Sysdig

CTO and founder Loris Degioanni shares leadership through an Office of the CEO structure with CFO Karen Walker, who joined in 2021 and was elevated in 2025 to oversee go-to-market and operations. Chairman Enrique Salem, a former Symantec CEO and Bain Capital Ventures partner, guides board-level strategy. The board includes representatives from Accel, Premji Invest, Third Point Ventures, and Permira.

Sysdig created and continues to lead development of Falco, the CNCF-graduated runtime security project that has become an industry standard for container threat detection. This open-source anchor drives adoption among developers and platform teams, creating a pipeline for Sysdig's commercial CNAPP platform. The firm invests engineering resources into both the open-source and commercial offerings, maintaining a single R&D strategy under SVP of Engineering Michele Zuccala.

Sysdig's board includes Ping Li of Accel (also an investor in Snyk and Tenable), Robert Schwartz of Third Point Ventures (whose exits include SentinelOne), Sandesh Patnam of Premji Invest, and Michail Zekkos of Permira. Bain Capital Ventures' Enrique Salem serves as Chairman. This syndicate mixes crossover, growth, and venture capital with deep cybersecurity specialization.

CNAPP stands for cloud-native application protection platform, a category that consolidates multiple security functions — including posture management, workload protection, and threat detection — into a single platform. Sysdig differentiates by building its CNAPP on runtime intelligence rather than static configuration scans, arguing that the highest-fidelity security data originates from live workloads. Its open-source Falco engine provides a community-validated runtime detection layer that competitors must either integrate or replicate.

Yes. Sysdig publishes an annual Cloud-Native Security and Usage Report based on telemetry from its customer base, analyzing real-world container and cloud security patterns. The 2026 edition argues that human-driven security is reaching its limits and that AI-driven defense is emerging as a new operational model.

Sysdig is investing in what it calls 'headless cloud security' — embedding its CNAPP platform inside AI coding agents like Claude Code rather than requiring a traditional dashboard. The thesis holds that security workflows are shifting from human-operated consoles to programmable, API-first interactions, and that the firm's runtime data architecture positions it to deliver security at machine speed within developer environments.

Sysdig founder and CTO Loris Degioanni co-created Wireshark, the open-source network protocol analyzer with over 20 million users, prior to founding Sysdig in 2013. Wireshark and Sysdig are separate projects and entities, but both emerged from Degioanni's focus on deep system introspection and open-source community building.