1
00:00:00,000 --> 00:00:11,160
Our next contestant, don't break for a change.
Our next contestant, don't break for a change.

2
00:00:11,160 --> 00:00:12,160
Like it.
Like it.

3
00:00:12,160 --> 00:00:17,840
Please welcome co-founder and CEO of Fig, Gal Schaffier.
Please welcome co-founder and CEO of Fig, Gal Schaffier.

4
00:00:17,840 --> 00:00:18,840
All right.
All right.

5
00:00:18,840 --> 00:00:19,840
Welcome.
Welcome.

6
00:00:19,840 --> 00:00:20,840
Welcome.
Welcome.

7
00:00:20,840 --> 00:00:21,840
Thank you.
Thank you.

8
00:00:21,840 --> 00:00:22,840
Oh, it's click.
Oh, it's click.

9
00:00:22,840 --> 00:00:23,840
And Gal, you're a team.
And Gal, you're a team.

10
00:00:23,840 --> 00:00:24,840
Yeah.
Yeah.

11
00:00:24,840 --> 00:00:25,840
Yeah.
Yeah.

12
00:00:25,840 --> 00:00:26,840
Welcome.
Welcome.

13
00:00:26,840 --> 00:00:27,840
Welcome.
Welcome.

14
00:00:27,840 --> 00:00:28,840
Yeah.
Yeah.

15
00:00:28,840 --> 00:00:33,520
And Gal, your time begins right now.
And Gal, your time begins right now.

16
00:00:33,520 --> 00:00:34,360
Hey, everyone.
Hey, everyone.

17
00:00:34,360 --> 00:00:36,840
My name is Gal Schaffier, and I'm the co-founder and CEO
My name is Gal Schaffier, and I'm the co-founder and CEO

18
00:00:36,840 --> 00:00:38,000
of Fig.
of Fig.

19
00:00:38,000 --> 00:00:39,760
Before Fig, I've led the modernization
Before Fig, I've led the modernization

20
00:00:39,760 --> 00:00:42,080
of some of the world's largest and most complex
of some of the world's largest and most complex

21
00:00:42,080 --> 00:00:43,920
socks at Google SecOps.
socks at Google SecOps.

22
00:00:43,920 --> 00:00:45,680
So I've been around the block to know
So I've been around the block to know

23
00:00:45,680 --> 00:00:49,640
that security operations is far from being perfect.
that security operations is far from being perfect.

24
00:00:49,640 --> 00:00:52,400
Or is it Fortune 500 C so nicely put it?
Or is it Fortune 500 C so nicely put it?

25
00:00:52,400 --> 00:00:54,040
Sim is my largest spend.
Sim is my largest spend.

26
00:00:54,040 --> 00:00:56,680
Yet I feel like my detection rules are like the Schrodinger's
Yet I feel like my detection rules are like the Schrodinger's

27
00:00:56,680 --> 00:00:57,880
cat.
cat.

28
00:00:57,880 --> 00:00:59,960
Their simultaneously loving, alerting,
Their simultaneously loving, alerting,

29
00:00:59,960 --> 00:01:02,040
and completely broken and useless
and completely broken and useless

30
00:01:02,040 --> 00:01:03,800
until one of my engineers actually
until one of my engineers actually

31
00:01:03,800 --> 00:01:06,720
finds the time to look at them and confirm.
finds the time to look at them and confirm.

32
00:01:06,720 --> 00:01:08,480
And for the non-physicists in the room,
And for the non-physicists in the room,

33
00:01:08,480 --> 00:01:11,240
I think that if there's one simple truth I've learned
I think that if there's one simple truth I've learned

34
00:01:11,240 --> 00:01:14,120
about the most critical and most expensive security
about the most critical and most expensive security

35
00:01:14,120 --> 00:01:18,480
infrastructure, is that organizations, no matter their size,
infrastructure, is that organizations, no matter their size,

36
00:01:18,480 --> 00:01:22,240
have no confidence in its efficacy and resilience,
have no confidence in its efficacy and resilience,

37
00:01:22,240 --> 00:01:24,320
and that a broken SecOps infrastructure
and that a broken SecOps infrastructure

38
00:01:24,320 --> 00:01:27,360
leads to organizations missing the next breach.
leads to organizations missing the next breach.

39
00:01:27,360 --> 00:01:30,040
And we all know it's just about to get worse
And we all know it's just about to get worse

40
00:01:30,040 --> 00:01:33,680
with all of the new products that make their way into SecOps
with all of the new products that make their way into SecOps

41
00:01:33,680 --> 00:01:36,640
that are making this infrastructure even more fragmented
that are making this infrastructure even more fragmented

42
00:01:36,640 --> 00:01:41,160
and complex with more AI that relies on shaky plumbing.
and complex with more AI that relies on shaky plumbing.

43
00:01:41,160 --> 00:01:42,840
But it's not like this problem didn't
But it's not like this problem didn't

44
00:01:42,840 --> 00:01:44,920
exist on other infrastructures, right?
exist on other infrastructures, right?

45
00:01:44,920 --> 00:01:47,560
Because today you use tools like DataDoll
Because today you use tools like DataDoll

46
00:01:47,560 --> 00:01:50,920
to ensure confidence across your interdependent and complex
to ensure confidence across your interdependent and complex

47
00:01:50,920 --> 00:01:52,880
app infrastructure.
app infrastructure.

48
00:01:52,880 --> 00:01:54,720
And it's big, we believe.
And it's big, we believe.

49
00:01:54,720 --> 00:01:57,680
It's finally time that you have full confidence
It's finally time that you have full confidence

50
00:01:57,680 --> 00:02:01,120
across your entire security operations.
across your entire security operations.

51
00:02:01,120 --> 00:02:03,920
So FIG finds and fixes broken security flows
So FIG finds and fixes broken security flows

52
00:02:03,920 --> 00:02:06,240
across your entire SecOps infrastructure
across your entire SecOps infrastructure

53
00:02:06,240 --> 00:02:09,400
that prevent the SOC from detecting and responding to threats.
that prevent the SOC from detecting and responding to threats.

54
00:02:09,400 --> 00:02:13,000
And I'll just let the products speak for itself.
And I'll just let the products speak for itself.

55
00:02:13,000 --> 00:02:15,520
So this is what the first operating system for SecOps
So this is what the first operating system for SecOps

56
00:02:15,520 --> 00:02:16,480
looks like.
looks like.

57
00:02:16,480 --> 00:02:19,360
With the frictionless, read-only integration,
With the frictionless, read-only integration,

58
00:02:19,360 --> 00:02:22,520
big autonomously discovers and maps all of the detection
big autonomously discovers and maps all of the detection

59
00:02:22,520 --> 00:02:25,960
and response flows that pass through the entire infrastructure.
and response flows that pass through the entire infrastructure.

60
00:02:25,960 --> 00:02:28,320
From data sources, through data pipelines,
From data sources, through data pipelines,

61
00:02:28,320 --> 00:02:33,200
sims, data lakes, SOAR platforms, and your future AI agents,
sims, data lakes, SOAR platforms, and your future AI agents,

62
00:02:33,200 --> 00:02:35,880
today engineers have no visibility to this.
today engineers have no visibility to this.

63
00:02:35,880 --> 00:02:39,920
And this is the first time they will ever see their infrastructure.
And this is the first time they will ever see their infrastructure.

64
00:02:39,920 --> 00:02:42,320
FIG surfaces issues in silent failures
FIG surfaces issues in silent failures

65
00:02:42,320 --> 00:02:45,440
that right now prevent you from detecting and responding
that right now prevent you from detecting and responding

66
00:02:45,440 --> 00:02:46,560
to threats.
to threats.

67
00:02:46,560 --> 00:02:50,400
Shows the root cause, suggests a fix with the ability
Shows the root cause, suggests a fix with the ability

68
00:02:50,400 --> 00:02:53,800
to simulate those changes throughout the infrastructure
to simulate those changes throughout the infrastructure

69
00:02:53,800 --> 00:02:56,040
to understand their impact and outcome
to understand their impact and outcome

70
00:02:56,040 --> 00:03:00,080
before pushing anything to production, CI, CV style.
before pushing anything to production, CI, CV style.

71
00:03:00,080 --> 00:03:01,960
By the way, what you just saw on this screen
By the way, what you just saw on this screen

72
00:03:01,960 --> 00:03:03,720
would take an engineer a couple of weeks
would take an engineer a couple of weeks

73
00:03:03,720 --> 00:03:06,640
to try to figure out on their own today.
to try to figure out on their own today.

74
00:03:06,640 --> 00:03:09,160
So just to conclude, I think that we can all agree
So just to conclude, I think that we can all agree

75
00:03:09,160 --> 00:03:12,080
that nobody knows what the SOC of the future would look like.
that nobody knows what the SOC of the future would look like.

76
00:03:12,080 --> 00:03:15,000
But we all understand that it's already changing.
But we all understand that it's already changing.

77
00:03:15,000 --> 00:03:18,120
But if you have no confidence in your foundation today,
But if you have no confidence in your foundation today,

78
00:03:18,120 --> 00:03:20,520
how can you embrace tomorrow?
how can you embrace tomorrow?

79
00:03:20,520 --> 00:03:22,760
So if you're tired of duct-taping your detections
So if you're tired of duct-taping your detections

80
00:03:22,760 --> 00:03:25,960
and you want your set-ups to be the thing that just works,
and you want your set-ups to be the thing that just works,

81
00:03:25,960 --> 00:03:27,320
we'll be right there.
we'll be right there.

82
00:03:27,320 --> 00:03:28,520
Thank you so much.
Thank you so much.

83
00:03:28,520 --> 00:03:29,520
Woo!
Woo!

84
00:03:29,520 --> 00:03:31,520
APPLAUSE
APPLAUSE

85
00:03:33,920 --> 00:03:34,840
All right.
All right.

86
00:03:34,840 --> 00:03:35,720
Great job.
Great job.

87
00:03:35,720 --> 00:03:36,240
Thank you.
Thank you.

88
00:03:36,240 --> 00:03:37,240
I do.
I do.

89
00:03:37,240 --> 00:03:38,240
I have seconds on the clock.
I have seconds on the clock.

90
00:03:38,240 --> 00:03:39,240
There we go.
There we go.

91
00:03:39,240 --> 00:03:40,240
OK, judges.
OK, judges.


