Johnathon Claudius

speaker

287 appearances 1 recordings 1 series first heard Mar 2026 last heard 23 Mar

Johnathon Claudius’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

Recordings per month over the last 12 months — 1 in all, peaking in Mar 2026 with 1.

Appearances

newest first · ▶ plays the moment

Web3 with Sam Kamani · 372: The Security Mistakes Every Web3 Founder Makes (And How to Avoid Them) with Guest Speaker Johnathon Claudius from Asymmetric Research · 23 Mar 2026 podcast

And for us, we've

really try to position ourselves as enablers, being able to help folks work through these problems in an active way.

And I think this goes back to the, you don't make security decisions in a two-week convenient window.

I think the ball is constantly going to be moving, right?

And for us, I feel like that puts us in a good position with our clients to be able to respond to the threat of the day or the threat that we're facing right now, and we can continue to iterate with them over time.

I think the initial guidance that I give to most folks is thinking about a lot of people, it's the most boring thing I can suggest, but like a lot of people misunderstand the value of doing good policy work up front.

When I say good policy work, I mean, for example, like on the G Suite side, making sure that you use security keys within your G Suite instance, that you use branch protection on GitHub and a bunch of these, like what I would otherwise call easy wins.

These are things that feel onerous maybe at the time, but they're generally pretty high value things to do is that they're kind of a set once and benefit forever type thing.

The other thing I would do, especially for folks that are early, it likely indicates that they probably just don't have a lot of funding yet.

Maybe this is a...

Sort of like a garage exercise where these guys are working together, trying to figure something out early.

These LM tools are quite good.

So I think you can start to mount a reasonable defense by just asking it to look for vulnerabilities in your code.

I wouldn't necessarily consider that like a comprehensive program, but it's a great place to start.

And I think if you can get an easy and a fast iterative win, then you should take it always.

There's a lot of times like folks feel like because they can't afford, you know, full-time security person that that's like, you know, I guess we're just winging it.

You know, I, I think for a lot of folks, a lot of projects, the idea is that like, if, if you're in that early stage, then like security becomes kind of everyone's problem.

So you want to make these good decisions early around the easy wins for like the Web 2 side of things.

And then on the Web 3 side of things, leveraging alarms of a great strategy.

There's also kind of step up opportunities along the way.

Showing 81–100 of 287 · page 5 of 15