How StackHawk repositioned runtime testing as the essential layer when AI-generated code made static analysis unmanageable

Joni Klippert didn't come from security. She came from DevOps — two companies, including VictorOps, which she joined as the first non-engineering hire and helped bring to market. At conferences like DevOps Days Enterprise, she kept running into the same frustrated security teams: they knew they couldn't keep up with the pace of software delivery, but their only move was to act as a gate. That observation, paired with her co-founder Scott Gerlach's decade of practitioner experience — including CISO at SendGrid through its acquisition by Twilio — became StackHawk: a dynamic application security testing platform that puts runtime vulnerability testing directly into the CI/CD pipeline, built for the engineers writing the code. In this episode, Joni breaks down how she abandoned her original PLG thesis when enterprise came knocking, how AI-accelerated software delivery has created a structural problem for static analysis tools that benefits StackHawk, and why category definition in AppSec is less about analyst quadrants and more about being precise about what you test and how.TOPICS DISCUSSEDWhy a DevOps founder built her third company in cybersecurityThe structural ceiling in engineering-led PLG deals — and what it signals about ICPHow StackHawk's first major enterprise logo arrived inbound and changed the GTM thesisRotating segment focus when market conditions compress SMB security budgetsWhy AI-accelerated code delivery is a tailwind for runtime testing and a headwind for static analysisBuilding a bridge product for aspirational enterprise buyers who aren't yet DevOps-nativeCategory definition when you don't fit cleanly into AppSec or API securityWorking with analysts on emerging categories like DAST in the age of AIThe organizational misalignment between engineering velocity goals and AppSec team operating models// Sponsors: Front Lines — We help B2B tech companies launch, manage, and grow podcasts that drive demand, awareness, and thought leadership. www.FrontLines.ioThe Global Talent Co. — We help tech startups find, vet, hire, pay, and retain amazing marketing talent that costs 50-70% less than the US & Europe. www.GlobalTalent.co//Don't Miss: New Podcast Series — How I Hire Senior GTM leaders share the tactical hiring frameworks they use to build winning revenue teams. Hosted by Andy Mowat, who scaled 4 unicorns from $10M to $100M+ ARR and launched Whispered to help executives find their next role. Subscribe here: https://open.spotify.com/show/53yCHlPfLSMFimtv0riPyM