VINEET BHAN: Thank you for joining our session.
We are, today, talking about why security companies chose
to run on Google Cloud.
My name is Vineet Bhan.
I lead security partnerships in Google.
We are very fortunate to have a panel of leading
security company experts, today, to share
their thoughts with us.
Before we get started in the discussion,
I think one key element will be to understand Cloud
Security a little bit more.
There are a couple of key constructs there.
One is the shared responsibility model,
where there are certain things that are responsibility
of the Cloud provider, in this case, Google Cloud itself,
and a responsibility of a section that
is customer's own responsibility to take care of.
Another key construct is there will be elements of products
that Google Cloud provides, but partners play a critical role
in complementing the security that the platform itself
provides.
And, typically, there are many different ways
customers use partner products.
In one case, it could be because they're very comfortable using
a partner product.
They use it on-prem as well.
They want to carry forward the same product.
In other cases, there are partner products that
complement what Google cannot provide or as another layer
on top of Google products.
And, increasingly, we are also partnering
with leading companies to build their next generation
of services on Google Cloud.
So how do we solve security problems
that the customers are facing today and leading
the way on how security should be done, going forward?
With that, I would like to kind of start
with introductions with the folks who are joining us today.
Jane, would you like to start with your intro?
JANE CHUNG: Thanks for having me here.
My name is Jane Chung.
I'm with Palo Alto Networks.
My responsibility is just securing
our customers' journey from on-prem to the multi-cloud.
VINEET BHAN: Thank you.
And, Dave, would you go next?
DAVE SCHWARTZ: Sure.
Hi, I'm Dave Schwartz.
I'm the GVP of Global CSPs as well as Distribution
and Resale Strategy.
Been with Splunk a little over seven years.
And for those of you that don't know Splunk,
we are the data platform, data-everything platform,
focused on security, ITOps, and DevOps.
VINEET BHAN: Thank you.
Chris, if you could introduce yourself.
CHRIS STEWART: Sure, Vineet.
Thanks for having us.
My name is Chris Stewart.
I'm Vice President of Business Development
and Global Alliances for Exabeam,
a leading SIEM, SOAR, XDR platform.
And I had the good fortune of working with this great company
for the last five years.
It's been a great journey, and looking forward to what we do,
going forward, with our cloud strategy.
VINEET BHAN: Perfect.
Thank you.
I think first question that I think
will be very useful for the security practitioners
and leaders listening in will be your own journey
into the cloud.
So, Jane, if we could start with you,
of Palo Alto's journey of using cloud and building
services in the cloud that is used by their end customers.
Any insights, any things that will
be helpful for the audience?
JANE CHUNG: Thank you.
Our journey began in 2018, when we developed our flagship
solution.
It's a next-generation firewall that runs on Google Cloud.
Starting from there, we have expanded, offering customers
capability to secure their cloud workload in the Google Cloud.
Along with that, we also developed a solution
on Google Cloud using the Google's machine learning
and Artificial Intelligence capability
so that we could predict what kind of other threats going
to be lurking around in Google Cloud and other cloud.
And so we partnered with Google to develop
the forensics capabilities so that we could
find any alerts coming from the cloud environment,
we could identify what the issues are,
and quickly resolve and deal with those hot incidents
right away.
VINEET BHAN: Perfect.
Thank you.
Chris, going over to you, your experiences and your company's
experience of having a solution in the cloud?
CHRIS STEWART: Yeah, thanks for the question, Vineet.
It's been an interesting journey, as you can all see.
If we think back to the last, you know, let's call it decade,
cloud has come a long way.
I know that kind of sounds like a silly statement,
but it's pretty interesting to see where the market's comfort
level has gone from, again, 10 years ago
just to the present day.
We started out servicing the biggest customers
in the world who had big data problems, really
applying analytics to the telemetry and the, at the time,
on-prem workloads that they were all working off of.
Their journey has been our journey,
and we've been trying to accelerate customers move
into the cloud for all the reasons that people understand,
the scale, the flexibility.
So it's been quite a journey, and obviously we
see we have customers at various stages of cloud adoption.
As a company, we've made a very conscious decision in the last,
let's call it four, five, six years to migrate quickly
and help our customers migrate quickly to the cloud,
to being basically a full cloud platform.
Great economies of scale, great performance,
and incredible flexibility.
So it is great.
It's been really good to see the comfort
levels from our customers accelerate
over the last few years to reap the benefits
of leveraging Google Cloud platform, which is what we run.
VINEET BHAN: Perfect, thank you.
Dave, your and Splunk's experience
of using Google Cloud?
DAVE SCHWARTZ: Yeah, our experience has been great.
And along the lines of what Chris and Jane said, we-- you
know, Splunk has been along this customer
journey from being a cloud company both
internally to our own applications,
recently moving to Google Workspace,
but also on the product, starting off
as a perpetual software company moving, now,
to more of a cloud company.
So all of our applications, native is available on GCP,
and we see many, many more of our applications,
in the future, moving in that direction as well.
So we see it very much in line with what our customers are
trying to do as well.
VINEET BHAN: Perfect.
Perfect, thank you.
So I think that, now, moving on to a kind of security topic
discussion, I think you guys, all of you,
are great experts in the security industry.
I think your insights on what you're hearing from customers
today as they're adopting more cloud, the challenges they
are running, it's kind of a different world.
And, also, where do you see this evolve over the next few years,
as the adoption grows and people are kind
of expanding their footprint?
The insights will be helpful for folks who are listening in
to think about security today as well as think about security
that they should have in place in a few years out.
So, Dave, starting with you.
DAVE SCHWARTZ: Yeah, we actually just
recently published the State of Security report,
and we talked a lot about exactly what you just asked.
49% of the respondents are talking
about that security is twice as hard as it was in the past,
and especially in a multi-cloud environment,
which most of our customers are running multi-clouds.
So it's extremely important.
Another huge insight is around attacks that are taking place.
78% of the security and IT leaders
are super concerned about things like the SolarWinds attack
and how they protect themselves against that.
So, from a partnership perspective,
it's an opportunity for Splunk and Google
to be able to create solutions and offers to our customers
as they move into this new world of protecting the cloud
environment.
VINEET BHAN: Makes sense.
Thank you.
Chris, over to you.
CHRIS STEWART: Yeah, Dave hits a good point.
I think the complexity of the attacks and the diversity from
what used to be a premise-based solution with four walls
to cloud and in-between, I think that's what we're seeing as far
as the--
what customers are wrestling with as they migrate.
The other thing that we've seen a great deal of
is the new blind spots that organizations have
as they adopt cloud and cloud services.
It's just very different.
And if you're not prepared and well set up
and certainly don't have the ability
to really look at telemetry at scale,
it's very difficult to ensure that you've
got everything covered.
There's new categories that are emerging.
Our customers are really wrestling with that,
really when as, an industry, we were
wrestling with a pretty much smaller problem,
going back a few years.
As the data has grown, the complexity
and the size of the problem has grown for our customers.
So we're seeing that, and we're seeing
the need for our customers to really
be able to look at more data, understand more data at scale
and, again, like Dave said, across multiple clouds,
which is just being-- it's far more
common in sort of this new era of cloud computing.
It's not just one.
It's usually two, maybe three in some cases.
So it's definitely open the risk aperture
for customers to understand just where the potential holes
in their strategy and where they're vulnerable.
That's been probably the most common discussion
we've had with people on their cloud migration of late.
VINEET BHAN: Perfect, thank you.
Jane, it's same question for you.
JANE CHUNG: Chris and Dave, you guys
did a fantastic job explaining what the new threats that we
have to deal with.
Palo Alto Networks, we started out explaining and working
with the customers about how the cybersecurity threat
is happening in cloud versus in on-prem.
It's different.
You need to have different tools, different prevention
capabilities when you actually move to the cloud.
So we usually begin with that conversation,
what are the differences are between the clouds as well.
As you could tell, Google Cloud is known
to be developer-friendly cloud.
What that means is we need to start
the education for the developers to understand.
They need to be very careful when they're
deploying their workload and the resources on the Google Cloud
and making sure they're securing their entire stacks,
from the development code all the way to the CI/CD pipeline.
So we work with our customers understanding
why it is so important to secure the entire supply
chain of software development.
And, from there, we also work with Google's SRE team
and our technical team to be understanding
of some of the potential threats that they're facing.
They might not be able to see them in the on-prem.
And partnering with the Google Cloud
has been very wonderful because you guys are structured
so that you could work with these developers and developer
community to secure their software supply chain.
VINEET BHAN: Perfect, thank you.
I think, now, moving on to kind of an interesting topic
that we hear a lot from customers saying, hey,
there are a lot of great security companies
that we work with.
How are you working with the leading security companies
to make the life of the end customer easy?
Like, how are you building the next generation of solutions
or integrating existing solutions
so the complexity of using those solutions
is all between the security provider and Google?
Because it's so well integrated for the customer,
it's very easy to use and seamless to use.
So I think innovation's there.
I feel it is the critical piece that can accelerate folks
to use cloud more seamlessly.
So I'll just start with David, you,
your insights on how you have been working with Google Cloud
and how these next generation of services
will be critical to take security to the next level.
DAVE SCHWARTZ: Yeah, I mean, it's great,
and we joined partnership with Google Cloud
for customer choice.
It's really important for us to be
able to meet the needs of our customers.
And we've seen a huge uptick in some
of the largest brands-- both retail,
banking, and other segments-- leveraging
Splunk Cloud on Google.
But the other part of it is, what can we develop
to solve problems together?
We have joint development teams working on next-gen solutions
that allow our customers the best outcomes
to help protect against things we talked about
during the last question.
So we see massive development opportunities
between our companies, which allow best-case scenarios
for our customers.
VINEET BHAN: Perfect.
Chris, over to you.
CHRIS STEWART: Yeah, I think just
to touch on what was said before, we think that building
on a platform like GCP enables us to do what we do really
well, what Exabeam does well, which is discover
anomalous behavior, try and determine where
the needle in the needle stack is, and try
and really help our customers find
the problems for their cloud-premise hybrid.
I think that's one of the things that we look to leverage
from the relationship, is the size and scale
of what's capable, really, of your platform.
And that's definitely one of the key elements
to driving our other part of our relationship, which
is our commercial arrangement and our go-to market,
where we feel that there's a really
good synergy between what Google Cloud is very good at
and what we're good at.
I also think that, as we drive forward,
there's going to be greater adoption of services,
native services, that we can build together.
We have efforts underway, right now,
that are looking at different ways
to optimize and really, really increase the customer
satisfaction and customer accuracy, which everyone's
looking for and everyone's expecting from the cloud.
So it's a great time to be partnering
with Google Cloud for security innovation,
and just innovation in general, for that matter.
VINEET BHAN: Perfect, thank you.
Jane, same question for you.
And just also putting a customer lens
on it, what should customers expect from Google and Palo
Alto Networks in terms of how do we help
make their lives better as new solutions are rolled out?
JANE CHUNG: So we are partnering with the Google
Cloud for the Zero Trust.
It's integrating two of our flagship solutions called
the Prisma Access for remote user access to the cloud.
And then, also, we have an endpoint solution called XDR.
We are integrated with a BeyondCorp enterprise
to make it look like one seamless solution via Google
Console.
VINEET BHAN: Perfect, thank you.
I hope folks who are watching the video found it useful.
We are very excited to work with the folks
on the panel and leading security companies
to bring the next generation of solutions to you.
The hope is we will all work together in the industry
and make the lives of our customers easy
and help take security to the next level.
Thank you.