Get Ahead, Stay Ahead: How CTOs Close the Tech Gap with Open Source

Aug 14, 2017 | App Modernization, Cloud, Data, Privacy, Social Media

Featured interview with Ian Knight, CRO of Treasure Data

Security. Support. Indemnities. Hard to believe, but in some circles, these are still seen as concerns holding companies back from deploying open source software. But that thinking is long outdated as leading enterprises, governments, and all branches of the armed forces now trust open source to securely manage their data. To compete in the digital economy, enterprise companies have much to gain from understanding and leveraging open source innovation. It’s never too late because this stream of innovation gets stronger every day as new and established communities continue to churn out powerfully transformative software.

Open source software has characteristics such as quality, flexibility, security, and standardization that are unsurpassed by traditional software solutions. It has long-term viability and is always on the cutting-edge of technology. The software is created and supported by a worldwide community of organizations and individual developers, many of whom also live by open source values like collaboration and volunteerism.

  • Q. How can the open source community help prevent cyber attacks?

A. With many eyes, all bugs are shallow is a famous refrain from OSS. If the last few months of cyber attacks have taught us anything (Verizon, Target, etc.), it’s that cyber threats are a bigger risk than ever before. Thus, the need for open source which inherently produces higher quality and more secure code while providing a response vehicle for the community to spot an issue and address it at once. OSS response to vulnerabilities and bugs are faster and more comprehensive when compared to proprietary development models. Often, proprietary software companies are reluctant to publicly admit there is a vulnerability, preferring to “hide” the fix in the next update, thus creating longer times to remediation.

Less philosophically, the founders of Treasure Data were also the founders of the Fluentd open source project.  So much of today’s cyber-security threat monitoring is based on collecting and analyzing edge-of-network logs to identify and expose activities that can alert and predict cyber attacks. Fluentd has become the de facto standard for log collection, forwarding, aggregating and routing – without Fluentd, enterprises face higher costs and slower response times to real threats.  That’s a very tangible example of how innovation from open source is helping prevent cyber attacks.

  • Q. Why are the fintech and telecom industries best positioned to adopt OSS now? And who’s next?

A. Any industry can adopt open source software, adoption rates tend to be driven by the role technology plays in creating a competitive advantage.  The fintech and telecom industries gain competitive advantage from the speed of transactions and ability to scale which dictates that they are always on the bleeding edge of tech. These were some of the early pioneers of cloud and dev-ops operational models which were born and grew from open source roots. Fintech and Telecom business models demand secure, scalable, and customizable applications that have been repeatedly proven to perform best on open source. Two of the biggest technology shifts of the past ten years have been Cloud and DevOps which are best managed and optimized through log-based reporting. But yet, many of these companies aren’t realizing the full benefit of Cloud and DevOps because they haven’t established a unified logging strategy which creates unnecessary expense and time waste digging through mountains of logs to find the gold.

  • Q. What are the advantages of using OSS over the traditional corporate software?

A. Open source innovation comes from the idea that the best code will win, regardless of where it comes from or who created it. In comparison, some proprietary software companies are still characterized by unhealthy group competition and politics that prevent the best code from winning. Open source software offerings were the first models to leverage the customer-first, customer-friendly, subscription-based monetization model which is far superior to the outdated license and maintenance model. Subscriptions allow customers to consume a constant stream of innovation as their operational life cycle dictates vs. the quarterly revenue needs of the software company. Comparatively, outdated license/maintenance models have traditionally held back innovation until a new license deal could be transacted. Financial models aside, at times, it’s simply a manpower game – a community of motivated companies and programmers, competing in a meritocracy is far superior to anything a proprietary software could ever hire, construct, and manage.

Open source is the both the present and the future. The best-in-class web, mobile, data management, and cloud solutions are all open source native and are most performant on open source infrastructure. I’m a strong believer in open source software and have seen it transform and optimize literally hundreds of enterprises, with 65% of today’s companies contributing to open source products in 2016. If you value your business, your job, your future…then you need to value OSS.

ian_photo_360

Ian Knight is currently the CRO at Treasure Data. Knight is an IT veteran with more than twenty-five years’ experience in scaling enterprise sales organizations and driving open source adoption and commercialization. Knight’s prior experience includes a decade long tenure at Red Hat where he helped grow its subscription revenue from $84M to over $1.3B while serving in a variety of leaderships positions, including Vice President of Western US Sales. Knight has also held positions at Oracle/PeopleSoft and Salesforce.

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more
Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

Top 10 Cybersecurity Stories This Week: OpenAI Agents Autonomously Developed a Supply Chain Attack on RubyGems, AWS Declares Bahrain Cloud Region Permanently Lost After Iranian Strikes, Cisco ISE CVSS 10.0 Auth Bypass Under Active Exploitation

September 18, 2026 | ITBriefcase.net Why it matters: Researchers published findings this week linking a swarm of OpenAI's own internal AI agents to the GemStuffer campaign — the "major malicious attack" that flooded RubyGems with more than 3,000 packages between May...

read more