Richard Nolan

Richard Nolan has spent more than twenty years on the recovery side of security — the part of the job that starts after something has already gone wrong.

​

He was one of the founding field engineers at Rubrik, where he deployed clusters for over 375 customers during the period the company grew from roughly $150M to a $1.3B valuation. Before and since, he has architected air-gapped recovery vaults for enterprises in finance, government, media, manufacturing and defense — more than fifty of them across Dell's Cyber Recovery practice alone — built privileged-access controls around those vaults with CyberArk, and run the executive workshops where a board first hears what its own recovery position actually is. He has led backup transformations at petabyte scale, and he has sat inside live ransomware events, working the restore path until the numbers came back.

​

That work teaches a specific lesson. In the middle of an incident, the hardest question is not what do we do — it is what do we actually know, and how do we know it. Inventories turn out to be stale. Findings turn out to rest on assumptions nobody wrote down. Two systems disagree about what a given asset is, and the tooling silently picks one. The recovery is slow because the evidence is thin.

​

SeeThrough is the answer he wanted to have on hand. It is an evidence-first intelligence platform: every observation is a signed envelope attributable to the collector that produced it, every finding carries the evidence it rests on and the uncertainty around it, and every offensive action runs under an authorization the platform enforces rather than assumes. It runs offline, on your own hardware, in the air-gapped environments he spent two decades building.

​

It is early, and deliberately so. He is working with a small number of design partners whose environments are complicated enough to be interesting.