Back
Orion Hindawi
CEO & Co-Founder, Tanium

Sunil Potti, Google and Orion Hindawi, Tanium | Google Cloud Next OnAir '20

🎥 Aug 25, 2020 📺 SiliconANGLEtheCUBE ⏱ 29m
Sunil Potti, VP & GM at Google and Orion Hindawi, CEO at Tanium, talk with Stu Miniman for Google Cloud Next OnAir '20. #GoogleCloudNext #theCUBE #GoogleCloud @SiliconANGLE theCUBE @Google Cloud https://siliconangle.com/2020/08/25/i... It’s time to wipe the security slate clean and start over VIDEO EXCLUSIVE BY BETSY AMY-VOGT Thousands of internet posts, including quite a few from theCUBE, have highlighted the increased security risk created by an expanding attack surface area. In the fight to protect sensitive data, companies have gathered security tools boxes filled with solutions and...
Watch on YouTube

About Orion Hindawi

In a May 2021 interview on Technovation, Hindawi discussed the evolution of IT and cybersecurity, describing Tanium as a platform that allows organizations to see and manage all devices on a network. He stated that the network is "not the right place to do anything anymore" because organizations no longer own it, and he characterized a security event as "existential." Hindawi also commented on California, saying the state "got complacent" and that raising children around needles and homelessness "isn't fun for anybody." He noted that Tanium told employees they could move anywhere in the country, as he did not want to be a "hostage-taker" requiring them to remain in expensive areas like San Francisco. In August 2020, Hindawi appeared with Google Cloud's Sunil Potti to announce an expanded partnership between Tanium and Google Cloud. Hindawi said the work-from-home transition had created an opportunity for customers to "replatform and simplify" their security, as many legacy tools no longer worked. Potti stated that Tanium had the "highest fidelity point visibility and control" while Google had the best data storage and analytics, and that combining them could create a "virtual Chromebook-like experience" for enterprise users. Hindawi added that many customers had been building on a "creaky foundation" with 20 to 50 different security products.

Source: AI-verified profile updated from Orion Hindawi's recent appearances. Browse all interviews →

Transcript (32 segments)
J
John0:10
Welcome to theCUBE's coverage, virtual coverage of Google Next OnAir. I'm John for host theCUBE. We're here in Palo Alto, California, for our remote interviews, part of our quarantine crew, getting all the stories that matter. Google Next OnAir, continuous event through the summer. We're calling it the summer of cloud. We've got two great guests here: Sunil Potti, general manager and vice president of cloud security at Google Cloud, and Orion Hindawi, co-founder and CEO of Tanium. Gentlemen, thank you for coming on today, appreciate it. Great event you guys have on the continue. I'll call it the summer cloud. It's a lot of events that Google's having, so you guys and your team are doing a great job, but there's some hard news. You guys are announcing an expanded partnership together. Sunil, tell us what is the news today.
S
Sunil Potti0:53
John, first of all, great to see you again, love being on theCUBE any time. As most of you know, especially in the new normal with a distributed workforce, and potentially it being the safer normal down the road, it presents an unprecedented opportunity, I think in our opinion, that we can use this to accelerate potentially safer posture that otherwise would have taken years to build into the enterprise ecosystem that we could now bring forward in potentially the year 2020 or 2021. So the primary announcement is based on the fact that Tanium's core enterprise offering and Google Cloud's Chronicle offering are coming together to build a full stack offering for endpoint detection and response, all built together into one seamless, easy to consume offering for the global enterprise, and being delivered in such a way that it can take into account organizations of thousands of employees or hundreds of thousands of employees, all by the same cloud native solution.
J
John2:27
All right, how about why you're excited about this deal? What's different about it? Obviously there's a relationship here, what's so exciting about this story?
S
Sunil Potti2:34
Yeah, I think, you know, Orion to comment as well, but look, I think the key thing that we sort of partnered on initially was a customer driven, technology centric integration, where we went deep from a Chronicle perspective to ensure native integration between Tanium products to send signals out of the box. And so essentially, it's been a deliberate effort by both teams to not provide incremental integrations, but something that offers a reimagined safety posture, especially enhanced, I would say amplified, in a world where pretty much every employee is essentially a tech director now, but otherwise was not the case when they were working in a normal enterprise office.
J
John3:38
All right, what's your take on this? I'll say what's different, I'll say big news.
O
Orion Hindawi3:42
Sure, yeah. I mean, if you look at why we decided that Google would have been the perfect partner for us, we have very large enterprises. We work with about 70 of the Fortune 100, the USOD, a lot of these very large environments, and many of them were coming to us and telling us two things. And the second one was, in the new kind of post-COVID world, the amount of work from home risks that they were seeing, and the kind of perfection they needed to achieve on finding threats quickly and neutralizing them was actually also going up. And so between those two things, we started really looking for a partner that we could accelerate with, to provide our customers with true world-class data analytics, retention, being able to visualize that data, and then being able to act on that data through Tanium. And I think that the partnership that we've struck with Google and the work we've done with them to make this seamless for our customers, to make it scale really well, even for the largest managed networks, is something we're really proud of.
J
John4:56
What's the history between Chronicle and Tanium?
O
Orion Hindawi5:10
So maybe I'll take a stab, Sunil, then you can take one as well. We've been working with Chronicle now for over a year. And we've got customers who kind of pointed us in this direction, which is how we love to start partnerships. We had some customers who had a lot of faith that Google was going to be able to crack this nut. And honestly, many of our customers had been really struggling with this with their current vendors at the time for years, and were really looking for Google, because Google was the company that they saw as having the most credibility with massive, massive data sets. What we got surprised by actually was that there were a bunch of different legs of the stool that we could work with Google on. So not only data retention of Chronicle, but things like zero trust, which I think many people know Google actually invented the concept of. But we expect that over the next even years, we've got a lot of room to run with Google to really secure and help our customers.
J
John6:19
Sunil, talk about the wave that you're riding on right now. 'Cause obviously the reality is, I won't use the term new normal, but the new reality is, COVID has forced everyone to look at basically an unexpected disruption that no one saw coming. Yeah, we can prepare for disasters and floods and hurricanes and whatnot, but this is unforeseen, everybody working at home. I mean, I can imagine all the VPN vendors freaking out, who even needs a VPN. So, you know, the access methods is everything, it's mobile, home, home is the new office. It's not just, you know, connect to an access point, my son's gaming, my daughter is watching Netflix. I'm trying to do some video conferencing.
S
Sunil Potti7:10
A little bit at the beginning, John, is that we think this is an unprecedented opportunity to help accelerate digital transformation that otherwise would have taken a few years for many enterprises to get to, that can now be done potentially in months, and for some customers maybe even in weeks. And some examples of that that we've seen are that, look, if you just take Google as a company, to Orion's point, look, we invested many years worth of technology and IP that now we're slowly bringing out in the form of BeyondCorp product sets. But essentially the fact that look, we should treat every employee as if they were a remote worker, and the network is trusted by a desktop. And then if you penetrate one, you can penetrate everything else in the chain. And so when COVID hit, we went from essentially pretty much a hundred thousand plus employees working in distributed headquarters, but within the Google environment, to working from home within a week later, but retained the same sort of not just productivity levels, but actually the same safety levels that were much stronger. And so in many cases, what we are announcing is that even though enterprises have come forward and said, look, yeah, we have some PaaS work solutions, just because this is a major change for us. Now that we are in it for not just three months or six months, but potentially a longer period of time, why not take the opportunity to replatform? So that's part of the reason why I think we are so jazzed about the partnership, is that these are two examples of products coming together to help replatform at least one set of traditional, if I can call it, weaklings in the security ecosystem, that can now be sort of replatformed.
J
John9:27
I was doing an interview actually last week, and I was kind of riffing on this idea. This is one big IoT experiment. I mean, people are devices here and everyone's connected, but it's all remote. It's changed the patterns of work and traffic and all kinds of paradigms. But this brings up the issue of the customer challenge. Everyone's going to look up their environment saying, look at, we now know the benefit of cloud, it's clear. But I got to rethink the projects that are on the table, and get rid of the ones that aren't going to be relevant to where the world has shifted. It's not even a question of digital transformation. It's like, okay, what am I doubling down on? With a workforce, workplace, workloads, and workflows that are completely different. What's in it for me? What does this mean to me? This partnership, so how do you help me? What's in it for me?
O
Orion Hindawi10:22
So I might take a stab at that. You know, I think that a lot of our customers, if we look at where they were at the beginning of the year, they'd been building on a pretty creaky foundation and just adding more and more layers to it. So, you know, in the security side, many of our customers have 20 or 30 or 50 different tools. And many of them are there because they were there yesterday. They're not actually, if you were going to zero base budget the way you were going to do security, they wouldn't be the tools you'd choose. And the interesting thing about this whole work from home transition is it is effectively a zero based budget for security, because a lot of the tools just basically don't work. They were built for the LAN and now just don't work over the internet. And so when we look at our customers, they're realizing they have to replatform their security model anyway. And what they're doing is they're now picking again. And what they get to do is they get to pick the platforms that they now trust in 2020, with the work from home environment as it is. And I think what it gives you as a customer is a huge simplification of your environment. I mean, we talk to people every day who were used to operating those 20 or 30, 50 tools, and they were spending 90% of their energy just operating those tools, not actually improving security, and they were falling behind. If you look at what they're able to do now, they actually can go back to a starting point where they think about what is the real threat I'm facing. What are the real platforms? The resistance to change has been removed. People can't resist change anymore, change has come, and as a result of that, they get to choose what they would like now.
J
John12:17
That's a huge point, I want to just double down on that and redirect, and then we'll go to Sunil and his commentary, but I think you just hit the nail on the head. We're seeing the same kind of commentary. You said it really eloquently, but the thing is that, okay, let's just, if you believe what you just said, which I do, going into zero base budgeting decisions, fresh look and everything. The problem is people are looking at the decisions and comparing what the bells and whistles were from the tools. So how do you advise customers to rethink like, okay, if it's a fresh look, it's a fresh look. It's not like, okay, the way we did it before, so a lot of times when you were evaluating products, a group gets to say, it doesn't have this bell or this whistle, 'cause that's the way we did it before. So you got to kind of separate out.
O
Orion Hindawi13:10
Because I think you're absolutely right. If you talk to the person who operated the compliance tool in a big bank, and you ask them, what do you need from that tool? They very quickly get the things, that if you just take the question, which is, I need to do compliance for the bank, what do I need to do compliance effectively? And you look at the answer that they give you, which is I need this check box here. I need this button here. I need this kind of minutiae that I'm used to, to be consistent with what I've been used to for the last 10 years. Those two things are not the same. And what we've really been encouraging our customers to do is take a look back at your requirements. So you are processing credit cards, you need to be PCI regulated. You need to be able to answer to your vendors how many copies of their software you're using. You need to be able to find an attacker. Let's talk about the core capabilities. And it's a very freeing conversation actually, because what a lot of people start realizing is they've been maintaining the status quo for reasons that actually have nothing to do with efficacy, they have to do with comfort. And the curse and the beauty of the last six months is no one's comfortable. So I don't care how comfortable you are with your tools. No one I know is comfortable today. And what it's giving us is an opportunity to look past the old school comfort and think about how do we transition to the future. And I think it's actually going to galvanize a lot of positive change. You know, I was saying this before we went on air, but I don't think anybody wished that COVID was the way that we would end up in a position where people have the appetite for change. But now that we're here, we can take advantage of it and bring in things that are much more effective.
J
John15:14
Sunil, that's some great tea up for you, because what he's saying basically saying is if you don't focus on the check boxes, because it was reasons why, and they'll give you, there's a long list, probably RFPs are the same way, we check in the boxes, okay, throw that out. And then you can, by the way, you can innovate on those check boxes differently, but still achieve the same outcome. I get that. But for Google Cloud, you guys have a great network. It's well known in the industry. Google's got a phenomenal network, hence powering Android and all the servers. We know that, with a cloud player, this is a great opportunity for you guys to be a fresh candidate for this kind of change. How are you guys talking about this internally? Because this really is, the goalposts have been moved and in favor of who can deliver.
S
Sunil Potti16:10
With the advent of iPhone, right? Even though it was much more productive, delightful, and there's a bunch of other things, ultimately though, if anything, things became safer when you actually did computing on a phone. Just because it was an opinionated stack. Ultimately we believe, whether you come to cloud completely or you consume some stacks, the more opinionated they are, that's ultimately the only way to reduce these moving parts that expose us to security issues. And that principle applied by the way in reliability too, right? I mean, you have to simplify stuff for things to actually work at six nines and so forth. So same things apply in security. So imagine a world where every employee now is sitting at home, maybe two years from now they come back, but you have a full stack opinionated offering, but there's various elements of computing still dispersed in the environment. And you were talking about IoT. Eventually we will get there, but just look at the employee's laptop, but productivity station, and imagine the construct of a virtual Chromebook off, and that's an opinionated stack. And that's essentially a variant of what the joint offering between the two companies is essentially aspiring to, is to provide that level of clarity and opinionation that actually genuinely solves for some foundational security issues. And in doing so, you now have an opinionated stack close to the user, the enterprise user is an opinion stack via mobile phones, at various points of control. And at least this particular partnership is around making the first step towards potentially one of those opinionated stacks, virtual Chromebook like experience, for the enterprise use.
J
John18:26
And I think this is the beginning of the wave of the reality that the edge of the network, whatever you want to call it. And you see this with endpoint detection, right? I mean, everything's an endpoint now. I mean, I still think every, this is one big IoT device, and everything is just moving around. So zero trust is a big part of it, Google Cloud, and this relationship kind of brings that to the next level. How does zero trust, attaining a mission intersect here? Because I mean, I see some obvious ones, we just talked about it, but what's the connection?
S
Sunil Potti18:55
Yeah, I think we'll hopefully not just for detection and response, but for actually enforcing authentication and authorization as well, because ultimately identity needs to intersect with the current stack that we currently have between the two companies. And so when identity of the user, identity of the device, identity of the context in which someone actually allows a user to access an application, these are all net new things that need to be brought into the solution. We cannot then provide both a safe way to provide an endpoint detection and response opinion stack, but also a zero trust framework. It doesn't really matter whether the employee's at home, they're using their own laptop, they're at Starbucks, they can come back to work, but ultimately they have this virtualized sort of security ring that protects and always constantly authorizes, authenticates, and provides a bunch of security operations capabilities. So anyway, the simple answer is, once we intersect identity and a slew of BeyondCorp capabilities into the current offering, that's how the next step towards a more formidable zero trust offering force.
J
John20:44
Okay, Orion, I'd love to get your thoughts, but if you both can answer a question, that'd be great. I'd love to get your thoughts, a little gamification here. If you had to put the headline out on this news, not the one on the press release that's like perfectly written, like, I mean, bumper sticker.
O
Orion Hindawi21:10
I mean, I will admit, I am not known for being good at soundbites, so I'll give you the one sentence and you can help me pare it down. But I mean, really what it is, is I think Tanium got the highest fidelity endpoint visibility and control out there. And I think Google's got the best data storage, analytics, retention, cross-referencing we've ever seen. And when you combine those two things, it's incredibly powerful for our enterprise users, and we've already seen customers where it's been transformative.
J
John21:42
So you need a headline, that's good though, that's fine. You know, point projection solid.
S
Sunil Potti21:48
I think it's a much more descriptive nature, frankly, but I think my logical tagline that I just keep, you know, sort of like the soundbite that I keep referring to is: 'The best endpoint security meets the best data analytics.'
J
John22:12
You know, I think you guys run something really big here. And one of my personal observations is one is the complexity of the telemetry coming, and I can see how you would go in there and connecting the dots between Google's backend and your stuff coming together. You need to have that high powered energy from the resource, but also there's a human element. People are working at home, whether you're a teacher, you're getting phished, their spear phishing, targeted social engineering. So as people come home, and there's now multiple access points, there's more surface area. So every single endpoint needs to be protected. And I think people are kind of in the normal world, or outside of the tech industry saying, 'Oh, I get it now. We're not really protected.' And this is not just sensor networks, or OT technology.
S
Sunil Potti23:11
Which says, look, as demonstrated in a post-COVID world, but your point John, or whether it be IoT, just distributed computing in general continues to expand. We should just assume that the surface area for security issues only expands, right? And rather than trying to vacuum all of the surface area, what if you could take a foundational approach that actually breaks the relationship between expanded surface area means expanded exposure to attacks? And so essentially the same approach that we took with zero trust, which is, look, we just know we're going to get broken into. So just don't assume that your network is safe, but still have a secure posture. Right? How did that come to be? It breaks the relationship between surface area and exposure. Let's buy a more foundational construct that says, look, it doesn't matter if today, as you said, this is your device, tomorrow it could be your son's laptop that you use to actually log into your network and so forth. But ultimately though, it doesn't matter who you are, where you're accessing it from, what device you're using, or what network you're using, or which location, the safety posture is still very strong.
J
John24:39
That's awesome.
O
Orion Hindawi24:41
Yeah. I will just add, you're absolutely right. I mean, if you look at a customer I'm thinking about today, and I just heard this from their CIO a couple of days ago, but they have one and a half million things they're protecting today. They expect to have over 150 million in five years. And they are very frustrated that at the time that expansion is happening, the network essentially did become a control point. You couldn't trust it anymore. So the thesis that Google had around zero trust actually became our entire world for most enterprises. When you look at that, we do owe our customers quantum jumps in capability, or they're just not going to catch up. And I think that the theoretical approach that we're taking here between Google and Tanium lets our customers take one of those quantum jumps, where they're going to be seeing a lot more, they're going to be able to trust it a lot more. They're going to be able to allow devices to have access to things based on their current state and based on believing that we can extrapolate whether their security on that device accurately. And that's something that I think is really powerful. And you know, I'll just say one other thing, many of our customers had to literally, like, three or four months ago, were in a position where they were spending 60 or 70% of their security budgets on network. There's nowhere to spend that money today that's actually productive. It gives them the ability to refactor what they're doing and the obligation to do it, because if they don't do it, I think, as I was describing with the amount of increased assets, the amount of complexity, the lack of network control, if they don't do it, looking at the amount of threat our customers are facing today, they're going to be under water really quickly. And so, you know, I'm proud that we get to get together here and give them a big step forward.
J
John26:55
Sunil, you've been involved in a lot of entrepreneurial ventures. You've been on these waves that were misunderstood and then became understood. This is what we're getting at here. And what he's saying, essentially new expectations. We're going to drive that experience and then ultimately drive the demand, and people will either be out of business or in business. If you're a supplier, I'll give you the final word, you guys are in good positions.
S
Sunil Potti27:30
Especially in security, John, more so than maybe any other infrastructure space that I've been involved in. Most products have been built to solve problems with other products. And Orion just pointed out, I think this opportunity gives enterprises clarity and vendors clarity that look, we need to solve the problem once and for all. Right? And so that's really the core essence of the partnership is to sort of, rather than worrying about solving problems with other products and so forth, is to use this opportunity, like I said, have an opinionated view, to fundamentally change the security posture of the endpoint once and for all.
J
John28:29
Well gentlemen, congratulations on a great partnership, expanded partnership. Again, the world has changed. I love this fresh look. I think that's totally right on the money. New reality we're here. Thanks for you taking the time to remote in from Seattle and the Bay area. Great to see you again at Google Cloud. Thanks for coming in, nice to meet you, and good luck with everything.
O
Orion Hindawi28:49
Thank you.
S
Sunil Potti28:50
Thank you.
J
John28:52
Okay, this is theCUBE coverage, CUBE virtual coverage of Google OnAir Next 2020. It's all virtual.