In this episode of Scouting for Growth, Sabine VdL sits down with Terence Bennett, CEO of DreamFactory Software, to explore the uncomfortable reality behind digital growth: every new connection expands the attack surface. Terence brings a rare dual perspective to the conversation. He’s a veteran in the most literal sense—having served as a U.S. Naval Intelligence Officer—and a veteran of the digital frontlines, with deep experience in cybersecurity, offensive security, and API infrastructure. His career path, from early hacking forums in the 2000s to Google’s elite Red Team, reflects a truth many leaders are only now confronting: technology always creates a second, unintended world—and someone will explore it. The discussion opens with Terence’s early fascination with computing beyond its “intended” use. That curiosity eventually matured into a professional focus on cybersecurity, adversarial simulation, and understanding how attackers actually think. Red teaming, he explains, isn’t about compliance checklists—it’s about simulating real adversaries, real motivations, and real methods. As the field has matured, attackers have developed distinct behavioural signatures, and defenders who ignore this reality do so at their peril. APIs take centre stage in the conversation, and for good reason. Public-facing APIs may represent a small percentage of total APIs built—but in many organisations, they generate the majority of revenue. That creates a paradox: the very systems enabling growth are often the least protected. Talent shortages compound the risk. Building, securing, and maintaining APIs requires specialised skills that remain in short supply, even as demand accelerates. Ransomware looms large throughout the episode. Terence calls it what it is: the 800-pound gorilla of modern cyber threats. As organisations race to digitise, monetise, and integrate systems once kept offline, they’re creating new dependencies—and new vulnerabilities. Avoidance is no longer a strategy. Exposure is the price of progress. Yet this isn’t a conversation driven by fear. It’s driven by pragmatism. Terence argues that automation, when done right, is a force multiplier. API code automation can reduce human error, accelerate time to market, and give security teams a fighting chance to keep pace with innovation. The goal isn’t to slow growth—it’s to make growth survivable. This episode is essential listening for CISOs, CIOs, CTOs, and enterprise leaders balancing speed with resilience. It’s a reminder that cybersecurity isn’t a technical afterthought—it’s a strategic discipline that must evolve alongside digital ambition. The real risk isn’t being attacked. It’s building the future without understanding who else is watching—and how they get in.