top of page

Former NSA Hacker Terry Dunlap Joins NetRise to Bolster Software Supply Chain Security

NetRise, a company at the forefront of software asset visibility and risk detection, has taken a significant step in its expansion by appointing cybersecurity veteran Terry Dunlap as Senior Vice President of Corporate Strategy and Development. Dunlap, a former NSA operative turned entrepreneur, will help steer the company’s next growth phase while driving innovation in its flagship software supply chain detection and response platform.


From Hacker to Cybersecurity Leader

Dunlap's journey into the world of cybersecurity began as a teenage hacker, where a brush with the law over credit card fraud eventually led him to a role at the National Security Agency (NSA). At the NSA, he served as a Global Network Vulnerability Analyst, hunting for security weaknesses within global networks. His pivot from hacker to high-level security analyst set the stage for a career defined by tackling some of the toughest challenges in cybersecurity.


After leaving the NSA, Dunlap went on to co-found and lead two prominent cybersecurity firms. First was Tactical Network Solutions, which specialized in offensive cyber capabilities, and later ReFirm Labs, Inc., the first company to provide proactive IoT and firmware security solutions. ReFirm’s innovations gained so much traction that Microsoft acquired the company in 2021, solidifying Dunlap’s reputation as a leader in the field.


More recently, Dunlap co-founded Gray Hat Academy, offering advanced training in hardware hacking and embedded exploitation for cybersecurity professionals, further broadening his impact in the industry.


A Strategic Move for NetRise

Dunlap’s arrival at NetRise comes at a crucial time as the company seeks to elevate its standing in the fast-evolving world of software security. The rise of software supply chain vulnerabilities has created a pressing need for solutions that not only protect the companies developing software but also those that use it. As more organizations depend on complex software ecosystems, they are increasingly vulnerable to attacks embedded in third-party software components, a problem NetRise is working to solve.


“Terry’s talent, proven track record, and expertise are invaluable as we accelerate our growth and build awareness on the hidden dangers of blind trust in software,” said Thomas Pace, CEO of NetRise. “From hacking to IoT and firmware vulnerabilities, his first-hand knowledge makes him a strategic addition to our leadership team. I am thrilled to welcome Terry to NetRise as we continue our momentum in delivering the industry’s most innovative software supply chain detection and response platform.”


A New Era for Software Security

The challenge of protecting the software supply chain has escalated in recent years, particularly after high-profile incidents such as the SolarWinds breach. These events have shown how deeply software vulnerabilities can be embedded, impacting businesses that rely on third-party applications and tools. Dunlap’s experience will be crucial as NetRise addresses this growing concern.


"Protecting the software supply chain is a critical, complex problem that is frequently underestimated," Dunlap said. "NetRise is focused on not only creating market recognition of the problem that they solve, but also its magnitude and urgency. Many solutions specifically target companies that develop software but not those that use it, such as the enterprise community. The NetRise team has a deep understanding of the challenges their customers face and developed a robust platform designed to serve the entire software supply chain industry—from software developers to users."


Fueling Growth and Innovation

In the past year, NetRise has seen significant growth, spurred by innovative product launches, strategic partnerships, and recognition from top industry awards. The company's platform offers an unprecedented level of granular visibility into software assets, allowing organizations to inventory and secure their software environments comprehensively. This capability helps companies proactively detect and respond to risks within their software ecosystems, whether those risks come from internal vulnerabilities or third-party suppliers.

bottom of page