S12 Bonus: The Bearer Token Trap: Why API Secrets are Leaking and the Rise of Dynamic, Zero-Trust Machine Identity Providers with Anusha Iyer, Founder & CEO of Corsha

Episode Summary

Executive Summary: Anoush Iyer, CEO/founder of Corsa, explains how the company evolved from a cloud-agnostic identity security MVP into an industrial machine identity platform. The episode focuses on early technical trade-offs, customer-driven roadmap development, a strategic pivot toward physical industrial machines, team-building principles, scalability in safety-critical environments, and lessons from mistakes and outages.

Main Topics: Corsa’s origin and mission (Priority: 5/5): Anoush describes her cybersecurity background and the founding of Corsa as a platform to bring identity and access management to industrial and operational environments, securing machine-first connections across legacy systems. MVP design and technical architecture (Priority: 5/5): The first version took about six months and was built by four engineers plus Anoush. The team chose Kubernetes and cloud-agnostic infrastructure to stay flexible and cost-efficient while securing automated communications. Security-first trade-offs and product focus (Priority: 4/5): Corsa invested heavily in internal security design and abstraction of complex IAM/certificate management, which created a strong foundation but initially reduced outward-facing features and user experience. Roadmap evolution and strategic pivot (Priority: 5/5): The roadmap became customer-driven over time. A key pivot came when an Air Force customer clarified that 'real machines' meant physical industrial equipment, leading Corsa toward an underserved industrial cybersecurity niche. Hiring philosophy and team culture (Priority: 4/5): Anoush emphasizes hiring for curiosity, data-driven decision-making, and earnest problem-solving, with a culture she describes as 'cyber optimists' who learn from failures rather than fear them. Scalability, reliability, and mistakes (Priority: 4/5): Scalability is framed not just as system volume but as operational safety and availability in industrial settings where downtime can be extremely costly. Mistakes and outages were handled through ownership, trust-building, and after-event learning. Future of industrial identity security (Priority: 5/5): Corsa aims to help modernize legacy industrial systems securely as AI, analytics, and connectivity spread across manufacturing and critical infrastructure, enabling safer, faster, and more efficient operations.

Key Arguments: A startup’s roadmap must begin with educated guesses and then mature through customer feedback; early pivots are expected and necessary. Security-heavy foundational work can create long-term technical advantages, but it can also delay visible customer value and UX improvements. Choosing Kubernetes-native, cloud-agnostic infrastructure provided flexibility and saved substantial money through cloud credits and portability. Industrial security is different from consumer-scale software because availability and safety are as important as traditional cybersecurity goals. The market opportunity lies in securing legacy industrial machines and systems that are now being pressured into connectivity and data sharing. Strong teams are built on curiosity, data, earnestness, and optimism; setbacks are acceptable if the team learns from them. Owning mistakes quickly and transparently can strengthen customer trust after incidents or outages.

Data Points: MVP build time: About 6 months - Time required to build the first version of Corsa with a small core team. Core engineers on MVP: 4 engineers - The initial engineering team size, plus Anoush herself. Cloud savings from portability: $600,000–$700,000 - Estimated savings in one year from being able to move between cloud providers and use startup credits. Cybersecurity experience: About 25 years - Anoush’s tenure in the cybersecurity space before founding Corsa. Seed funding method: Seed money raised off a PowerPoint - The company raised early capital based on the founders’ pitch before building the MVP.

Pivotal Quotes: "The really neat thing about roadmaps for us today is that it's customer driven." — Anoush Iyer: On how Corsa decides what to build next as the product matures. "We built this, we're building, it's never done, this industrial identity security platform that really is almost like focused on managing and securing connections for machines first over humans." — Anoush Iyer: On Corsa’s core mission and product philosophy. "What we were really focused on was that we really committed to the security design of it, right? Because you're talking about a cybersecurity platform. You really want to make sure your own house is clean." — Anoush Iyer: On early product trade-offs and the decision to prioritize security architecture.

Implications: For founders, the episode shows how deep technical foundations, customer-led pivots, and transparency during failures can build durable trust. For industry, it signals growing demand for secure identity management in legacy industrial systems as connectivity expands.