The Real AI Threat Is Two Dudes and a GPU with Damien Lewke, CEO & Founder of Nebulock
The Real AI Threat Is Two Dudes and a GPU with Damien Lewke, CEO & Founder of Nebulock
Podcast37 min 36 sec
Listen to Episode
Note: AI-generated summary based on third-party content. Not financial advice. Read more.
Quick Insights
  • Consider cybersecurity as a durable investment theme: persistent threats may sustain security spending even if enterprise AI adoption slows.
  • Palo Alto Networks (PANW) and CrowdStrike (CRWD) are discussed favorably, but no buy recommendation or price target is given; their high valuations leave room for downside if growth disappoints.
  • Monitor security companies’ ability to protect software supply chains and govern AI agents, and watch whether SIEM platforms shift toward lakehouse-based systems; the discussion identifies no clear winner.
Detailed Analysis

Cybersecurity and AI Security

  • The discussion presents cybersecurity as a potentially durable investment theme: AI can help defenders, but it can also let attackers scale their efforts. The guest’s main concern is not only powerful frontier models, but also less sophisticated models used with custom tools and few safeguards.
  • The guest said companies are treating security as a more strategic priority, while noting that enterprise AI adoption is still uneven. He argued that security spending is not necessarily dependent on rapid AI adoption because attackers can use AI to target organizations regardless.
  • Supply-chain compromises were highlighted as a key risk: an attack on a software provider or service can expose its downstream customers. The guest cited the ConnectWise and Salesloft breaches as examples.
  • The guest described the security software market as converging across SIEM, managed detection and response, AI security operations, and insider-threat analytics. He expects traditional SIEM architectures to shift toward data lakes or lakehouses, with security tools acting as an analytics and orchestration layer.
  • Agents may boost productivity, but the guest advised treating them like insiders: establish visibility, set controls, and enforce policies because agents can act unpredictably.

Takeaways

  • Consider cybersecurity as a sector that may benefit from persistent threats and rising security priorities, rather than assuming its prospects depend only on AI infrastructure spending.
  • Assess companies’ exposure to software supply chains and their ability to monitor AI tools and agents. The transcript does not identify a specific security stock as a recommendation.
  • The industry shift toward lakehouse architectures could create pressure for legacy SIEM business models, while benefiting tools that work across vendors and data sources. This is a market view from the guest, not a confirmed outcome.

Palo Alto Networks (PANW)

  • The host cited Palo Alto Networks as an example of a cybersecurity stock that had faced investor skepticism and later rebounded. He referred to a share price around $150 in March and above $200 in October; the discussion does not clearly specify the year.
  • The host also cited an approximate $270 billion market capitalization, $14 billion in sales for the year and $16.5 billion the following year, alongside valuation figures of about 81 times earnings and 20 times sales. These were figures raised in the conversation, not a price target or independently verified forecast.
  • The guest said Palo Alto is a company he likes and that his startup works with large security companies, including established players.

Takeaways

  • The discussion is broadly favorable toward cybersecurity demand, but the valuation figures cited by the host underscore the risk that highly valued stocks could fall if growth expectations or investor sentiment weaken.
  • The host raised slower AI adoption, data-center construction, or capital spending as possible sources of pressure. The guest argued that security demand could remain resilient even if AI adoption slows, because attackers can still use AI to target businesses.
  • No specific buy recommendation or price target was given.

CrowdStrike (CRWD)

  • The guest said he previously worked at CrowdStrike and described it as an important cybersecurity company. He also said his startup works with large security vendors, including CrowdStrike.
  • The host cited CrowdStrike as an example of a stock that recovered after being placed “in the penalty box,” and referred to it reaching about $450. The timing and exact context of that price were not specified.
  • The guest argued that investors had conflated AI coding and code-security tools with endpoint security, saying they address different problems. He also said that advanced AI cyber capabilities have increased investor focus on the need for security.

Takeaways

  • The transcript supports a positive sector-level view of cybersecurity, but it does not establish that CrowdStrike is undervalued or provide a specific recommendation.
  • Investors may want to distinguish among cybersecurity product categories rather than treating all AI-related security tools as direct substitutes for established platforms.
  • As with other high-valuation software stocks, expectations for future growth can create downside if results or sentiment disappoint.

Amazon (AMZN)

  • The host raised Amazon as a hypothetical example of how shopping agents could affect a company’s business model. If an agent selects a product directly, customers may see fewer ads, potentially challenging a high-margin advertising business.
  • This was posed as a question about the possible consequences of agents; the guest did not offer a specific view on Amazon’s revenue or stock.

Takeaways

  • Monitor whether agent-led shopping changes how customers discover products and interact with advertising. The transcript presents this as a potential business-model issue, not a forecast or investment recommendation.
  • No price target, timeline, or explicit bullish or bearish view on Amazon was given.

Splunk / Cisco (CSCO) and Elastic (ESTC)

  • The guest named Splunk and Elastic as examples of large SIEM and data-store platforms.
  • He said he expects the traditional SIEM model to evolve toward lake or lakehouse architectures, with security software operating as an analytics and orchestration layer. He said his startup is not yet replacing Splunk.

Takeaways

  • The guest’s view suggests a possible long-term technology shift for SIEM vendors, but the transcript does not establish how quickly that shift will happen or which companies will benefit.
  • Treat this as a business-model and product-transition issue to monitor, not a direct bearish call on Cisco or Elastic.

Nebulock (Private Company)

  • Nebulock is an AI-native cybersecurity startup founded by the guest. The host said FirstMark Capital led its Series A earlier in the year.
  • The company aims to help security teams detect and respond to threats across different systems, including by using automated threat hunting. The guest said it has run more than 375 million threat hunts and surfaced over 12,000 incidents.
  • Nebulock is privately held in the discussion; no public ticker, valuation, or terms for investing were provided.

Takeaways

  • The company illustrates investor interest in AI-native cybersecurity tools, especially products designed to work across existing security vendors.
  • Its private status means the transcript does not provide a direct public-market investment opportunity. The guest’s reported operating metrics are company claims and do not, by themselves, establish commercial success or investment value.
Ask about this postAnswers are grounded in this post's content.
Episode Description
Dan Nathan hosts Damien Lewke, CEO and founder of AI-native cybersecurity company Nebulock. Lewke recounts his career from nation-state defense at Northrop Grumman to CrowdStrike, Palo Alto Networks, MIT research in NLP, and leading AI detections at Arctic Wolf. They discuss how the threat surface has expanded with distributed environments and how the ChatGPT moment accelerated both defensive usability and offensive capability. Lewke explains Nebulock’s “hunt-first” mission to give any team machine-speed detection and response, positioning it across converging markets like SIEM, MDR, AI SOC, and insider threat/UEBA. The conversation covers enterprise AI adoption, supply-chain risk, investor perceptions following “Mythos” breach disclosures and agent security as insider risk. —FOLLOW USYouTube: @RiskReversalMediaInstagram: @riskreversalmediaTwitter: @RiskReversalLinkedIn: RiskReversal Media The financial opinions expressed in Risk Reversal content are for information purposes only. The opinions expressed by the hosts and participants are not an attempt to influence specific trading behavior, investments, or strategies. Past performance does not necessarily predict future outcomes. No specific results or profits are assured when relying on Risk Reversal. Before making any investment or trade, evaluate its suitability for your circumstances and consider consulting your own financial or investment advisor. The financial products discussed in Risk Reversal carry a high level of risk and may not be appropriate for many investors. If you have uncertainties, it's advisable to seek professional advice. Remember that trading involves a risk to your capital, so only invest money that you can afford to lose.Derivatives are not suitable for all investors and involve the risk of losing more than the amount originally deposited and any profit you might have made. This communication is not a recommendation or offer to buy, sell or retain any specific investment or service.
About RiskReversal Pod
RiskReversal Pod

RiskReversal Pod

By RiskReversal Media

Welcome to the RiskReversal Pod, where Dan Nathan and Guy Adami are joined by the most brilliant minds in markets and tech.  We break down the most important market moving headlines to help listeners make better informed investing decisions. Our goal is to deconstruct Wall Street speak and offer contrarian insights and strategies that help investors navigate increasingly volatile markets. Tune into the RiskReversal Pod Monday through Friday for succinct 30 minute pod drops of market analysis that you won't find anywhere else. For new episodes of On The Tape with Danny Moses, search "On The Tape" in your favorite podcast platform. — FOLLOW US YouTube: @RiskReversalMedia Instagram: @riskreversalmedia Twitter: @RiskReversal LinkedIn: RiskReversal Media