Validated Containment Architectures are here. →Explore

Biweekly Episodes

In Progress

Welcome to In Progress by Aviatrix, featuring unscripted conversations with CEO Doug Merritt and leaders across business, government, and security. No scripts, no pitches — just honest dialogue on leadership and building in the AI era. Biweekly on LinkedIn, YouTube, Spotify, and Apple Podcasts.

Stay in the Loop

Get exclusive access to the latest conversations with cloud leaders, industry pioneers, and technology changemakers.

Subscribe and stay ahead of what's next.

Zero spam. Unsubscribe at any time.

In Progress Podcast

All Episodes

Showing 13 of 3 episodes

Cybercrime Runs Like a Fortune 500 Company
Cybercrime Runs Like a Fortune 500 Company
03
41:31 min

Cybercrime Runs Like a Fortune 500 Company

D

Doug Merritt · Chief Executive Officer

- Cybercrime is organized like a business. Roles are specialized and clearly compensated, from malware developers to money launderers, making these networks resilient and hard for law enforcement to dismantle. - Ransomware economics are shifting. The cost of storing and servicing stolen data has led many groups to abandon encryption entirely in favor of extortion alone. - Lateral movement, not initial access, is the real threat. Incidents like Colonial Pipeline and Stryker show that how fast attackers spread internally matters more than how they got in. - Preparation is non-negotiable. Boards should know who's responsible for which decisions in the first 24 hours of an attack, well before one happens.

𖦤
Listen Now
Assume Containment, Not Breach
Nick Reva
02
45:55 min

Assume Containment, Not Breach

D

Doug Merritt · Chief Executive Officer

- Why Nick argues the industry should shift from "assume breach" to "assume containment" — and what that changes about incident response - The guardrails-not-gates philosophy that lets developers move fast without becoming security experts - How Nick's team found a workable path through an "impossible" secure-SDLC mandate on SpaceX's Falcon codebase - Applying Elon Musk's first-principles reasoning to break security problems down to their core "whys" - Why Nick sees cloud security footholds as a societal and economic risk, not just a technical one

𖦤
Listen Now
Chris Hughes: Not Prevention, But Resiliency
EP01
01
43:46 min

Chris Hughes: Not Prevention, But Resiliency

D

Doug Merritt · Chief Executive Officer

- CVEs are exploding — over 40,000 in 2025, with 2026 projections near 60,000 (some estimates up to 100,000) — while AI makes vulnerabilities easier to find and exploit. - Patching capacity has long lagged below 10% of the backlog; broken production risk and competing business priorities keep it there. - Security should shift from trying to prevent every incident to containing and recovering from the ones that happen. - "Human in the loop" doesn't scale against AI-driven attack volume — defenders need to fight AI with AI. - Security teams that act as collaborators, not blockers, avoid the shadow-IT workarounds that punitive policies create.

𖦤
Listen Now
In Progress Podcast

Never Miss an Episode

Join thousands of cloud professionals following the stories, strategies, and hard-earned lessons from the architects driving enterprise transformation. Be the first to know when new episodes go live.

New Biweekly Episodes

Zero spam. Unsubscribe at any time.

Join cloud engineers and modern architects already tuned in.