Sign In

Varun Badhwar

Founder/CEO of Endor Labs. Former SVP/GM Prisma Cloud & RedLock CEO

Varun Badhwar is a senior executive known for automating cloud infrastructure security for the Global 2000. With a diverse background spanning product strategy, marketing, technical sales, and customer success, Varun has a proven track record of building and leading enterprise security companies. His leadership style is characterized by a strong focus on customer-centricity, high-performance team building, value-based selling, and measurable outcomes. Varun played a key role in the growth of CipherCloud from 1 to 400 employees in just 4 years. Currently, he is involved in his latest endeavor, RedLock. Varun holds certifications in CISSP, CISA, and ECSA. He studied BS in Computer Science at the University of Southern California. Varun's extensive organizational affiliations include roles such as SVP & GM at Prisma Cloud, board positions at Cowbell and Tetrate, investor at Individual Angel, founder & CEO (acquired by Palo Alto Networks) at RedLock, board advisor at SafeBreach, co-founder & VP of Products & Field Operations at CipherCloud, senior manager at Salesforce, consultant at KPMG US, researcher at ISI, and project manager at Northrop Grumman Corporation.

Highlights

Aug 21 · linkedin

What did one function say to the other just before an upgrade? We used to be compatible… now you don’t even return my calls.

If you’re tired of dealing with those awkward breakups in your code, read below (link in comments) about how Endor Labs predicts upgrade impacts and provides actionable recommendations based on the context of YOUR application.

#AppSec #SCA #breakingchanges

Aug 13 · linkedin

If you thought vulnerability prioritization was hard, think again - fixing is WAY HARDER, especially in 3rd party libraries / OSS dependencies. I'm so humbled with the feedback and reception our new product announcements around upgrades and remediation we've received.

Beth Pariseau did an amazing job of highlighting the value of such a monumental product release, where Pathik Patel from Informatica shared some of his views and experiences using our product as well.

Compliance drivers like #FedRAMP are driving more pressure on accelerated remediation - you typically have 30 days to fix critical and high vulnerabilities. It's simply impossible to do so when these vulnerabilities exist in foundational libraries like Spring.

🔥 Upgrade Impact Analysis shows you and your developers what vulnerabilities you can fix with package upgrades easily, without breaking your applications. It also identifies situations where breaking changes will get introduced, so those upgrades can be thoughtfully planned and executed.

🔥 Endor Magic Patches are trusted patches we provide you on your existing package versions, when upgrades are too painful, or will take too long. This is a game changer for organizations that struggle for months or even years trying to upgrade foundational platform libraries like Spring, jackson-databind, snake-yaml, etc.

Here's how it works: 1️⃣ Identify vulnerabilities that are reachable by your application code. 2️⃣ Analyze the impact of upgrading dependent packages. 3️⃣ Patch only what's vulnerable if the upgrade is too challenging.

This is a huge innovation in Software Supply Chain Security and a meaningful step toward helping developers and AppSec teams work together seamlessly.

Read more here: https://lnkd.in/eBKainF9

#betterwaytosca #sca #appsec #remediation #fedramp

Varun Badhwar
Add to my network

Location

San Francisco Bay Area