Why Did Gaurav Start StrongKeep?
He spent his career in Singapore's air force and at the Cyber Security Agency of Singapore. He started StrongKeep because he was tired of waiting for someone to build affordable cybersecurity for the small businesses everyone else overlooks. The episode covers that path, and why security stayed a luxury good for so long.
How Do Businesses Actually Get Hacked?
In one of four ways, on Gaurav's account: someone downloads something malicious, someone clicks a fraudulent link, credentials are stolen, or systems are left unpatched or insecure. AI makes each of them faster. Partway through, he demonstrates StrongKeep's setup to make the point that protection does not have to be a project.
How Should You Use AI Agents Without Getting Burned?
Give them the smallest set of permissions they need, and nothing more. The conversation covers least privilege for AI agents, why Gaurav rebuilds AI skills himself before trusting one from the internet, and why credentials left in plain text are what attackers want most. It also asks why the cost of building software has fallen so far while prices have not.
Where Can I Watch the Full Episode?
The episode runs about 76 minutes and is on YouTube, Apple Podcasts and Spotify.
- Cybersecurity shouldn't be a luxury, Code Riff on YouTube
- The same episode on Apple Podcasts
- Code Riff on Spotify
Related Reading
- Why can't most companies afford cybersecurity?, Gaurav on Security Cocktail Hour.
- Who is watching when an AI agent acts on its own?, Gaurav on CyberSG Voices.
- Think you're safe from cyber crooks?, Gaurav on the four things that go wrong, on The Straits Times podcast.
Frequently Asked Questions
What is Code Riff?
A podcast hosted by Eric Tan and Yaohong Ch'ng that interviews experts on using AI well. The episode with StrongKeep CEO Gaurav Keerthi, Cybersecurity shouldn't be a luxury, was published in June 2026 and runs about 76 minutes.
What are the four ways businesses get hacked?
In Gaurav Keerthi's account, a business is usually compromised in one of four ways: someone downloads something malicious, someone clicks a fraudulent link, credentials are stolen, or systems are left unpatched or insecure. AI makes each of these faster for attackers.
How can I use AI agents safely?
Give an agent the smallest set of permissions it needs to do its job, and nothing more. Keep passwords and other credentials out of plain-text files it can read, and be wary of AI skills or plugins from the internet that you have not checked yourself.
What Does StrongKeep Do?
StrongKeep is a self-serve cybersecurity platform for small and medium businesses. It bundles endpoint protection, phishing and malicious-link filtering, credential management, staff awareness training and phishing simulations, all run by the business itself from one dashboard. Compliance tooling is available on higher plans. StrongKeep holds the CSA Cyber Essentials Mark. Built for teams without an IT department. Plans are on the pricing page.
