Sudhakar Ramakrishna was simply days into his new position as SolarWinds chief govt officer when information broke of a historic nation-state hack focusing on his firm.
Throughout “Sunburst,” a cyberattack spanning practically two years focused SolarWinds’ flagship software program platform, Orion. The assault struck a number of US authorities networks, together with the Departments of Commerce, Power, Homeland Safety, State, and Treasury. The 2019 assaults have been revealed in December 2020. The US suspected Russian state actors have been behind the breach.
Within the ensuing fallout, the US Securities and Alternate Fee (SEC) filed a civil swimsuit in October 2023 alleging the corporate and its CISO, Timothy Brown, had dedicated fraud by failing to reveal the breach sooner. In July, a federal choose dismissed a lot of the expenses within the lawsuit.
When Ramakrishna first walked into the SolarWinds workplaces in January 2021, he confronted some robust choices. The corporate in 2021 shed a big portion of its workforce, going from a headcount of three,340 to 2,147. A safety software program agency falling sufferer to one of many largest cyberattacks in historical past took a toll on popularity and buyer belief as effectively.
Rebuilding Belief After Disaster
Quick ahead three years to the current date, and issues are trying brighter for SolarWinds. The corporate’s most up-to-date financials confirmed a robust third quarter 2024, with income of $200 million, a 6% year-over-year soar. Complete annual recurring income for subscriptions leaped 36%. The corporate added to its headcount this 12 months as effectively, bringing the full to 2,305.
“The belief of our prospects and companions is one thing I’d by no means take as a right,” Ramakrishna tells InformationWeek in a dwell interview. “I believe the rationale we gained again belief is that right this moment we’re identified for the corporate we’ve got grow to be, versus what occurred to us in 2020. The rationale I believe we obtained so far is predicated on transparency when the incident occurred. Whereas it may have occurred to anybody, we took accountability. We didn’t deflect blame on anybody.”
Regardless of greatest efforts to maneuver ahead, the Sunburst incident retains drawing headlines. Simply final month, the SEC fined 4 SolarWinds prospects with penalties starting from $990,000 to $4 million. The contemporary actions dig up previous wounds for SolarWinds because it continues to attempt to transfer ahead.
Ramakrishna says it’s arduous seeing SolarWinds grabbing headlines for Sunburst once more “as a result of there may be a lot extra constructive stuff that’s occurring with us — on the enterprise aspect, the product aspect, innovation, prospects and outcomes.”
As for sustaining belief, he says, “We earn the belief of our prospects every single day. Sunburst virtually by no means actually comes up after I focus on issues with prospects. When it does, it’s within the context of how we are able to apply the teachings you realized in our surroundings.”
Ramakrishna says that the newest quarter confirmed buyer retention of 97%. “That is a sign of belief.”
Standing Up for CISOs
The indictment and prosecution of former Uber CSO Joe Sullivan despatched shockwaves via the safety neighborhood. In 2022, a federal choose sentenced Sullivan to three months’ probation and a nice for his response to a 2016 cyberattack that uncovered thousands and thousands of Uber prospects’ knowledge. For the primary time, the federal government was coming instantly after IT executives.
When SolarWinds’ Brown was named within the SEC’s lawsuit, many CISOs noticed it as a continued pattern of scapegoating safety executives. As a substitute of placating calls to fireplace Brown, SolarWinds shot again on the SEC publicly, denying the allegations and accusing the company of victimizing victims.
“One of many very first choices I needed to make was, ‘What will we do with Tim,” Ramakrishna says of Brown. “The way in which I considered it was it was not an incident attributable to one particular person. That’s an incident that many attribute to a nation-state assault … so, it takes a village, as they are saying, to maintain the corporate’s property safe. I don’t suppose we must be in a world of scapegoating. We must be on this planet of studying, iterating, and bettering.”
Ramakrishna says his resolution to again Brown went past SolarWinds.
“As a lot as I care about SolarWinds, I additionally care in regards to the tone we set within the business as a neighborhood … are we going to be in a world of scapegoating, or a world of progress? It was a bit little bit of a ‘go towards the grain’ resolution, as a result of I may have taken the straightforward route. However I’d nonetheless make the identical resolution right this moment.”
He says he felt vindicated for his stance after the federal choose dropped a lot of the expenses within the case. “I felt very strongly that we have been attempting to do the precise issues.”
Sullivan, who’s now an unbiased marketing consultant and speaker, applauded SolarWinds and Ramakrishna for standing by Brown.
“I believe he’s a task mannequin for all CEOs,” Sullivan says in an e-mail interview. “CISOs don’t function in a vacuum — they’re a part of an govt management workforce that ought to stand collectively on danger choices which can be shared choices. It’s all the extra spectacular that Mr. Ramakrishna was not the CEO when the incident occurred however has operated with such integrity.”
SolarWinds’ Effort to ‘De-Silo’ IT
Popping out of the Sunburst incident, the corporate wanted to focus its consideration again on its enterprise. Ramakrishna believes rising applied sciences and strained budgets are inflicting IT departments to grow to be siloed, hindering C-suite communication.
“Irrespective of the dimensions of the enterprise, there are far fewer individuals right this moment … when it comes to with the ability to handle their IT environments, that are exploding into the cloud. The variety of functions {that a} frequent enterprise is managing is growing, and complexity is growing. And no person is saying their IT budgets are growing — at greatest case, they’re flat.”
SolarWinds’ IT instruments goal to assist bridge the hole and de-silo the IT division for extra effectivity, Ramakrishna says. “We’ve found that it’s not adequate to say that there’s a drawback. It’s extra helpful if we are able to say not solely that there’s a drawback, however there’s a approach to resolve it and even higher, to foretell it. That’s the journey and continuum that we’ve got put ourselves in and whenever you try this, you’re truly naturally de-siloing a corporation.”
GenAI and the Future
The ChatGPT-fueled generative synthetic intelligence (GenAI) increase of the final two years has drastically impacted all points of the know-how sector. Ramakrishna supplied insights on how firms can residence in on a return on funding that has been elusive for a lot of.
“With any new, thrilling know-how with a whole lot of prospects, it’s a must to undergo the hype cycle,” he says. “We’ve taken a practical method to AI at giant and likewise GenAI — we’ve been investing in GenAI since about 2021 … Our focus has been on the observability house associated to AIOps [artificial intelligence for IT operations] and the way we assist prospects detect points sooner. How will we assist them classify points sooner and the way will we assist them resolve points sooner?”
He says the corporate is attempting to spice up ROI for shoppers by providing enhanced productiveness and extra environment friendly drawback fixing via observability. “You’ll be able to classify it as a extra deliberate method to AI generally. I consider in 2025, there can be much more deal with tangible ROI from AI tasks. It will get again to the basics of operating a enterprise and our position is to assist prospects with this notion of AI observability. We handle and observe infrastructure … which will be conventional knowledge middle infrastructure, cloud infrastructure, and more and more, knowledge facilities with AI-enabled infrastructure.”
These options, he says, have growing wants for observability to optimize and supply ROI.
Ramakrishna provides a sunny outlook for the tech business.
“I’m very optimistic, not simply in regards to the business’s future, as a result of I believe the business repeatedly evolves … however I’m additionally very optimistic in regards to the SolarWinds platform that we’ve got constructed… Among the issues which have occurred to us up to now have been used as a basis to leapfrog into the longer term.”
