25:27A Conversation with Dan DeCloss
Daniel Miessler interviews Dan DeCloss, the founder of PlexTrac, and about seven minutes in it turns into a live walkthrough of the product. DeCloss came up through GRC into penetration testing and built PlexTrac because he loved testing and hated writing reports, but the pitch now is that discovery is no longer the bottleneck: scanners, testers, and AI all find plenty, and nobody can say which of 23,000 open finding instances will actually get you breached. He demos contextual risk scoring where a Tenable critical lands at 56, an algorithm editor scoped per department, bidirectional Jira and ServiceNow sync so IT never opens the security console, MITRE ATT&CK playbooks that generate a finished report, and the write ups library that stops client data bleeding between reports. The last three minutes turn to Claude Mythos and the vulnpocalypse, where his position is to put AI upstream in the SDLC and downstream on the backlog, because the known knowns are still where the bulk of the work is.