
Keeping Cyber Secure — and Scalable
You're reading Entrepreneur United Kingdom, an international franchise of Entrepreneur Media.
Stephen Kines has been building businesses with his co-founder Tony for over 30 years, but with Goldilock - and its flagship physical cyber product FireBreak - he's scaling a truly global vision. From Wolverhampton to Singapore, his team is tackling one of tech's toughest problems: how to grow fast, stay agile, and never compromise on trust. Entrepreneur UK finds out more.
What strategies helped you scale efficiently without compromising quality?
My co-founder Tony and I have known each other for over three decades, and we've spent a lot of that time building and scaling businesses. The success stories have consistently been characterised by great people. Hire the best people, empower them to make decisions, learn from setbacks together, and always, always put the customer at the centre of everything you're doing.
That's what we've replicated here at Goldilock. We have recruited extremely experienced people to lead our teams globally. Crucially, people who really believe in what we're doing at Goldilock in protecting networks with our physical cyber product, FireBreak. That's how we know they'll consistently make the right decisions for the company.
We've also made sure no silos are created between departments as we scale. Keeping our technical team in close contact with our sales, marketing and communications teams has placed the customer at the centre of every decision being made across the board. This means quality of service is never affected and we can maintain the agility we had in the beginning as we're all working to the same end.
How did you build and maintain a strong company culture during rapid growth?
Goldilock is very much a modern global organisation. We're headquartered in Wolverhampton and the vast majority of our technical team is based there. But in FireBreak we have developed a genuinely new cyber security product that is not only unique but also applicable for every single industry and organisation that uses digital infrastructure, so there was no point in limiting ourselves to launching in just one or two countries or regions. This means the rest of our team is spread out across the globe – from the US to Europe to Singapore to Australia.
When you have a scale-up workforce that is so widely dispersed, communication is key. This communication has to be constant and it has to come from the top-down. A main focus when building Goldilock was building a very, very experienced management team. We handpicked a leadership team that not only brought invaluable experience but could make sure each region feels like a cohesive part of the team.
Maintaining this cohesive team element as we continue to scale means retaining that startup mindset we had at the beginning, communicating regularly on the direction of the business, getting everyone's buy-in on strategy, and – critically – ensuring no silos ever appear between the technical, sales, marketing and comms teams, as well as our board. We're very lucky that everyone on the team here believes in what we're trying to do at Goldilock and has the same drive and motivation to see this company continue to succeed that Tony and I do.
What were the biggest operational challenges you faced while scaling?
As with most start-ups, we had to start with a fairly lean team while we went through R&D. Obviously, a small team is great for agility and flexibility – both of which you need a lot of when starting a company. However, it did mean we were spread quite thin.
Identifying market opportunities has never been difficult for us with a product that is so applicable across industries, but it then came down to prioritising resources. Using a channel model for sales really helped us here as it allowed us to target various sectors with different needs and pain points – from manufacturing to financial services – without investing too heavily in expertise in-house.
The other challenge with a smaller workforce is making sure we don't end up creating bottlenecks. Solving this comes back to choosing great people, empowering them to make decisions and then trusting them to do so.
How did you prioritise customer acquisition and retention as you expanded?
Since we decided early on that a channel model made sense for us since we sell to so many different types of businesses and organisations, as we've grown, we've worked hard to make sure both our channel partners and end-users truly understand the product and what it can do. We focus on communicating the value FireBreak brings and the ease with which it can be deployed into organisations' existing infrastructure to dramatically reduce their attack surfaces. The key throughout has been making sure both groups – partners and customers – feel totally sure of our support wherever they are in a sales process.
What advice would you give a start-up looking to scale in a competitive market?
You have to really believe in what you do and then find other people who also genuinely believe in it to join you; experienced colleagues you don't need to persuade to join you end up being the most dedicated workers and best advocates when helping to build your brand and sell to prospects and investors. It's so easy for silos to pop up between departments as you build them out, but if everyone is clear on what the company is trying to achieve as well as the why and the how, everything should be moving together towards the same objective.
Then it's all about having a laser focus on your USP. Focusing on what makes us unique and pioneering has got us to where we are today. Ask yourself – what challenge are you solving, what differentiates your solution, and why should it matter to your customers? Building your company around the answers to these questions will help you keep customers at the heart of your decision-making and also help you communicate consistently with external stakeholders as you scale.
How have UK trade policies influenced your international expansion and scaling efforts?
More accessible export finance solutions for the startup community could help to further accelerate the international reach of pioneering UK technologies like ours and help home-grown startups more easily scale and succeed. Beyond that, to be honest, UK trade policies haven't had too much of an effect on our ability to grow globally. In fact, we have been fortunate enough to work closely with some government departments as we've scaled because of the huge potential of FireBreak in protecting critical infrastructure. The UK's Business & Trade team and the Defence & Security Exports team in particular are excellent – we have been on trade missions and to UK Embassies and High Commissions such as recently in Singapore. The MoD's Defence and Security Accelerator (DASA) and Innovate UK have also been very supportive.
Hashtags

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles


Forbes
an hour ago
- Forbes
Microsoft Confirms It's Deleting Passwords In 29 Days — Act Now
Microsoft makes password changes, starting August. It should come as no surprise that Microsoft wants Windows users to change how they perceive and use passwords. That was made quite clear when the Seattle tech behemoth announced that it was blocking 7,000 attacks on passwords every second and looking to get a billion users to change to passkeys instead. With state-sponsored hackers targeting Windows passwords, automatic password hacking machines, and even printers, yes, printers, being employed to target Windows passwords, something needed to be done. Now, Microsoft has confirmed that it is making significant changes to Microsoft Authenticator: in June, you stopped being able to add new passwords, during July, you will no longer be able to use the autofill feature, and, from August, saved passwords won't be accessible and any generated passwords that have not been saved will be deleted. The Changes to Microsoft Password Management You might be wondering just what is happening at Microsoft that has caused this seismic shift in password management, and truth be told, those attack figures and links above pretty much explain it all. Something has to be done, and when it comes to Microsoft Authenticator, that something is to persuade you to embrace the password management functionality of the Edge browser. Microsoft itself has stated that 'your saved passwords (but not your generated password history) and addresses are securely synced to your Microsoft account, and you can continue to access them and enjoy seamless autofill functionality with Microsoft Edge.' Here's the important part, and it points to the desire to get all users employing the much more secure passkey technology that is available to Windows users, Microsoft Authenticator will continue to support passkeys. Indeed, Microsoft has reminded users that if they have passkeys set up for their Microsoft account, then they must 'ensure that Authenticator remains enabled as your passkey provider — disabling Authenticator will disable your passkeys.' Act Now To Save Your Microsoft Passwords What you need to do first, then, is to ensure that you have saved your passwords before the end of the month. If you don't wish to use Microsoft Edge to access them, you can use another platform, such as Google or Apple's iCloud Keychain, as your default autofill provider. To do this, however, you will need to export your passwords and import them to the new service. However, this exporting must be completed before August 1, as although your saved passwords will still be seen in Edge, they will no longer be accessible in Microsoft Authenticator, so you won't be able to export them anywhere else.


Bloomberg
an hour ago
- Bloomberg
Summit Is in Talks for $15 Billion Partnership With AstraZeneca
By and Dinesh Nair Save AstraZeneca Plc is discussing a partnership deal with Summit Therapeutics Inc. in which it could pay as much as $15 billion over time to license a lung-cancer drug, according to people familiar with the matter. The companies have been holdings talks regarding the potential partnership over Summit's ivonescimab treatment, the people said, asking not to be identified because that matter is private. Summit has also held discussions with other major pharmaceutical firms, the people said.


Associated Press
2 hours ago
- Associated Press
INVESTOR ALERT: Pomerantz Law Firm Investigates Claims On Behalf of Investors of Coinbase Global, Inc.- COIN
NEW YORK, July 03, 2025 (GLOBE NEWSWIRE) -- Pomerantz LLP is investigating claims on behalf of investors of Coinbase Global, Inc. ('Coinbase' or the 'Company') (NASDAQ: COIN). Such investors are advised to contact Danielle Peyton at [email protected] or 646-581-9980, ext. 7980. The investigation concerns whether Coinbase and certain of its officers and/or directors have engaged in securities fraud or other unlawful business practices. [Click here for information about joining the class action] On May 5, 2025, media outlets reported that a cybercriminal had exploited a vulnerability in TeleMessage, an archiving and messaging platform that allows organizations to capture and store mobile communications, and that Coinbase was among the companies affected by this hack. Then, on May 11, 2025, Coinbase submitted a Data Breach Notification to the Office of the Attorney General of Maine, which disclosed a data breach occurring on December 26, 2024, and having been discovered on May 11, 2025. Coinbase described the breach as the result of 'insider wrongdoing.' On May 14, 2025, Coinbase disclosed in a filing with the U.S. Securities and Exchange Commission that the Company had 'received an email communication from an unknown threat actor claiming to have obtained information about certain Coinbase customer accounts, as well as internal Coinbase documentation, including materials related to customer-service and account-management systems [,]' which 'demanded money in exchange for not disclosing the information.' Then, on May 15, 2025, Coinbase Chief Executive Officer Brian Armstrong announced in a social media post about the hack that criminals had improperly obtained personal data on the exchange's customers for use in crypto-stealing scams and were demanding a $20 million payment not to publicly release the information. Armstrong said that criminals had obtained the data by bribing Coinbase customer service agents. On this news, Coinbase's stock price fell $18.97 per share, or 7.2%, to close at $244.44 per share on May 15, 2025. Pomerantz LLP, with offices in New York, Chicago, Los Angeles, London, Paris, and Tel Aviv, is acknowledged as one of the premier firms in the areas of corporate, securities, and antitrust class litigation. Founded by the late Abraham L. Pomerantz, known as the dean of the class action bar, Pomerantz pioneered the field of securities class actions. Today, more than 85 years later, Pomerantz continues in the tradition he established, fighting for the rights of the victims of securities fraud, breaches of fiduciary duty, and corporate misconduct. The Firm has recovered numerous multimillion-dollar damages awards on behalf of class members. See Attorney advertising. Prior results do not guarantee similar outcomes. CONTACT: Danielle Peyton Pomerantz LLP [email protected] 646-581-9980 ext. 7980