Lessons from Gili Raanan

Lessons from Gili Raanan

Former engineer Gili Raanan founded Cyberstarts to back early-stage cybersecurity startups. He was the first investor in Wiz and is known for the "Sunrise" process, which forces founders to validate enterprise problems before writing code. This profile details how he evaluates engineering talent, handles enterprise sales, and manages risk.

Part 1: The Founder

1. On The True Asset: "I won't invest in ideas or products, I'll invest in people. Ideas are overvalued, and people are undervalued." — Source: Venture In Security
2. On Evaluating Pitch Days: Raanan's Technovation discussion frames early founder evaluation around talent and adaptability, not the first version of a trend, product, or technical idea. — Source: Technovation
3. On Finding Drive: "I look for a specific pain in the eyes of founders: a relentless motivation that goes beyond a casual desire to start a business." — Source: Invest Like the Best
4. On Seed Stage Signal: "The idea and the technology at the seed stage is noise. The best decision is to just watch the individual and decide if that's the individual you want to partner with." — Source: Cyberstarts Official
5. On Personal Growth: "To build an important cybersecurity company, you need to become very deep as a person." — Source: Startup Book
6. On Evaluating Resiliency: "You have to back founders before the code even exists. That means underwriting their capacity to handle the inevitable failures." — Source: 20VC Interview
7. On Constant Variables: "I prefer to spend my time as an investor to understand the element that isn't going to change dramatically, and that's the people I see in front of me." — Source: Venture In Security
8. On Partnership: "Seed investing is about deciding who you are willing to suffer alongside for the next decade." — Source: 20VC Interview
9. On Founder Motivations: "The reason someone starts a company is more predictive of their success than the initial deck they present." — Source: Invest Like the Best
10. On Early Execution: "The founding team must demonstrate an unusual capacity for speed. In the early days, velocity is the only real moat." — Source: Forbes Profile

Part 2: The Sunrise Process and Validation

1. On Market-First Development: "We connect founding teams with high-level industry executives before significant product development begins to validate real-world pain points." — Source: Calcalist Tech
2. On Customer Objections: "Founders must confront the tough questions they might face in the coming years immediately, not after the product is built." — Source: Cyberstarts Official
3. On Validating Demand: "Do not build a solution and search for a market. Validate the market and let it pull the solution out of you." — Source: Invest Like the Best
4. On Identifying True Pain: "Conversations with CISOs shouldn't just be about whether an idea is good; they must reveal if the idea solves a pressing, budgeted problem." — Source: Sajith Pai Blog
5. On Avoiding Echo Chambers: "The 'Sunrise' process forces entrepreneurs out of their technical assumptions and into the reality of enterprise buying cycles." — Source: 20VC Interview
6. On Time to Market: "By front-loading difficult conversations, startups can navigate market challenges more quickly and move from ideation to meaningful revenue." — Source: Forbes Profile
7. On Competitive Positioning: "You must be able to articulate why a customer would choose your solution over established incumbents before you write the first line of code." — Source: Startup Book
8. On Network Advantage: "An early-stage firm needs to provide a network of potential buyers on day one. That accelerates the path to product-market fit." — Source: Calcalist Tech
9. On Hard Truths: "It is better to kill an idea in the validation phase than to spend two years building a product no one wants to buy." — Source: Invest Like the Best
10. On Accelerating Revenue: "When validation is done correctly, a startup can aim for significant annual revenue within the first 12 to 24 months." — Source: Sajith Pai Blog

Part 3: Cybersecurity Fundamentals

1. On Market Necessity: "I won't surprise anyone by saying that I don't believe there is a bubble in cyber. We live in a world where cyber protection is a necessity for every organization." — Source: Calcalist Tech
2. On Geopolitical Drivers: "The world is facing a cyber crisis, exacerbated by geopolitical forces. This creates a relentless need for innovation." — Source: Forbes Profile
3. On The Perfect Storm: "The current environment is a perfect storm driven by AI advancements and global conflicts, meaning the threat landscape is expanding faster than defense." — Source: Invest Like the Best
4. On Foundational Security: "Every new technology wave requires a solid cyber foundation. We are building the infrastructure for the next generation of computing." — Source: Cyberstarts Official
5. On Market Share: In the Technovation episode, Raanan treats cybersecurity as a constantly changing field where new threats create room for startups that understand the real risk, not just a narrow feature gap. — Source: Technovation
6. On The AI Era: "AI is fundamentally changing how attacks are mounted, which means defense mechanisms must be entirely reimagined from the ground up." — Source: 20VC Interview
7. On Continuous Innovation: "The adversaries are constantly upgrading their capabilities. A security company that stops innovating is obsolete in months." — Source: Venture In Security
8. On Budget Resilience: "Cybersecurity is the last line item a CIO will cut during a downturn. It is required spending." — Source: Sajith Pai Blog
9. On Domain Expertise: "Building in security requires a deep understanding of the attacker's mindset, often honed in environments like Unit 8200." — Source: Startup Book
10. On Sector Focus: "By focusing exclusively on cybersecurity, you compound knowledge and network effects that generalist funds cannot match." — Source: Forbes Profile

Part 4: Sales and Go-To-Market

1. On The Four Personas: "When you sell a product, you're going to face four personas: the person with the pain point, the budget holder, the decision-maker, and the user." — Source: Sajith Pai Blog
2. On Achieving PMF: "As a startup, if those four personas map into a single person, the faster the chances of product-market fit and success." — Source: Sajith Pai Blog
3. On Value Proposition: "Software is purchased based on verifiable value, not because of advisor influence or flashy marketing." — Source: Calcalist Tech
4. On Distribution Channels: "Understanding how your product will actually be distributed and sold is as critical as the technical architecture." — Source: Invest Like the Best
5. On Pricing Strategy: "Pricing must reflect the severity of the pain point you are solving, not just the cost of your cloud infrastructure." — Source: Startup Book
6. On Enterprise Sales Cycles: "You have to map the political structure of a target organization to understand who truly has the authority to sign a check." — Source: 20VC Interview
7. On Overcoming Incumbents: Cyberstarts' Sunrise process starts with customer pain before product development; the practical competitive test is whether a startup solves a real buyer problem, not whether it has a polished technical idea. — Source: Technovation
8. On Customer Alignment: "Aligning your product roadmap with the immediate, budgeted priorities of CISOs is the fastest path to early traction." — Source: Cyberstarts Official
9. On Sales Efficiency: "Early-stage companies must figure out how to sell without a massive marketing budget, relying instead on direct validation and word-of-mouth among executives." — Source: Forbes Profile

Part 5: Scale and Operations

1. On Execution Speed: "It is hard to optimise for performance when your competitor is optimising for deployment." — Source: Sajith Pai Blog
2. On Operational Tempo: "A startup's primary advantage is agility. If you lose the ability to deploy quickly, you lose your right to win." — Source: 20VC Interview
3. On Early Stage Margins: "Traditional metrics like gross margins may not matter as much for early-stage startups in the AI era. Growth and market capture take precedence." — Source: 20VC Interview
4. On Talent Density: "Scaling requires maintaining the same talent density at employee 100 that you had at employee 5." — Source: Invest Like the Best
5. On Building Moats: "Your distribution speed and the relationships you build with early adopters become your strongest defensive moat." — Source: Startup Book
6. On Focus: Raanan's investing focus is unusually narrow: the 20VC episode frames Cyberstarts around cybersecurity, founder selection, and resisting thesis-driven trend chasing. — Source: 20VC
7. On Market Capture: "In a fast-moving sector, getting your product into the hands of users rapidly is more important than a perfect feature set." — Source: Cyberstarts Official
8. On Technical Debt: "You will accumulate technical debt when optimizing for deployment. The trick is knowing when to pay it down before it slows you down." — Source: Venture In Security
9. On Scaling Leadership: "The founders must transition from building the product to building the organization that builds the product." — Source: Forbes Profile

Part 6: Risk and Venture Strategy

1. On Outliers: "I don't know why we're talking about averages. None of us are in the business of mean reversion. I'm not seeking average returns." — Source: Startup Book
2. On Embracing Risk: "I don't seek comfort. You have to be comfortable with being uncomfortable. We're in the business of taking risk." — Source: Startup Book
3. On Extreme Outcomes: "I'm not seeking good deals. I'm looking for outliers. The venture model demands that we swing for massive outcomes." — Source: 20VC Interview
4. On The Venture Model: "The venture model forces you to be greedy and selfish in the pursuit of companies that can define a category." — Source: 20VC Interview
5. On Seed Round Sizes: "The rise of large seed rounds reflects the capitalization needed to compete aggressively from day one in high-stakes markets." — Source: Invest Like the Best
6. On Conviction: "You cannot invest by consensus. If everyone agrees an investment is a good idea, the returns are already priced out." — Source: Venture In Security
7. On Portfolio Management: "A few massive winners will return the fund. You must spend your time maximizing the success of those outliers." — Source: Forbes Profile
8. On Early Backing: "The best returns come from writing the first check before there is any obvious traction or metric to measure." — Source: Calcalist Tech
9. On Market Timing: In 20VC's discussion of pricing and fundraising conditions, Raanan argues that exceptional companies stay expensive across rounds, so investors have to judge quality through uncomfortable market cycles. — Source: 20VC

Part 7: Technology and Engineering

1. On Engineering Roots: Raanan's Cyberstarts bio grounds his investing judgment in operator and engineering experience: Unit 8200 service, CAPTCHA, the first web application firewall, AppScan, patents, and two acquired enterprise software companies. — Source: Cyberstarts
2. On Solving Real Problems: "Inventing CAPTCHA and early firewalls taught me that the best technology solves immediate, practical friction." — Source: Cyberstarts Official
3. On Architectural Decisions: "Early architectural choices limit or enable your future speed. Make them carefully." — Source: Startup Book
4. On AI Integration: "AI should not be bolted onto a product; it must fundamentally alter the way the solution approaches the problem." — Source: Invest Like the Best
5. On Product Simplicity: "Complex technical problems must be abstracted away so the user experiences a simple, intuitive interface." — Source: Sajith Pai Blog
6. On Security by Design: "Security cannot be an afterthought. It must be baked into the foundational architecture of any new enterprise software." — Source: Calcalist Tech
7. On Cloud Infrastructure: "The shift to the cloud reset the security market. Every major shift requires new native solutions." — Source: Forbes Profile
8. On Technical Moats: "Deep technical IP is valuable, but only if it translates directly into a measurable business advantage for the customer." — Source: 20VC Interview
9. On Iteration: "The first version of your product will be flawed. The strength of your engineering team is measured by how fast they iterate." — Source: Venture In Security

Part 8: Lessons from Hypergrowth

1. On The Ideal Team: "The Wiz founding team is the quintessential example of backing the right people before the code is even written." — Source: Invest Like the Best
2. On Day One Ambition: "When a team is aligned and has scaled a business before, they can execute with a velocity that looks impossible to outsiders." — Source: Forbes Profile
3. On Rapid Valuation: "A company can reach a $32 billion outcome rapidly if they solve a painful enough problem for the world's largest enterprises." — Source: 20VC Interview
4. On Market Saturation: "Even in crowded markets, a product that offers an order of magnitude improvement in deployment and visibility will win." — Source: Cyberstarts Official
5. On Strategic Capital: "Raising large amounts of capital early allows a team to aggressively capture market share and outspend incumbents on engineering." — Source: Calcalist Tech
6. On The Power of Execution: The Invest Like the Best episode places Wiz inside Raanan's broader playbook: Cyberstarts was one of Wiz's earliest investors, and the conversation links that outcome to Sunrise, customer pain discovery, and resilient talent. — Source: Invest Like the Best
7. On Board Dynamics: "A board's job in a hypergrowth company is to remove obstacles, not to slow the founders down with unnecessary governance." — Source: Sajith Pai Blog
8. On Category Creation: "You don't just want to build a better tool; you want to define a new category of enterprise software." — Source: Startup Book
9. On The Ultimate Goal: "The goal is not just an exit; it is building a foundational company that fundamentally changes how organizations operate." — Source: Venture In Security