in , , ,

Forging A Path: Lessons From Building A Cybersecurity Company

Darren Guccione, CEO and cofounder, Keeper Security.

The Greek philosopher Plato once wrote, “Our need will be the real creator.”

That sentiment has shaped the journey for me and my business partner, Craig Lurey. In 2009, during a long overseas flight, we conceived the early plans for Keeper Security in response to a personal need: securely managing and storing our passwords. It didn’t take long to realize our challenge was universal. In response to growing demand from teams and organizations, we created and launched the Keeper Business Platform in 2015.

Over the past decade, we have continuously evolved our enterprise-grade cybersecurity solutions to address the industry’s shifting landscape. Today, cyber threats are more sophisticated than ever, with attackers leveraging artificial intelligence to speed up and scale common attack techniques such as phishing and password cracking. Keeping pace with those changes has meant staying focused on innovation and adaptability—principles that are essential across the security industry.

What started as an idea mid-flight has grown into a global cybersecurity enterprise. Throughout this journey, four key principles have guided us:

• Understand your target customer.

• Pursue meaningful partnerships.

• Build a dynamic solution that continuously evolves.

• Maintain a relentless drive for innovation and excellence.

Understand your industry and stakeholders.

When launching a business or developing a product, ensuring it meets a genuine industry need is crucial. In cybersecurity, while threats evolve, some core challenges remain unchanged. Verizon’s “2025 Data Breach Investigations Report” found that stolen credentials played a role in 22% of all breaches. As threat actors use harvested credentials to escalate privileges and disable defenses, stopping credential theft isn’t enough—organizations must also ensure that attackers can’t escalate privileges or move laterally once inside. To achieve this, enterprises must take a layered approach to security that includes zero trust, least-privilege access and privileged access management (PAM).

To stay ahead, it’s critical to monitor both micro and macro trends and engage directly with customers, partners and the broader community. Effective strategies include:

• Conducting surveys to understand real-world use cases

• Engaging in industry discussions, news and social media

• Partnering with analysts for market insights and competitive positioning

• Hosting regular customer feedback sessions

• Participating in sales calls to connect with prospects firsthand

Beyond knowing what your audience needs, understanding where they are is equally important. A strong global presence enables businesses to meet regional demands and stay ahead of evolving threats.

For example, Keeper’s global footprint spans the U.S., U.K., Europe and Asia Pacific regions, with the launch of our APAC headquarters in Tokyo, Japan, in 2023 reflecting the region’s rapidly growing demand for zero-trust cybersecurity solutions. With cyber threats becoming more sophisticated worldwide, a localized approach to security ensures that organizations receive tailored, industry-specific protection.

Pursue meaningful partnerships.

Building strategic partnerships enhances credibility and extends market reach. Keeper is the official cybersecurity partner of Formula 1’s Atlassian Williams Racing, a collaboration that underscores the shared values of speed, reliability and precision between elite motorsport and cybersecurity. Our zero-trust solutions help the team securely manage critical data and maintain operational efficiency.

Education is another area where collaboration is key. Through Flex Your Cyber, a joint initiative with the National Cybersecurity Alliance (NCA), CYBER.ORG, KnowBe4 and Atlassian Williams Racing, we’ve worked to provide free cybersecurity resources, tools and best-practice guides for students, parents, educators and administrators. As cyber threats increasingly target the education sector, it’s more important than ever for cybersecurity providers and public institutions to work together to bolster digital safety.

As cybercriminals increasingly target education, it is imperative for cybersecurity experts and public sector organizations to join forces to strengthen defenses.

Build a dynamic solution that evolves to meet new needs.

Businesses that fail to evolve risk obsolescence. We’ve seen seemingly untouchable enterprises fold because they couldn’t—or simply didn’t—adapt.

The past five years have brought profound changes to the workforce. The Covid-19 pandemic accelerated the shift to remote work, increasing the need for secure remote access. Two years later, OpenAI’s ChatGPT introduced another disruption, highlighting both the promise and the risks of generative artificial intelligence (GenAI). Cybercriminals now use AI to refine and scale their attacks, making a multilayered cybersecurity approach essential.

Enterprise security solutions must balance usability and protection. Tools that unify enterprise password, secrets and connections management with zero-trust network access and remote browser isolation often experience broad adoption. Organizations should consider combining organic product development with strategic acquisitions to accelerate growth and enhance market presence.

Champion innovation and excellence.

Innovation isn’t just about new technology; it’s about reimagining what’s possible. Industry leaders challenge traditional methods and push boundaries to create better, more secure and more efficient solutions.

When evaluating cybersecurity providers, independent certifications can help organizations gauge a solution’s reliability and security posture. For example, standards like SOC 2 Type 1 and Type 2, along with ISO 27001, 27017 and 27018, offer assurance around data protection practices. FIPS 140-3 validation and FedRAMP/GovRAMP authorizations are also key indicators for public-sector readiness. These certifications are especially relevant for organizations that handle sensitive information or operate in highly regulated industries—where trust, compliance and accountability are nonnegotiable.

Forge your own path.

Each entrepreneurial journey is unique. Success comes from deeply understanding your customers, building adaptable and scalable solutions, forging strategic partnerships and driving innovation. Whether you’re in cybersecurity or another industry, these principles can help transform ideas into lasting enterprises. Keep that in mind on your next long flight—it might just spark your next big idea.


Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?


This post was created with our nice and easy submission form. Create your post!

What do you think?

The best robot vacuum for 2025

The best robot vacuum for 2025

The Morning After: Computex's new laptops from ASUS, Razer and more

The Morning After: Computex's new laptops from ASUS, Razer and more