RunReveal makes it easy to collect your security logs and comes with the alerts every company needs.
Austin, TX.
Joined December 2022
- Tweets202
- Following2
- Followers332
- Likes147
How do you develop the next generation of security leaders?
At RUNWAY, Joe Sullivan asked four security leaders, Ben Draffin, Derek Chamorro, Sneha Regmi, and Martin Choluj, what they’re doing to prepare the practitioners next up.
𝗔 𝗰𝗼𝗺𝗺𝗼𝗻 𝘁𝗵𝗲𝗺𝗲: 𝗴𝗶𝘃𝗲 𝗽𝗲𝗼𝗽𝗹𝗲 𝗺𝗼𝗿𝗲 𝗼𝗽𝗽𝗼𝗿𝘁𝘂𝗻𝗶𝘁𝗶𝗲𝘀 𝘁𝗼 𝗲𝘅𝗽𝗲𝗿𝗶𝗲𝗻𝗰𝗲 𝘁𝗵𝗲 𝗽𝗮𝗿𝘁𝘀 𝗼𝗳 𝘁𝗵𝗲 𝗷𝗼𝗯 𝘁𝗵𝗲𝘆’𝗹𝗹 𝗲𝘃𝗲𝗻𝘁𝘂𝗮𝗹𝗹𝘆 𝗻𝗲𝗲𝗱 𝘁𝗼 𝗼𝘄𝗻.
1. Bring engineers into customer conversations.
2. Give them opportunities to present.
3. Expose them to how the security story gets told to the board.
4. Let them own decisions, take risks, and be accountable for the outcome.
Different approaches, but a common thread: you learn leadership by getting opportunities to practice it.
A few perspectives from the panel ↓
We had the privilege of hosting over 130 security leaders and practitioners at RUNWAY last week.
People shared what they’ve built, where it broke, and what they’re figuring out next.
One theme kept coming up: useful AI investigations depend on good data and context.
We wrote about what we learned and how it’s shaping what we’re building.
Thanks to everyone who helped push that thinking forward.
Read our full RUNWAY takeaways here → blog.runreveal.com/what-we-l…
We're still unpacking all the great conversations we had at RUNWAY about where security is headed.
The practitioners and leaders in this community are closest to how security work is changing every day. They came ready to share what they're building, where they're getting stuck, and what they're learning along the way.
That openness made the day. Honest questions, different perspectives, and people helping each other work through challenges they recognize from their own teams.
To everyone who showed up, spoke, asked a question, or kept a conversation going between sessions: thank you. You gave the whole room more to learn from.
We're grateful to be building alongside this community and excited to keep these conversations going.
[RUNWAY] Five days to go. Here’s what to know before you join us.
📍 Tuesday, September 29 | The Pearl, San Francisco
☕ Check-in & breakfast: 8–9 AM
🎤 Keynote: 9 AM
We’ll spend the day digging into detection engineering, AI security, autonomous investigation, and what it takes to lead and operate a security team right now.
There’s time built in to connect, too:
- Rooftop lunch with fellow attendees
- Conversations with speakers and peers throughout the day
- Optional happy hour at Sea Star from 5:30–7:30 PM
Come with the questions you’re working through and the experiences you’re willing to share.
Already registered? We’re looking forward to seeing you.
Still deciding? Tickets are free, with 8 spots left. If you’re a security practitioner or leader looking to compare notes with peers, we’d love to have you.
Full agenda → runway.runreveal.com/agenda
What’s on security teams’ minds right now?
We asked practitioners joining us at RUNWAY what they’re most interested in. AI for security, threat detection and engineering, and security leadership topped the list.
If those are on your mind too, join us to explore:
- How teams are putting AI to work in detection and investigation
- What it takes to build better detections, starting with the data
- How security leaders are navigating AI adoption and changes to their teams
We’re bringing together practitioners and leaders to share what they’ve tried, what they’ve learned, and what they’re still figuring out.
Come connect + compare notes with people working through the same questions.
September 29 | The Pearl, San Francisco
Tickets are free, with limited spots left.
See the full agenda → runway.runreveal.com/agenda
How are other security teams tackling the same challenges you are?
Join us at RUNWAY next Tuesday for three technical talks:
1️⃣ Retiring the SOC: Flexport’s Bet on Autonomous Investigation
Max Baumgarten, Flexport
Building autonomous detection and response with engineers owning threat response.
2️⃣ Semantic Detection Engineering
Mike Parowski, Harvey
A practitioner’s perspective, with time for your questions.
3️⃣ The Data Engineering Talk for Security Folks
Alan Braithwaite, RunReveal + Tristan Ahmadi, ClickHouse
Security data pipelines, schemas, and storage built for real query loads.
Compare approaches. Ask questions. Bring ideas back to your team.
📍 September 29 | The Pearl, San Francisco
🎟️ Free tickets. Limited spots left.
Explore the agenda and join us → runway.runreveal.com/agenda
RunReveal retweeted
Excited for runway.runreveal.com next week. @RunReveal's first user conference with some of the best talks out there related to security & AI.
Security twitter, if you're in the bay area I would love to see you there!
Your SOC just moved into Slack 👀 .
We built a RunReveal bot that brings full investigation power straight into your Slack threads. No more tab-switching between an alert and your SIEM.
An alert lands in your hashtag#securityalerts channel. You just @mention the bot right in that thread:
"@RunReveal is this alert actionable? Summarize what happened and who was involved."
Same agent, same tools as the console. It keeps thread context, so follow-ups don't need re-explaining. It respects your RBAC (DMs run as your role, channels run under the bot's role).
Slack and the web UI share one chat history too, so you can start an investigation in a thread and finish it in the console (or vice versa).
Security work happens where the alert happens, now your investigation can too 💥 .
Setup takes minutes: install the bot, link your account, start asking questions.
Happening this week, Austin 🤠 !
Join us for some awesome tech talks with local security practitioners at the AI for Security Mini-Con this Thursday from 12pm-5pm CDT.
Room is filling up, grab your spot now 👇
luma.com/1g1pa98z
Payment logs tend to pick up card numbers, billing zips, and cardholder names right along with the data you actually need for detection, and that quietly pulls PCI DSS scope into your logging stack (whether you meant to or not).
Here's a quick walkthrough of how to mask that data in RunReveal:
1️⃣ Connect a custom source
2️⃣ Map the fields
3️⃣ Add one pipeline rule
From there you can redact, hash, or partially mask whatever you choose, before any of it ever hits storage, and it takes no changes on the source side and no custom code to set up.
See full blog here ↓
blog.runreveal.com/mask-pii-…
Hacker Summer Camp 2026: the highlights
Security hot takes from Daniel Stinson-Diess, Ben Draffin, Bil Harmer, Derek Chamorro, and the Formal team.
A dinner at Mizumi with DevArmor and C1 that ran way past dessert.
Security leaders comparing notes on what's actually making their lives easier at AI for Security Demo Day with Tobias Boelter.
All this in the Vegas heat 🔥 'Til next time!
AI agents in security operations need to work where investigations actually happen.
That’s why we’ve been expanding the RunReveal Agent beyond chat with:
- Slack support, so teams can bring the agent directly into incident channels
- Agent skills, so repeatable runbooks can become reusable workflows
- Context compaction, so long-running investigations can keep moving
- Token usage analytics, so teams can understand and manage AI spend
- A new runreveal CLI experience for working with the agent from the terminal
Security investigations are collaborative, messy, and often long-running. The agent should support that reality — not force analysts into a single interface or one context window.
Read more about what we shipped and why: blog.runreveal.com/ai-securi…
We're getting the crew back together in Austin! 🤠
@ejcx_ is hosting a half-day meetup on Thursday, August 20th, this time with Kyle Polley, CISO, co-hosting.
Tech talks + time to meet fellow security folks. Whether you're a seasoned pro or just security-curious, request your invite for AI in Security Mini-Con here: atxsec.ai/.
It's free to attend!
150 security practitioners. One room. No vendor floor.
RUNWAY is RunReveal's first conference, built around the conversations that (𝘶𝘴𝘶𝘢𝘭𝘭𝘺) only happen in DMs and Slack threads: what's actually working, what broke, what you'd do differently.
Excited to share a preview of our speakers including Joe Sullivan Martin Choluj, Sneha Regmi. Derek Chamorro, and more.
September 29th, at The Pearl in San Francisco.
Space is limited. Reserve your seat and connect with security practitioners doing this work every day.
Details and tickets here ↓
na2.hubs.ly/H06R21h0
RunReveal retweeted
Blue Team Con 2026 is proud to announce @RunReveal as a Silver Sponsor.
ALT A graphic with all content that is in the post as well as the Run Reveal logo and their website of runreveal.com. It also shows that Blue Team Con 2026 is on September 10-13 in Chicago, our twitter handle is @BlueTeamCon and that our website is blueteamcon.com.
Most security teams spend their days inside a SIEM, poking around manually, writing lengthy queries, and chasing noise.
@Bastion's security team doesn't work that way.
With RunReveal's AI detection agents, they've eliminated 40% of alert volume, reconstructed full timelines in minutes, and built continuous behavioral baselines across their entire environment — all through a platform built around natural language and SQL, not proprietary query languages and steep learning curves.
Read more about their story here 👇
runreveal.com/case-studies/b…