great. - I mean, there's even grifters out there I bet who are offering like courses on how to prepare the perfect deck, right? Like it's, and it's nonsense. - There's something to be said for like, what I would call generic fundraising. So generic fundraising, and this is not bad advice, but generic fundraising is, you know, have a great deck that articulates, you know, who you are, the problem that you're trying to solve, the market opportunity and why someone should invest, and then get those investors and pitch that to a lot of people and hope that, you know, you find the right investor. So I think that if I was going to maybe demystify that for cybersecurity founders, and there's a reason why I think we decided to pick a decibel, a domain of investing as early as possible. So pre-seed, seed, series A minus. Like really everyone knows what early looks like, right? It's not quite a product market fit company. It doesn't have obviously repeatable metrics. There's something, there's something to be done still, and generally say money doesn't solve all your problems when you're still trying to create something. So that, that's the area that we work in. And in general, technical founders really need to find investors who enjoy that phase and deeply appreciate and understand what's going on in that phase because there's only so much you can pitch or sell your way into success when you have a technical product because technical buyers and practitioners, the listeners to your show as an example, they're very critical of products. And if it's going to say that it does a certain thing, it really better do it. And I like to joke, like no cybersecurity practitioner picks up the phone and says, you know, I'm just dying to talk to a salesperson. So there's just not, there's not this like traditional buying universe in this domain. And similarly, the investing universe is non-traditional. So my first piece of advice to people about pitching is before you pitch, do your research on who are the kinds of investors who like these kinds of products, likes these kinds of sectors, likes this particular stage. 'Cause if you take a universe of 3,000 funds, you can get that down to a very, very small group of maybe dozens. Then I think it's super important to try to talk to people who've been through that process. So I always feel that there's, it's not very difficult to find a founder who's had some experience pitching us or getting to know us in some way. So I would love to be able to publish to the world like a set of documentation and APIs or an MCP protocol, but it's also just sometimes best to consume that through a founder's lens. And then after you've gotten some reference ability, then I always say, you know, don't wait too long to set up a meeting and go to know us. I think sometimes people feel like everything needs to be perfect and oftentimes these relationships are built up over a long period of time. - And that's exactly what I was wondering as you were going through that excellent advice, there is the one question that I didn't hear answered is when. Like when do I know, I guess on a couple of angles, when do I know I'm ready to an approach and invest a bit also like, yeah, again, always bring it back to AI, but AI makes it easier than ever to get the idea at least in a prototype stage to even approach those sort of friendly partners, design partners, get you maybe a foot in the door somewhere, but then there's the balance of how much do I bootstrap this, how much do I just go for VCO the election help us understand the many different, I guess, angles of how time and when does someone actually book that call with you? - Well, I think sometimes people feel like this is such a formal process that you only get one shot to pitch a VC and if you don't do well in that one amazing opportunity, then somehow you don't ever have another chance. So I'll be the first to say that that's really not how it works at all. I mean, I think oftentimes will meet a founder maybe even years before they've even decided to leave, let's say the company that they're working at to go and ideate and think about their idea, or while they're at that company, they'll ideate and they'll ideate with us. So we actually even have a community of people we call them future founders that are ideating and thinking about building something and they often want to spend time with our active founders to learn from them, sometimes they wanna advise them, sometimes they wanna help them. The founder community is very strong, especially in cybersecurity. And so oftentimes maybe you're a CSO or you're a head of product or you're somebody that cares a lot about products that are being built by founders. And we often take meetings with these people all the time, develop relationships, ideate on new ideas, and oftentimes by the time someone has pitched us, maybe we've met for years in an informal way before we've actually gone and gotten to the point where they're asking for money or where we're offering it. - So okay, so we've talked about the timing and whatever. Now earlier you mentioned, hey, there's thousands of these funds out there, but you can whittle it down to like a few dozen and maybe approach them. That's a very daunting idea to most founders who don't live in their sort of investment world. They don't know a good VC from a bad VC, right? So I mean, we've been talking about how does a VC select founders, you know, how does a founder get their idea in front of them. But let's reverse that for a second. How does a founder select a VC? Because my, you know, impolite way to describe venture capitalists in this industry is I often say, they're the real estate agents of technology, right? And I've meant really very well. Variant quality people right in the sort of VC world you've got the people who are very much finger guns You know what I mean like trying to close their deals and like They're just I don't know just a bit like you And then you meet other people who are very sincere engaged interested in in the the fields in which they're working so how can you know a founder With no prior knowledge of this space actually identify who it is that they're gonna Want to talk to because I as I say daunting. Well, I totally sympathetic to how daunting it is I mean you can imagine there's three thousand firms maybe you know ten thousand people you could approach and You know oftentimes people don't really even know where to start so they might be go to Google and do an internet search and you know There's a small handful of names that'll pop up but then even figuring out how to get a connection to those those firms might be daunting So I completely understand where you're coming from an analogy I often use is like if you just use the internet to find A doctor or a specialist you might also bump into the same problem So in general, I think it's always great to find in the doctor world like a patient or somebody who's like been through a similar situation Or has exactly the kind of disease that you have and there are communities That that organized because wanting to found a cybersecurity startup disease. Yeah, so so there's there's As you might imagine a very active cybersecurity community that is very well-networked Because many of us grew up as cybersecurity researchers first You know, so I think that there is already a collaborative ecosystem. So it is it is one that likes to share ideas and share knowledge About not just threats, but also people and VC firms So I think it is relatively straightforward To just find a small handful of cybersecurity founders people that maybe you admire people that you know I found that the founders love to gossip about VCs founders love to share All the details about what VCs do or don't do or like or don't like it is there's probably no more joy that a founder has in Talking about their experience with VCs good or bad and oftentimes it hasn't always been perfect So there's maybe no shortage of people who if you email someone and say give me feedback on this VC It might you might be 60 seconds or less that they'll respond to you if you're looking for compliance You'll find them. Yeah, so I I think again like if you're if you have some sort of like unique Medical condition and you're looking for a specialist you obviously like wouldn't just rely on the internet and you know You would find patients that have succeeded And figure out what they did and who they talked to and I think the founder world is very similar like find Cybersecurity founders that maybe are like you or that you you admire and you want to be like them See what they've done ask them for advice and feedback and those tend to be the best gateways to our industry and it Time and time again happens to be some of the but the best ways that we get referrals like we get introduced to people all the time through the founder community And they're you know, they we might be one of the first VCs they've ever met But we might also be the perfect VC Because of the way in which they found us you know through cybersecurity founder Now now look just to bring this all home right to sort of wrap this up The one thing we haven't really talked about is like what are the fundamentals of what makes a good idea for Adventure funded start-up, right? I can think of a few things where they go wrong Where people have found a way to solve a Technical problem that just doesn't really seem to have much of a business idea around it I mean that's something you see quite a lot when someone comes log and says hey I built this really cool thing and you're like that is cool But I just can't sort of see a circumstance where someone would buy it right? So that's one But I guess you know, what's your what's your sort of do you have like a like a checklist? I guess and I know that the process is not Checklist driven right? I understand that because a lot of it is vibes right and that's something people have got to understand a lot of it is like Founder vibes When you meet when you meet someone and you say well, I think this person like you can give them money and Based on their track record based on the vibes I get off this person even if this idea fails They're gonna pivot it into something else They're just really highly highly capable high agency person give this person money that you go you can't go wrong You know, so that's a part of it as well So I understand that it's not a checklist driven thing But if you did have to come up with like five or six sort of criteria that you could that you could rattle off In a podcast with me right now Well, I'm glad we're going at this because let's just let's just call it like it is You know, there's lots of slides and there's lots of ways that you can articulate what is what you know You're trying to do but ultimately there's just one thing everyone wants to do and that is to be sent your Special in some way you're either a special founder or the technology that you built is really special or the traction that you have is really special You're trying to convey that you're special and on the opposite side The the founder just wants the VC and the VC just wants to feel like this is special and unique and not like Everything else and not the same idea just repackaged by by a new team in the same old way So I just keep going back to this uniqueness or this concept of being special so maybe just to hit on these points. I think oftentimes When it comes to describing your story as a founder as a team people gloss over this in just one slide And they just say hey, I was a senior executive at this place or I was a researcher at that place But they don't really tell their founder story and I always say I never really know where someone's going if I don't know where they've been And so I always say like spend more time telling your founder story because your story is kind of everything Where you came from why are choosing to do what you do why this is the magic moment for you? I think people gloss over that way too quickly. So take more time telling your story The uniqueness of a product is the second one. So I think there always has to be something really magical About something you're doing in the product that is super hard for everyone to do and very defensible Otherwise, it's just hard for people to imagine that this is a sustainable differentiation And especially in cybersecurity in the area of AI I think people want to see something that is fresh and unique And is very hard for people to replicate if I made I just have two examples because I know last week We announced our new investment in end and we also announced that Run zero was acquired by Accenture and I think these are two great examples of I mean I saw I saw that I saw the size of the round for aunt and it's it's a monster So yeah, and I think I think if you if you you know I know that you've been close to both of these companies, but you know I think when you get down to these are amazing people with amazing stories But also products that are incredibly unique in their technology and packaging So to put small models on endpoints is groundbreaking in end case Sorry, look just just in case the audience is lost here I'll just explain who and is and you know full disclosure I'm an advisor to Ant which I'm absolutely thrilled about but they are doing Intent aware security on the end point so they can put small language models stuff them into every corner of an endpoint You can even put them in the browser It can take telemetry from an endpoint kick it out to models that are off that endpoint as well But the idea but it can even use computer computer vision to see what users are doing but the idea being That it you know really can shoulder serve a user and stop them from doing dangerous things I mean there's endless use cases there You know you're worried about click fix or fishing or whatever it can it can deal with that you're worried about DLP use cases It can deal with that and honestly the use cases there are just gonna unfurl and be unlimited I think there's one other company having a crack at this but this is you know This is a big idea. It's unique the total addressable market is basically infinity, right? So they've just come out and what is it a series a seed round of a hundred million dollars Which is like yeah, okay? They're really going for it And I see why you picked this as an example next to Something like run zero right which was you know a very special founder with a cool idea who didn't really need that sort of level of Capital commitment to make this thing possible and you know just announced an exit last week very successful Exit also an advisor there. So that's great news for me as well But you know these are these are great examples. I know all of your listeners know that HD more is special Maybe not all of them know that HD is the founder of run zero. So you know, yes, yes, it's it's do more as an example You know when when he came to me and I said hey, how does this work instead of live this proprietary Protocol that I built which is basically you know decades learned on how to traverse networks to discover assets and software I knew in that moment that there was only a small handful of people in the world Who even had that level of proprietary knowledge to be able to discover Assets on networks without credentials. So you know, that was what inspired me and you know Gordon line from NMAP and others to to invest was We just knew how hard this was and so These are I think two great examples of like perfect people, you know doing the perfect product and I think Oftentimes people fix it on market or they fix it on you know they fix it on you know the tam or they you know They come up with other sides that they want to show me, but I'm usually fixated on those two things You know are you the perfect person for this moment? I really hope so I mean there's there's so many people that you know They walk the world obsessing about something and then the world allows them to come and really express themselves in this way. And then it really comes down to when you express yourself in this way, do I think you're doing it in a way that is truly unique? Because if it is truly unique, then I'm usually willing to give you a shot because I know just how hard it is to have the courage to get to this point. And if I think you're willing to bet your life on trying something in a really unique way, then I want to be there to support you. Well, I mean, Lou and Brandon, who are the founders of Ants, I mean, great example there, right? You don't throw a $100 million seed round at people who don't have a good track record, right? Like that's just not what happens. Yeah, and I think just to make sure that everyone, you know, gets all this in context, like the size of the bet often is commensurate with the risk reward of the opportunity. And so it sometimes is like just as genius to hand someone five or ten million dollars as it is to hand them $50 or $100 million. It really depends on, you know, how much R&D risks that take on, how big is the upside after they take that R&D risk? So I think when how fast they have to go and what the competitive landscape looks like as well, right? Yeah, so no one builds a small endpoint company, right? So I think it's been, you know, a good 15, 16 years since people have been decided to start brand new endpoint companies like CrowdStrike and Silence and Carbon Black and Sentinel. I mean, these companies were all started around 2010. And you know, that cohort has now run and it's 16 years later and now, you know, there's a new paradigm with small models. And so that probably requires a size of investment given the market and the competition ahead. And in other markets, you know, you may be able to get a lot farther with a lot less money. And it may make more sense for you to, you know, capitalize your company in a little different way to explore how you're going to find product market fit because maybe the competition is different or the market size is, you know, such that it's growing over time, but it's maybe not ready to take all of that money right now. So I don't think everyone should take, should in any way feel like they have to raise a hundred million dollars to be successful because sometimes five or 10 is exactly the right amount of money that you need for the kind of company that you're trying to build today. Sometimes it can be even less, right? Like if you're doing like a pre-seed, you know, it's just a couple people with a slide deck and a collection of scripts and a trench coat. I mean, sometimes you don't need that much. You just need that that salary for the founders. No, I'm so glad you're bringing this up because I think when you read the headlines or you're just on X and Twitter and, you know, you're sort of like seeing where all the action is, it looks like you have to raise hundreds of millions, if not billions, at, you know, just to even be noticed in this market. I think there are just so many great examples of people that are raising a lot less money and maybe their companies are just not as visible to the outside world, but for the founders and for the investors and for the customers, these companies will all be tremendous wins and all too often that is not being shared with founders because people are fixated on just the companies raising a ton of money and doing so at the highest possible prices. And John, just before we wrap up, I'm curious as to, you know, we've talked a lot about preparing a founder and, you know, how they need to be ready, what they need to bring to the table, what you're looking for, but having seen this process go on a few times, I think there's also sometimes some conditions that might get attached to a VC's decision that maybe the founders weren't aware of. Like, you know, I've met people that are great product idea, but you just think you're going to have to get a CEO in there or something else like that, or maybe there's some extra governance or a board that's got to be established that can catch people off guard. Like, help a founder get the full amount of, I guess, preparedness and mental model of what sort of things can become a condition of getting funding if they get to that point. Yeah, James, in Silicon Valley, everyone tries to do as simple and as straightforward of a deal as they possibly can. I think largely because the space is so competitive in our industry here is relatively mature. So maybe set it a little differently. Like, there's maybe not as much of a conditional based culture here, nor maybe as much of a nickel and dime culture because people are playing the long game. And so I think at least in our world, we don't see as much of that. I am sympathetic though that in other parts of the world, maybe where you have more traditional venture capital industries, these types of terms do exist. And generally speaking, what I say to people is if you can get away with it, execute a little bit longer to give yourself the opportunity to raise money in a clean deal that does not have maybe the same restrictions or requirements that you'd recommended. So, yeah, in general, my advice is just sort of progress and move yourself to a place where you'll either with that investor or with other investors get a clean deal for your company. All right. Well, I think that's a good place to wrap up this first appearance for Mr. John Sukkoda. Well, thank you guys. We've been planning this for like a year finally got around to doing it. John, thank you so much for coming along to share your yoder-like insights with the Risky Business Listening community. It's great to see you. Yeah, thanks, Pat. Thanks James. Thanks, Jordan.

Podcast Summary

Key Points:

  1. AI has dramatically reduced the time and cost to build prototypes and prove concepts in cybersecurity startups, compressing development timelines from months to weeks.
  2. Simply adding AI to a pitch deck is no longer a differentiator; true impact comes from uniquely directed AI that enables genuine innovation, not generic or inefficient product creation.
  3. The barrier to entry in startup development has indeed lowered, but the competitive landscape remains selective—only a small fraction of founders can truly stand out due to the need for unique, defensible innovation.
  4. VC investment decisions are increasingly based on founder uniqueness, technical depth, and the authenticity of the product story, not just market size or financial projections.
  5. Founders should prioritize storytelling—detailing their background, motivations, and why this moment is special—over technical slides to demonstrate genuine founder conviction.
  6. Early-stage cybersecurity investing emphasizes deep technical understanding and long-term engagement, with VCs often meeting founders years before funding decisions.
  7. Success is not tied to massive fundraising rounds; small, well-executed pre-seed or seed investments can be just as impactful, depending on the risk-reward balance.
  8. Founders must avoid common pitfalls like solving technical problems without a clear business case, and should be aware of potential governance or leadership conditions tied to funding.

Summary:

The podcast explores how AI has transformed the process of pitching cybersecurity startups to venture capitalists. While AI accelerates product development and allows faster proof-of-concept creation, simply adding AI to a pitch deck no longer stands out—true differentiation comes from uniquely directed, meaningful innovation. The barrier to entry in startup creation has lowered, but competition remains fierce, with only founders who solve hard, defensible problems and demonstrate genuine uniqueness standing out.

Decibel Partners emphasizes investing early in technical founders, valuing deep technical expertise, founder story, and authenticity over flashy metrics. Early-stage investment decisions are built over years of relationship-building, with VCs often meeting founders long before funding. The episode stresses that successful startups don’t require massive funding—small, targeted investments can be more effective based on market fit and risk.

Founders are advised to focus on storytelling, clearly articulate their unique motivation and product edge, and avoid generic solutions. Ultimately, the core of a compelling pitch remains founder conviction, technical depth, and the authenticity of a solution that's both novel and sustainable—values that remain central to cybersecurity innovation.

FAQs

AI has compressed development timelines, allowing founders to create proofs of concept in days or weeks instead of months. However, simply adding AI to a pitch deck doesn’t guarantee success—unique, well-executed ideas that stand out in the market are still essential.

Yes. Founders must demonstrate a product that is hard to replicate and offers a sustainable competitive advantage. Without uniqueness, startups risk being seen as generic or easily imitated, making it difficult to secure funding.

Founders should emphasize their personal journey, background, and motivation behind the startup. Understanding where they’ve been helps VCs assess their authenticity, drive, and ability to execute on a unique vision.

Founders should connect with other cybersecurity founders who have successfully pitched or invested with a particular VC. These personal referrals provide valuable insights and often lead to more effective, informed outreach.

Yes, AI lowers the barrier to entry by enabling faster prototyping and coding. However, this doesn’t mean more startups will succeed—only the most technically skilled and uniquely focused ones can stand out in a crowded market.

VCs prioritize founder uniqueness, product differentiation, and market need. They also value founders who demonstrate technical depth, resilience, and the ability to solve real problems in a way that’s hard to replicate.

Chat with AI

Loading...

Pro features

Go deeper with this episode

Unlock creator-grade tools that turn any transcript into show notes and subtitle files.