Sign In

Raj Krishnamurthy

CEO of ComplianceCow & Expert in Cloud Security Solutions

Raj Krishnamurthy is the CEO of ComplianceCow, a company he has led since 2021. He is based in Fremont, California, and has over 27 years of experience in software engineering, product management, and IT. ComplianceCow specializes in security compliance solutions, particularly for cloud and Kubernetes applications, aiming to transform traditional compliance into a more integrated and proactive approach.12

Professional Background

Before joining ComplianceCow, Raj held several significant positions:

  • VP of Solutions Engineering at appOrbit (2016-2019), where he focused on application containerization and orchestration.

  • Senior Director of Product Engineering and Senior Director of Product Management at Sungard Availability Services (2010-2016), where he was involved in launching new products and managing enterprise cloud services.12

Education

Raj holds an MBA in Finance and Strategy from the University of California, Berkeley, and a degree in Engineering, specializing in Electronics and Instrumentation, from Annamalai University.12

Vision and Mission at ComplianceCow

At ComplianceCow, Raj emphasizes the importance of making security compliance affordable, actionable, and operable at the speed of DevOps. The company's mission is to empower every individual within an organization to contribute to compliance and security, fostering a culture of trust and transparency.2

Highlights

Jul 24 · linkedin

The recent event is not just a Crowdstrike problem but a Microsoft problem. Crowdstrike should have been more forthcoming with their RCA.

I usually stay away from commenting on security breaches and large scale incidents like Crowdstrike. The teams in the trenches are already struggling and they don't need one more advice. Also, developing enterprise grade software at uber scale is super difficult.

However, Crowdstrike should have published a clearer RCA. They doing disservice to all the fantastic engineers and architects at Crowdstrike, and to the community at large. The RCA states that the issue is not with Sensor Content (which is Windows Kernel Module Load) but with Rapid Response Content, which provides configuration templates to Sensor Content for signals collection. It states that there was "bug" in the content validation process but doesn't go into any details on what the "bug" is.

To me, this is an architectural issue with the Crowdstrike agent that did not handle "panics". Any go (or C/++) programmer will tell you that you need graceful handling and recovery of panic on any critical service. This is also why you are seeing a strong advocacy for strong typed sandboxing approaches like eBPF. As a leader, Microsoft should take a position on this, and not simply say "you load a module not from Microsoft, it is your problem".

Finally, It is very interesting to me that as engineers and architects, we spend a lot of time on resiliency of services and of the code we write. We many times forget that single-point-of-failures can be caused by satellite products and services as well. I think it is time that we include resiliency as a serious security engineering discipline.

cc: Ramkumar Manavalan,

May 8 · linkedin

A brilliant presentation on shifting compliance (and Cisco CCF) left by Prashant Vadlamudi and Abhay Kshirsagar. Thanks for the big shoutout for ComplianceCow. Super stoked!

Luke Page Calvin Patterson IV

Related Questions

What inspired Raj Krishnamurthy to start ComplianceCow?
How does ComplianceCow's Declarative Security GRC Middleware work?
What are some of the biggest challenges Raj Krishnamurthy has faced as CEO of ComplianceCow?
How does Raj Krishnamurthy's background in engineering influence his approach to compliance?
What makes ComplianceCow's approach to security different from traditional methods?
Raj Krishnamurthy
Raj Krishnamurthy, photo 1
Raj Krishnamurthy, photo 2
Add to my network

Experience

CEO at ComplianceCow since 2021
VP, Solutions Engineering at appOrbit (2016 - 2019), Senior Director roles at Sungard Availability Services (2010 - 2016), various management roles at Hewlett Packard and others

Education

MBA in Finance, Strategy from UC Berkeley, Haas School of Business (2010 - 2013); BEng in Electronics and Instrumentation from Annamalai University (1992 - 1996)

Location

Fremont, California, United States