How exposing flaws in a potential client can generate massive publicity and win new business.
28 Jan 2026 · 26 min
Appnox found a wallet exploit in a major Indian ride-hailing app, tried private disclosure for months, then published publicly. The story hit front-page news, brought 20 new accounts and interest from banks and India's payments regulator. Prateek Pandit explains why exposing flaws can generate massive publicity and new business.
Chapters
Hello, welcome to this episode of the Unnoticed Entrepreneur with me, Jim James, your host. And today we're going to actually to India to meet Prateek Pandy, who's normally in San Francisco, but right now is in India. Pratik, welcome to the show.
Thank you so much, Jim. It's a pleasure to be here.
Well, Pratik, it's a pleasure to have you here because you have built multiple businesses since the age of 19, I think you're saying, as an entrepreneur. But we're also going to talk today about how you managed to take a business, appnox, which was really on, you know, on its last throws and with a very brave publicity campaign that could have either ended or made the business. You took the risk and you went out and you took a risk and it paid off. And now that business is really successful. You're going to help us also to understand about Fillo, which is a company that helps you to determine whether the influencers that you're working with are adding value or not. And we're going to talk about nano influencers in B2B. So we've got a number of things to talk about today. So Protect Panda joining us. Tell us then first of all about this story you were sharing before we got talking about the business that you had. Appnox was on its last legs and in the security business and no one wanted to do business because you were a startup, but you had to get a client. How did you solve that problem?
Yeah, so happy to talk about that. Right. And it was an interesting part of the journey. And, you know, just to give a little bit of background, appnox is, in its simplest form, mobile app security solution that helps developers detect and resolve security issues in their apps. Now, with that context, you know, what we were going through is like we had a good time, a good early run, and we had a lot of initial early investor interest, raised money for our seed round, got to a few first customers, and subsequently we got to a phase about two, two and a half years when the product was kind of getting matured, but we were struggling to add more customers. And it was a challenge. And we had a series of, of flat revenue, couldn't grow new revenue. We were adding new customers, but we were also losing customers at that point. What we had noticed was that the segment that worked best for us for security was particularly finance apps, and that means banks. But the challenge was that whenever we used to go to a bank, they would not want to work with a small startup. So it was this catch 22 sort of problem where we are like, okay, how do we get into one and then open up the doors? And we figured that one way to get there to the banks would be to get through some large, well known tech companies, tech startups who would be willing to work with us and therefore leverage on their momentum in their brand to establish ourselves as a strong player in the security space. Now what happened is there was a particular app which is an Uber competitor in India. It's a large app, millions of, tens of millions of users to be honest. And my security team found a major security vulnerability in their app which allowed people to take rides for free. So they had a digital wallet feature. You could load money into the wallet to pay for rides, but the security issue was allowing people to replicate the transaction multiple times. So you could only, you would pay once using your credit card, but you could repeat that transaction again and again to keep reloading your wallet with money actually without paying for money. So, you know, my team was very excited. They were like, hey, we can all take free rides as much as we want. And I'm like, okay, we have a bigger purpose here. We don't worry about free cab rides right now. So we started reaching out to this company, right? From the CEO to product folks, CTO and so on, right? And we really struggled to get responses. We kept getting thrown from one team to another and from one person to another like, hey, this person takes care of it, go talk to him and whatever, right? And that went on for a few months, like four months in, we are still there, not able to have a conversation. And at some point we decided that hey, let's go ahead and do a blog post about this. We will let the company know that we are going to do a blog post about this. Give them 30 days to fix this issue or acknowledge the issue. If they do that, we will not publish the post. If they don't, we'll go ahead and publish the post. So we try to give them as much heads up and kept getting ignored and not actually ignored. They would respond back to our emails saying that hey, this is not like priority for us. It's not a real issue. Nobody exploits this. And we used to keep sending over examples of hey, we are still able to do the exploit, right? So at some point this was a scary moment for me, particularly because I was the co founder but also leading marketing and we were going to throw ourselves out there and make this big claim. Of course we had all the data and examples to back it up, but it could have really gone either way, I was. I was prepared that either it's going to give us a lot of visibility or bury us in a series of lawsuits. Right. And I remember the next morning we were going to publish this blog post, and the previous night, I'd given my investors a call, and I was like, hey, I'm worried about how this is going to go, and what if all we have to deal with is lawsuit after lawsuit? And they were like, hey, we've given this company enough time. Let's go ahead and do this. Let's try it out. And if you guys need legal help in the future, we'll figure out a way to help you out. So I think as a, you know, I was in my mid-20s at that point, and, you know, I don't think I had built enough confidence for myself as a, you know, leader back then as well. Right. To be honest. So this support from our investors definitely gave me more confidence. And we're like, okay, let's do this. So next morning, we published that blog through the day. It got carried in a lot of online publications. The morning after that, it was on the front page of every business daily in India. Every business daily. So the top news, the top first fold was about this story. And that was big, right? For the next whole week, I did no work, to be honest. I was only answering journalist calls and, as expected, lawyer calls from this particular company that wanted to sue us. So that was a particularly scary time. But, you know, it opened up doors for a lot of opportunity for us. The sales team, you know, got a lot of business out of it. We closed about 20 new accounts within the next week or 10 days, all of them excited to, you know, start working with us. And, you know, pretty much like. Although I was worried about the lawyer phone calls that also died down in about three days. And I later found out through a buddy of mine who used to work for the same company, that they were actually planning to do a major product release a month from that time. And they sort of, you know, move the date in advance to launch something more quickly to create a positive spin on something else. Right. And yes, they spent a ton of money, you know, buying ad space in all the newspapers to promote that particular product and so on. And, you know, I still remember all of us co founders, and we were a small team back then. I think we were less than 12 people. We had a tiny office in the top of a terrace building, which would technically not even qualify for an office, and we used to work out of that space. And we sat down there, you know, trying to think like, imagine the amount of money these guys spent in this whole PR thing to cover up for all the bad press that they got because of our article. They could have just been more open about, you know, yes, there is a security issue. We'll resolve it. Thanks for letting us know. But anyway, so that basically put us on the front page of business in India, Southeast Asia, and that kept the phone ringing for a fair amount of time. And it, you know, got us pretty much back out of the dead.
So that's very brave because, you know, I used to show clients in my PR firm, I'd show clients the coverage they were not getting and the things they were missing and the holes in their social media strategy. And you'd always feel, you know, as a double edged sword because if the person inside the room that you were presenting to was responsible for that strategy, you knew you were insulting them. Right. And so, but you played that out fantastically. Um, and so you managed then to get Appnox, you know, it sounds like then it flew. But you also then I think found that as a result of doing that, just how important in B2B especially, one person can be inside a company. Right. So you now work at a company called Fillo, which is building in this an API platform for the creator industries to measure influencers. John, just tell us then a little bit about, you know, influencers and what you learned from that first publicity exercise and then how that's parlayed into this new business.
You know, Jim, right now in today's day, this whole thing around influencers and creators has become very flashy and almost, almost celebrity status, like. But you know, honestly, the concept of influence has always existed. I do you look down in your families and you might always have one person that somebody calls up to ask for tech advice or somebody who's great with the barbecue. And, you know, we all have that kind of person in our life, right? And so the concept of influence has always existed. Influencer marketing as a channel is relatively new now, going back to those, the Appnox story as well, Right. That particular publicity, I can call it publicity stunt now, was essentially something that opened up doors for us. But there was one person in particular, a security leader for one of the largest private banks in India. And he got really interested and he was like, hey, I understand you guys are a small player, a small startup. We'll find a way to engage with you for a couple of projects and let's see how that works. And he was supremely impressed by our tech and what we could do that, you know, he was the one who started talking to other CIOs of banks and telling them that, hey, you know, talk to these guys, they're great, we are using them. And you know, that's where the whole concept of influence also started making sense for us because it also opened up doors to something called as the National Payments Corporation of India, which is basically a regulatory body defining certain rules around payments interfaces and new payments interfaces. And then they mandated that every company that launches an app conforming to this new payment interface needs to go through appnox for a security audit and they will cover the expense for it. The banks don't have to pay or the app builders don't have to pay. So it sort of gave everybody easy way to experience appnox and that opened up even doors further. Right. So essentially one action led to so many and then one person and their influence sort of opened up so many more doors for us. Right. We could have pretty much been a dead business by then. Right. And that's what we are trying to extrapolate at Fillo as well. And I think every business owner has had some of these experience. We just don't realize that, you know, what's happening behind the scenes. Right. So at Fillo, what we are essentially trying to do is establish influencer marketing and the creator economy as a legit industry. And at the same time there is a ton of data in this space and a lot of brands, at least in the recent past, big ones like the Coca Colas and the Chanels of the world, have used influencers and more importantly celebrity influencers to propagate their brand. What we are trying to say is that you could also focus more on the ROI part. And I personally think that as a marketer, influencer marketing is going to become part of the performance marketing piece pretty soon because it has all the elements to be a ROI driven channel. And what we are doing with Filo is providing these APIs to companies who are building influencer marketing tools, who are building creator economy tools to really leverage all this data that is there on social platforms for influencers and therefore focus more on ROI return success and you know, explore this as a legit channel for growth.
When you say influencer marketing and you know, we used to call them evangelists, right? Often in the software early days we called them a product evangelist. For example, when you say now there can be an ROI attached to an influence, especially in the B2B space where it's not about fashion, you know, it's about trust and it's about longevity and integration. Pratik, how do you see ROI being demonstrated by the influencers and using a platform like Philo to do that? Philo to do that, yeah.
So, you know, this is like a tip to all B2B entrepreneurs as well as B2B marketers. The competition is pretty low on the influencer channel as far as B2B Products is concerned, because people are still figuring out the way to do it, or a lot of people still think that It's a very B2C sort of channel. Right. Because like you said, it's not a fashion product, it's not a beauty product. It's not somebody that you can, you know, just quickly send some product samples to and they will show it around. It's tougher. Right in the B2B space. But that also makes it a more collaborative effort, which means even the influencer is trying to put in more effort to go try your product, experience it, and therefore talk about it in a better way. Right. And going back to your question, it's essentially one of those examples where it's a fairly less leveraged channel in today's date and therefore gives you an opportunity to lead from the front. And with products like Fillo now in existence, which really enable you to track things more effectively, tracking that ROI part becomes relatively easier. A few years ago, that was just not possible because you couldn't trace that path unless it's a very pure play. You put a tracking URL, give a link to a Shopify store or a product, and therefore are able to track it. But the thing with influence is, and this is a big challenge in the marketing space even today, and that is the challenge of attribution. We recently did a big campaign for Fellow and we worked with a TikTok influencer who made this post about our platform and he was amazed by what we were building. And his audience is largely other marketers who were also pretty excited. Now, we didn't put any sort of tracking URLs on that promotion. People saw the video, came onto the website, saw the, you know, signed up, we got more than 100 signups in a matter of days and a lot of them becoming paid customers subsequently. Right now, if you go to the attribution data for that, it's going to show up as direct traffic or something because we didn't really provide a link on that post. But as marketers, we need to go figure out these methods of measurement also. And that's what also we are trying to do on the fellow side, right? So you might collaborate with influencers where there are clear tracking links, but there might be times when you're not providing tracking URLs for whatever reason and it can still, you know, attribute, you can still attribute that growth to this particular effort. Right. So I think all in all, that enables us to, you know, drive more ROI out of this channel.
So just to be clear, with Filo, you can either as an influencer, build, if you like, an API that enables you to demonstrate your, if you like, your value to a brand, right. And also if you're a company that wants to employ an influencer, you could be building the API and tracking, I guess you could have multiple influencers, right? Or within your dashboard to see how your army of influences are working out for you with, with their, either their videos or their podcast performances and so on. Is that right, Pratik? So actually you're solving problems at both sides of the equation, the buyer and the seller.
Exactly. And you know, we enable a lot of these influencer marketing platforms as well as influencer marketing agencies do a better job with finding the right influencers, running effective campaigns, measuring success better and then reporting them better also. Right. Through the use of all of the APIs that we provide. Because our APIs give you more knowledge and data, real time about engagement, income, demographic information, and so much more about every influencer and their audience on pretty much every social platform. And that includes hundreds of social platforms. We tend to think that, okay, the world is limited to Instagram and YouTube and TikTok, but there are so many others. Right. Shopify is also a platform like that which enables people to make money only fans or so many beehive sort of newsletter platforms, all of the podcasts, right. So Spotify, if you're running a podcast on Spotify and you're monetizing that you're still a creator, you're still an influencer, but there are so many platforms that we try to cover and therefore get all the data together.
I think that that is so liberating, actually. You're going to help creators and influencers to monetize their value, right. And you're going to help all those people that are looking to hire influencers to have the accountability. Right. Which has been, had been really missing. Especially there are so many stories of influencers just charging wild amounts of money and they're not actually delivering. So that's fantastic critique. And so Pratik, we'll put a link to Filo in the show notes of course as well. And I guess, coupled with a platform like Analytica where there's kind of a marketplace of influencers, you're really solving the complete problem for both B2B and B2C influencers. Pratik, you've had an illustrious career. You started Appnox. I love that story, by the way of really taking a risk and calling out a flaw and prompting the market to move and what you do with flow as well. Is there something that you've experienced or tried from a marketing perspective that you wouldn't recommend that you know, really hasn't worked out quite as you'd like?
I mean, so many things, Jim. I mean, you know, as a marketer, I think the honest thing that I can tell you is you might think something works today and the same thing doesn't work tomorrow. So what the advice I would give at least is there are a lot of things that work and don't work, but it's mostly on the timing part of it as well as whether you really know whether that's a good channel for you or not. Right. And I'll give you an example. I've spent more than a decade running paid ads on all sorts of platforms, right? Whether it's LinkedIn, Instagram, Facebook, YouTube, Google search, you know, all of them. Right. I've run, you know, spent millions over the years running ads across all of these platforms. Now, the thing is that we've learned early on in my startup day as well, that in the first year or two, our ads were just not performing for us. And there's a reason for that. It's not that the ads are not a great way for you to acquire customers, but the challenge at that point was that we didn't really have a trustworthy brand established at that point. And you have to understand that buyers have evolved as well. And everybody does their own research. And especially in today's date, people have all sorts of ad blockers on and so many other things as well, right? So the, you know, the efficiency or the viability of performance or paid marketing ads has really dwindled over time. And that doesn't mean that it's a bad channel. You just have to know that, okay, it doesn't work for me right now. I'm going to focus on something else and come back to it when we have a better brand and things like that, right? So as we acquired more known logos on the website, we got a bunch of G2 crowd batches and all that that built trust and faith. Now, putting that onto your ads immediately builds that trust factor. And therefore people want to now interact with that ad. It makes sense. Okay, this company looks interesting and it's not going to scam me out of money or what, and therefore I'll go spend time with them. So there are numerous such experiments that we've run. Something works, something doesn't. You just have to, you know, take that as a learning and always, I would suggest, revisit it. Never make like a channel, you know, not worthy of your time at all. Like, it might not work today, but it might be something to visit in 6 months time or 12 months time or more.
I love that idea that you're experimenting rather than trying and failing. You know, and there's this, this book called Think Again by Adam Grant that I just finished. He really talks about trying to think like a scientist, you know, that you tried something, analyze the data, you know, and, and pick apart the data rather than just wholesale say, you know, yes, that worked. It didn't. So that's great that you go back into Google Ads, but when the product and the company's more mature and then the, the same platform is productive for you. Pratik, that's fantastic. Pratik Pandit, you know, you're on here as the, you know, one of the founders of Appnox, now you're the vice president of marketing at Philo. You've had, I think, multiple businesses started and exits, and I'm sure you're going to have more in the future. If there was one piece of advice that you'd give my fellow unnoticed entrepreneurs on getting noticed, what would that be?
That's an interesting one. I think, you know, one of the things that basically stops us the most as entrepreneurs is, is just us reluctant to put ourselves out there. It is very comforting to stay within the four walls of your house, sitting in front of your machine, or within the cozy atmosphere of your office and continuing to just go build, build, build without putting yourself out there. And, you know, you can still be in that environment, but you really have to put yourself out there. And a great example is even this podcast, right? Like, I mean, I started being more active putting out content on LinkedIn, around product marketing, around influencer market. I'm learning myself, but things that I have, you know, gotten better at over time, right. I'm purely trying to, you know, share my learnings and experiences with others and that got both of us, I think, interacted on some post together and then we got connected and you helped me get connected to some other folks as well. And so that's how it happens, right? Now imagine if I would never even put myself out there, right. It's not going to move the needle. So the simplest way, and it doesn't take much effort, we might feel very conscious about doing it. But the simplest way, I think to get noticed as an entrepreneur is to do just that. Put yourself out there and you will get noticed. You might feel demotivated at first, but just keep doing it, people will start.
Noticing you, Pratik Panda. I love that. Essentially that's a very positive, humanistic approach and a low tech one. Right. It's not about using AI, it's about being yourself. And yeah, I reached out to you because I love what you opposed on LinkedIn and you kindly agree to come on the show. If people would like to find out more about you, Pratik Panda, where can they do that?
LinkedIn is, you know, the best way I think I would appreciate, Jim, if you drop a link to my LinkedIn profile and people can reach out. I think my contact details are in there as well. But you know, I'm, I'm very responsive on LinkedIn so that's the best way to get in touch with me.
Will definitely do that. Prateek Panda, thank you so much for joining me. I know that you're in a sort of temporary location in India, normally back in the us so thank you for taking the time while you're off site to join me today on the Unnoticed Entrepreneur show.
Thank you so much, Jim. It was great, you know, being on the show and it was an amazing experience sharing my side of the story.
Yeah, it's lovely because I know, you know, Prateek has his own podcast as well and it's wonderful. We'll put a link to his show as well. Prateek, what's your show called?
It's called Impulse. It's like a influencer marketing pulse check. So therefore Impulse, it's a podcast where I talk to influencer marketers from around the world, B2B, B2C, get to know about how they are doing influencer marketing, what's working for them, what's not working for them, you know, and it's the first time I'm doing the podcast as well and I'm having a lot of fun hosting it.
So there we go. He's got a chance to be on the mic with me and then other people are on the mic with him. So podcasting is another. Another great.
Exactly.
Platform.
Right.
Of reaching out. So to thank you for listening as always to me having a guest. Wonderful to have to Pratik on the show today and you know this idea that he's taken a risk of calling out the flaw in his potential customers, services and products. It took a lot of courage and ultimately yielded a great benefit. So maybe that's a strategy for you. But do as he did, think about the due diligence in advance and make sure that the customer doesn't feel as though they're being held hostage. So thanks for listening to this episode of the Unnoticed Entrepreneur. If you've enjoyed it, please do share it, follow the show, and if you can leave a review that would be fantastic on whatever player it is that you've got. And until we meet again, I just encourage you to keep on communicating. Thanks for listening.
More from Jim
How can this be easy? The mindset approach approach to change how you build your business.