
What does it take to build a company worth $32 billion? Solal Raveh, CTO Product Infrastructure at Wiz, shares hard-won lessons from scaling technical teams during one of the fastest-growing security companies in history. Learn how Wiz evolved their CTO office from traditional team building to rapid innovation incubation, why geographic team cloning failed spectacularly, and how staying customer-connected drives product decisions. Discover the three-fold mission of modern CTO roles, the shift from measuring finished features to tracking innovation velocity, and why technical leaders must balance automation expertise with people-first thinking. Technical leaders will gain insights into organizing global remote teams around domain expertise, implementing 3-hour threat response cycles, and building enterprise-ready infrastructure while maintaining startup agility.
What does it take to build a company worth Google's $32 billion acquisition? Solal shares the hard-won lessons from scaling technical teams during one of the fastest-growing security companies in history.
Key leadership insights from the episode:
• CTO Office Evolution: How Wiz split technical leadership into 3-4 specialized tracks focused on domain expertise rather than geography
• The Geographic Cloning Failure: Why hiring locally for technical roles created dissatisfaction and duplication instead of excellence
• Remote Team Success: Building global CTO teams around container security, API infrastructure, and runtime protection expertise
• Incubation Philosophy: Moving from building teams to rapid POC development - like their 3-hour response to the Shy Hulud NPM exploit
• Customer-Centric Engineering: How every CTO team member stays connected to customer challenges rather than waiting for inbound requests
• Innovation Metrics: The challenge of measuring incubation success vs finished features, plus P99 performance tracking for enterprise readiness
• People-First Leadership: Why focusing on people and customer problems trumps pure technical automation
• Security Industry Insights: Making security "not scary" through gamification and community engagement
Technical Context (18% of episode): • Agentless API scanning that maps entire cloud environments in minutes vs weeks • Graph database visualization of attack paths from code credentials to AWS admin access • Risk contextualization: Why a CVSS 9.9 vulnerability on unused images can wait, but the same vulnerability across 10,000 live VMs demands immediate action • AI agent "Mika" that correlates threat intelligence with specific infrastructure data
Chapters: