Resurface

The API security market faces a critical talent shortage—there simply aren't enough skilled analysts to go around. Rob and his co-founder Christine saw an opportunity to build "an API analyst in a box" that could augment existing teams and provide the observability and guidance they desperately need. This became especially relevant as high-profile vulnerabilities like log4j/log4shell revealed just how exposed organizations were.

Resurface initially launched with a product-led approach, targeting three key segments: telecom, fintech, and healthcare. They focused on on-premises deployments, a deliberate choice to keep sensitive API data in customers' hands rather than centralizing it in third-party systems. This resonated particularly well in banking and telecom, where edge computing and data residency are non-negotiable.

The team started with a land-and-expand model—making the first API integration easy and cheap to reduce friction, then expanding to additional nodes once a customer saw value. By the time of the interview, they had 4-5 fully paying customers running 12 nodes in total production. They also had dozens of POCs in progress and 36 trial customers, showing healthy pipeline activity.

The initial product-led strategy wasn't quite right for this market. Rob realized that API security was so new that customers needed significant hand-holding and guidance—not just software. This led to a strategic pivot toward a concierge-led, enterprise model. Instead of pure SaaS, they now bundle professional services with software, providing a statement of work that covers setup, integration, and ongoing support. No setup fees, no surprises—one check for both software and services. Rob noted this approach draws from his previous experience at Dell, where land-and-expand generated virtually zero customer acquisition cost once he owned an account.

Pricing landed at $10,000 per node per year for unlimited data capture. With 12 nodes live, they're at approximately $120,000 ARR—exactly where they hoped to be. The team is lean: 5 full-time employees (mostly engineering and sales) plus 10-12 contractors, allowing them to stay agile while maintaining direct engineer-to-customer relationships.

Resurface raised $2M during the pandemic and is planning to pursue Series A next year. Rob is focused on execution and proving the repeatable model, knowing that investor appetite is shifting away from high-revenue multiples toward founders who can demonstrate historical delivery on their promises. The company is building a growing pipeline for next year, but Rob is clear-eyed about celebrating what's working today: four paying customers, twelve nodes, and a strategy that makes sense for a security product that demands trust and compliance.