Jimmy Huber: And welcome to another episode of the InfoTech Podcast. I'm your host, Jimmy Huber, and this podcast explores the intersection of business and technology. And today we've got a little bit of both for you. My guest is the CEO and founder of Web Check Security. He's the co-author of the book Testing and Securing Web Applications, and the host of the Vistas podcast. Greg Johnson, welcome to the podcast. Greg Johnson: Hey, thanks, Jimmy. It's an honor to be here. you are an awesome guy. I'm glad we were able to become acquainted and hope we can work together along into the future. Jimmy Huber: Yeah, well I appreciate that. that's definitely right back at you. I've really enjoyed getting to know you here this past couple of of talks that we've had. And I think our our audience who's, you know, primarily small business owners in the tech industry, I I think it's really appropriate to have somebody of your caliber on because your perspective I think is is really unique in that you not only are in the web the cybersecurity in the web space, but you've got some some bona fides that not a whole lot of other people have in that you're one that I've learned that wants to give back to your community in education. I mean you've you've written a book and have a podcast to create content and develop a community inside the cyber world and not just fix things for people, which is also good, but you're adding layers to it. So before we get into all that, I would love for you to just kind of give a little bit about your background, you know, how you founded WebCheck and kind of what brought you to be able to get into to all these things. Greg Johnson: Sure. First, maybe some personal stuff. I am first of and foremost a husband to my wife of forty two and a half years, brother. And our Jimmy Huber: Wow, that's a lot. Greg Johnson: it it it it is, but you know, she's she's a special and patient woman. I'm also we're grandparents to seven children and now that we're empty nesters, we're adventurers. So back l last December we climbed Mount Kilimanjaro, the tallest freestanding mountain in the world, Jimmy Huber: wow. Greg Johnson: not taller than Everest and the Himalayas, but they're not freestanding. They're part of a system, the Himalayas, right? But Kilimanjaro's Jimmy Huber: Sure, sure. Greg Johnson: nineteen thousand three hundred and forty one feet. we've climbed Mount Pinatubo, the mountain that blew and created a crater lake in the Philippines back in Jimmy Huber: yeah, yeah. Greg Johnson: in ninety six that happened. And and then Kelly and I climbed it. I think it was twenty twenty three we did that. And the reason we were there is because I sang for a while with and and this is not bragging, but it was just a unique, unique set of circumstances and opportunities. But I sang with the world famous tabernacle choir on Temple Square. and so we were Jimmy Huber: wow. That's legit. Greg Johnson: there in the Philippines doing a concert and we had some free time and were able to you know take off and and and do that. So Anyway, that's that's a a little bit about the personal stuff. I I won't dwell too much on that. But you know, I Jimmy Huber: That's fantastic. Greg Johnson: I've I've always been in the business development end and a lot of these cyber companies, assurance companies that do soctos and pen testing, some of the things that that we do, you know, their their founder is CPA or a technical auditor. I come t to life with something a little bit different, sales, basically. And in my Jimmy Huber: Yeah, sure. Greg Johnson: role, Formerly in Novell, if anybody even remembers who that wonderful company was and Word Perfect Corporation Jimmy Huber: Yep, yep, yep. Greg Johnson: and and then I won't bore you with my entire career, but I ended up in in the cyber area providing solutions to clients in the frameworks of PCI, ISO 27001, SOC two, and just general, good cyber hygiene. And what I observed, Jimmy, is that most of these clients, including my former employers delivered some of these services badly and the ones Jimmy Huber: Yeah. Greg Johnson: we competed against some of the biggies that you've heard of before coal fire and mandiand and ernston young and price waterhouse coopers and some of the big audit firms and cyber assurance firms they also delivered those services badly and so in twenty eighteen I I vowed to start an organization that was based on a Better CX in cybersecurity, meaning the customer experience, and have a scenario where, for example, if you're doing a pen test, which is a highly technical endeavor, and and you've got a technical guy with a propeller head that's loves to solve problems and disassemble things. That's essentially what pen testing is, right? That's what a hacker is. Jimmy Huber: Yeah, yeah. Greg Johnson: And they get in and find ways, but but we vowed that we would only hire people that like people, that talk to people, right? Not a burrito eating guy at three AM in the garage, you know, with a hoodie over, but somebody that's Jimmy Huber: Yeah. Greg Johnson: that's going to meet the client so that we always introduce the engineers. What no matter what engagement it is, we do some cloud service review, security architecture review. We might do an ISO twenty seven thousand one or CMMC or a FedRAM preparatory audit, but regardless of that, they get to have a relationship with that. former CISO and I'll explain that in a minute, or the pen tester as it were. And that just wasn't happening in my former organizations, right? They didn't Jimmy Huber: Yeah. Greg Johnson: want to talk to clients. But the idea is at the end of the day, is our client better? And and if no, how can we help you to to be better? And so we we formed Web Check Security with the thought that it would provide a better Cyber CX, good processes from scoping to delivery to remediation testing. through to the end where we have an advisory session with the client and then offer ongoing hand holding and we call that FISA or fractional chief information security services. So that that's Jimmy Huber: Sure, sure. Greg Johnson: kind of what what happened in 2018 and how how we roll at at Web Check Security and fast forward to to to now, several years later, we we're we've been very grateful to have pen tested great companies like Arctic Wolf and AdLumen and and many, many others and we have great partners in in the community like microage of of Arizona and and and many other MSP and MSSPs all across the country that resell our our our services and it we're just having fun and having a good time and and that's that's a little bit about kind of at a high sixty thousand foot view of who we are and how we started and and and what we do. Jimmy Huber: Yeah, that's a that's fantastic because I think that's a rare thing to find employees that are technical enough to do the job well, but also have the soft skills to converse and develop relationships with clients. I know at least at InfoTech, like we spend quite a bit more time, I think, in the hiring process to vet out those culture pieces and make sure that people have a heart to serve others first, and then we discover and figure out, you know, their technical chops. So it sounds like it's similar at at Web Check that you do value the relationship and the and the client first and then also back it up with with the the acumen. Would that be accurate? Greg Johnson: Yeah, we do. And I I like to get on the the a a Zoom call. You know, it's not just my head of s CISO services or FISO services, our fractional auditing or or information security officer services, or we I we don't just hire a pen tester and we Nate's our head of of red team services. They don't just go off and hire people. I wanna talk to them first. I wanna see that they've got kind of that people quotient or at least are articulate and and and will will look good whether it's a board or just the IT guy that's very technical and wants to know what are the things that he needs to fix in order to be better at the end of the day. And that's so that's important. The other thing is when you hire the right people, you got the right people on the bus. You know, usually they Jimmy Huber: Yeah. Greg Johnson: know other good people and when we want to expand, you know, we just go out and say we don't need to do the indeed thing or whatever. We just go out and say Who do you know that that wants to, you know, come on board and and we usually get a number of good good folks to interview. Jimmy Huber: Yeah, I completely agree with that. Yeah. Good people know good people. and and building that culture, I think, is is key not only for retention, but also I think customers see through a lot of the fakeness that I think is prevalent in our society these days. And they want genuine. They want people that actually like what they're doing and and want to connect. what do you Greg Johnson: Absolutely. Jimmy Huber: see? I mean, you're you're a big community guy, I feel like. Like we've talked about this several times, even prepping for this this recording, that it's it's not just about the customers or the industry, but it's about developing a community inside the cyber world. Talk about that a little bit because I think a lot of times people, you know, you're the dentist that sees all the cavities, right? Like people don't generally engage with a cyber company unless there's a giant problem. And you know, you come in and fix the problem and then, you know, you move on, right? It seems like to me though that you're you're trying to do a little bit more than that, maybe. can you talk about that a little bit and how that differentiates you in the industry? Greg Johnson: Sure. I I mean, I years ago, I was just finishing college at Brigham Young University and I read a book that kind of impacted my life. It didn't change my life, but it impacted. It resonated with who I am. And it was a book called Raving Fans. And it talked about Marriott and the Marriott way. And Marriott was kind of on top back in the day. I don't know so much anymore, but you you you had this concept where Instead of just delivering a business service, why not create raving fans? And how do you do that? Right? And I like people. I like serving people. So when I talk to them, Jimmy, if you know, if it if you and I are entering into an agreement and I'm gonna provide info tech solutions with with services, I like to end the call by saying, We look forward to serving you because that's what it's all about. We we like to go the extra mile. community-wise, I always feel like giving back is something that's that's important. And so, you know, we're we're still pretty lean. I remember back in the day, my first year twenty eighteen, we had maybe eighteen K in revenue, just a couple of contracts and away we went. And then within a year we had two hundred and fifty nine K in revenue and then we went to half a million and then a million and then and then we hit Jimmy Huber: wow. Yeah. Greg Johnson: two million and you know and and it just, you know, it it it it goes on and w and we're still pretty lean. We're not where we wanna be yet. But You know, we'll occasionally give to organizations like Promise to Live, which is about suicide prevention. And that resonates with with me and my family as we've had mental illness in in in our family, and it's important. but but beyond that, Jimmy Huber: Yeah. That's awesome. Greg Johnson: it's I think there's kind of a an overall mentality. If somebody comes to me and says, Hey, I have lost my job, and or young people that you know, are in the y young adult area that are, you know, I've finished a cyber degree or I'm finishing a cyber degree, but I don't know what to do. Can you talk to me? I love mentoring people like that. I I love talking to them. I love connecting people. just the other day a a fellow that I don't know except for a LinkedIn connection and a, you know, secondary connection through somebody else lost his job. I I care about that. And so I like to I introduced him to another CISO that I know. at a great company, in fact, Filevine, which is a wonderful company. And and at least to have a chat and and if he's not hiring, he probably knows somebody who is. So I love making those connections. I feel like he comes back to you in the end, you know, right? Karma comes back. And Jimmy Huber: totally. Yep. Greg Johnson: so that's that's how we try to run run our company. You know, if we if we screw up or a customer's not happy, and everybody makes mistakes, right? And you make it right. You know, what what will make you happy at the end of the day, Mr. Customer? And so that's that's how we try to operate our business. Jimmy Huber: Yeah. Well it's definitely working. I mean, those numbers are that's almost an exponential curve, it seems like. And I I know there's a lot of demand in your industry, but I've got to believe that your culture and and those connections and that relationship building is a huge part of that. I think a lot of times people chase, you know, you s keep saying you're lean, a lot of times people chase top line and they don't realize that top line means nothing. It's about the bottom line and making sure that your company is is healthy so that you can, you know pay well, you can hire the right people, you can deliver good service. I mean that at the end of the day, I think sometimes that gets lost and people just chase growth for growth's sake. so can you talk about that? Greg Johnson: Yeah, yeah. Jimmy Huber: I mean, starting at, you know, five figures and jumping to over two million in a relatively short amount of time is no small feat. So what what do you contribute that to? Greg Johnson: Yeah, well appro good segue because that's been the the focus of the past year is net profit. And and and I'll and I'll and I'll tell you why. Fir first of all, when I when I started this business, I had some pretty good mentors. and I'll mention I'll call him out by name. Scott Price, who's the CEO of Align. I went in and served as his VP of business development for just about two and a half, maybe, maybe three years. And he had some great systems and great processes and was spending a lot of money on Google Pay per Click. And he was very good at at chasing top line revenue. Now, in fairness, he was much further down the path, much more capitalized than than my little what started as a boutique consultancy, and I realized, wow, this thing can can really go. And and in COVID, so here's here was the catalyst, and then I'll get to the answering the actual question. The catalyst Jimmy Huber: Yeah, yeah. Sure. Greg Johnson: was COVID. in twenty twenty. So I had a Jimmy Huber: Got it. Greg Johnson: kind of a dual stream. Web check security was functioning but mostly serving an MDR company which just got sold the other day and I had an agreement with the CEO they were outsourcing pen tests and I said dude I have some engineers that are amazing they're OSCP and blah blah blah certified they talk to people they're smart I can do this for you For half the price you're paying some of these other Yahoos and with double Jimmy Huber: Yeah. Greg Johnson: the quality. And so for a couple of years, I was able to sell pen tests, i.e., web check security, and through this other company along with their MDR services, which is the managed detection response. And so that Jimmy Huber: sure. Greg Johnson: that kind of served as the catalyst. And that, and of course, along the way we we started branching out and adding audit services and some of the other fractional. services. But in twenty twenty, he had to lay me off, as well as my second in command, Jeff, who's my business partner. He owns twenty five percent and is our COO and runs the operations. because they were losing customers. COVID sucked for a lot of businesses. Not for ours though. Jimmy Huber: Yeah, for sure. Greg Johnson: I looked at my wife and said, look, you know, we're gonna we're gonna hit half a million this year. Let's let's do this. And she said, Okay. I would feel more comfortable if you brought Jeff on because Jeff's a a a good level head, love the guy. And one of the best decisions I I ever made. And and so he came on board and started helping me sell and and develop partners and the rest is history. Well, so you have this hockey stick growth and that often happens to businesses that that operate a good service. And we do. We have a good product, we have a good service, and very rarely do we get a customer that says, we didn't didn't like it, you know, and sometimes you get weird personality things, but it's it's rare. Ninety nine percent Of all our customers renew next year or they come back. So as we've hit this this growth curve, all of a sudden the last two years have been kind of interesting and tough. We're still growing, but instead of a hundred percent growth curve, it's kind of slowed to 20%, 10% this year. This year's been a little weird with war and with AI. And we'll talk about that that later. Jimmy Huber: Yeah, for sure. Greg Johnson: So the good news is we're still growing, but in all of that. And in trying to figure out where to spend our money, and boy, we've blown money on trade shows, we've blown money on pay-per-click when you really need to be spending at a certain clip level in order to make that work properly in the B2B space. Jimmy Huber: Right, right. Greg Johnson: you know, we we started to realize that let's focus our efforts on some of the things that we know are going to provide an ROI. for example, some of our VARs, they may charge us. $2,500, $5,000 or $10,000 to come and present at their conferences, but they invite us and their reps sell our services, right? And that Jimmy Huber: got it. Greg Johnson: is a slam dunk ROI versus going to a trade show, paying for the airfare, spending 10 grand for just a 10 by 10 booth, sometimes 20, right? And larger ones. If I we were to do it at Black Hat, which we're going to as attendees in the next in the next week. You know, it'd probably Jimmy Huber: sure. Greg Johnson: be forty K for a ten by ten booth. Not doing that, right? Because you talk to a lot of people that say a lot of fun things. we need you guys. And then you never hear if they ghost you, right? That's kind of the trade show thing. Yeah. So so Jimmy Huber: Yeah, yeah. They're saying that to everybody. Sure, sure. Greg Johnson: we got smarter. But anyway, to answer your question, we were very lucky. you know, I I believe in inspiration and God directed things, and occasionally you get hit over the head. And I met a guy, Quick Bros Accounting. He had a great team. We were looking to, we'd hired someone that was running the books at a law firm. We thought it was perfect. It just wasn't working out. We'd we'd hired and outsourced another firm that that's that was big in Utah, and it just wasn't working out. And then we found our current CFO and his team, and it's an outsourced team, but they've been wonderful. And one of the things that he started to preach when he came on as guys, you gotta get your net profit up. You know, you got to get your eBITDA up, especially if you ever hope to, you know, sell this company or whatever. it's got to look Jimmy Huber: Sure, sure. Greg Johnson: a little better. And the good news is we've been profitable for years. We're still profitable, but you want to get that in a decent double digit, you know, not 10% is not great sometimes. So we've been looking at our services and trimming and we even had to let a project manager go because we found that he was outsourcing some of the stuff and we were paying the outsource guy more than we were paying him. So un you know, unfortunately Jimmy Huber: good grief. Yeah. Greg Johnson: and there were other issues as well. But we've we've looked at our expenses very much more carefully and I'm not r a real careful guy. I I like to spend money, but you know, as as as as I brought Jeff in more on paper, more formally You know, and and I've created more visibility and opened up up the company, which originally was my baby, right? And that's that's hard Jimmy Huber: Yeah. Yep. Greg Johnson: to kind of open up your bank account. I've reduced Jimmy Huber: yeah. Greg Johnson: my salary. I've you know, and and and we've we've actually gotten to the point where our profitability has increased. and then the other thing we did, and this is important before I forget. So sorry, I'm kind of blathering on here. Jimmy Huber: No, go for it. This is great. Greg Johnson: But we've we've got algorithms and calculators that we use to calculate our deals. And in fact, our intrepid vice president of sales has created a sow generator, a statement of work generator Jimmy Huber: nice. Greg Johnson: that not only prices things, but he's taken a calculator I built to gauge the profitability of every engagement. So in other words, you know, I I've said, look, if we can be fifty percent or sixty percent GP, so your gross profit. Jimmy Huber: Mm-hmm. Yep. Greg Johnson: Meaning you you you take out his commissions and approximately what we're paying our practitioner, and then any referral commissions for any partners that that are not reselling on their own paper. So there's some MSPs that will come to us and say, Hey, here's this client. We just want twenty twenty percent or whatever. And we say, Great, close the deal and then we cut them a check. So after all that, what's the gross profit on on that engagement? Right? And and Jimmy Huber: Yeah, yeah. Greg Johnson: we don't do it unless it's Over or in between 30 to 30 percent plus or 35%. So we we we've set standards and bars and we we're using technology to make sure that things are priced right. Are we actually making money on this deal? And that's something that didn't happen for you know the first five and a half years of of our existence. so it it's it's important to understand how much you're making on your engagements. Are you charging enough? Jimmy Huber: Yeah. Greg Johnson: And and that's the other Jimmy Huber: Yeah. Greg Johnson: thing, you know, over the years we started out as quality affordable, you know, penetration testing. And I thought that's not the message we want to give. We're we're top notch. And so, no, Jimmy Huber: Yeah, you don't want to undersell yourself. Sure. Greg Johnson: I never describe web check security without saying we're a world class penetration testing and cyber advisory services firm. World class. And you know, so we're not gonna be the cheapest bargain basement. So over time Our prices have gone up, but we're still very competitive. So anyway, Jimmy Huber: Yeah. Greg Johnson: so hopefully that answers your question. We've had to really hone in on our profitability and jettison things that aren't making sense. We jettisoned our pay-per-click program because we're we were basically breaking even. We were spending several thousand dollars a month. It just wasn't quite enough. Really needed to be spending about ten thousand dollars a month. And at our revenue level, doesn't make sense, right? Jimmy Huber: Sure, sure. Yeah, I mean you there's so many things to hit on there. and I I think I realize why we get along so well is that I I can relate with almost every single thing you said. I'm also Greg Johnson: Ha. Jimmy Huber: like the visionary and the big picture sales guy. And I've had to hire key people and my staff that compliment me, that are more detail oriented, that do the processes, the procedures, you know. And yeah, I think you're not alone in that there's a lot of business leaders that just want to grow their business and sell things and they don't necessarily look at the bottom line as closely as they can. and a lot of times that can catch up to you. If you're looking at lagging indicators, you know, it's hard to fix problems in in the rear. You have to really focus on that and make sure that your pricing's right. And I love what you said that, you know, changing your messaging and understanding, you know, what you're worth, I think is huge because you get in this spiral, I think, sometimes that if you don't price yourself accordingly, thinking you're affordable and you want to help people, You tend to attract a maybe a different type of clientele that wants to take advantage of that. And they sometimes, at least in our experience, those have not been great fits for us. And as we've raised prices, you know, in the managed service space, we get people that value us more and they don't care about they don't care about the price, but that that is not the sticking point for them. They look more at the value. And it sounds like you've been maybe on that similar journey where it's it's trying to dial that in to make sure that that you are aligned with your customer. Greg Johnson: Yeah, absolutely. And and things are changing, right? This has been a pivotal year, I think. And you know, as I talk to other CEOs and my my colleagues and there's there's two things happening right now. There's the reality of AI and there's the Kool-Aid surrounding AI. Does that make sense? Right. And and what you're Jimmy Huber: Yeah, yeah, yeah, let's talk about it. Yeah, for sure. Greg Johnson: seeing right now is a lot of companies, their messaging is hey, human led. Because people are getting tired of talking to bots. people are getting tired of getting let down by a so so called automated solution. And and even though there's these amazing things like mythos going out and finding XYZ or breaking out of a container and into another system, yeah, that's gonna continue to happen. But the reality is you you you can't you've gotta have the the the driver at Belmont. You know, you you've gotta have the the know how and the knowledge to properly deploy and implement and interpret. And and that's that's never gonna go away. I'll give you an analogy to that. Have you ever driven a NASCAR, Jimmy? Jimmy Huber: No. No, no, I can't say they have. Greg Johnson: I have. I was very fortunate. Jimmy Huber: really? Greg Johnson: I was working as a national sales trainer back in when was it, two thousand and two, for a franchise or that had these franchises across the coun country in the logistics industry. And we had this kind of you know, top gun presidents club thing one year and I got to arrange it and and we ended up going to Richard Petty's Jimmy Huber: the Yeah. I've heard of this. Yeah. Greg Johnson: NASCAR place in Orlando. And they had a small track. and it was one of those things where you take some classes, you know, so that you know what you're doing. And they put you they let you get in the car by yourself if you want and actually drive it. And they put you behind a pace car and then they come in and critique you and tell you what you need to do better. And then the second time they kind of turn you loose. You st you're still behind the pace car, so you don't completely freak out. But my gosh, dude. You ever watch DSPN and you go, race car driving? That's not a sport. You know, you flip it to football Jimmy Huber: Yeah. Yeah. Greg Johnson: and there's this athleticism. Well, I quickly learned that my wrist got tired after like the first the first turn. And and I'm a Jimmy Huber: I bet. Greg Johnson: and I'm a weightlifter, right? And Jimmy Huber: Yeah. Greg Johnson: I I recognize that just, you know, the the body, the awareness, the quick reaction timing. I went, these guys Jimmy Huber: Yeah. Greg Johnson: are athletes. No question about it. They're they're Jimmy Huber: Yeah, huge mental game, sure. Greg Johnson: in shape. they're in hot fire retardant suits, which we had to wear, the the helmets between the reaction time, the the the the wrist strength, the endurance, they've gotta be in top notch condition. And and I realize this is a sport. Well, AI is the NASCAR, right? And it's gonna change things, but you still gotta have the driver or it's just not gonna Jimmy Huber: Yeah. Greg Johnson: mean much, right? Jimmy Huber: Yeah. Yeah. We we've talked about this in other episodes too. And it it seems like the theme, at least if I would dilute down the current AI space, is you don't want AI to be your thought leader. You want it to be your thought partner. And a lot of companies, I think, are trying to cut costs and s and you know get rid of positions because AI is gonna save the world. You know, they're gonna save all this money. It's gonna be you can do more with less. And I gotta believe that a better approach would be to learn. what you can do with your current team and and use AI as a tool, right? You're not shrinking and abdicating, but you're just you're using it as as a leverage. But like you said, it's human led. I completely agree that people people want genuine. you mentioned going to events. I I think that's the future of at least marketing in our space is people want that face-to-face connection. They don't want a bot or some deep fake thing that where you have to get through layers of AI before you actually get to the human. Like how many IVRs do we have now that's just endless press this, press that? It's like, no, just give me a human. You know, there's a certain breaking point that I think that there's a law of diminishing returns. And it's kind of finding Greg Johnson: yeah. Jimmy Huber: that thread and and and you know, putting that together. So w what are you guys Greg Johnson: Yeah. Jimmy Huber: doing at Web Check? I guess I I assume you're using AI tools. what do you see currently as the way to kind of navigate that? Greg Johnson: And that's a multifaceted answer too. And it's funny because a a year, year and a half ago, we were struggling. Where where do we fit with all this? And automated pen testing tools had been coming out. They've been coming out for years. You know, you look at Horizon, you look at Ridge, Ridgebot, you look at Vonahai that got bought by Caseya, which is big in the MSP commun community. But invariably, Jimmy Huber: Sure. Yep. Greg Johnson: and these are all great, great tools. There's there's also Pintera and Simulate and and a number of others, but our our engineers would look at and go, meh. You know? And you know, one of them said, I use thirty-eight tools when I do my pen testing. So is it a force multiplier? Well, sometimes. Sometimes they get an automated tool and and they they go off. But we realized that there needed to be the correct messaging and that sometimes in a cyber or a budget constrained environment, or in a constant what you call CTEM, continuous threat exposure management or Pentest as a service, PTAS, you you do need to have an automated technology. And now that AI's there, and we'll talk about the difference between agentic and just built upon AI and and some of the differences. But now that AI's there, you've got better tools. Now, so let me just pause for a minute and back up and say so we we realize that we need to message that hey, we understand this and we're on board and we can do it. But here's the reality. Right. I if you're budget constrained, let me let me give you a little bit of an automated service with with a NASCAR driver to review it and help you through the curves, right? Or we'll just give you the NASCAR driver and he'll use thirty eight tools and he'll test your web apps and your infrastructure and your mobile apps and your Wi Fi and your cloud services, internal and external, and and we'll really find the stuff. It's gonna cost you a little bit more. And they will use some AI to do that, right? They'll start one process and they'll work on another and they'll run a fuzzer on a web app and the but but the reality is it's it it is more time intensive. Now as AI gets better these guys are able to do more with less time and that's that's that's great. But there's still the reality of the human led quotient. But there's also using AI to enhance your services. So I mentioned the sow generator. Who developed that? Well my VPS sales did he's not a coder but I will say this about Peter He worked at Tesla on the autopilot division. He was a manager over about ninety people. Eventually he kinda Jimmy Huber: wow. Greg Johnson: he left that because it was that was a hard, harsh culture. He didn't like being in the park on Sunday with his family on a picnic and having a work call and say, You gotta come in, you know. And unfortunately Elon Musk Yeah. Nobody wanted Jimmy Huber: Yeah. Yeah, I've heard Elon is a peach. Yeah, he does Greg Johnson: to be on the phone calls with him, right? So, you know, eventually I called him up and said, Peter, what are doing? you know. Anyway, what's cool is that he's that's what you call vibe coding, right? He's developed he realized he was spending so much time not only mentoring his team, but taking his own deals and and creating these statements of work that why can't I create the pricing engine, the profitability engine, and all of the language and just click, click, click, and it pulls it together. And then you do any edits and customization and boom and It's wonderful. It's almost ready to go. We may actually deploy that to some of our MSP and VAR partners so that so that they Jimmy Huber: nice. Greg Johnson: can resell our services with with ease. So there's that. There's also on the customer service end our one of our project manager, the the new guy. or not new guy, but he th the outsource guy I mentioned that he he was clearly our succession choice. And about year ago he'd brought some vibe coding up to his manager that he'd been doing. Hey, I wondered how I could make this easier and I've come up with this and it kind of got shut down. We didn't know about it. We never heard about it, right? When that that other fellow it didn't work out and and and he was gone, we we went to him and and Michael said, Hey I got this thing and my partner Jeff said, Where's this been? This is amazing. And so now we're re re releasing this internal product called Watchtower, which will allow our the clients to log into a portal and see graphic visibility and trends and communicate with their tester. And before that's all been more manual. You know, we put them in a teams channel. It's secure. It's great. They can talk to their tester and purple team if you will. but now we'll have this app and and it's all vibe coded. Right. So Jimmy Huber: Yeah, that's just wild. Greg Johnson: so that's the facet. So so there's the facet of utilizing it in our services as either a force multiplier or a good is better than nothing if best is not available, right? Budgetarily. Two, the vibe coding to make our internal processes better and to enhance customer services. But then three, you've got this agentic thing coming out where are there tools that are actually going to be that force multiplier? And some of that is developing And we for example, have been talking to Amazon and Threatbait about some of their agentic services. It's still they're still limited, right? for example, Amazon's agent is really geared towards cloud service and and and apps, apps in the cloud. That's really the big need for Amazon. That's where they make their money, is people opening containers. spinning up virtual servers and then running their apps in the Amazon Jimmy Huber: Yeah, sure. Greg Johnson: cloud. That's why they've got those big data centers, right? But what about Wi-Fi and what about mobile app testing? So you're gonna see different tools evolve and sometimes and you know there will be some tools that evolve to hit multiple attack vectors. So how do we leverage that as a force multiplier? And as I said before, frankly, there there's just not a ton of them that can do more than our guys can do in in a couple hours. They're so amazing. Right. So Jimmy Huber: Right. Yeah, they're not there yet. Sure. Greg Johnson: so there's kind of the multifaceted thing. We're keeping our eye on force multiplying technology and how can we license and use that or develop that ourselves, but without dramatically jacking the price to our customers, you know. Jimmy Huber: Yeah. Greg Johnson: Yeah, for ex for example, if you want a license, and and nothing against Horizon or Ridge, they're great, you know. but they're very expensive. Same thing with simulator or Pinterest, great systems for ongoing threat exposure management. but very you know, fifteen, twenty thousand dollars a year to license a you know, medium sized environment. And although that's an unlimited thing, that's a lot of money and you know we can we can for the for Jimmy Huber: Yeah, for sure. Greg Johnson: that kind of money we can do a very thorough quality pen test. So anyway. Jimmy Huber: Yeah. Well I I love that that you're you're navigating and you're you're finding the sweet spot between what tools and the value that it brings to the client, then augmenting them with with the experts, right? I think that's the key. AI I don't think Greg Johnson: Right. Right. Jimmy Huber: will ever fully repl replicate the human intuition. And I think you've you've got that nailed. I feel like we've only just skimmed the service here, Greg. We're definitely gonna have to have you back for another episode. but before I I Greg Johnson: I know. There's there's a lot more to talk. Jimmy Huber: let you go, yeah, I I want you to Give us an example of somebody maybe who's just getting into the cyberspace. maybe they're, you know, an up and coming leader in in the small business world and they're trying to kind of navigate and figure all this out. What's an example or two that you've found here in the last six or twelve months that maybe you can give some advice to them or some tactical, you know, pieces that they can take away from this conversation? Greg Johnson: Well, I'm not thinking of an individual as much as individuals that, for example, young people that finish their cyber degree or maybe middle aged people that are they've been in IT space and they go, Hey, I'd really like to get into cyber, but how do I do that? Right? And the advice I give to some of the young people is, you know, let's talk about what the options are. Do you want to audit against frameworks? Do you want to be a CISO? And we talk about what that means, what it means to be a business leader and have business knowledge, but understand technically enough to manage a team and hold an organization accountable to best practices and compliance. It's kind of like I have a brother who worked for Raytheon, right? They make the Tomahawk missile. He was the OSHA EPA health scientist Jimmy Huber: Okay. yeah. Greg Johnson: guy so he kept things from blowing up in Tucson, Arizona. Right? Seems Jimmy Huber: Seems important. Yeah. Greg Johnson: important. CISO does that. They keep things from blowing up, cyber wise. And you know, kind of the Jimmy Huber: Yeah, I love that. Greg Johnson: buck buck stops stops there. But but that leads to incident response. There are digital forensics experts, right? And then on the technical side, you know, you've got you've got the science of encryption. You've got the science of cyber engineering and secure network design and and now cloud design. So there's what I we I we talk about that and I like to say what's your what do you think your propensity is and you may not know but let's go down a few rabbit holes. Pen testing's one of those, right? If you Jimmy Huber: Yeah. Yeah. Greg Johnson: like the guys tell me, because I'm not I'm not the pen tester, I'm just the dumb guy running the business, the smart guys are doing the business, right? And they tell me that the good pen testers like to solve problems. And And and so if that's if that's you and you like to solve problems and go out and get an easy, I say easy, but maybe the certified ethical hacker and then shoot for something harder, like the OSCP, where it's not a book learning test. You actually have to hack into a lab and pivot laterally and they evaluate your writing and all your skills and that's what makes that certification so good. PNT P is another one. But you know, so we talk about those and I would just say you g y pick a path, go down it, and as you do, you'll learn about some of the other paths and eventually you'll f you'll find your niche in in Jimmy Huber: Yeah. Greg Johnson: cybersecurity. Jimmy Huber: Yeah, I love that answer because I don't think people know what they want until they get in and start trying, right? Like that's what I tell our guys, like, hey, there's what infotech needs, but there's also what you personally want for your career. And our goal is to kind of find where that overlaps, right? yeah, I've had several staff that start, you know, in in operations and then move to projects or whatnot. You know, I mean they're they find their way. And I think in cy the cyber world there's there's so many opportunities now, like we talked about. But that's it's a it's a great time to to get into the space and and take advantage of some of these changes and and launch a career. Greg, what what can people do? Greg Johnson: Yeah. Or or sales, right? Jimmy Huber: Yeah, or of course, yeah. Somebody's somebody has to be able to talk about it. Yeah, that that's huge. Greg Johnson: Sales business development. Exactly. Pre sales consulting. Go out and get a couple of certifications. I I personally have a PCIP, which is your payment card industry professional at history there, and I won't bore you with that. We're trying to wrap up here, but yeah, you know, Jimmy Huber: Yeah. Greg Johnson: S C A I S S P or a CSM or a j a general cybersecurity certification, learn about it, but then go out and be able to Talk intelligently and affiliate with a company that has great products and services and you can, you know, great sales is just consulting anyway. What do you need? What are the drivers? Here's what we have Jimmy Huber: A hundred percent. Greg Johnson: if it makes sense. here's what I recommend. And and and that's a great career too. Jimmy Huber: Yeah. Yeah, I love that. you mentioned you're you're a connector guy. So what if people are listening to this and they want to reach out to you, maybe? you know, we'll put in the show notes your LinkedIn and all that, but what's the best way to get in touch if if they want to get with you, Greg, or or Web Check in general? Greg Johnson: You know, probably the easiest is to just send it to Greg G R G at Webchecsecurity dot com or if it's a general sales inquiry, get in touch at Webcheckscurity dot com and that my vice president of sales sees that as as as well. but love to talk to Jimmy Huber: Awesome. Greg Johnson: anybody, on a personal note or or otherwise. Jimmy Huber: Yeah, awesome. Well, it it has been great having you on. hopefully our audience caught something there. I I think I feel like I need to rewind this thing to to grab all the tidbits that you went through. But yeah, we're we'll definitely stay in Greg Johnson: What it's worth. Jimmy Huber: touch with you, Greg, and and hopefully have you on again as as Web Check continues to grow and and our industry evolves, right? I mean, I feel like it's changing at a such a rapid pace that there's always new stuff to to talk about and discuss. So we really appreciate your time today. Greg Johnson: Well, thanks, Jimmy. you're a great guy and let's let's do it again. Jimmy Huber: You bet.