About the show
A cybersecurity podcast for the people who actually run security.
Noise 2 Signal is a long-form interview podcast covering cybersecurity from the practitioner's seat — the founders, engineers, and leaders who built the industry and are still building it. No vendor pitches. No sponsor reads in the middle of substantive thinking. No buzzword bingo.
What we cover
Each episode is a real conversation — typically 45 to 90 minutes — with someone who shaped a corner of cybersecurity. Topics range across vulnerability management, offensive security, AI in cyber defense, security strategy, and what it actually takes to start, scale, or exit a security company.
The show is built for CISOs, security engineers, founders, investors, and practitioners trying to understand where this industry is going — and how the people who shaped it actually made their decisions.
Guests so far
- Renaud Deraison — Founder of Nessus, co-founder of Tenable. Talked about the early days of vulnerability scanning, the AI revolution in AppSec, and his new project Bromure.
- HD Moore — Creator of Metasploit, CEO of runZero. Covered the scrappy origins of offensive security, the Blaster worm story, and building runZero to $1M ARR as a solo operation.
- Cole Grolmus — Founder of Strategy of Security. Discussed cybersecurity media, the industry ecosystem map, and why blitzscaling rarely works in security.
- Ed Bellis — Co-founder of Kenna Security, founder of Empirical Security. Unpacked the origin of Risk-Based Vulnerability Management, the post-Cisco acquisition reality, and why AI is "eating the scanner."
More episodes drop regularly. See all episodes →
Your host
Mehul Revankar is the co-founder of Quantro Security, where he's building AI agents for cyber defense. He has spent two decades building enterprise security products — from open-source projects to award-winning B2B platforms — with time at Tenable, Qualys, and SaltStack along the way.
Noise 2 Signal grew out of a specific frustration: cybersecurity media is dominated by vendor-funded surface-level content, while the people who actually moved the field forward have stories worth hearing at length.
Why this exists
The cybersecurity industry has a media problem. Most coverage is either fear-mongering breach news or polished vendor content. The technical reality — what it actually takes to build a security tool, run a security team, or prevent a breach — rarely makes it through.
Meanwhile, the people who built this field are still here, and they have specific stories about specific decisions: why Metasploit chose port 4444; what convinced the first enterprise customer to move vulnerability data to the cloud; why an integration worked or didn't after an acquisition. That's the show.
Where to listen
Available on Apple Podcasts, Spotify, and YouTube — or wherever you get your podcasts.