Bedrock Security is a frictionless data security company transforming data security in the cloud and GenAI era with its leading data security platform, powered by the industry’s only AI Reasoning Engine (AIR). Pulse 2.0 interviewed Bedrock Security’s co-founder and CTO Pranava Adduri to learn more about the company.
Pranava Adduri’s Background
What is Pranava Adduri’s background? Adduri said:
“My co-founder and I both come from the world of securing large-scale data systems at Rubrik and Cohesity, where we served the F500 and helped them defend against ransomware. Ganesh and I were both thinking about the problem of defending an organization’s most critical data against adversaries when we started Bedrock.”
Formation Of Bedrock Security
How did the idea for the company come together? Adduri shared:
“Preventing data breaches is as much a security problem as it is a big data problem. And this is exactly why we built Bedrock. We understood the security and architectural challenges inherent in finding, classifying, and protecting data at the scale and speed modern enterprises were demanding. This expertise was applied to the development of Bedrock and to develop a frictionless approach to data security. Today, our leadership has security expertise spanning Palo Alto Networks, Zscaler, and big data expertise spanning Rubrik and Cohesity. Bedrock aims to make data security frictionless by becoming the de facto security layer between data consumers, which include humans, machines, and applications, and data defenders on the security side.”
Favorite Memory
What has been Adduri’s favorite memory working for the company so far? Adduri reflected:
“Our first customer deployment and our launch celebration have been my two favorite moments in the history of the company.”
Core Products
What are the company’s core products and features, especially when it comes to managing data risk in today’s era of cloud and GenAI? Adduri explained:
“A defining characteristic of data in the cloud and GenAI era is its rapid growth and change. Keeping up with that growth and change requires a new approach that can learn what data is important and ensure that data is contained securely. Bedrock learns your data using AI reasoning and introduces Trust Boundary data perimeters to contain that data away from risk.”
More About Bedrock Security’s Patented Technologies
How do Bedrock Security’s patented technologies, such as Adaptive Sampling and Trust Boundaries, contribute to minimizing response times while maintaining accuracy in Data Detection and Response (DDR)? Adduri pointed out:
“Responding to data risks requires keeping pace with ALL the data an organization creates and to also keep pace with how it is being used and moved; traditional approaches can’t continuously scan at today’s data volumes.
As a result, identifying risks to regulated data and core IP is a manual process that occurs by accident, or worse, during a breach notification. Adaptive Sampling is a patented methodology for rapidly discovering and learning data at petabyte scale.
Since Adaptive Sampling allows for continuous discovery and Trust Boundaries allow you to specify how your regulated data and core IP may be used and accessed, any violations of controls are detected near real-time, allowing security teams to rapidly spring to containment instead of waiting for leaks to become breaches or for compliance control audits to fail.”
Reducing Identity Overprovisioning For Data Access And Minimizing Stale Data
Can you provide an example of how Bedrock Security’s platform helps organizations reduce identity overprovisioning for data access and minimize stale data, and how this ultimately contributes to risk surface minimization? Adduri emphasized:
“Bedrock Security’s platform empowers organizations to effectively mitigate the risk of identity overprovisioning and minimize the presence of stale data, key factors in reducing the overall risk surface associated with data access. At its core, Bedrock conducts a thorough analysis of user entitlements, roles, and group memberships to identify and understand the actual usage patterns within the organization. This enables Bedrock to pinpoint roles that are underutilized or unnecessarily broad, suggesting more suitably scoped, least-privileged roles for users needing access to specific datasets. This approach ensures that individuals only have access to the data essential for their roles, preventing unnecessary exposure of sensitive information. Furthermore, Bedrock’s proactive capabilities extend to the identification and management of stale data—datasets that are no longer in active use or have not been accessed for an extended period. Recognizing these datasets as potential security liabilities, the platform can automatically restrict access or quarantine them, significantly reducing the opportunities for unauthorized access or data breaches.”
Ensuring Regulated Data Is Not Ingested Into Modern LLM Architectures
Can you elaborate on how Bedrock Security ensures that regulated data and core IP are not ingested into modern LLM architectures, and how this sets the company apart from its competitors? Adduri replied:
“To ensure regulated data and core IP are not being ingested into LLM architectures, it’s crucial to reliably identify and track them first; this is where AIR comes in. Bedrock combines AIR with a second technology, Trust Boundary data perimeters to contain the where regulated data and core IP are allowed to be used. Organizations can use Trust Boundaries to identify, monitor, and contain how regulated data and core IP are being used by the business to avoid inadvertent leakages into LLM model training or indexing in the case of RAG-like knowledge systems.”
Challenges Faced
What challenges have Adduri and the team faced in building Bedrock Security? Adduri acknowledged:
“Our industry has a ‘time to value’ problem in that, solutions to date have long deploy and tuning cycles that consume significant employee resources. We’re going against the grain of people’s expectations that data security can be fast and provide quick value. As is the case, showing (not telling) is the key, and this is what Bedrock has been steadily doing across all its customers.”
The Evolution Of Bedrock Security’s Technology
How has the company’s technology evolved since launching? Adduri noted:
“Bedrock has built the first data security platform for the cloud and GenAI era; our $10 million raise will further our R&D into AIR and our go-to-market efforts, including the delivery of a world class customer experience.”
Significant Milestones
What have been some of the company’s most significant milestones? Adduri cited:
- Bedrock Security’s launch and seed round announcement.
- Being named a RSA Conference Top 10 Innovation Sandbox Finalist.
- Industry leading time to value within the Fortune 500.
Customer Success Stories
Upon asking Adduri about customer success stories, he highlighted:
“We were able to onboard a 16PB customer in 4 days. This would have taken months for the customer normally. Here is our House Rx customer case study.”
Funding
Upon asking Adduri about the company’s funding information, he revealed:
“Earlier this year, we announced a Seed Round of $10 Million, led by Greylock.”
Total Addressable Market
What total addressable market (TAM) size is the company pursuing? Adduri assessed:
”$17.4 billion. This is in part a result of the ability for Bedrock to replace multiple tools like classification, discovery, cloud DLP, Gen AI data protection, and others.”
Differentiation From The Competition
What differentiates the company from its competition? Adduri affirmed:
“Traditional approaches to data security rely on rules for identifying regulated data and intellectual property. However, rules don’t work when your data changes and new types of data are introduced, especially in today’s explosive data growth for cloud and GenAI. Bedrock Security’s AI Reasoning (AIR) Engine uses the latest in AI to reason about what data is most material and important to a business and allows Bedrock to keep pace with new data as it’s being created.”
Future Company Goals
What are some of the company’s future company goals? Adduri pointed out:
“Our vision is to be the de facto layer of data security between data consumers (including humans, machines, and applications) and data defenders (the security, risk, and governance teams at enterprises worldwide).”
Additional Thoughts
Any other topics you would like to discuss? Adduri concluded:
Supporting resources for the readers:
- White Paper
- Company Overview Video
