SecPod

Learn Search

Search across all Learn content

← Back to Expressions & POVs
SecPod – Our 12 Year Experimental Journey

SecPod – Our 12 Year Experimental Journey

It has been 12 years since the inception of SecPod, The Company that aims towards implementing “Cyber Hygiene” across enterprises. Our journey has been all about experiments. Experiments and thoughts of various kinds:

Jul 1, 2020By Chandra2 min read

It has been 12 years since the inception of SecPod, The Company that aims towards implementing “Cyber Hygiene” across enterprises. Our journey has been all about experiments. Experiments and thoughts of various kinds:

  • Can we build a company organically, become better each day and grow along?
  • Can we build a respected Technology Company which seems to be the game of a very few people with certain tags?
  • Can we create a company with a certain cultural uniqueness and continuously tread the path of self-discovery?

Typically when we say, we are a 12-year-old company, the general response is – you have survived for 12 years, that is an achievement in itself. We aren’t a blue-eyed startup. We aren’t even an established player that has announced entry into the world in a big way. More than lasting for 12 years, it is staying focused for this long with a single goal in mind, which has been the biggest challenge and probably the most significant achievement.

The path for self-discovery is essential to define the cultural values or attributes of our Company. Along this journey, we are learning continuously and understanding how to identify ourselves better.

What makes us who we are is the question we are pondering. In an age where most Companies consider building a lasting culture hardly a goal, we are traveling that path, experimenting to discover ‘us’ better and to make ‘us’ better.

Let’s continue to Experiment!

Chandrashekhar B
CEO, SecPod

Featured Posts

Open The Most Effective Vulnerability Assessment Framework What Makes One Effective
The Most Effective Vulnerability Assessment Framework What Makes One Effective

Point of View

The Most Effective Vulnerability Assessment Framework What Makes One Effective

No single named standard makes a vulnerability assessment framework effective. This piece covers NIST, ISO, and CIS Controls, then breaks down what actually separates a working framework from a checklist, coverage, risk based prioritization, cadence, ownership, and a feedback loop.

Sep 11, 2026

Open Threat and Vulnerability Assessment How Risk Actually Gets Calculated
Threat and Vulnerability Assessment How Risk Actually Gets Calculated

Point of View

Threat and Vulnerability Assessment How Risk Actually Gets Calculated

A vulnerability alone doesn't tell the whole risk story. This piece breaks down how a threat and vulnerability assessment pairs technical weaknesses with real attacker context, walks through the six step process, and covers frameworks like NIST 800-30 and ISO 27005.

Sep 11, 2026

Open Vulnerability Assessment Services: What to Look For
Vulnerability Assessment Services: What to Look For

Point of View

Vulnerability Assessment Services: What to Look For

Choosing a vulnerability assessment provider means asking about actual coverage, scan frequency, and whether findings come with real prioritization or just a CVSS dump. This piece breaks down what strong vulnerability assessment services include, red flags to avoid, and questions to ask before signing.

Sep 11, 2026

Open Agentic AI Vulnerability Assessment What Changes and What Does Not
Agentic AI Vulnerability Assessment What Changes and What Does Not

Point of View

Agentic AI Vulnerability Assessment What Changes and What Does Not

Agentic AI is expanding what a vulnerability assessment needs to cover, autonomous agents bring their own credentials, tool access, and memory, adding a genuinely new asset class alongside servers and endpoints. It's also compressing attacker timelines and introducing risk categories like goal hijacking and tool misuse that don't map to a traditional CVE. But the core discipline hasn't changed: the same lifecycle of scoping, scanning, prioritizing, and remediating still applies, human judgment still drives prioritization, and accountability still sits with the people who deployed the agent, not the agent itself.

Sep 9, 2026