Show Notes
In this episode of Cyber Security District, we sit down with Kim van Lavieren, co-founder and CTO of Dawnguard, a cybersecurity startup that raised millions in funding before registering a company or launching a product. Kim’s story is anything but ordinary, from leading Marines on no-sleep missions to building offensive hacking tools for the Dutch military, to managing massive security teams at Amazon in the U.S., his path combines discipline, vision, and deep technical mastery. Together with co-founder Madi Abdurazak, Kim is now on a mission to completely rethink how cybersecurity should be done, by starting not with alerts or vulnerabilities, but with architecture, policy, and real business risk. Dawnguard is building a platform that automates secure-by-design architecture using AI, aiming to replace an entire category of cloud security tools before most companies even realize there’s a better way. In this episode, we cover:
What the Dutch Marine Corps taught Kim about discipline and decision-making How a military comms officer became a cybersecurity architect Building secure systems after discovering flaws in weapons room access Writing offensive tools for the cyber division of the Dutch Armed Forces Why cyber soldiers may be more impactful than boots on the ground Kim’s journey to Amazon and running third-party security at massive scale The mindset shift from “no” to “how” in security engineering The origin story behind Dawnguard and raising millions pre-product How Dawnguard is building a new category for architecture-led security Using AI to design, verify, deploy, and enforce security from day zero Advice for cybersecurity newcomers, and why the industry must rebrand How Dutch risk aversion is holding back innovation — and how to break through
Timestamps: 00:00:00 – Intro00:00:47 – Kim's Background: From Marines to Cybersecurity00:03:29 – Training Under Extreme Pressure00:06:28 – Becoming a Communications Officer & Discovering Security Gaps00:08:18 – First Lines of Code at Age 1000:10:19 – When Tech & Physical Endurance Collide00:11:04 – Offensive Cyber Capabilities in the Military00:14:22 – Why Cyber Soldiers Now Matter More Than Physical Ones00:17:05 – Consulting, CISO Roles & Joining Amazon00:18:49 – The Scale & Speed of Security at Amazon00:21:00 – The Origin of Dawnguard00:23:00 – Automating Architecture Compliance with AI00:25:08 – Using Threat Intel & Policy as a Starting Point00:28:02 – Building the Engine: 5 AIs and a Moonshot00:30:46 – Meeting Madi & Finding the Perfect Co-Founder Match00:33:29 – Raising Millions with No Product — and Building a Dream Team00:36:37 – Rise Into Resilience: What the Dawnguard Slogan Really Means00:38:08 – Rebranding Cyber: Why the Industry Needs a Makeover00:39:44 – Advice for People Trying to Break Into Security00:41:03 – Advice for Aspiring Cyber Entrepreneurs00:44:42 – Certifications, Labs & Reality Checks00:47:25 – Going Big Means Accepting Uncertainty00:49:00 – The 5-Year Vision: Replace Entire Security Categories00:50:30 – Final Signal Message to CISOs: Security Is Balance, Not Absolutes Connect with the guests: Kim van Lavieren: https://www.linkedin.com/in/kim-v-0645931b4/ Learn more about Dawnguard: https://dawnguard.ai/ Follow Cyber Security District:Laurens Jagt (Host): https://www.linkedin.com/in/laurensjagt/Website: https://www.cybersecuritydistrict.comAll channels & newsletter: https://beacons.ai/cybersecuritydistrict
More from Cyber Security District
Your organisation has 143 security tools and still doesn’t know what to fix first. Sound familiar? In this episode, host Jeroen Prinse sits down with Anuj Kumar, co-founder and CEO of Gambit Cyber. Anuj spent over 12 years in threat intelligence at iSight, FireEye, Mandiant, and Intel 471, and kept running into the same problem: the intelligence was good, but nobody could operationalize it. That gap is what Gambit Cyber was built to close. They dig into Continuous Threat Exposure Management (CTEM), why it’s a program and not a tool, what AI-native really means in security and the uncomfortable question of who is accountable when an autonomous system gets it wrong. In this episode:
The Rise of Identity-Based Attacks with Olivier Eyries | Saporo What if you could see your entire attack surface the way a hacker does and fix it before they strike? In this episode, hosts Laurens Jagt sit down with Olivier Eyries, co-founder and CEO of Saporo, one of Switzerland's fastest-growing cybersecurity startups. Saporo helps organisations stop hackers by identifying and eliminating identity risks before attackers can exploit them. Olivier is a serial entrepreneur with two previous ventures under his belt, including one sold to Proofpoint in 2021. He and his co-founders built what he calls a "Google Maps for cybersecurity": a graph-based platform that maps every attack path, every permission, and every identity risk across an organisation's environment. In this conversation, he breaks down why identity-based attacks have exploded, what AI agents mean for the attack surface, and why fixing one permission can block millions of potential attack paths. In this episode:
What if your infrastructure was built secure from minute one and stayed that way? In this special one year anniversary episode of Cyber Security District, host Jeroen Prinse sits back down with Mahdi Abdulrazak (CEO) and Kim van Lavieren (CTO) of Dawnguard, a security automation platform that turns approved security architecture directly into deployable cloud infrastructure as code. One year in, having just closed a pre-seed round and raised €6.3 million in total funding and opening a new office in New York, Dawnguard is making a bold bet: that the only real answer to modern cyber threats isn't better detection or faster patching, it's building systems that are resilient by design from the very start. Mahdi and Kim have both led security teams inside large organisations and lived through the same recurring nightmare: architecture locked in too early, security reviews arriving too late and a list of 50 findings that nobody has time to fix before the product ships. Dawnguard was built to break that cycle, with a collaborative canvas that lets teams design, validate and deploy secure infrastructure in minutes, with continuous drift detection to make sure it stays that way. One year on, we look back at how far that idea has come and what's next as the company expands. Key Takeaways:
What does it take to build a cybersecurity company not once, but twice from the ground up? In this episode of Cyber Security District, we sit down with Francisco Nina Rente, one of Portugal's most accomplished cybersecurity entrepreneurs. Francisco started his journey as a teenager tinkering with computers and quickly found his way into ethical hacking and open-source security communities. That curiosity became a career, which then led to a company. His first venture grew from a university incubator into a 250-person operation delivering services across 22 countries, before being acquired by a global security group. After years scaling that business from the inside and taking on roles as country manager, CTO and board member, Francisco stepped away to build again. This time, the mission is clearer: help organisations stop just detecting threats and start truly recovering from them. Art Resilia was born out of a conviction that the market was shifting from cybersecurity to cyber resilience, and Francisco positioned the company right at the centre of that shift. Key Takeaways:
What if you could clone your best cybersecurity consultant and put them to work on five engagements at once? In this episode of Cyber Security District, we sit down with Leslie Clement and Erie Berhitu, co-founders of Clember AI, an EU-first, AI-native platform built to automate the repetitive, time-consuming work that holds cybersecurity consultants back. Both Leslie and Erie spent years grinding through the same manual loops at major consultancy firms document analysis, gap assessments, risk reports, roadmaps before deciding enough was enough. Rather than build another consulting firm or hire more headcount, they built a platform. Clember AI now enables security consultants to run five or more client engagements simultaneously, with consistent, high-quality output every time. And they did it entirely bootstrapped, no VC, no investor pressure, just product-market fit and a clear-eyed vision of where cybersecurity consulting is heading. In this episode, we explore: