Christina Cacioppo, Founder & CEO, Vanta

Carolyn, I am so excited today. We’ve got Christina Cacioppo of Vanta, the founder and CEO of the trust management platform that, put simply, handles cybersecurity and compliance so companies can protect customer data.

We help teams build real security programs and then actually get credit for that work with customers, whether through audits, questionnaires, or a status page.

Before Vanta, our paths crossed back at Demo Day when you were at Union Square Ventures; bring us back and share what you learned.

USV literally hired me off the internet after I sent a few links to my online work, which still blows my mind. Early Demo Days were small, fast, and electric, and I’ll never forget the room buzzing when news broke mid‑pitch that Steve Jobs stepped down.

My biggest USV lesson was that there isn’t one path to founding; after meeting founders nonstop for two years, the myth of a single template just fell away.

As a junior VC, my value was translating a founder’s story into USV’s language and routing them to the right partner, not pretending to be the decision maker.

You did what we recommend and almost nobody does: you taught yourself to code; how did you actually pull that off?

I felt blocked starting a software company without being able to build, and I’m not a fake‑it‑till‑you‑make‑it person, so I saved my USV bonus, quit, and learned full time while living frugally.

I started with Steve Huffman’s Udacity course, then built a clunky but working bookshelf web app, and treated it like a job by showing up daily at Hunch’s New York office to code.

Your blog pep talk still hits: explain your path to your parents, most people will assume you’re not working, the risk isn’t as high as it looks if you can afford to try, and yes, many people have done this before so you can too.

That was me coaching myself while also begging people to see that learning all day is work.

After building things no one used and feeling behind peers, I joined Dropbox as a PM with the Hackpad team; the process was odd, but internal champions pushed to make it happen.

On Paper, we hit a wall when legal said we couldn’t launch to Dropbox customers without meeting obligations like SOC 2; learning that audits meant pulling engineers off product to gather screenshots made me think there had to be a better way.

When I left, I set a rule to stop building and only talk to users until I found a real problem; that led to a color‑coded SOC 2 gap‑assessment spreadsheet we first made for Segment, then adapted for Front, and only then turned into a web app.

The checklist covered cloud basics like encryption, access, and permissions, plus people practices like defined roles and regular reviews.

I learned by speaking with security teams and reading SOC 2 reports from big providers, spotting the eighty to twenty pattern that software could automate.

We focused on startups because we enjoy serving them and because companies were shifting from building internal tools to buying strong systems off the shelf.

You went through YC in winter 2018; why do it and what moved the needle?

We wanted the cohort and accountability, picked a metric, set aggressive targets, and used the YC network for intros since our sweet spot was companies around fifty people.

We priced at about ten thousand dollars a year and asked for payment up front, inspired by Peter Reinhardt’s cash advice; I personally sold the first roughly five hundred thousand dollars before hiring sales.

We closed the seed right after Demo Day, kept investor meetings tight, and prioritized customers; we delayed the Series A until meaningful ARR by hiring slowly and collecting cash up front to keep burn low.

On being a female founder, I try not to overthink it; I want many more women building serious software companies so it stops being remarkable.

Thank you for coming on; I’m so proud of what you’ve built, and I know listeners will love this.

That was so fascinating; her path into startups felt fresh, and she taught herself to code in her twenties, which I wish I’d done.

I loved the early note about not being the fake‑it type; it reads as genuine, and you hear it in how she chose building and selling over coffee chats.

If someone asks what great founders do, I’ll point them here: focus on customers, keep cash discipline, and do the hard things the right way; can’t wait for this episode to drop.