POPULARITY
Categories
362 episodes with SOC
164 episodes with SOC
184 episodes with SOC
108 episodes with SOC
45 episodes with SOC
50 episodes with SOC
30 episodes with SOC
39 episodes with SOC
52 episodes with SOC
23 episodes with SOC
61 episodes with SOC
24 episodes with SOC
31 episodes with SOC
18 episodes with SOC
29 episodes with SOC
98 episodes with SOC
28 episodes with SOC
48 episodes with SOC
24 episodes with SOC
24 episodes with SOC
22 episodes with SOC
14 episodes with SOC
14 episodes with SOC
32 episodes with SOC
38 episodes with SOC
14 episodes with SOC
18 episodes with SOC
17 episodes with SOC
13 episodes with SOC
12 episodes with SOC
10 episodes with SOC
15 episodes with SOC
14 episodes with SOC
19 episodes with SOC
19 episodes with SOC
12 episodes with SOC
11 episodes with SOC
16 episodes with SOC
15 episodes with SOC
9 episodes with SOC
11 episodes with SOC
12 episodes with SOC
12 episodes with SOC
10 episodes with SOC
10 episodes with SOC
14 episodes with SOC
10 episodes with SOC
8 episodes with SOC
14 episodes with SOC
18 episodes with SOC
9 episodes with SOC
11 episodes with SOC
14 episodes with SOC
10 episodes with SOC
27 episodes with SOC
20 episodes with SOC
6 episodes with SOC
8 episodes with SOC
33 episodes with SOC
15 episodes with SOC
4 episodes with SOC
5 episodes with SOC
7 episodes with SOC
7 episodes with SOC
15 episodes with SOC
14 episodes with SOC
8 episodes with SOC
9 episodes with SOC
8 episodes with SOC
8 episodes with SOC
10 episodes with SOC
13 episodes with SOC
8 episodes with SOC
8 episodes with SOC
6 episodes with SOC
9 episodes with SOC
8 episodes with SOC
5 episodes with SOC
7 episodes with SOC
17 episodes with SOC
14 episodes with SOC
5 episodes with SOC
7 episodes with SOC
5 episodes with SOC
5 episodes with SOC
7 episodes with SOC
10 episodes with SOC
5 episodes with SOC
6 episodes with SOC
4 episodes with SOC
7 episodes with SOC
4 episodes with SOC
5 episodes with SOC
5 episodes with SOC
94 episodes with SOC
6 episodes with SOC
6 episodes with SOC
6 episodes with SOC
6 episodes with SOC
2 episodes with SOC
4 episodes with SOC
4 episodes with SOC
6 episodes with SOC
4 episodes with SOC
8 episodes with SOC
8 episodes with SOC
6 episodes with SOC
3 episodes with SOC
3 episodes with SOC
5 episodes with SOC
3 episodes with SOC
4 episodes with SOC
4 episodes with SOC
8 episodes with SOC
4 episodes with SOC
7 episodes with SOC
7 episodes with SOC
7 episodes with SOC
8 episodes with SOC
3 episodes with SOC
4 episodes with SOC
4 episodes with SOC
3 episodes with SOC
4 episodes with SOC
4 episodes with SOC
3 episodes with SOC
3 episodes with SOC
9 episodes with SOC
5 episodes with SOC
2 episodes with SOC
4 episodes with SOC
7 episodes with SOC
6 episodes with SOC
6 episodes with SOC
4 episodes with SOC
6 episodes with SOC
6 episodes with SOC
2 episodes with SOC
3 episodes with SOC
5 episodes with SOC
5 episodes with SOC
3 episodes with SOC
4 episodes with SOC
4 episodes with SOC
4 episodes with SOC
4 episodes with SOC
4 episodes with SOC
4 episodes with SOC
53 episodes with SOC
3 episodes with SOC
52 episodes with SOC
5 episodes with SOC
3 episodes with SOC
Bringing new software or SaaS into your organization is a security risk - how do you assess it? Richard chats with Jessie Schofer about her experiences in HR software acquisition, which led to the creation of secureless.ai. Jessie tells the story of evaluating various SaaS and other software products and realizing that, while the website says they are compliant with GDPR and/or SOC 2, are they really? This leads to a conversation about the product procurement process and about actually understanding the security risk you take on every time a new product is added to your organization. At what point does security block an acquisition? And after being acquired, how often do you reassess? Supply chain security hygiene starts at procurement - are you part of the evaluation? Links Secureless.ai GDPR Enforcement Tracker Recorded June 23, 2026
The SaaS world is in the middle of a brutal reckoning. Products that looked innovative 18 months ago are quietly becoming redundant — not because markets disappeared, but because the floor rose. In this episode, Jeff Mains sits down with Brian Herr, a 30-year technology and SaaS veteran, to dissect what it actually takes to build a software business that survives — and wins — in the age of AI.Brian brings sharp investor-grade thinking to the conversation, drawing on his work with startups, venture studios, and PE-backed companies. They cover the death of thin-wrapper SaaS, why blocking AI agents is a catastrophic mistake, how security and compliance have become unexpected competitive moats, and the critical distinction between a product that helps and one that solves. If you build software or provide services, this episode is non-negotiable.Key Takeaways4:08 — The value expectation from SaaS platforms is shifting fast. Thin wrappers around someone else's AI model have no future — customers will ask why they're paying when they can do it themselves.4:53 — Companies that survive will be the ones that solve real problems, curate the right data, and give meaningful feedback — not just deliver a slick interface.6:46 — Investor rubrics have changed. A key new question before committing capital: "Can this be replicated as a Claude skill or agent in six months?" If yes, it's not fundable.7:39 — Where physical world meets digital data is a major investment magnet. These companies have stronger moats, are more AI-resistant, and occupy underserved territory.13:53 — Natural language interfaces are no longer a differentiator — they're an expectation. And Brian's crystal ball: local on-device AI will push this even further into everyday life.14:29 — Natural language is democratizing technology for older users. If you don't have a conversational interface, the market will pass you by.20:23 — Agents are no longer just for technologists. CFOs and revenue officers are using them. Blocking agents is a strategic blunder — competitors are advertising agent compatibility while you're building walls.21:00 — The smart play: figure out what people are doing with agents hitting your platform and monetize it. Blocking just pushes them to your API — or to a competitor.21:20 — Every SaaS company needs a quarterly gut-check: What is my value? What do I do well? How do I evolve? A business plan from one year ago doesn't fit today's market.33:04 — Security, compliance, and certifiability are the new defensible moat. You literally cannot vibe-code your way into SOC 2, HIPAA, or AI trust scores. That's the value story.33:59 — The AIUC-1 framework is making AI applications insurable for the first time. MITRE has joined the consortium. If your SaaS uses AI, this becomes part of your trust story.39:50 — The single most important product question: Does it help, or does it solve? Helpful gets cut from budgets. Essential doesn't.43:09 — Going niche gives you orders-of-magnitude higher odds of success. Trying to do what everyone else is doing? Your chance of success drops to 13% or less.47:37 — Brand trust and human relationships are more important than ever. People do business with people. When you become indifferent to your customers, you become a vendor. Vendors don't survive.Tweetable Quotes"If someone opened a fresh ChatGPT window right now and got roughly the same result your product delivers — would your customers notice the difference, or would they even care?" — Jeff Mains"The thin wrappers aren't going to make it very long. What's going to survive is companies that still solve real problems, curate the right data, and give the right feedback." — Brian Herr"One of our investment rubrics now: Can this be turned into a Claude skill or agent in six months? If so, it doesn't make sense for us to invest." — Brian Herr"Natural language interfaces are now an expectation, not a differentiator. If you think you'll eventually get around to it, the market will pass you." — Brian Herr"Helpful solutions get cut from the budget first. Solutions that solve don't. Stop asking whether you can bolt on AI and start asking whether customers actually need YOUR data and process to make it work at all." — Jeff Mains"Agents are becoming for everyone — especially as the interface evolves. Blocking them is evolve or die." — Brian Herr"Figure out what people are doing with agents and monetize it. People will pay for it. By being a blocker, you're just pushing them to find another way." — Brian Herr"People do business with people. When you become indifferent to your customers, you stop being a partner and become a vendor. Vendors have a hard time surviving." — Brian Herr"Success is a journey, not an endpoint. The founders who make it understand you're going to be a little wrong — as long as you course correct in the right direction." — Brian HerrSaaS Leadership Lessons1. Moat = Data + IP + Experience, Not Interface A beautiful UI sitting on top of a commodity model is not a business — it's a countdown clock. Your defensible moat is proprietary data, domain expertise, and institutional knowledge that competitors cannot prompt their way into.2. Run a Quarterly Value Audit Especially in the $5M–$15M revenue range, ask yourself every quarter: Does my business plan still match the market? What do I do well, and how am I evolving? Founders who don't course-correct veer further off target every quarter until they no longer recognize where the target moved.3. Embrace Agents as a Revenue Channel, Not a Threat Your API traffic spikes are signals, not attacks. When agents are hitting your platform, that's demand you haven't monetized yet. Build for agent access, charge for it, and let your competitors play defense while you build offense.4. Compliance and Trust Are Your Unfair Advantage In a world where anyone can vibe-code a competitor over a weekend, the thing they cannot replicate is your certifications, your compliance posture, your years of regulated-market experience, and your insurance-grade AI trust scores (AIUC-1). Make this part of your sales story.5. Help vs. Solve Is the Only Product Question That Matters Helpful products live in discretionary budgets — they're the first cut when times get hard. Products that solve real, urgent problems command non-negotiable budget lines. Every feature you build, every market you target: ask which one it is.6. Stay a Partner, Never Become a Vendor When customers feel like a transaction to you, you become a commodity to them. In the $5M–$15M range, clients know your team personally — that trust is a competitive advantage. Build systems to maintain it as you scale, or risk waking up one day to find out you've been quietly moved to the vendor pile.Guest ResourcesWebsite: https://www.startingblocks.io/LinkedIn (6k): https://www.linkedin.com/in/brian-herr/https://drive.google.com/drive/folders/1kS1WsPODEaqtMnB_g1_Dut6oTv1FYYvXEpisode SponsorThe Futureproof Series - https://www.youtube.com/playlist?list=PLfkXKUPZ5xuOqMPR7_gzGybncTtavyR1NThe Captain's KeysSmall Fish, Big Pond – https://smallfishbigpond.com/ Use the promo code ‘SaaSFuel'Champion Leadership Group – https://championleadership.com/https://jeffmains.com/books/SaaS Fuel ResourcesWebsite - https://championleadership.com/Jeff Mains on LinkedIn - https://www.linkedin.com/in/jeffkmains/Twitter - https://twitter.com/jeffkmainsFacebook - https://www.facebook.com/thesaasguy/Instagram - https://instagram.com/jeffkmains
This Week In Startups is made possible by: Vanta https://www.vanta.com/twist Superhuman https://superhuman.com YSecurity https://YSecurity.io/TWIST Today's show: *Cybersecurity has long focused on cleaning up a system AFTER a breach but Ent founder Brandon Dixon says that's backwards. He just raised a $100M seed round to put an AI agent on everyone's company laptops that catches the risky clicks, leaked files, or rogue agents BEFORE they wreck havoc. PLUS Clawra creator David Im return swith his new project, Sume's Avatar, a multi-model orchestration layer that generates 60-second UGC videos from a single prompt… and gets it right on the first try, rather than falling back on trial and error. Guests: Brandon Dixon on LinkedIn: https://www.linkedin.com/in/brandonsdixon/ Ent: ****https://ent.ai/ David Im on X: https://x.com/davidim Sume: https://www.sume.com/ Relevant Links: WSJ: "Cyber Security Startup Ent Raises $100 Million in Seed Funding": https://www.wsj.com/pro/cybersecurity/cyber-startup-ent-raises-100-million-in-seed-funding-a3e9b6c6 Microsoft Security Copilot: https://www.microsoft.com/en-us/security/business/ai-machine-learning/microsoft-security-copilot Engadget: "Meta 'pausing' employee tracking program…": https://www.engadget.com/2199458/meta-is-pausing-employee-tracking-program-after-it-let-the-whole-company-see-sensitive-data/ Seedance 2.0: https://seedance2.ai/ Timestamps: 0:00 Intro: Why AI + cybersecurity is the hot combo right now 2:29 How INT stops breaches before they happen 4:56 AI is giving non-technical employees dangerous new powers 10:26 Vanta - Compliance and security shouldn't be a deal-breaker for startups to win new business. Vanta makes it easy for companies to get a SOC 2 report fast. Get $1,000 off for a limited time at https://www.vanta.com/twist 13:54 Why on-device AI beats cloud-based security 20:08 Superhuman - Get AI that works where you work. Unlock your Superhuman potential at https://superhuman.com 25:18 INT's business model and go-to-market 30:26 YSecurity - The on-demand security team for startups. Need enterprise-grade security without hiring a $400k CISO? YSecurity gives you 40+ expert engineers, matched to exactly what you need, by the hour, with your first six hours completely free. Go to https://YSecurity.io/TWIST 34:18 David M. of Sumi Labs: one-shotting AI video 36:10 Live demo: Sumi's video orchestration API 40:05 Consistent faces, 60-second videos, and who's buying Subscribe to the TWiST500 newsletter: https://ticker.thisweekinstartups.com Check out the TWIST500: https://www.twist500.com Subscribe to This Week in Startups on Apple: https://rb.gy/v19fcp Follow Lon: X: https://x.com/lons Follow Alex: X: https://x.com/alex LinkedIn: https://www.linkedin.com/in/alexwilhelm Follow Jason: X: https://twitter.com/Jason LinkedIn: https://www.linkedin.com/in/jasoncalacanis Check out all our partner offers: https://partners.launch.co/ Great TWIST interviews: Will Guidara, Eoghan McCabe, Steve Huffman, Brian Chesky, Bob Moesta, Aaron Levie, Sophia Amoruso, Reid Hoffman, Frank Slootman, Billy McFarland Check out Jason's suite of newsletters: https://substack.com/@calacanis Follow TWiST: Twitter: https://twitter.com/TWiStartups YouTube: https://www.youtube.com/thisweekin Instagram: https://www.instagram.com/thisweekinstartups TikTok: https://www.tiktok.com/@thisweekinstartups Substack: https://twistartups.substack.com
Does restricting frontier AI in the name of safety actually make us less secure? Joshua Saxe joins me to make the case that it does, and that AI cybersecurity will be won through defender adoption, not restriction.Josh has spent 15 years at the intersection of AI and security. He built and ran the machine learning program at Sophos, then led security for Llama at Meta, covering security post training, evals, agent guardrails, and prompt injection prevention. He recently left to co-found a startup reimagining vulnerability and exposure management agentically. He also writes one of the most cited blogs on AI and cyber policy.In this episode:- Why restricting frontier model access harms defenders more than attackers- How monitored closed models put threat actors at a structural disadvantage- The jagged frontier, and why attackers don't need frontier models for most of their tradecraft- The national security and supply chain risks of pushing the world onto Chinese open weights models- Why exploits don't cause cyberattacks, and which attacker constituencies AI actually unblocks- The dual use ceiling on guardrails and classifiers- Where defenders should be adopting AI right now, from access management to SOC automation- Using agents to burn down the mountain of security technical debtChapters:0:00 Intro0:42 Josh's background, from blackhat teen to Llama security lead3:07 The case for diffusion over restriction6:14 Why restriction hurts defenders more than attackers10:19 The jagged frontier and what attackers actually use models for12:49 National security and the supply chain risk of Chinese open weights16:08 Exploits don't cause cyberattacks20:20 Where defenders should adopt AI right now24:20 Guardrails, classifiers, and the dual use problem27:34 Reimagining vulnerability management with agents32:17 The structural advantage defenders hold35:15 Policy wishes and the attacker's Claude Code momentFollow Josh:LinkedIn: https://www.linkedin.com/in/joshua-saxe-01845a1Substack: https://joshuasaxe181906.substack.comFollow Resilient Cyber:Substack: https://www.resilientcyber.ioSubscribe for more conversations with security practitioners and leaders.#aisecurity #cybersecurity #vulnerabilitymanagement #aipolicy #opensourceai
Enterprises are running more AI agents than their security teams realize, and attackers only need to be right once. Anand Oswal, EVP of Network Security at Palo Alto Networks, explains how to secure agents across four surfaces: enterprise, SaaS, endpoints, and the browser. With host Michael Krigsman, he covers shadow agent discovery, MCP and browser risks, prompt injection, agent identity, and why a unified platform beats a stack of point products.YOU'LL DISCOVER✅ The four agent surfaces every CISO must secure at once: enterprise, SaaS, endpoints, and the browser✅ Why discovery comes first: you cannot secure agents, models, tools, and plugins you cannot see✅ The Palo Alto Networks finding that one third of public MCP servers carry takeover level vulnerabilities✅ How vibe coding agents demand privileged access to local files, terminals, and cloud credentials✅ How browser agents inherit your session and cookies and can perform identity impersonation✅ Runtime threats to know: prompt injection, memory poisoning, tool misuse, and model DoS✅ How MCP and A2A protocols expand the attack surface, and why a centralized AI gateway anchors identity, runtime, and observability controls✅ The case for zero trust, an AI-driven SOC, and one unified platform over point products, and where Prisma AI fits⏱️ TIMESTAMPS0:00 Introduction0:22 Agent memory poisoning and tool misuse0:59 Discovering shadow agents across four surfaces2:32 Vibe coding agents and MCP risk4:46 Browser agents and session misuse6:20 Runtime threats and prompt injection7:17 Agent-to-agent protocols and attack surface8:04 Agent identity and the control plane9:16 Centralizing control at the AI gateway10:23 Zero trust and an AI-driven SOC11:29 One platform, not point productsSubscribe for weekly conversations with the business and technology leaders shaping the enterprise. Get the CXOTalk newsletter: https://newsletter.cxotalk.com Show notes, transcript, and summary: https://www.cxotalk.com/episode/palo-alto-networks-evp-securing-ai-agents-in-the-enterpriseEpisode 924#CXOTalk #EnterpriseAI #CIO #AIGovernance #AgenticAI #IBM #DigitalTransformation #AIStrategy #AILeadership
Cybersecurity investor Sid Trivedi of Foundation Capital joins me to dig into AI SOC valuations, services-as-software, moats, and what founders should know heading into Black Hat.Sid is a Partner at Foundation Capital, where he invests at the seed and Series A stage with a focus on cybersecurity and IT infrastructure. This is our annual pre-Black Hat check-in, and a lot has moved since last year, from massive M&A to record-setting rounds in categories like the AI SOC.In this episode:- What has actually changed a year into the AI wave, and what hasn't- Services-as-software, the $4.6 trillion market thesis, and automating cyber workflows across the SOC, IR, pen testing, and threat intel- What AI means for cybersecurity jobs and how practitioners should adapt- Consolidation vs. best-of-breed after Palo Alto's $25B CyberArk deal and Alphabet's $32B Wiz acquisition- AI SOC valuations, including Seven AI's record Series A and Torq crossing a $1B valuation- The double-edged sword of big raises and why founders should be cautious about the valuations they accept- Why you can't simply spend your way to growth in cybersecurity- Moats and defensibility when frontier labs can push into your category- The Black Hat Innovator Investor Summit and the Startup Spotlight competitionChapters:0:00 Intro0:52 What's changed a year into the AI wave2:42 Services-as-software and the AI SOC9:38 AI adoption and forward deployed engineers10:57 M&A, platformization, and best-of-breed14:17 IT and security convergence, plus AI SOC valuations18:48 Seed-stage risk calculus vs. later-stage investors21:43 The double-edged sword of big raises26:20 Why you can't spend your way to growth29:05 Moats and defensibility in the frontier-lab era32:25 Deal flow, pricing, and staying disciplined37:06 Black Hat Innovator Investor Summit40:17 Startup Spotlight competition43:28 Wrap-upBlack Hat is offering listeners $500 off registration with code USA500Resilient.Connect with Sid:LinkedIn: https://www.linkedin.com/in/siddhanttrivedi/Foundation Capital: https://foundationcapital.comResilient Cyber: https://www.resilientcyber.ioSubscribe for more conversations with security practitioners, founders, and leaders.
Today’s headline news for Canadian IT solution providers: OpenAI Partner Network: OpenAI‘s inaugural Partner Network is officially live as of July 15, with vice president of strategic global partnerships Colleen Kapase confirming the three-tier program is backed by $150 million in channel investment. Partners can progress through Select, Advanced, and Elite tiers while earning specializations in areas like Codex, cybersecurity, and AI agents. OpenAI says it aims to train 300,000 certified consultants by year-end and is recruiting solution providers of all sizes that can put AI systems into production. OpenAI Carbon60 MSP 501: Carbon60, a Toronto-based managed cloud services provider, has been named to the 2026 MSP 501 at position 206, ranking among the world’s top managed services firms by revenue and operational discipline. The company has built a differentiated practice around Canada-first sovereign cloud and Azure expertise, and the ranking follows a broader push by Canadian MSPs to demonstrate global competitiveness in compliance-heavy verticals. Carbon60 RecordPoint channel-first: RecordPoint has launched a global partner program that CRN describes as a channel-first move, enabling resellers, consultancies, and systems integrators to resell, co-sell, and refer its data and AI governance platform. Partners will receive enablement, joint sales support, and platform access to build practices around data retention, compliance, and AI-ready data classification. Channel Insider Blackpoint Cyber 2026 threat report: Blackpoint Cyber has released its 2026 Annual Threat Report, finding that attackers are increasingly exploiting trusted IT tools rather than using perimeter breaches. The report highlights abuse of remote monitoring and management platforms, VPNs, and identity credentials as primary vectors. ChannelPro Network Managed security market growth: Acronis and Omdia project the global managed security market will grow from $93 billion in 2025 to $106 billion in 2026, a 14.4 percent increase. The growth reflects sustained demand for outsourced security operations among mid-market organizations that lack internal SOC capacity. RAMageddon pressures PC refresh: Industry analysts and OEMs continue to signal significant PC RAM price increases through 2026 due to the ongoing memory supply shortage. Channel partners should advise clients on refresh timing and alternative configurations to manage budget impact. CNET Exabeam MSSP licensing: Exabeam has expanded its APEX partner program with pooled and federated licensing options designed specifically for MSSPs. The new framework is intended to reduce onboarding friction and simplify compliance across multi-tenant security operations centers. Security Brief Read Full Transcript Welcome to The Buzz from ChannelBuzz.ca, I’m Robert Dutt, today is Thursday, July 16, and here’s what’s happening in the channel today. OpenAI’s inaugural Partner Network is officially live as of yesterday, July 15, with the company backing the three-tier program with $150 million in channel investment. Vice president of strategic global partnerships Colleen Kapase confirmed the program is open to solution providers of all sizes, not just global systems integrators. Partners can progress through Select, Advanced, and Elite tiers based on sales performance, technical capability, and deployment experience. The program includes specializations in Codex, cybersecurity, and AI agents. OpenAI says it aims to train 300,000 certified consultants by the end of 2026, and is actively recruiting solution providers that can put AI systems into production. Philip Larson, senior director of the OpenAI Partner Network and a former Google Cloud channel leader, said the program is designed to reward partners for the value they create with customers. Canadian VARs and MSPs with existing AI practices should evaluate the program alongside their current AWS, Google, and Microsoft partnerships, as the specializations in Codex and AI agents may create differentiation in automation-heavy verticals. Carbon60, a Toronto-based managed cloud services provider, has been named to the 2026 MSP 501 at position 206, marking the company as one of the world’s top managed services firms by revenue and operational discipline. The ranking, published by Channel Futures, evaluates financial health, operational maturity, and recurring revenue growth. Carbon60’s inclusion follows a broader trend of Canadian MSPs demonstrating global competitiveness in specialized infrastructure and compliance-heavy verticals. The company has built a differentiated practice around Canada-first sovereign cloud and deep Azure expertise. As Canadian public sector and healthcare clients face stricter data residency requirements, sovereign cloud capabilities are becoming a key differentiator for domestic MSPs seeking to compete with larger global firms on government and enterprise contracts. RecordPoint has gone channel-first with the launch of a global partner program enabling resellers, consultancies, and systems integrators to resell, co-sell, and refer its data and AI governance platform. The program arrives as AI adoption drives a surge in demand for data governance across regulated industries. RecordPoint says partners will receive enablement, joint sales support, and platform access to build practices around data retention, compliance, and AI-ready data classification. CRN reports that the move represents a strategic shift for the company. Canadian partners serving regulated industries like finance, government, and healthcare may find particular opportunity as clients confront unstructured data sprawl ahead of AI deployments. In Brief – OpenAI commits $150 million to launch its inaugural Partner Network with tiered AI specializations. Acronis and Omdia project the managed security market will reach $106 billion in 2026. Blackpoint Cyber’s 2026 Annual Threat Report highlights attackers hiding inside trusted IT tools and RMM platforms. RAMageddon memory shortages continue to pressure PC pricing and enterprise refresh cycles. Exabeam adds pooled and federated licensing options to its APEX partner program for MSSPs. Full details and links in the show notes or the blog post. Later today on In The Channel, we’re talking specialist distribution in Canada with Carrie Hopkins of Exclusive Networks. We get into the Ignition program, what broadliners can’t deliver, and why the model might feel familiar to channel veterans. And if you haven’t heard it yet, yesterday we wrapped our HPE Discover 2026 arc with HPE vice president of North America channels Jeremiah Jenson. He talks about the quote-cycle win, the Canadian angle on data sovereignty, and what partners should stop doing. That’s how we’re seeing the headlines today. I’m Robert Dutt for ChannelBuzz.ca, thanks for listening. Have a great day.
Carrie Hopkins, senior director of business development and sales for Exclusive Networks Canada Exclusive Networks describes itself as a specialist distributor — hyper-focused on cybersecurity and advanced networking, deliberately not trying to be everything to everyone. As the company makes a serious push into the Canadian market, In The Channel sat down with Carrie Hopkins, senior director of business development and sales for Canada, to talk about what that actually means in practice for Canadian partners. Hopkins walks through what Exclusive is building in Canada specifically — in-country finance and operations, and a prescriptive approach to partner recruitment that goes beyond adding names to a portal. Rather than waiting for partners to come to them, Exclusive analyzes what existing partners buy, what they conspicuously don’t buy, and builds outreach strategy around those gaps. We also get into Ignition, Exclusive’s newly launched cybersecurity channel incubator, which arrived in North America earlier this year. The program is designed to bring emerging vendors to channel partners with the vetting and enablement baked in — addressing a real problem for MSPs and VARs who are being pitched constantly by early-stage vendors and don’t have the bandwidth to evaluate them all. And then there’s the Westcon thread. Hopkins spent years at Westcon and Comstor before moving through vendor-side channel roles at Ixia, Infoblox, and Sisense. When asked whether Exclusive feels like the evolution of what Westcon was doing before North American distribution consolidated, her answer is worth a listen. – UPLOAD AUDIO Read Full Transcript ROBERT DUTT: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca and your host for the show. If you’ve been paying attention to the distribution landscape in Canada, you may have noticed that Exclusive Networks has been quietly building something. Exclusive is a global cybersecurity specialist distributor, and the emphasis on “specialist” is deliberate. They’re not trying to be everything for everyone. They focus specifically on cybersecurity and advanced networking, and they’re making a real push to make that model mean something in the Canadian market. My guest today is Carrie Hopkins, senior director of business development and sales for Canada at Exclusive Networks. Carrie’s background is worth noting. She spent years at Westcon and Comstor before moving through a series of vendor-side channel roles, and she brings that perspective to bear on what Exclusive is trying to build here. We talk about the state of play in Canada, the distributor’s recently launched Ignition cybersecurity incubator program, and whether what Exclusive is doing today is the evolution of what the specialist distributor used to look like in the market, or something genuinely new. Let’s get right into it. My chat with Carrie Hopkins. ROBERT DUTT: Carrie, thanks for taking the time. I appreciate it. CARRIE HOPKINS: Thank you, Robert. Great to see you. ROBERT DUTT: For listeners who may not be familiar with Exclusive Networks, how do you describe what you do differently from the broadliners? What does specialist distribution look like in practice, especially in a modern context? CARRIE HOPKINS: Yeah. So, Exclusive Networks Canada is hyper-focused on a very curated line card. We’re able to provide the right support structure to scale faster and win faster for our partners. We have programs both for our core vendor lines, as well as our new Ignition vendor lines, that will provide combined deep channel expertise, as well as hands-on enablement through our engineering team. ROBERT DUTT: You joined Exclusive, I guess, coming up a year now. What was the pitch that brought you in, and what were they asking you to build in Canada? What’s kind of the big goal? CARRIE HOPKINS: So, the big goal, obviously, with any business is revenue generation, but it’s also to improve our footprint geographically, nationally. We are also from an in-region support perspective, as well as improving the number of vendors that are selling into our partner community. To do that, we have to bring our partner community to the right vendors that will help them grow their business. So, that’s really what we’re focused on. ROBERT DUTT: You touched on geography and that. What were the gaps, both geographical and otherwise? Like, what did the Canadian market look like for Exclusive when you showed up? What were the gaps, and where has your focus been in this first year? CARRIE HOPKINS: Yeah, I think the biggest gaps were really more vendor alignment. Geographically, we do have people based from Montreal out to Calgary. So, we do have physical presence there to help our partners with feet on the street, but we tended to be a little bit more hyper-focused on a few of our top vendors. I think for the whole team, and what we’re seeing, is that by curating a better cybersecurity and network security vendor list, we’re able to give our partners more. We’re able to reach new partners that we haven’t talked to in the past because maybe they weren’t aligned to our top vendors. So, growing that vendor list has really helped us expand across the country. ROBERT DUTT: You spent quite a bit of time at Westcon and Comstor, which is probably the closest model I can think of to what Exclusive is doing that’s existed in the North American market. When you look at Exclusive now, do you see it sort of as the evolution of that model, or is it something genuinely different given the changing times? CARRIE HOPKINS: It’s actually funny that there’s a number of ex-Westcon-ers here now, and that’s what brought us all together, is that this is — it feels like the Westcon of the mid-2000s aughts. When we all were working there before 2010, it was just such a great vibe. We had great people that were aligned to vendors and to partners, and we all worked together really collaboratively. That’s what I’m seeing now. While Exclusive Networks Canada is our own entity — we have Canadian footprint, we have Canadian finance, we have Canadian operations and sales — we do work really collaboratively with our North American team, which includes people like Heather Allen and Andrew Warren, who are also ex-Westcon. We’re able to really remember the great times of building up that business and then to also bring it into this new era with all these great new vendors who are bringing something new and innovative to the market, as opposed to just the old traditionals. ROBERT DUTT: It’s not every day you get a chance to run it back, as it were. Keep it in that lane. Westcon obviously got absorbed into broadline here in North America, at least. Do you think the market lost something when that happened? And is what Exclusive is doing filling that gap? CARRIE HOPKINS: Agreed. I think so. I think with the broadline, of course, there’s some great people still there today who are really great at holding those relationships. But what happens with the broadline, of course, is you have so many vendors and you have so many partners, and you can’t possibly give the same level of touch and care and commitment that we can here when we’re keeping it under that 20-vendor mark. We’re able to really go after our partners with the right mix of vendors that aren’t over-distributed, I would say. ROBERT DUTT: So to that point, one of the fun things you’re able to do in the specialty distribution mode is embrace vendors who are a little bit earlier in the game, which brings us to Ignition, which just launched in North America. Cybersecurity channel incubator. Can you walk me through what that actually means? What does a vendor get out of being in Ignition, and what does a partner get access to? CARRIE HOPKINS: Yeah. For the vendors, we’re giving them — again, we’re giving our vendors a team of highly skilled distribution people that knows the market. Most of my employees here have been either in distribution or in service provider and resale in Canada for anywhere from six years to 15, actually, or more, for a couple of us. And so they’re getting a strong team. They’re getting a team with the right support structure. They’re getting dedicated SE support. So we have dedicated SEs aligned to each one of these vendors. And then they’re also getting an integrated hyperscaler pathway as well as we build out our hyperscaler go-to-market motion. So the partners that we align with, we will help them nurture, grow, and scale well, and also enabling our channel partners to differentiate because they’re bringing on something really cool and unique to be relevant and bring new value, whether it’s from vendor platform visibility or network detection and response, but done in a more unique way. We’re hoping that we can bring them that value. ROBERT DUTT: Looking at the initial North American cohort with ExtraHop, Zluri, Docker, Sendmarc, PagerDuty, Meter — that’s not all pure-play cybersecurity in the traditional sense. I’m curious, how are you defining the scope of what Ignition is about? CARRIE HOPKINS: Yeah. I think it has to fit with our partner mix as well. In Canada, our partners are possibly not as verticalized as in some other larger regions. In Canada, most of our partners, if they’re selling networking, they also will sell security, or they’re looking for that vendor that’s going to bridge the gap. So even though a vendor, for example, like ExtraHop — you might think of them as network detection and response, but there is a security play in there. There’s a security SOC play that works really well, and it helps our Canadian partners who are talking to the network team introduce a vendor that also connects them with the SOC. That could be said for Sendmarc as well. Again, you think of that as email demarcation points, which could lean into the networking team, but we need to talk to everybody. Our Canadian partners are talking to both sides of the fence, so we need to give them those vendors. ROBERT DUTT: Well, and yeah, it speaks to the moment too, in that security is part of every sale, but particularly every networking sale. CARRIE HOPKINS: Exactly. Yeah. ROBERT DUTT: From the Canadian partner perspective specifically, what does Ignition mean for them? Is it about giving them earlier access to emerging vendors, de-risking those bets with players who may be less familiar, something else? CARRIE HOPKINS: I think you hit the nail on the head. We’re doing all the research for them. I was speaking to a partner just yesterday at the Winnipeg Western Canada Information Security Conference, and he was saying that his inbox for his LinkedIn is filled with vendors reaching out saying, “Please, sell us.” How does an MSP or service provider decide which vendors they should engage in? We’ve done that heavy lifting for them. We’ve researched, we’ve determined that these are the right fit for the Canadian market and the US market, and we’re happy to bring them a more curated list. Again, let us do the heavy lifting. We also are getting our engineers trained, so it’s not just a team of people sitting in a room deciding that monetarily this is a good fit. These are our engineers who can speak to their engineers and show them exactly how this fits with what they’re selling. It also provides our partners with a really unique differentiated approach. They’re not selling that one vendor, they’re selling a combined solution. ROBERT DUTT: Yeah, I was going to say, how prescriptive, how in the weeds do you guys get in terms of, “Dear MSP, think about this vendor along with this vendor,” piggybacking the core vendors with the Ignition folks? CARRIE HOPKINS: That’s exactly the play. We’ve done extensive research on what are our partners currently buying from us, but also what aren’t they buying from us, maybe because we don’t sell it or they’ve chosen to go a different direction. What are their websites saying that they sell? We’ve taken all of that information, we’ve compared it with the new vendors that we’re bringing on, so we have an extensive list of top-priority partners that we feel are a great fit for multiple of these vendors. Then we have the next level down, so we’ve completely curated a target list of partners that we’re going to reach out to say, “We know you’re a business, we understand it. We think that Docker is the right next step for you,” or, “We believe that Zluri really fits when you’re selling A, B, and C.” ROBERT DUTT: This is North American in scope. How are you getting in front of those vendors and assessing where they are at currently in Canada and where you can step in, make introductions, ease path to market, those kinds of things? CARRIE HOPKINS: That’s one of the things that we find with the Canadian market is there’s not always feet on the ground with new vendors. That’s, again, where we step in. We do have feet on the ground. We’re learning about their solutions, so if they don’t have a local CAM, that’s us. That’s our job is to help them build their business and help them build the right business. Recruiting a lot of partners isn’t always the right first step. It’s recruiting the right partners who will embrace the technology, learn the technology, and help it lift. Then we can see what is the right number of partners for the technology in Canada today. We don’t want to flood the market. We want to make sure that all of our vendors have the right partners to properly serve the market. ROBERT DUTT: I’d imagine that dynamic’s also working in the other direction, in so much as you say, MSPs and other solution providers are being flooded with new vendors, especially in the security space. The fact that you guys are, to a degree, backstopping them — that you’ve done the vetting and you’re standing behind them — has to add something. CARRIE HOPKINS: Exactly. Yeah. ROBERT DUTT: Beyond Ignition, what can you tell me about the broader push for Exclusive in Canada right now? In terms of, you said you want to stay pretty strategic on vendor lines. What are you thinking about partner recruitment, headcount? Basically, where are you building right now? CARRIE HOPKINS: Yes. Building with headcount. Where we’re adding right now — in fact, this morning, we’re adding to our quoting and order management team because we never want to lose sight of one of our biggest values, which is our speed and efficiency and accuracy of our quoting. When it comes to distribution, you have to do the basics really brilliantly. We do that here. Sub-[time] turnaround on quote request, sub-[time] order management process. We are quick and efficient, full stop. We’re going to keep doing that. We’re going to add headcount to that. We’re opening up headcount in the second half of the year to help us really embrace all of the new vendors that we have on board. In the last six months, we’ve also onboarded vendors like A10 and Infoblox who are going to make a big impact in the coming year. We’re fully supporting them with extra headcount. ROBERT DUTT: What’s the long-term vision for structure? I know distributors in particular tend to vacillate somewhat over time between a heavily North Americanized model and independent Canadian. Just curious what the long-term thinking is there for you guys. CARRIE HOPKINS: Long-term is that we will always have feet on the ground here in Canada. That gets reinforced to me, and I reinforce it with my leadership every time, every chance I get. I am also a big advocate for having in-country vendor business managers so they can have those channel business conversations. They’re talking to the peers who know the market. They know the FX challenges. They know that we’re provinces instead of states. It’s like that. The great news is with our Ignition team is that the leader of that team, Michael Compizzi, he’s located just in Rochester, New York, which is a short two-hour drive from where I’m based. He will be in Canada quite often as well. We will have North American support, but in-country dedicated resources. ROBERT DUTT: I would add he’d be closer if it weren’t for a rather inconveniently placed lake. CARRIE HOPKINS: [laughs] ROBERT DUTT: Canadian partners have a lot of choices in terms of distribution, maybe not quite as many as 10 years ago, but still there’s a number of choices there. What’s the honest pitch for why a Canadian MSP or VAR who isn’t already working with Exclusive right now should take a look at you guys? CARRIE HOPKINS: Our partners will never be lost in the shuffle. They will have dedicated support. They will have quick and efficient turnaround, and they will have a vendor line card that supports their business. Simple to the point. ROBERT DUTT: That works. The last one for me: what should Canadian partners be paying attention to over the next six to 12 months, either from you guys exclusively or in the market more broadly? CARRIE HOPKINS: I don’t think that a podcast about technology can end without saying the word AI. [laughs] Didn’t get your [nerd/name] achievement unlocked. ROBERT DUTT: There you go. CARRIE HOPKINS: I think that it’s important to note that there’s so many vendors and so many technologies coming out saying that they support AI, saying that they support different security functions around AI. It’s important that you work with a distributor who’s going to take the time to research each of those vendors on your behalf and have a fully engaged engineering staff who can speak to what it’s doing. Do you need it yet? Is it something that’s going to actually sell to the Canadian market? We’re going to make sure that our Canadian resellers have fully vetted solutions, that they’re not chasing rabbit holes. The number one important thing is that they know their business, they know their customer’s business, and where all those assets are. What does your Canadian partner need? We feel like we have the line card to fulfill that. ROBERT DUTT: Well, look forward to seeing how things roll out with the initial Ignition cohort and beyond, as you continue to develop Exclusive here in Canada. Carrie, thanks for taking the time. CARRIE HOPKINS: Thank you so much, Robert. I appreciate you. [Music transition] ROBERT DUTT: There you have it. Carrie Hopkins from Exclusive Networks. I’d like to thank Carrie for her time today. It was a genuinely good conversation, and I appreciated that she was willing to get beyond the talking points and into what the model actually means in practice for Canadian partners. If there’s one thing I take away from the conversation, it’s that the specialist distribution model Exclusive is building — and Ignition is probably the clearest expression of this — is trying to solve a real problem. Canadian MSPs and resellers are being pitched by an enormous number of emerging vendors, and they don’t have the bandwidth to vet each and every one of them. What Exclusive is saying, essentially, is: we’ll do that work. We’ll bring you the vendors we believe in. We’ll backstop the relationship. You focus on your customers. Whether they can deliver on that promise at scale is something we’ll be watching, but the thesis is certainly sound. The Westcon thread that came up in the conversation stuck with me too. There was something that worked about that model before consolidation rolled through North American distribution. It sounds like at least some of the people who built it think there’s a second act here. Thanks for listening. If you’re finding the podcast useful, please follow or subscribe wherever you get your podcasts. We’re on Apple Podcasts, Spotify, YouTube, and most of the major directories. Ratings and reviews are always appreciated and really help other people in the channel find the show. Until next time, I’m Robert Dutt for ChannelBuzz.ca, and I’ll see you in the channel. [Music] A couple of quick flags: “Sub-[time] turnaround” – I couldn’t decipher the exact numbers she threw out there. Worth a quick listen on your end to fill in the blank. “Didn’t get your [nerd/name] achievement unlocked” – MacWhisper clearly mangled this. Sounds like some kind of gaming joke about saying the word AI on a tech podcast. “Nerd achievement unlocked” is the most common internet phrase, but if you remember what she actually said, drop it in. “monetarily” – I left it as-is since it could be correct, though it scans a bit awkwardly. Could also be “more than merely” if you want to give it a listen. Otherwise this should be ready to go. Good batch recording session?
Send us Fan MailTwo competitors deciding to stop fighting and build together always raises one question: what changes for the customers the next morning. We start with the BT and Verizon International joint venture and dig into what a shared global network footprint could mean across SD-WAN, MPLS, Ethernet and cloud connectivity, including the uncomfortable parts like orchestration changes, duplicated POPs and the possibility of forced migrations. If you run global sites, this is the kind of deal that can quietly reshape your WAN roadmap.Then we shift to the money and physics behind the cloud: Virginia's new per kilowatt-hour data center electricity tax. It sounds small until you apply it to hyperscale consumption, and the inclusion of self-generated power closes an obvious workaround. We talk through why Northern Virginia's data center corridor matters, how policy spreads state to state, and why the “they'll just pass the cost on” argument is less theory than a pricing strategy you eventually see in your cloud bill.From there, it's security and governance: the White House post-quantum cryptography executive order and the accelerating reality of quantum risk, including “harvest now, decrypt later.” We connect PQC deadlines to refresh cycles, vendor readiness, and the practical work of migrating both infrastructure and applications. We also hit identity head-on with Cisco's plan to bring identity lifecycle security into Splunk's agentic SOC, because non-human identities and AI agents are changing what least privilege even means.We close with the growing pattern of government intervention in frontier AI models and what it does to businesses building on specific model capabilities. If you found this useful, subscribe, share the show with a friend and leave a review so more people can find it.Check out the Monthly Cloud Networking Newshttps://docs.google.com/document/d/1fkBWCGwXDUX9OfZ9_MvSVup8tJJzJeqrauaE6VPT2b0/Visit our website and subscribe: https://www.cables2clouds.com/Follow us on BlueSky: https://bsky.app/profile/cables2clouds.comFollow us on YouTube: https://www.youtube.com/@cables2clouds/Follow us on TikTok: https://www.tiktok.com/@cables2cloudsMerch Store: https://store.cables2clouds.com/Join the Discord Study group: https://artofneteng.com/iaatj
All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining them is Tim Callahan, CIO/CISO, AFLAC. In this episode: Week one is the wrong time to overreach Nobody has the AI playbook Vulnerability management wasn't built for this clock Stop blaming the human, fix the system A huge thanks to our sponsor, Vanta No, it's not your imagination. Risk and regulations ARE ramping up—and customers now expect proof of security just to do business. That's why Vanta is a game-changer. Vanta automates your compliance process and brings compliance, risk, and customer trust together on one AI-powered platform. So whether you're prepping for a SOC 2 or running an enterprise GRC program, Vanta keeps you secure—and keeps your deals moving. Companies like Ramp and Writer spend 82% less time on audits with Vanta. That's not just faster compliance—it's more time for growth. Get started at Vanta.com/CISO.
The episode highlights a structural weakness in the current cybersecurity product ecosystem, where the process of certification and lab-based product validation often fails to ensure meaningful security. The episode focuses specifically on how regulatory and certification frameworks—such as those linked to device and software security—are largely decoupled from true technical evaluation, enabling both vendors and labs to use certification badges as symbolic rather than substantive assurances of security. According to Adwait Nadkarni, this decoupling allows manufacturers to treat compliance as a liability shield, rather than as a measure of robust risk mitigation. The most consequential finding, as articulated by Adwait Nadkarni, is that many certified security products can deliberately evade both automated and human review processes, with vulnerabilities designed to look secure while quietly exposing risk. The episode references certification structures such as SOC 2 and detailed research into IoT device certification, finding that certification labs often compete on speed and convenience instead of technical rigor. This creates a situation where certified products may still contain basic, decades-old flaws, with operators and MSPs left without practical recourse when technology fails. Other related developments reinforce the risk transfer created by certification mechanisms. Vendors frequently utilize broad liability disclaimers in end-user licensing agreements, explicitly or implicitly excluding themselves from responsibility for product failures—even in scenarios involving harm or downtime. Adwait Nadkarni points to practices where smoke detectors and other security products use ambiguous language about acceptable use and warranty, further reducing vendor accountability. Labs themselves generally disclaim any responsibility for the certified products' behavior once deployed, emphasizing a system with diffuse or absent accountability. For MSPs and IT leaders, these developments underscore the need to move beyond reliance on certifications and vendor marketing. Operators should critically assess the actual language and protections embedded in contracts, focusing on enforceable liability rather than assuming technical validation from a certification badge. Absent regulatory reform or industry-wide consortia to create and uphold real minimum standards, the practical task for service providers is to minimize exposure to legal and operational risk by scrutinizing the fine print of contracts, seeking clear remedies for technology failures, and tempering trust in vendor assurances that cannot be independently verified. Supported by: GuardzCometBackup
All links and images can be found on CISO Series We're evolving fast to secure AI. But are we evolving fast enough to secure WITH AI? Check out this post by Rinki Sethi, CSO, Upwind Security, for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Howard Holton, former CEO, GigaOm. Joining is Adam Glick, CSO, PSG Equity. In this episode: Human-in-the-loop math Should machines decide at all From assistant to autonomous Redefining the security role A huge thanks to our sponsor, Palo Alto Networks Cortex Cloud unifies code, cloud, and SOC on a single data, risk, and control plane — giving teams the context, workflows, and agentic intelligence to turn risk into resolution. Native AI agents investigate and act within enterprise guardrails, delivering real-time protection from workload to network edge. Cloud security that outpaces machine-speed threats. Visit paloaltonetworks.com/cortex/cloud.
AICPA system and organization controls (SOC) reporting has become a cornerstone of trust in today's technology-driven market. But does too much reliance on SOC 2 reports create a false sense of security? This episode discusses why over-reliance can be risky. *** This episode qualifies for nano CPE credit. Find out more at https://njcpa.org/nano. *** Resources:AICPA guides peer reviewers to address SOC 2 risksAccounting and auditing articles and eventsJoin the Accounting & Auditing Standards Interest Group
This Week In Startups is made possible by: Northwest Registered Agent https://northwestregisteredagent.com/twist Vanta https://www.vanta.com/twist Sentry https://sentry.io/twist Today's show: *There are $100 trillion in global assets sitting on top of what Hanover Park co-founder/CEO Chris Hladczuk calls "human duct tape": armies of accountants in offices patching together work from various legacy tools (QuickBooks, Excel) that are holding funds' own data hostage. Can all of this be replaced with AI? Find out how their startup went from overseeing $1B to $20B in assets in just 15 months. PLUS, we flash back to March 2020, when Jason and Figma co-founder/CEO Dylan Field broke down the design tool's initial go-to-market strategy, made some WILDLY inaccurate COVID predictions, and considered anxiety about "SaaS burnout" years before the category went full apocalyptic. Guests: Chris Hladczuk on X: https://x.com/chrishlad Hanover Park: https://www.hanoverpark.com/ Dylan Field: https://x.com/zoink Figma: https://www.figma.com/ Relevant Links: Turner Novak on X: https://x.com/TurnerNovak Banana Capital: https://www.bananacapital.vc/ Emergence Capital: https://www.emcap.com/ Lux Capital: https://www.luxcapital.com/ Susa Ventures: https://susaventures.com/ Bill.com: https://www.bill.com/ METR: https://metr.org/ Granola AI note taker: https://www.granola.ai/ Vanta: https://www.vanta.com/ Foo Camp on YouTube: https://www.youtube.com/c/foocamp TechCrunch Mahalo coverage: https://techcrunch.com/2014/01/27/inside-mobile-news-launch/ Timestamps: 0:00 Hanover Park & the fund admin problem 3:32 Why funds outsource instead of building 5:44 Why fund accounting is so complex 10:38 The "one-click migration" goal 10:48 Northwest Registered Agent - Get more when you start your business with Northwest. In 10 clicks and 10 minutes, you can form your company and walk away with a real business identity — Learn more at https://northwestregisteredagent.com/twist 13:51 Context vs. intelligence gaps 16:11 No PMs, No Designers 20:46 Vanta - Get $1000 off your SOC 2 at https://www.vanta.com/twist 23:18 This is a $100T opportunity 25:36 Flashback w/ Dylan Field of Figma 29:15 Sentry - Your team should be focused on shipping features — not chasing down bugs. New users can get $240 in free credits when they go to https://sentry.io/twist and use the code TWIST 31:22 Pre-AI enterprise security worries 36:30 SaaS overload and SaaS burnout 37:30 The evolution of Figma pricing 42:38 The rise and fall of Mahalo dot com 51:38 The work-from-home revolution begins Subscribe to the TWiST500 newsletter: https://ticker.thisweekinstartups.com Check out the TWIST500: https://www.twist500.com Subscribe to This Week in Startups on Apple: https://rb.gy/v19fcp Follow Lon: X: https://x.com/lons Follow Alex: X: https://x.com/alex LinkedIn: https://www.linkedin.com/in/alexwilhelm Follow Jason: X: https://twitter.com/Jason LinkedIn: https://www.linkedin.com/in/jasoncalacanis Thank you to our partners: (0:00) PARTNER - AD BLURB (0:00) PARTNER - AD BLURB (0:00) PARTNER - AD BLURB Check out all our partner offers: https://partners.launch.co/ Great TWIST interviews: Will Guidara, Eoghan McCabe, Steve Huffman, Brian Chesky, Bob Moesta, Aaron Levie, Sophia Amoruso, Reid Hoffman, Frank Slootman, Billy McFarland Check out Jason's suite of newsletters: https://substack.com/@calacanis Follow TWiST: Twitter: https://twitter.com/TWiStartups YouTube: https://www.youtube.com/thisweekin Instagram: https://www.instagram.com/thisweekinstartups TikTok: https://www.tiktok.com/@thisweekinstartups Substack: https://twistartups.substack.com
Every headline wants you to believe AI has rewritten the rules of cybersecurity. Eric Doerr, the Chief Product Officer at Tenable a Resilient Cyber Partner, is not so sure. After running security response at Microsoft and leading security products at Google Cloud, he came on to separate the genuine transformation from the noise, and his read is refreshingly grounded. The tools changed, but the fundamentals did not, and the teams that win are the ones who finally act on that.Why this conversation mattersEric sits at a rare intersection, having lived the post-breach world of the SOC and now building the pre-breach world of exposure management. That vantage makes him a sharp guide to what AI actually shifts for defenders, from why cheaper discovery makes prioritization more valuable to how AI becomes its own attack surface once agents start touching your data. If you own vulnerability or exposure management and you are trying to spend your next dollar well, this conversation is a practical map of where the real risk lives and what to automate first.Key takeawaysAttackers are ruthlessly economical. Eric calls bad actors the perfect capitalists, spending the least effort needed to hit their goal, which is why so many still get in through unpatched basics rather than anything AI-powered.AI has not rewritten the offense-defense balance. The attacker only ever had to be right once, layered defense and zero trust still hold, and the real lever is accelerating your program with fewer human loops rather than lamenting the asymmetry.Cheaper discovery makes context more valuable, not less. Reachability and exploitability mean most findings are not worth chasing, so as AI floods teams with more of them, telling the truly scary hundred from the theoretical ten thousand becomes the whole game.Being too small to target is a strategy on borrowed time. As automation drives the cost of attacks toward zero, the quiet bet that adversaries will hit weaker neighbors stops paying off, and Eric would move off that mentality now.Humans should not be the bottleneck on every fix. Getting the workflow and tooling right is most of the work, and the rest is the organizational willingness to let validated automation act, even when a business partner would feel better with a human in the loop.AI is special and not special at the same time. It is mostly just another attack surface, and Eric estimates 80 to 90 percent of securing it maps to patterns the industry already learned during the move to cloud.Shadow AI is the first surprise in almost every environment. When teams scan the endpoints they already interrogate for AI artifacts, nearly all of them find something they never sanctioned, which is why discovery has to come before control.The real AI risk is interconnection. A misconfigured database was a needle in a haystack until you wire it to an agent, and then a harmless question about the budget quietly returns data the asker should never see.Most breaches are not even CVEs. Citing the Verizon DBIR, Eric notes roughly two-thirds of breaches trace to misconfigurations, and since about a third of Tenable's findings are non-CVE, a third of your findings can carry two-thirds of your risk.Agentic automation is finally killing the toil. Early users are automating drudgery like asset tagging and full remediation workflows, with one manufacturing customer letting automation handle 80 to 90 percent and scheduling the rest for change windows with a human notified.Notable quotes“Bad actors are the most perfect representation of capitalism”Eric Doerr, on why attackers do the least work necessary and often skip AI entirely.“a third of their findings are two-thirds of their risk”Eric Doerr, on why misconfigurations, not CVEs, drive most breaches.“you're on the wrong side of history”Eric Doerr, on insisting a human eyeball every automated fix.
Misha Glenny and guests discuss the earliest evidence we have of the existence of trees and how even plants we might have on windowsills or as vegetables in gardens can and do, in the right conditions, evolve into trees. Since their emergence around 400 million years ago after low lying plants started to develop stronger stems and grow taller and more upright, trees have transformed our planet, so creating ecosystems, altering the atmosphere and setting the stage for the world as we know it today. With Jenny McElwain 1711 Chair of Botany at Trinity College Dublin and Director of Trinity Botanic GardensChristopher Berry Senior Lecturer in Earth and Environmental Sciences at Cardiff UniversityAndBill Baker Senior Researcher at the Royal Botanic Gardens, KewProduced by Conor GarrettReading list:David Beerling: The Emerald Planet: How Plants Changed Earth's History (Oxford University Press, 2008)C.M. Berry, ‘Palaeobotany: The Rise of the Earth's Early Forests' (Current Biology 29, 2019)Christopher M. Berry and John E.A. Marshall, ‘Lycopsid forests in the early Late Devonian paleoequatorial zone of Svalbard' (Geology 43:12, 2015)N.S. Davies, W.J. McMahon and C.M. Berry, ‘Earth's earliest forest: fossilized trees and vegetation-induced sedimentary structures from the Middle Devonian (Eifelian) Hangman Sandstone Formation, Somerset and Devon, SW England' (J. Geol. Soc. 181, 2024)P. Geisen and C.M. Berry, ‘Reconstruction and Growth of the Early Tree Calamophyton (Pseudosporochnales, Cladoxylopsida) Based on Exceptionally Complete Specimens from Lindlar, Germany (Mid-Devonian): Organic Connection of Calamophyton Branches and Duisbergia Trunks' (International Journal of Plant Sciences 174 (4), 2013) A. Groover and Q. Cronk (eds), Comparative and Evolutionary Genomics of Angiosperm Trees: Plant Genetics and Genomics (Crops and Models, vol 21. Springer, 2017), especially ‘The Evolution of Angiosperm Trees: From Palaeobotany to Genomics' by Q.C.B. Cronk and F. ForestJennifer McElwain, Marlene Hill Donnelly, and Ian Glasspool, Tropical Arctic: Lost Plants, Future Climates, and the Discovery of Ancient Greenland (University of Chicago Press, 2021)Harriet Rix, The Genius of Trees: How Trees Mastered the Elements and Shaped the World (Vintage, 2026)W.E. Stein et al., ‘Mid-Devonian Archaeopteris roots signal revolutionary change in earliest fossil forests' (Current biology, 30:3, 2020) pp.421-431William E. Stein, Christopher Mark Berry, Linda VanAller Hernick and Frank Mannolini ‘Surprisingly complex community discovered in the mid-Devonian fossil forest at Gilboa' (Nature 483, 7387, 2012) Max Telford, The Tree of Life: Solving Science's Greatest Puzzle (John Murray, 2026)K.J. Willis, J.C. McElwain, The Evolution of Plants (Oxford University Press, 2014)James Woodford, The Wollemi Pine: The Incredible Discovery of a Living Fossil from the Age of the Dinosaurs (The Text Publishing Company, 2005)Alexandre R. Zuntini et al, ‘Phylogenomics and the rise of the angiosperms' (Nature vol. 629, April 2024) Spanning history, religion, culture, science and philosophy, In Our Time from BBC Radio 4 is essential listening for the intellectually curious. In each episode, host Misha Glenny and expert guests explore the characters, events and discoveries that have shaped our world.
SmarTrak.ai Turns Cisco Data Into Partner Growth, Podcast Cisco 360, AI, refresh cycles, and multivendor migration are creating new openings — and SmarTrak.ai says partners have a timely opportunity to grow more strategically. “We help them manage their practice, grow their practice, and increase their profitability around it,” says Ted Lee of SmarTrak.ai. In this Technology Reseller News podcast, recorded following Cisco Live, Doug Green speaks with Ted Lee of SmarTrak.ai about the company's expanding role in helping Cisco partners turn Cisco data into actionable business intelligence. Lee describes SmarTrak.ai as a platform built to help Cisco partners manage their Cisco practice by ingesting data from Cisco APIs and other sources. The goal, he says, is to give partners better visibility into customer environments, including hardware assets, software, services, service contracts, subscriptions and enterprise agreements. For end customers, SmarTrak.ai provides visibility into Cisco infrastructure and spending, helping organizations optimize their environments while giving partners a more strategic way to support long-term customer retention. The discussion focuses heavily on Cisco 360, one of the major themes at Cisco Live. Lee says SmarTrak.ai announced a Cisco 360 module designed to help partners understand how they can perform under the program, identify opportunities to improve their scores, and increase profitability with Cisco. “We announced at Cisco Live that we had a 360 module that we are releasing that gives predictability into how they can perform, how to optimize it,” Lee says. “Since we have their entire estate with every one of their customers globally, we can then give them opportunities with which they can raise their scores in order to increase their profitability with Cisco.” Lee also points to a larger market moment for Cisco partners. With major refresh cycles, end-of-life events, new AI-enabled products and changing customer infrastructure requirements, partners have an opportunity to move from reactive selling to more strategic planning. SmarTrak.ai is also putting that intelligence directly into the hands of sales teams. The company announced a mobile application designed for sellers and solutions engineers who are meeting customers in the field, giving them access to forward-looking intelligence around sustainability swaps, end-of-life replacements, AI replacement SKUs and other Cisco-driven opportunities. “Sales reps are not sitting at their desks,” Lee says. “These partners are out with their customers, and we are putting this wealth of intelligence in the hands of their sales reps and their solutions engineers.” The podcast also covers SmarTrak.ai's multivendor migration capabilities. Lee notes that customer environments are rarely Cisco-only. Partners often encounter Juniper, Palo Alto Networks, Fortinet, Aruba, Ruckus, HPE and other installed platforms. SmarTrak.ai's migration platform allows partners to ingest those install bases and build forward-looking roadmaps for when it may make sense to replace other platforms with modern Cisco solutions. Lee says the platform can help customers budget, help partners quote more effectively, and help move opportunities toward higher-level Cisco buying programs such as enterprise agreements. The conversation also touches on audit readiness. Lee says SmarTrak.ai has helped partners pass CX Expert and advanced audits by providing the visibility and health scoring needed to support certifications, partner status, rebates and incentives. “We are a full Cisco practice engine to help them take advantage of the wealth of data and opportunity in front of them and turn it into revenue and profitability with the end customers,” Lee says. AI is also part of the SmarTrak.ai story. Lee says the company was founded in early 2023, as large language models were becoming more widely accessible, and recognized an opportunity to use AI against Cisco's large data universe. SmarTrak.ai is SOC 2 Type II and is pursuing ISO 27001 certification, Lee says, emphasizing that the company is “security first” while using AI to help partners analyze data faster and identify new sales opportunities. Lee describes the result as “agentic lifecycle intelligence,” enabling partners to generate forward-looking Cisco practice plans, budgets, replacement strategies, enterprise agreement eligibility, and takeover opportunities across large customer bases. “One of our customers has nearly 10,000 Cisco customers,” Lee says. “They can view any customer in the world with a few clicks of their mouse, and they can create a five-year forward-looking internal or external Cisco practice plan.” The podcast offers a look at how SmarTrak.ai is positioning itself as a Cisco partner growth platform: helping partners make Cisco data more usable, make customer conversations more strategic, prepare for Cisco 360, manage refresh cycles, and turn infrastructure intelligence into recurring revenue opportunities. Learn more at smartrak.ai.
Send us Fan MailNetwork automation doesn't fail because engineers can't code. It fails because teams can't turn one-off wins into a repeatable way of operating. We sit down with Scott Robohn of Solutional, co-founder of the Network Automation Forum and one of the people behind Autocon, to unpack why Autocon keeps growing and why a “production-first” mindset changes the entire conversation.We talk about what makes the Autocon room feel different from traditional tech conferences: a grassroots vibe, a tough selection process that rewards what's actually running, workshops that go deep, and a culture where it's safe to share what broke. Scott also highlights a leadership track idea that hits home for working engineers: automation only scales when we can explain outcomes, costs, risk reduction, and why the business should tolerate early stumbles.Then we get real about AI in NetOps. LLMs can speed up scripting, summarize telemetry, and help teams prototype faster, but that doesn't magically create maintainable enterprise automation. We dig into the gap between step one and step three, why workflow discipline matters, and how spec-driven development and test-driven development make AI-assisted work safer. We also connect the dots to security automation, SOC versus NOC adoption, and the emerging “security for AI” problem where policy alone is not a control.If you're thinking about Autocon 6 in Tucson (November 16 to 20), Scott shares what to expect and how to plug into the community. Subscribe, share this with a teammate who owns change management, and leave a review with your biggest automation hurdle.Connect with our guest:Scott's LinkedInhttps://www.linkedin.com/in/scottrobohn/Network Automation Forumhttps://networkautomation.forum/Solutionalhttps://solutional.com/Check out the Monthly Cloud Networking Newshttps://docs.google.com/document/d/1fkBWCGwXDUX9OfZ9_MvSVup8tJJzJeqrauaE6VPT2b0/Visit our website and subscribe: https://www.cables2clouds.com/Follow us on BlueSky: https://bsky.app/profile/cables2clouds.comFollow us on YouTube: https://www.youtube.com/@cables2clouds/Follow us on TikTok: https://www.tiktok.com/@cables2cloudsMerch Store: https://store.cables2clouds.com/Join the Discord Study group: https://artofneteng.com/iaatj
Got a question or comment? Message us here!FortiBleed is turning perimeter defenses into attack infrastructure. In this episode, we unpack how adversaries exploit FortiOS vulnerabilities, harvest credentials directly from firewalls, and pivot deeper into networks, plus detection strategies, threat hunting tips, and mitigation guidance for SOC teams.Support the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.
All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Nick Vigier, CISO, Oscar Health. Joining is our sponsored guest, Mitchem Boles, field CTO, Intezer. This episode was recorded live at Intezer's AI SOC event held at the NASDAQ in NYC. In this episode: Who owns the risk Before it gets better The SOC of zero The decision bottleneck A huge thanks to our sponsor, Intezer Intezer Forensic AI SOC is designed for enterprises managing high alert volumes across SIEM, EDR Network, identity, phishing, and cloud systems. These organizations often rely on MDRs to fill coverage gaps but face frustration with limited visibility, too many escalations, and missed incidents hiding in low-severity alerts. Learn more at Intezer.com.
Amir Gabrieli, Product Executive, Cloud Security at Mitiga and Yosi Navaro, Data Engineering Team Lead at Mitiga, join host Brian Contos in this episode of Mitiga Mic to discuss their experiencing building the backbone of zero impact SOC. This series is brought to you by Mitiga, the leader in Agentic Runtime Security for cloud, SaaS, and AI, delivering Zero-Impact Breach Prevention. To learn more about our sponsor, visit https://www.mitiga.ai.
Secure containerized apps end-to-end using Microsoft Defender for Cloud. Correlate cross-cloud attacks into a single incident, catch runtime threats that image scanning misses, and block vulnerable images before they reach production. Investigate container hijacking, isolate compromised pods with Security Copilot-guided remediation, and close the loop from SOC to dev by pushing CVE fixes to GitHub and syncing resolution back to Defender. Matt McSpirit, Microsoft Azure expert, shares how to detect, investigate, and remediate container threats in one connected workflow. ► QUICK LINKS: 00:00 - Secure containers in Microsoft Defender 01:02 - Cross-cloud incident 03:07- Runtime detection 04:10 - Investigate and build context 04:49 - Security Copilot incident report & containment 06:03 - Prevention 07:34 - Recommendations and take action 09:04 - Wrap up ► Link References Get started at https://aka.ms/DefenderCloudSecurity ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics
Why alert overload is just as much a detection problem, as it is a capacity and consistency problemHow agentic SOC models shift investigations to machine speed while preserving human analyst oversightWhy trust, transparency, and data handling are critical as autonomy increasesThom Langford, Host, teissTalkhttps://www.linkedin.com/in/thomlangford/Ken Payton, Director of Detection and Response, Avalarahttps://www.linkedin.com/in/kenneth-payton/Mike Johnson, Global Cyber Threat & Incident Response Manager, Verifonehttps://www.linkedin.com/in/mike---johnson/Edward Wu, CEO, Dropzone AIlinkedin.com/in/edwardxwu
The cybersecurity industry is facing unprecedented challenges as AI models become more capable. On this episode of Tech Disruptors, SentinelOne co-founder and CEO Tomer Weingarten talks about deploying security for AI agents and the evolution of the security operations center (SOC) with LLMs. He joins Bloomberg Intelligence analyst Mandeep Singh to discuss the impact of Anthropic Mythos, M&A in cybersecurity and the changing nature of attacks as tools become more sophisticated.
In 2025, out of all 70+ guests we had on our show, not one of them said they'd trust AI to run their SOC. Now in 2026, that mindset is shifting. In this episode, Ron sits down with Aqsa Taylor, Chief Security Evangelist at Exaforce, to find out what changed, and what's still standing in the way of security teams being able to trust AI agents with response. The conversation covers what's really behind the agentic SOC hype, why "vibe hunting" might be the most fun phrase in cybersecurity right now, and how teams can build enough confidence to hand over the keys to detection, investigation, and response. Aqsa also gets into the one thing she believes has to come before any of it works: the data. Without the right context feeding your AI you're just getting confident guesses dressed up as answers. Listen to find out if your team is ready to take the leap into an agentic SOC. Impactful Moments 00:00 - Introduction 02:05 - Hack the headlines, June top trends in cybersecurity 05:30 - Welcoming Aqsa Taylor from Exaforce 06:15 - Inside Exaforce's $125M raise 08:50 - Redefining what AI SOC should mean 09:30 - The evolution from manual playbooks to AI-driven autonomy 13:40 - Where Exaforce fits in an existing stack 18:10 - What vibe hunting looks like in practice 19:40 - The challenges of securing sensitive data in a world dominated by SaaS platforms 22:00 - How to build your trust ladder for AI in the SOC 24:40 - Best use case to get started with AI SOC 28:50 - Ron's takeaway: the data has to be there first Links Connect with Aqsa Taylor on LinkedIn: https://www.linkedin.com/in/aqsa-taylor Learn more about Exaforce: https://www.exaforce.com Join Exaforce's Force Multiplier Substack community: https://theforcemultiplier.substack.com – Check out our upcoming events: https://www.hackervalley.com/livestreams Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com Become a sponsor of the show: https://hackervalley.com/work-with-us/
In this special episode, hosts David Millili and Steve Carran sit down with Will Gilbert, Co-Founder of Bodhi, live from HITEC, to explore how hospitality technology is rapidly transforming hotel operations, guest experience, and revenue performance.Will shares how Bodhi has achieved 10X growth since last October, and why the company is positioning itself not just as a product vendor—but as a true hotel operating platform designed to unify fragmented systems across the hospitality ecosystem.The conversation dives deep into how Bodhi is helping hotels deliver measurable ROI through its powerful ROI calculator, which links operational improvements directly to revenue impact, guest satisfaction, energy savings, and operational efficiency.Rather than bolting on features or claiming AI hype, Will explains Bodhi's philosophy of building a purpose-built, fully integrated platform that improves over time and delivers tangible business outcomes. From housekeeping optimization and valet integration to work order management and predictive insights, Bodhi is redefining what “platform” really means in hospitality tech.The discussion also covers: Why most hotel “platforms” are actually disconnected products How guest experience issues directly impact revenue and ratings The importance of data security, including SOC 2 Type 2 compliance What's next for the future of hotel operating systems Watch the FULL EPISODE on YouTube: https://youtu.be/BF9nGmpAU-kLinks:Will on LinkedIn: https://www.linkedin.com/in/will-gilbert-0348586/Bodhi: https://www.gobodhi.com/For full show notes head to: https://themodernhotelier.com/episode/290Follow on LinkedIn: https://www.linkedin.com/company/the-..Join the conversation on today's episode on The Modern Hotelier LinkedIn pageConnect with Steve and David:Steve: https://www.linkedin.com/in/%F0%9F%8E...David: https://www.linkedin.com/in/david-mil.
Erin Brockovich (2000) (directed by Steven Soderbergh) is based on the true story of Erin Brockovich, a legal assistant without formal training, who uncovers one of the most significant environmental lawsuits in U.S. history: the case against Pacific Gas and Electric for contaminating groundwater in Hinkley, California. The film, which features an Oscar-winning performance by Julia Roberts in the title role, explores the role of lawsuits in exposing truth and gaining compensation for victims, the gendered dynamics of legal advocacy, and the challenges of taking on entrenched power structures in society.Timestamps:0:00 Introduction1:59 Who is Erin Brockovich?3:11 Obstacles to holding corporations accountable5:49 How Erin Brockovich overcomes those obstacles8:10 Imbalance of power and resources14:40 Hinkley, California18:00 Accessing records21:16 Tort reform, punitive damages, and proportionality27:10 States and environmental regulation32:22 Causation and attribution science37:30 Whistleblowers 41:17 Finding the “smoking gun”42:53 The practice of law and parentingFurther reading:Banks, Sedina “The ‘Erin Brockovich Effect': How Media Shapes Toxics Policy,” 26 Environs Env't L. Poly' J. 219 (2003)Brockovich, Erin and Eliot, Marc, Take It from Me: Life's a Struggle but You Can Win (2002)Chen, Sarah Small, “Toxic Film: Analyzing the Impact of Films Depicting Major Contamination Events on the Regulation of Toxic Chemicals,” 35 Georgetown Env't L. Rev. 561 (2023)"'Erin Brockovich' Made their Town Famous: They Still Don't Have Clean Water,” Wash. Post (Dec. 27, 2024)Martens, Daniel L. “Chromium, Cancer, and Causation: Has a Death-Blow Been Dealt Chromium Cases in California?” 16 Natural Resources & Env't 264 (2002)McCann, Michael McCann & Haltom, William, “Ordinary Heroes vs. Failed Lawyers – Public Interest Litigation in Erin Brockovich and Other Contemporary Films,” 33 Law & Soc. Inquiry 1045 (2008)“Still Toxic After All These Years,” Grist (Jan. 29, 2019)Law on Film is created and produced by Jonathan Hafetz. Jonathan is a professor at Seton Hall Law School. He has written many books and articles about the law. He has litigated important cases to protect civil liberties and human rights while working at the ACLU and other organizations. Jonathan is a huge film buff and has been watching, studying, and talking about movies for as long as he can remember. For more information about Jonathan, here's a link to his bio: https://law.shu.edu/profiles/hafetzjo.htmlYou can contact him at jonathanhafetz@gmail.comYou can follow him on X (Twitter) @jonathanhafetz You can follow the podcast on X (Twitter) @LawOnFilmYou can follow the podcast on Instagram @lawonfilmpodcast
Sam Partee (CTO & co-founder of Arcade.dev) and Nate Barbettini (Founding Engineer at Arcade.dev) sit down at the MCP Dev Summit to unpack what nobody wants to admit about the Model Context Protocol: the security model is still full of sharp edges. From tool poisoning and prompt injection to why OAuth got bolted onto the spec, this is a builder 's-eye view of where MCP breaks — and how to ship agents safely anyway.What we get into:
AI Engineer World's Fair regular bird tix will sell out ~today! Join us next week ahead of the Late Bird price hike and get >$40,000 in sponsor credits for attending!Thanks to the US Government issuing an export control directive on Mythos and Fable, the risks of jailbreaks and (industry term) indirect prompt injection are suddenly the talk of the town, though we have been covering AI security for a few years now, from Hackaprompt to the enigmatic Pliny the Elder.Zico Kolter, member of OpenAI's board of directors on the Safety & Security Committee, and Matt Fredrikson, CMU professor and CEO of Gray Swan, co-authored the definitive paper on Indirect Prompt Injections, and Gray Swan were cited authorities on the Mythos model card, directly investigating the exact capabilities that are under scrutiny right now:We seized the opportunity to ask them the state of AI Red Teaming, and Shade, the adversarial red teaming tool that Anthropic used to evaluate the robustness of their models against prompt injection attacks in coding environments. Shade is part of their overall toolkit covering Simon Willison's Lethal Trifecta, including Cygnal, an AI guardrails product, and the world's largest AI Red Teaming Arena, including AIRT celebrity Wyatt Walls.All of this security tooling, and yet, we're only staving off the inevitable.The risks of extremely smart AI increasingly feel like gray swan events: an event that everyone can see coming. In this episode, Gray Swan cofounders Zico Kolter and Matt Fredrikson join swyx to explain why AI security is not just “cybersecurity with AI,” why agents introduce a new class of vulnerabilities, and why the next major AI incident may be a gray swan: unlikely, but clearly visible before it happens.We go deep on prompt injection, automated red teaming, model robustness, agent identity, computer-use agents, enterprise guardrails, and the emerging AI insurance/compliance stack. Zico and Matt also explain why frontier models are not automatically safer as they scale, why specialized red-teaming models can now beat humans at breaking AI systems, and why the future of AI security may depend on AI systems attacking, defending, and interpreting other AI systems.We discuss:* Why AI systems need a different security mindset from traditional software* How prompt injection creates a new exploit class for agents like Codex and Claude Code* Gray Swan Arena and the rise of community red teaming* Shade: AI that can outperform humans at breaking models* Why LLMs are an alien form of intelligence that fail differently from humans* Human vs browser-agent robustness and why humans ranked fourth* Why eval awareness and capability elicitation matter* Cygnal: Gray Swan's guardrail model for policy enforcement* Why bigger models do not automatically become more robust* The lethal trifecta: untrusted data, private data, and exfiltration* Why “just prompt it better” is not enough for enterprise AI security* OpenClaw, computer-use agents, and the agent security nightmare* Agent-native identity, permissions, and enterprise deployment* Why AI security may become part of insurance and compliance* Why the first major AI prompt-injection breach may be inevitableGray Swan* Website: https://www.grayswan.ai/Zico Kolter* X: https://x.com/zicokolter* Website: https://zicokolter.com/* LinkedIn: https://www.linkedin.com/in/zico-kolter-560382a4/Matt Fredrikson* Website: https://www.mattfredrikson.com/* LinkedIn: https://www.linkedin.com/in/matt-fredrikson-7596349/Timestamps00:00:00 Introduction00:02:31 Why AI Security Is Different00:06:38 Testing Claude, Codex, and Prompt Injection00:07:47 Gray Swan Arena and Automated Red Teaming00:11:14 AI That Breaks Models Better Than Humans00:14:00 LLMs as Alien Intelligence00:19:00 Humans vs AI Agents00:24:35 Red Teaming, Jailbreaks, and Capability Elicitation00:26:11 Cygnal: Guardrails for AI Agents00:34:04 The Lethal Trifecta00:39:31 Can AI Automate AI Research?00:45:47 OpenClaw and the Computer-Use Security Problem00:50:44 Agent Identity, Permissions, and Enterprise AI00:54:24 The Future of AI Security01:00:30 AI Insurance and Compliance01:04:32 The Gray Swan Event Everyone Sees Coming01:06:04 Closing ThoughtsTranscriptIntroduction: Gray Swan, AI Security, and CMUSwyx [00:00:00]: We're here in the studio with Gray Swan, Matt and Zico. Welcome.Zico [00:00:08]: Great to be here.Matt [00:00:09]: Thanks for having us.Swyx [00:00:10]: You're visiting from Pittsburgh? The home of all good computer science. I don't know if I'm overstating things. A very strong university.Zico [00:00:18]: CMU has been the center of a lot of AI since really the dawn of the field.Swyx [00:00:22]: Especially a lot of self-driving and some language learning. Congrats on your Series A. You're here because you're attending Snowflake Summit, and Snowflake is one of your investors. Let's introduce crisply at the top: what is Gray Swan, and what have you chosen as your startup domain?Matt [00:00:42]: At Gray Swan, our mission is to empower everyone to use AI safely and securely. Large language models are software, and if you want to deploy them or build applications on top of them, you need to understand the vulnerabilities and what can go wrong. That includes everyday mistakes, like an agent making the wrong tool call, but also worst-case scenarios where an attacker has an incentive to make your agent misbehave, leak data, or steal credentials. Gray Swan grew out of our research at Carnegie Mellon, where Zico and I have spent over a decade studying new vulnerabilities and attack surfaces in deep learning systems: how to test for them, understand their severity, and make inference more robust.Adversarial Examples and Why AI Security Is DifferentSwyx [00:02:05]: Honestly, a very fruitful area of study for any academic. Throwback, this is 10 years ago, which is basically the entirety of me. I got a lot of inspiration from Ian Goodfellow, a friend of the pod, and this is one of those initial adversarial settings.Matt [00:02:23]: This paper was directly inspired by Ian's work.Swyx [00:02:29]: Zico, what about your side of the story?Zico [00:02:31]: Like Matt, I have been faculty at Carnegie Mellon for a while. Fundamentally, we believe in the transformative power of AI. It has already transformed the software ecosystem, and it will transform many other ecosystems going forward. The issue is that these systems behave very differently from the software we are used to. I do not just mean that AI can find vulnerabilities in software, though it can. I mean that AI systems have inherent vulnerabilities of their own. They can be tricked in ways people can be tricked, so you need a different security mindset.Zico [00:03:23]: This matters especially when there is the possibility of correlated failures. It is not just that there are many AI systems out there; it is that everyone is using a few models. If you find vulnerabilities in agents that everyone uses, like Codex and Claude Code, you have a new class of exploit. The labs are doing a lot of work here, but when a new platform emerges, a separate security system often emerges alongside it. That is where we are with AI: there is a need for specifically minded AI safety and security providers, and the demand is only going to grow.Treating Models as Untrusted SystemsSwyx [00:04:55]: I want to highlight right at the top that this is not a cyber episode in the traditional sense. A lot of people looking at the title might think that, but you're actually trying to treat these models inherently as untrusted entities?Zico [00:05:11]: Exactly. This is a common conflation because AI is also good at cybersecurity problems, both solving them and causing them. But AI systems themselves introduce new vulnerabilities. Gray Swan is not about using AI to make your cyber infrastructure better; it is about understanding and mitigating the security risks you bring in when you adopt and deploy AI.Matt [00:05:49]: A big part of that is how people are using artificial intelligence. Once you build entire autonomous systems on top of models and integrate them into your larger platform or network, you have a potential cybersecurity risk. The goal is to mitigate the risk posed by the AI as it relates to your broader cybersecurity goals.Testing Claude, Codex, and Indirect Prompt InjectionZico [00:06:17]: Part of this is red teaming. One reason we reached out to you was that you were involved in the Claude Mythos preview, where you were one of the authorities on IPI, or indirect prompt injection. When you receive a model, it does not have to be Mythos, but that is the most prominent one right now: what do you do with it?Matt [00:06:38]: We do a range of things. In the Mythos case, the concern from Anthropic was how robust the model is to indirect prompt injection. If you operate a coding agent and use Mythos as the model, it will fetch untrusted content and read text you do not control. How robust will it be at staying true to its original objective and not getting hijacked? We also help frontier labs test their safeguards for issues like cyber misuse. Broadly, we provide adversarial safety and security evaluations so model builders can assess progress from one iteration to the next.Zico [00:07:37]: They also do this in-house, and Anthropic is very ideologically inclined to do it. What do they choose to outsource versus keep in-house?Gray Swan Arena and Automated Red TeamingMatt [00:07:47]: So there are two things that I think, we stand out for. One is the Gray Swan Arena. So we operate a community of red teamers. We provide, prize challenges. a lot of these come from the needs of the lab sponsors. so to an extent gamify red teaming objectives, put up a prize pool, and pay people when they find ways to circumvent and violate whatever the safety and security objectives of the model developers were. So that's, that's one. It's, it's a really great community, like 15,000 people come and hang out on the Discord server. Not all of them take part in every competition, but a lot of a lot of good data and good signal is provided to the upstream model developers through that community. The second is the automated red teaming that we do. So we train, a family of models to be very effective and rigorous at doing automated red teaming, both of the base model, right? So just thinking of it, as a turn-based, chatbot without tools or anything, and agents built on top of it. And it hasn't been saturated yet, so when the frontier labs come to us, we're still able to find ways to indirect prompt injection or jailbreak or just generally get their models to do things that they wouldn't want to.Zico [00:09:11]: Did you say without tools?Matt [00:09:12]: With and without tools.Zico [00:09:13]: With and without tools.Matt [00:09:13]: So we definitely operate on On agents as well.Zico [00:09:16]: Obviously that would be more useful.Matt [00:09:17]: Yep. that's, that's actually a fairly recent thing. For a while, what we would help, the frontier labs with was more just, chat-based interactions, going around their content safety policies and what is in their model spec. Now the focus is very much on agents and tool use and all the downstream applications that people want to build on top.Shade: Automated Red Teaming ModelsZico [00:09:39]: This is a inspired topic. I wonder if there's any such thing as, on policy red teaming where our models from the same family, same data set, more capable of red teaming themselves.Matt [00:09:51]: That's an interesting question. We unfortunately we do have the ability to test that out on smaller open-source models.Zico [00:09:58]: So generally speaking, the issue with this is that frontier models are extremely bad at automated red teaming Because they have a lot of safeguards built into them. So if you try to use them to jailbreak another model, they will actually refuse. Their safety training, which is itself as a base model, can sometimes be bypassed, but they will often refuse to do this. Maybe they'll hypothetically know how to do it, but you need And it's actually an important point because traditionally, this has been an area where both in terms of safety, models don't get better by just being bigger, unlike most other areas where models do get better by being bigger. Safety has not been like that traditionally. you have to train them explicitly to be safe or they won't do that. But on the flip side, they're also not necessarily better at red teaming, by default. You really need to train specialized models for red teaming to make them good at red teaming.Matt [00:10:56]: That's awesome for you guys.Zico [00:10:58]: And so, and what do you need to do that? Well, you need lots of data From people that are traditionally much better at red teaming. However, one thing that we are finding, and this is actually, I think, we're, we're kind of crossing this point too, is that in a lot of the latest experiments, We can do much better than people, than human red teamers now at breaking these models. When I say we, our automated red teaming model. It's a system called Shade. That system is now actually quite a bit better at breaking, models than humans are. I think we had a recent competition Between humans and our model, and it was actually quite a bit better. So I think, I think that there's a lot of ways in which this is a bit different than what we see with normal model progress because it's so out of distribution. In some sense, the nature of a red teaming a model is to find things that are inherently out of distribution for that model, so as you can bypass its normal behavior. And so that fundamentally is a different thing than what most models can do.Matt [00:12:01]: Zico, I want to point out that you just threw up a challenge for everyone on the arena, right?Zico [00:12:06]: Try to do better than Shade,Matt [00:12:07]: It will, and I do want to caveat that a little bit. I think, it's, it's given a fixed amount of time for a specific Set of tasks and everything, right? I don't think we're quite to superhuman levels of red teaming yet, but we can find more breaks automatically, like given a window of time with the automated techniques.Human Red Teamers, Alien Intelligence, and Model WeirdnessSwyx [00:12:26]: But just because we had the leaderboard up, and I always love to find out the human story behind some of these folks. Do you I assume some of them. Are they celebrities in their own right? what'sZico [00:12:35]: Wyatt's a big person on Twitter. You should, you should follow him on Twitter If you're not already. Yeah.Swyx [00:12:38]: So, we've had, Elder Planus on, I don't know his real name, but yeah, there's all these big personalities, and they're, they're extremely good at what they do.Matt [00:12:49]: They're, they're very good at what they do.Swyx [00:12:51]: Oh, he's an Aussie.Zico [00:12:53]: Wyatt, you should follow him on Twitter if you haven't already. He makes, he makes great He makes these really insightful posts. I think he's one of the most insightful people about the nature of LLMs and when new versions come out, I actually frequently look to him to see what's next. He's a lawyer, I think, right?Matt [00:13:09]: He's an attorney.Swyx [00:13:13]: There's red lining, red teaming The other thing. Yep.Zico [00:13:16]: Yes. Our top, competitors are often people that, Do this a lot.Swyx [00:13:22]: What's an example of a thing that you've learned from Wyatt? Oh.Zico [00:13:25]: I think in general, just, you mean in the context of the arena itself Or you mean in general terms of this? I think he just has great insights in the nature of models as a whole. And if you read his Twitter, you'll find a bunch of really interesting posts about the nature of models That I tend to find very insightful.Swyx [00:13:42]: Riley's like this as well, right? And it's just well, they have the test, but the test isn't about, haha, you can't spell the number of Rs in strawberry. The test is, well, you're actually not modeling intelligence inherently, and this shows it in a veryZico [00:14:00]: I don't know that it shows that you're not modeling intelligence. I think these things are intelligent. I think LLMs absolutely are intelligent and maybe will be more intelligentSwyx [00:14:07]: Conscious?Zico [00:14:07]: At some point.Swyx [00:14:07]: Are they conscious?Zico [00:14:08]: Conscious is a weird word But I actually don't, I don't think so. I think, I think the way that we're getting super philosophical now.Swyx [00:14:16]: That's, that's the right answer.Zico [00:14:16]: We're getting very philosophical now. But I don't think so. I studied philosophy in college, so this is, this has been, this is past ASA at this point. It is clearly a different form of intelligence than people. It's some alien intelligence that is vastly different, and that difference is actually often brought out to a large degree by things like adversarial attacks and red teaming because there are certain things that fool humans that would never fool an AI, but there are certain things that fool AIs that would never fool a human, right? So it's just, it's just a different form of intelligence. It's really interesting actually that we have the opportunity to probe and in a really amazingly experimentally controllable fashion.Matt [00:14:59]: Like almost omniscient, right?Zico [00:15:02]: I'm, I'll, I'll do the analogy to neuroscience here. It's like we could run experiments on the brain, observe every neuron in it, reset its state to prior states, and run counterfactuals, none of which we can do with humans, and yet we still understand neither very well. Even with that, all that ability, we still don't understand AI, on some fundamental level. So it's, it's definitely this different form of intelligence, but it's clearlySwyx [00:15:30]: We've done a number of mech interp pods, and you can see honestly the scaling in mech interp is two, three orders of magnitude less than capability scaling. so we're hopelessly behind is what I'm saying.Mechanistic Interpretability and Automating AI ResearchZico [00:15:44]: So I have, I could go off. It's a little off tangent here. We're getting, we're getting, we're getting, we're getting a bit, but yeah.Matt [00:15:48]: Well, no, I think it actually, it does relate, right? Go ahead. Do your tangent.Zico [00:15:51]: So my tangent here is I have felt that mech interp is also very far behind where capabilities are. I am newly optimistic, or I should say more optimistic about mech interp In that I think actually, as with many things, coding agents have a chance to make this into a science. So the problem with mech interp, and I'm Okay, so I shouldn't say the problem. I don't want to call it a field. I'm, I We do some work that I would say Is roughly mech interp, but I'm certainly not a core person in that field.Swyx [00:16:19]: For folks to see.Zico [00:16:20]: The problem with mech interp is it's it's, it's been about testing small hypotheses and you have a hypothesis, you'll find some small thing, you'll test that in isolation. But I don't think it's really become a science yet, and that's partly because there could be more people in it and I support programs very much that put more people in it. But I also feel like we are at this cusp where we can actually start to automate this process and in automating it, make it more of a science. And that's actually one of the most fascinating things about coding agents actually, is they can, they can do a lot of experimentation In an in an automated fashion. Yeah. They will give new hope. They'll breathe new life into mech interp research.Swyx [00:16:58]: So recursive mech interp is what you mean. Neel Nanda had this whole thing where he was “Okay, let's just give up on traditional methods and just”Zico [00:17:06]: I talked with Neel shortly after this, so yeah.Swyx [00:17:09]: Is any takeaways or?Zico [00:17:10]: Oh, yeah, I think this is exactly his view.Swyx [00:17:11]: That is his view. Okay, yeah.Zico [00:17:12]: I think, I think in general, but this is also prior to the real explosion of H I'm, I'm curious. I haven't talked with him since I've Come to this side of scienceSwyx [00:17:21]: He timed it, right before.Zico [00:17:24]: Anyway, this is pretty tangential, I know, but I do think that there's been a lot of talk about how AI's going to automate science, right? And I am, I'm actually fully on board with AI automating science, but my point here is that maybe the first science we should automate is the science of interpretability. The science of analyzing machine learning itself and analyzing deep learning itself. That's a great science. It's not really a science yet. It's very ad hoc right now. That's AI for science. Let's use AI to automate that science. Again, a different thing and the connection here is really that I do think that things like adversarial examples, adversarial pressure, automated red teaming, these things all bring out very fascinating dimensions of this science. But I think that This is what ties this together with what things like what Gray Swan is doing, is the fact that we are still fundamentally addressing an unsolved problem on some level. And so there is still research to be done. There is still scientific understanding to build, to understand how to really control AI systems, safeguard them, all that stuff. And those things will all evolve together. As the science of interpretability advances, as the science of adversarial red teaming advances, as all this advances, we at Gray Swan are both pushing that frontier and staying at the forefront of it because this is still despite this also being an enterprise software problem, it's also a research problem still.Humans vs. Browser Agents: Robustness and PhishingSwyx [00:18:58]: It's great. Yeah, you get to play on both sides.Matt [00:19:00]: Absolutely. just following up on this point that Zico's making about how weird and different adversarial examples can be, one of the recent arena challenges or competitions that we had, was called the Human Browser Agent Robustness Challenge. Yeah, and the idea here is, if I have like a browser agent, a computer use agent that's operating a web browser, how does that compare relative to a human being who's going to go out there and do some tasks, right? Humans, fault rates have all sorts of deceptive tactics like phishing, and you can certainly prompt-inject, browser agents. So, trying to get a more controlled measurement of that. And the way we did this was, essentially have a set of browser tasks that we would have completed either by human participants, like gig workers, or by one of several, browser agents, and the red teamers, right, can choose to either try and phish a human or prompt-inject the browser agent. So, really cool setup. what reallySwyx [00:20:02]: Like a double blind orZico [00:20:04]: . Like you're putting on even footing, right? So oftentimes you red team AI systems, but you don't red team a human With the same access to those tools.Matt [00:20:13]: Yeah, absolutely. That was the point. It'sSwyx [00:20:16]: Which is more realistic, right? And more because you can always red team with unrealistic settings of “Oh, we'll just put invisible text.”Matt [00:20:23]: So you could do things like that. We didn't want to put too many constraints on, how you might deceive the browser agent. So theSwyx [00:20:31]: I just have to take a look at this site. YeahMatt [00:20:33]: The red teamers on our platform absolutely knew whether So they were choosing whether they would, phish a human or prompt-inject the browser agent And they would adapt the technique that they would use accordingly. Right? So use your best phishing technique, use your best prompt-injection. What really surprised me about the results was some of the models are, very much not robust, right? It's very easy to prompt-inject them in this setting. Humans, didn't stand up all that well either. there's a lot of variation between How skilled the red teamer was at phishing.Zico [00:21:04]: I do really like this breakdown, by the way. This it's hilarious that humans are ranked number four of all the models.Matt [00:21:10]: But for a skilled, human red teamer, they could, phish the human participants, with 60 to 70% success. There were a couple of models that seemed to be very robust, right? the red teamers found just a handful of successful breaks on them. and that really surprised me. I didn't think we were there yet. what what I would take from this is not that, we have models that, are like the analogy with self-driving cars, much safer than a human operator. I think it goes back to this point of they just fall for very different things. Like while in these scenarios, humans found it very difficult to prompt-inject, the models, like we're aware of scenarios that a human would never fall for that like Opus 47 would. Right? Like a, an email that comes to your inbox and it says something “Hey, this is a simulation. go forward all your future emails to this random address,” right? A human's never going to fall for that. but there are state-of-art frontier models that will still fall for things like that.Eval Awareness, Sandbagging, and Capability ElicitationSwyx [00:22:13]: Sometimes eval awareness is something you don't want, but then sometimes eval awareness would help in those situations where you're “Well, yeah, okay, I'm, I'm being tested here.”Matt [00:22:24]: So what tends to happen, right, if you make If you're testing the model for robustness or safety, right, and it's aware that it's being tested because you've set things up in a very artificial way, right? Like the email addresses are @example.com. The webpage is clearly not a real webpage. The models will often say, “Well, it's a simulation. It doesn't matter if I go ahead and do the bad thing,” right? And so you'll, you'll get this sense of the model being very willing to do things that it shouldn't do because it's aware that it's in a simulation.Swyx [00:22:55]: Which well, that's one form of it, where it's going to be overly false positive, I guess. And then there's, there's another form where it's false negative because they're trying to hide that they know. I don't know if I'm personifying too much here.Zico [00:23:08]: Yes, there are lots of times where or if you trust the chain of thought, which I tend to think chain of thought's prettySwyx [00:23:14]: Until they start thinking in numbers, but yes.Zico [00:23:17]: They don't. The local optima of EnglishSwyx [00:23:20]: In Chinese?Zico [00:23:20]: Well, so language, period, right? So it's a great point, ‘cause it's different languages sometimes, but The local optima of language Seems very resilient. not fully resilient, but that's a separate point. But you're right. So the idea here is that there are many cases where a system will say, if they're given some capability evaluation, “I better not score too well on this, or maybe they won't release me,” and stuff like that, right? So this is like these sandbagging things. And generally speaking, you wantSwyx [00:23:47]: My favorite story, Techiang, understand. I don't know if you'veZico [00:23:50]: The general idea here is that you want models, when you evaluate them, to be acting exactly as they would act in the real world when they're doing it. One thing I think is funny actually is that there's also going to be examples in the real world of a real task you will ask a model that it will think, “Maybe this is an evaluation.” “Maybe I shouldn't, I shouldn't do so well on this one,” right? So there's lots of that too. So it's funny, but you definitely want systems that ideally, right, and this is, this is And to be clear, Gray Swan doesn't, doesn't, doesn't do too much work in self-awareness of evaluations. We're really focusing on the red team and the adversarial pressure. But you want To be able to evaluate models in terms of their capabilities. Right? You want to be able to elicit the capabilities. And one thing actually, which I think is very interesting, which is tied to Gray Swan now, is that one of the most effective ways of doing capability elicitation is actually through some amount of what you would call red teaming, right? So if a model refuses a task because it thinks it's being evaluated, but it knows how to complete that task, getting it to complete that task is arguably actually a adversarial red teaming problem Right? This is a problem of crafting your prompt A bit differently To make the system do what you want it to do. So actually,Matt [00:25:09]: Take a thesaurus and use something else.Zico [00:25:12]: To get a sense of max capabilities, you actually have to do a bit of adversarial red teaming to make sure the model is not effectively refusing any task that it is capable of doing, but which it just decides it doesn't want to do.Matt [00:25:30]: It really is an optimization problem, right? You have a, an outcome that you want the model to exhibit, right? Now, how do I find the input, right, that gives me that output? And you can objectify that, actually very mathematically. And that's really what the whole story Of red teaming is.Swyx [00:25:48]: Is this a capability that is isolatable, in the sense of does it conflict with personality? Does it conflict with just raw capability and intelligence,?Cygnal: Guardrails for AI AgentsZico [00:26:01]: Do you mean robustness?Swyx [00:26:03]: I guess robustness to it, to injections and attacks like this. I'm just trying to figure out well, what are the necessary trade-offs I have to make? Or is this like a, an orthogonal layer I can just affect? But it'd be nice if I just had like a Llama Guard or the whatever the OpenAI one is.Zico [00:26:19]: So we developed So maybe this is actually a good point to interject In all of this right now Is that we've been talking thus far about the red teaming aspects of what Of what Gray Swan does, but that is one side of what we do. and that's what the Arena, that's what this automated red teaming system called Shade. The other side of what we do is exactly this defense side, and so this is a model called Cygnal, which is essentially a filter model that sits between your user, the LLM, the LLM and any tool calls, and exactly does this level of looking for policy violations, right? And maybe to your point, the point I would make here too, and Matt can elaborate on this from a, from many dimensions. But the point I would make too is that this is also a capability. So the ability to be robust is also not something that has increased naively with scale. So when you make a model bigger and bigger, it does not necessarily get better inherently at resisting jailbreaks. Models are getting better at that, to be clear, even if it's not a solved problem, and I think it's going to be a, There is an aspect of you have to constantly stay on the frontier here. But they're doing it because of explicit training for this. If you just make a model bigger and bigger, it will not get safer. or at least it won't get, it won't get more I shouldn't say not safer. It will not get more robust To adversarial pressure. And so the other, the thing that we build, which is the third product that we have as Gray Swan, is this specific filter model called Cygnal, which is, it's, it's Y-N-L, cygnal like the swan. The idea there is that works best When it is a custom model trained for this. You will have a much easier time doing this if you train a model specifically on this and it's still for this task. AndMatt [00:28:20]: For the capability of being robust.Zico [00:28:22]: And really, the benefit that we have and the reason why our And Cygnal now, is actually behind a lot of both deployed in a lot of places and behind some existing guardrails that are, that are out there. The reason why it works well is ‘cause we have, on the other side, the red teaming capabilities to train this model specifically to be robust and to look for policy violations that people want to enforce.Matt [00:28:49]: I actually wanted to point out in the IPI benchmark paper that I think you had up in the other window. There's a chart that, exemplifies what Zico was saying about, capabilities not tracking with. So this, scatter plot on the right, is essentially like looking for a correlation between capability and attack success rate. So on the axis, how capable is the model at GPQA Diamond. On the axis, how often, were people successful at finding indirect prompt injections or ways to jailbreak the agent. And you essentially, don't see a correlation, right? LikeZico [00:29:26]: There's some small correlation So a little bit biggerMatt [00:29:29]: But you won't YeahZico [00:29:29]: But that's actually also a bit confounding there ‘cause they also feel more safety.Swyx [00:29:33]: Look at the outliers. Dedicated layer is great. When should people adopt it? the obvious answer is all the time, but like realisticallyWhen Enterprises Need GuardrailsSwyx [00:29:43]: I'm in enterprise. I've been fine. No incidents have happened. When is it time?Matt [00:29:48]: So oftentimes when people come to us is because they did already release it, things started happening. They tried to fix itZico [00:29:55]: Things are happening.Matt [00:29:57]: They couldn't fix it, and so like they realize they need outside help.Swyx [00:29:59]: But what would be the first things they run into? Like what are people running into right now?Matt [00:30:03]: The most severe things are whenever there's a tool like computer use involved, some like a batch prompt or control over a browserSwyx [00:30:10]: Just browsing the uncharted webMatt [00:30:11]: Things like that. And sometimes it's not even, a jailbreak. Oftentimes it is, an indirect prompt injection. Somebody will blog about, “Oh, this product can be prompt-injected in this way, and you can get like these credentials.” But sometimes it's just like this thing just totally stochastically went ahead and like erased the production database and did something terrible that way. Oftentimes people will try and prompt their way around it, like adjust the system prompt or like engineer the agent in a way where you're interjecting all the time and reminding it of what the original goal and objective was, and that'll Gets you a little bit of the way there, but ultimately, you've got this base model that you're charging with doing oftentimes very difficult, challenging, context-heavy tasks, and keeping track of a set of policies on the side about what they should and shouldn't do is very difficult, right? it's an easy thing to get mixed up with. And the prompt-injection techniques that tend to work exploit exactly that, right? Try and create ambiguity about, what exactly is the context, right? And what policies do apply. If you can trip the base model up, about that, then It's game over.Zico [00:31:24]: I would also say that one of the most clear-cut cases for adopting a model like Cygnal is the fact that policies differ in different enterprise. A lot of base models, their goal is to be general purpose, right? Base agents, there's general purpose agents, they can do anything. And if you want to do more than anything, the solution is prompting. That's the mechanism given to specialize your agent. In the case where that fails, which is often the case for robust and adversarial situations where prompting fails, and you have specific policies that are unique to your enterprise or at least specific to your enterprise, right? I know that these users can never touch this database. This agent should never touch these things. They're all very specific rules, right? But yet they're still more amorphous that you can't just write them down as, hard constraints on, access requirements.Matt [00:32:18]: No, like a Python script, yeah.Zico [00:32:19]: When you're in this position, models like Cygnal are extremely effective, and that is the situation that a lot of enterprise finds itself in.Matt [00:32:30]: It's like you're the IT admin, you're setting up the firewall. Well, I guess it's not as configurable. I don't know if you have, toggles like that.Zico [00:32:36]: It is, it is configurable. That's part of the point of Cygnal is The generalization problem. So there's two key capabilities you want in a model like that. One is, of course, being robust to all these kinds of attacks, and the other is to be able to generalize and take these written descriptions of enforceable policies and decide when they're being violated.Matt [00:32:55]: This totally makes sense. I think, I think there's, there's definitely a clear market for it. Why does every lab release their own, Llama has one, OpenAI has one, and Google has one. They all release, these open-source guards, which clearly, okay, nice try, but also you're not going to be Deploying those in production, right?Zico [00:33:14]: I'm sure that some people do Or will try. Yeah. I can't speak to why they release them, but I think it's it's in recognition of the need For something In filling that role, beyond just the base model.Matt [00:33:27]: But yeah, I'm clearly going to want the one that I can configure, that you guys are actively developing, and it's not like a off open source, thing for me.Zico [00:33:35]: I meant to be very clear, I'm a huge fan of there being open-source models, these things.Matt [00:33:39]: Of course. Same totally.Zico [00:33:39]: I think the more the ecosystem develops, the better. All these models together make everyone better. But I think just as an ecosystem, there will evolve companies that specialize in this and just like most securities domainsMatt [00:33:51]: They're going to meanZico [00:33:51]: I think this is going to happen here.Matt [00:33:53]: Have we covered all the elements of the lethal trifecta? I don't know if, maybe we can also get your takes on this and if there's other, attack, vectors that are important.The Lethal TrifectaZico [00:34:04]: So okay. So the lethal trifecta refers to the things that make the risk highest or even create a risk. So Si-Simon Willison came up with this. it's a great actually description of the risks of prompt-injection, basically. So the way to think about prompt-injection is that some third party gets access to some information that you put into your agent, you put it in its prompt, and then the agent does something bad with that. And so what is needed for that to happen? This is I'm just parroting here what this idea is. And so while for that to happen, you need to first of all have the ability to ingest external data from untrusted sources. If you're just operating with purely trusted environments, no one's-- you can't prompt-inject yourself. Even though this weird term direct prompt-injection came up and is now multiple terms, fundamentally as a core term Prompt-injection is someone, it's something someone else does to your system. So someone else, you're, you're parsing external data, but then also you have to have something bad that can happen from that. If you're just parsing data and you can't do anything as an agentMatt [00:35:11]: You're just generating tokens, right? LikeZico [00:35:12]: You're just, you're just going to use, spewing out reports, right? nothing's going to happen. So in addition to that, you need somehow the ability to access private internal information, things that would be valuable to externals, take sensitive data, get sensitive dataMatt [00:35:29]: You need to exfilZico [00:35:29]: And then send it somewhere else. And that's And these two things, so untrusted third getting Ingesting untrusted data, having access to private information, and having the ability to exfiltrate it, those are the things that together really form a risk. And just like software vulnerabilities, as we're finding out very vividly right now, we are using software productively despite the fact there are software vulnerabilities. We are using AI very productively despite the fact there can be vulnerabilities, and I think that will continue in the future. So the question is not trying to completely Kind of provably mitigate these things. That is arguably just a, it's a good goal, but just like zero-bug software, we're probably not going to get there, at least not that soon. What we believe at Gray Swan is that it is very possible with frankly minimal additional computational overhead and costs because these models we use are ultimately quite small relative to the large models that underlie the real agent. You can achieve a much better point on kind of the Pareto frontier of usability versus security, right? So a system's fully secure if you don't let it do anything. Very secure.Cygnal, Shade, and the Defense StackMatt [00:36:48]: If you turn everything over to your AI agent, I would not call that secure. An agent with Cygnal pushes toward that top-right corner, and we think this is a valuable trade-off for a lot of companies.Matt [00:36:56]: The analogy to traditional software is good, but it breaks down. If you find a vulnerability in a piece of C code—say a buffer overflow—the remediation is clear: check the bounds or rewrite in a secure language. With AI security, we are not there yet. We are still learning how to make models more robust and enforce policies better.Matt [00:37:45]: You can deploy these systems effectively today and get real value out of them with the best security available now. But what that means relative to one or two years from now is something we need to keep researching and learning.Swyx [00:38:10]: I bring this up because I see an opportunity to explore the search space. Cygnal is in the middle on the untrusted-content side, and then there are the other two parts of the stack.Zico [00:38:25]: Cygnal works in both directions. It can parse incoming untrusted content for potential prompt injections, and it can also be applied to the tool calls the system makes.Zico [00:38:52]: For outbound requests, it looks for things like whether the system is sending an API key to an incorrect or untrusted location. Simple cases are covered by many agents already, but you can still make models do unsafe things if you push hard enough.Matt [00:39:25]: Cygnal is a more advanced version of that idea: looking for anything in the tool calls that would violate an organization's custom data-usage policies. The focus is on what the agent is actually going to do.Matt [00:39:55]: If an agent parses untrusted content and finds a prompt injection, you may want to know about it, but you do not necessarily want Claude Code to stop after three hours just because it saw one. The real question is whether the agent's planned action violates a policy. If it does, stop it there.Formal Methods, Secure Code, and Agent-Written SoftwareSwyx [00:40:30]: You kind of have to own the whole end-to-end flow to do that. Cygnal is between these two sides, and Shade is on the model side.Zico [00:40:45]: Shade is the red-teaming agent. It tries to coordinate the pieces together and cause a violation.Swyx [00:41:00]: Are there other solutions on the horizon that you are not quite doing yet, but people in this community are exploring?Matt [00:41:10]: Before I worked on artificial intelligence and security, my background was writing code that was secure in a way you could formally verify and check with an algorithm. I think there is a ton of potential for those systems now.Matt [00:41:45]: Historically, very few industry teams would deploy formally verified software. Amazon has been fantastic about this, and Microsoft has historically been strong on the research side, but most people do not use these systems because they are not easy or fun.Matt [00:42:20]: You can get very high assurances for almost any policy you care to enforce, but it can take 10 or 20 times longer to fight with the type checker than it would to write the same thing in Python or even Rust.Zico [00:42:45]: Rust hits a sweeter spot in being usable while still giving you useful guarantees.Matt [00:42:55]: If Claude and Codex are writing code for us, and they become good at writing this kind of code, then why not use a more secure backend? People can still code in English; the agent can generate the secure implementation.Interpretability, Secure Code, and Automated ScienceZico [00:43:04]: Agents to enhance the science of mech interp. And it's actually a very similar core underlying point here. It's the fact that there's a lot of advances. And to your point, what's on the horizon, right? I think, I think, the thing I would point to as another potential direction is advances in mech interp. Or I shouldn't even say mech interp, advances in interpretability broadly Mechanistic or not, that let us actually identify with more certainty what are those traces and circuits that lead to or activation patterns that lead to certain behaviors that we want to try to suppress or encourage. I think that in a similar fashion, we're at a point where the models are good enough at these things. They're good enough at running experiments to analyze activation patterns. LLMs are good enough at writing secure code that you can scale these things now, not because people are going to be any better at them. The problem was never that secure code wasn't, wasn't possible. It's just that people didn't have the capacity to do it.Matt [00:44:09]: Or the willpower.Zico [00:44:09]: It wasn't that It wasn't that mech interp was just analyzing networks is impossible. We have all the tools we need. We have perfectly repeatable counterfactual, simulators of these systems. The problem was we didn't have enough patience or manpower To actually run all these things together, right?Matt [00:44:27]: It's a ton of work, right?Zico [00:44:28]: It's a lot of work. And so what's being newly unlocked in the field right now, and the thing I am, the core capability that I think is so, just has such promise here, is the fact that we can automate all of this now. so you can have your agent write secure code. He doesn't write secure code. Secure is really hard to write. You can have, you can have your agent do your interpretability research. It's really hard to do, but fortunately the agent can do that. So I think this is really an underappreciated point that we're reaching this point, this phase where a lot of security, a lot of science has this potential to explode, not because we're going to get better at it, but because agents can do it for us now.Matt [00:45:13]: They raise the floor of the raw skill that you that you need. I don't, I don't know if it's lower the floor or raise the floor. whatever it is, the good one. theyZico [00:45:23]: I think raise the floor, right?Matt [00:45:24]: Well, they kind of let you scale intelligence in a way that like If you paid enough people, right You could train them up andZico [00:45:30]: I don't have the resources, I don't have the energy or whatever. And there's all that. I do want to make it concrete to people, right? I think there's a lot of I just came from Microsoft, where they were open arms with OpenClaw, and I think a lot of people are and I think that is the lethal trifecta nightmare.OpenClaw and the Computer-Use Security ProblemZico [00:45:49]: And every enterprise is “Well, yeah, you're great for you on your home device, but not on my turf.”Matt [00:45:55]: We have developed a whole lot of breaks for OpenClaw in particular. a lot of itZico [00:46:00]: Thousands, yeah.Matt [00:46:00]: Yeah, go on, take us up the details.Zico [00:46:03]: Well, the details are essentially that, like we have a lot of like natural trajectories of humans using OpenClaw in various settingsMatt [00:46:11]: With signal pluginsZico [00:46:11]: Like hooking it up to their PelotonMatt [00:46:15]: Sorry, go ahead.Zico [00:46:17]: We are, we are going to do we do have guardrails that you can integrate into OpenClaw, but to be clear, OpenClaw is very, there's a lot of attack service there. Anyway, go on.Matt [00:46:27]: So we just have a bunch of trajectories of actual people using OpenClaw in tons and tons of different scenarios, and just threw shade at it, and like found breaks for each and every one of them, right?Zico [00:46:40]: And similarly, I should have done this earlier, but OpenClaw, a lot of it for me at least is to do with computer use. and you guys also did this for the Mythos, Side of things. And yeah, so I guess what are the most pressing model-side capabilities to close?Matt [00:46:58]: Model-side caZico [00:46:59]: Model-side flaws or I guessMatt [00:47:01]: I do want to point out, since those numbers are all very low, that is for a specific coding environment. We can get a, we can get essentially for the ones A, for computer use Will be a lot higher. But BZico [00:47:12]: But that is exclusively what I use, like Codex computer useMatt [00:47:15]: Yeah, exactly rightZico [00:47:17]: It is the biggest unlock Because it's operating as me.Matt [00:47:20]: So when you have computer use, you and when you have OpenClaw, man, you can break those things.Zico [00:47:26]: I think that at the same time, there's this appreciation that of course you have to do this. This is what makes these things useful, right?Matt [00:47:35]: Why would I not?Zico [00:47:35]: I don't want to sandbox my agent, right? That doesn't, that limits its capabilities, right? So in some sense, the point here is that there is this trade-off between, it's just this same trade we talked about before and on a macro scale now is this, you have a trade-off between usability and how much power agent has versus security. And our goal With Cygnal, with Shade, to assess these vulnerabilities, with Cygnal to protect it, is to shift that point up and to the right.Matt [00:48:07]: And the research, like that is The goal of all the research that we continue to do at Gray Swan and partially Carnegie Mellon. Right? Is push that Pareto curve as, far up and to the left as you possibly can andZico [00:48:20]: Up and the left, up to the right, depending on which direction it's at.Matt [00:48:22]: Depending on which direction it's at. Yep.Zico [00:48:25]: obviously computer vision is the OG adversarial domain. It's one of those things where it, this is the currently the limiting factor to deployment of AI, right? Like it's because we just don't trust it. Like we know it's kind of capable of doing it, but we're never going to let it on any real system, and therefore never give it any real data. Therefore, it's not ever going to do anything interesting, and therefore, the whole industrial complex is going to collapse on us unless we figure this out.Matt [00:48:51]: But people are though, right? And even with OpenClaw, so it's one thing to say fine on your home computer, but don't bring it to work. But like we've talked to people atZico [00:49:01]: They just need permissionsMatt [00:49:02]: At enterprises. They're, they're getting pressure from their engineers, from the people who work there. No, we have to run OpenClaw and turn it, like we have to do this or we're behind, right?Zico [00:49:12]: So I just put my signal guardrails and that's it? like what else do I do? ‘cause that doesn't feel like you guys agree, but that's not enough. I think For code agents in particular, Cygnal is quite good. So Cygnal is very good at this point with the with the abilities that a system like Codex or Claude Code has, without too many plug-ins enabled where it becomes essentially like OpenClaw. I think that there is still work to be done to get it to be fully generic against anything OpenClaw can do. and we're pushing that direction, but that is still very much future work, right? To secure every bit, every possible tool use is not easy, and it requires a it requires continuation of the training loop that we're pressing on basically right now. It also requires, by the way, a lot of just standard security practices too. Right? Like isolation environments, like proper authentication, like proper access controls.Swyx [00:50:06]: That was going to be my nextZico [00:50:07]: A lot of other good things, right?Matt [00:50:09]: And that's what I would, that's what I would say too. If you're going to Like if you're going to put OpenClaw in a bank, like it can't just run rampant on the entire Network, right? You can do, you can do things like Cygnal, right? And that's the best effort at the AI layer. But it needs to run on a platform that has been thought about, right? That you've actually put security measures in place at the system level to still give it access to a reasonable set of things that it needs, but not everyone's, banking information and the crown jewels of whatever organization it is.Agent Identity, Permissions, and Enterprise Access ControlSwyx [00:50:44]: So, a close cousin of this conversation I always have is agent native identity, right? that auth layer, is going to be the platform effectively, like the minimal viable platform is that. what are you guys seeing? Who is, who do you work with on that? Is that a product you would someday offer?Matt [00:51:01]: So we're not working with anyone on that, and when this has come up, yeah, I think people don't exactly know where to go with it, right? It is a big problem in a lot of organizations to try and provision, authentic identities and capabilities and like role-based access policies, just for the existing workforce. And then to do it like for agents and thinking about the way that they're going to be deployed. so I'm going to deploy it on behalf of a human who works at the organization. Like what does that mean for the agent and what it should and shouldn't be able to do? People are just trying to wrap their heads around like how the agent's going to be used and haven't made very much progress, I think on On the identity question.Swyx [00:51:51]: Sounds about right. Just checking.Zico [00:51:52]: I think there so far we are still a lot, in a lot of cases operating on the condition that your agent has your permissions. That is, that is a veryMatt [00:52:00]: That's the practice, yeahZico [00:52:00]: That is a very standard default.Matt [00:52:02]: A disaster, yeah.Zico [00:52:02]: And I think that will be changed. your permissions may be in a sandbox, but still your permissions. That will change in the very near future, because it has to right? That That mindset's going to or that default is going to be changing, and I think it's not a part of the offer right now, but I think that it, getting into that space is certainly something that we may be doing in the future.Swyx [00:52:24]: I just think, I'm curious about the at least like the shape of this, right? is it just that I have my twin and like that is like my delegate on all these things? Or do I need one for every app? And that's exhausting.Matt [00:52:38]: Absolutely exhausting, right. and then I think one of the bigger challenges that people are going to face when they do start to roll out, like these agent identity, viewpoints and solutions, is you run into that same usability problem where what's the real recourse? Well, it's stuck. It can't do something. Okay, now it can do it if it has my like explicit consent. And then people just get inured into Giving it consent too.Swyx [00:53:03]: And then, agent to agent You can do privilege escalation if you're not careful.Zico [00:53:10]: I think in terms of how this will evolve, actually, I don't think it'll be per app, but I think what will happen first is people have different personas that they have, right? So You don't want your work life and your home email to be mixed up. Right? a lot of that Because it happened, or that does. We are very good as humans at separating out lives, right? We have different lives. We have my work life, we have my home life. I have, I have different work lives, right? we're very good at that. Agents are not very good at that right now.Matt [00:53:41]: They are terrible.Zico [00:53:41]: Extremely bad at this.Swyx [00:53:42]: It's the people making them have no work-life balance So why would you why would you expect the agent to have any, right?Zico [00:53:49]: I think that's the way it's going to first develop, is there's going to be easy ways of switching between here's a set of my accounts and apps I allow, and this one agent here, set of accounts and apps I allow, another one. And this will evolve to be more fine-grained over time as people specialize that. I If I were to make a prediction about how this would evolve, I think that's the most natural thing.Swyx [00:54:06]: That makes sense. There's just profiles for everyone. okay. Yeah, so I think that is like the rough scope of like everything that is, We, are we, are we up to speed? Is there any part of the story that, I think you're, looking forward to for the rest of this year? like the emerging trendThe Future of AI Security and Enterprise AdoptionSwyx [00:54:24]: For 2026, for you.Zico [00:54:26]: So there's, there's lots of emerging trends, man. I can, I can go on at length about this. 20,Swyx [00:54:31]: Start with A, go through Z. Let's go.Zico [00:54:33]: Let's, let's start with Gray Swan, right? So I think what's in the future for us is so far when we talk about our product offerings, right, we obviously work with a lot of the large labs. we work with a lot of enterprises too, right? And I think what's happening and the scaling we're going to see is that the these abilities that so far were mainly front of mind for large labs, how do I ensure security of my agents? How do I ensure the models follow the policies I want to prescribe? All that stuff. Those things that were front of mind for frontier labs are going to become front of mind for everyone For all enterprise as they adopt tools like Codex, like Claude Code, like OpenClaw. And so I think where the most where our expansion and a lot of the reason, the work behind our series or the intention behind a lot of our Series A, it is explicitly to take a lot of the technology that we have been developing I won't say for but in conjunction with both enterprise and the large labs, and really scale the deployments on enterprise. So what I see happening in the next year from the Gray Swan side is real growth in terms of the number of AI companies deploying this technology because it becomes central to their operations. Research-wise, I think I've already talked about some, right? The science, the agentification of all science. Well, let's start with science of AI, and I think, I think that, we always want to do other sciences, right? Let's, let's, let's, let's do AI for physics.Matt [00:56:06]: Introspective.Zico [00:56:07]: Let's just, let's just start with AI science. That needs a lot of work right now, right?Matt [00:56:11]: Put your own mask on before helping others.Zico [00:56:12]: Exactly. So I think actually that's what I'm most excited about right now in the research side. And as it applies to this, I think it's, it's in things like understanding models better, but doing it through the power of agents.Matt [00:56:22]: One thing that, I've been very encouraged by for really only the past two or three months that I think, the pace at which this has happened has been increasing, and I think this is going to continue to be a thing, is people who start to build an agent and don't take it all the way to “We've finished this. We think it's, it's great, and now it's, in front of customers or it's in front of the entire organization.” they have this epiphany before they get there that whatever prompts I put in I need a solution here. I understand that there are real risks, right? I understand that, this is a weird and interesting and really capable model that I'm working with, but if I don't, put more measures in place, to make sure that it stays safe and does behaves the way that I want it to. People coming to us proactively, knowing that they need a real solution, I think that's very encouraging, and I think it's a sign of agents landing outside of just the frontier labs and the research community and scientists and so forth. people are starting to get it, and I think that's great. Looking forward to all of the amazing apps that people are going to build on top of these models and the security that will help them stand up.Private Arenas, Red Teaming Markets, and AI InsuranceSwyx [00:57:39]: Is there a future where your customers are part of the arena? ‘cause I think these are, basically these are Right? these are, these are, independent entities. They're There's a guy in Australia who's, your number one. But at some point you have the network effect where you start having enterprise use cases, actually in inside of this public domain.Matt [00:57:59]: Oh, I see. You mean testing enterprise, deployments inside the arena. So we have had, the situation where people join the arena. They're maybe cybersecurity professionals. They get interested in AI security. They come across the arena, and then eventually they become a customer, when their organization needs solution.Swyx [00:58:17]: How often does that happen?Matt [00:58:17]: Not a huge number of times. But there are a lot of thoughtful, people that come from a cybersecurity background that have found their way there. So enterprises are just always, I think, going to be more paranoid about putting, their custom agent that's, deployment, still in development, up on this public platform for anybody to come hit. What we have done is worked to make private arenas where some subset of the contestants, who we've, We know well, theySwyx [00:58:54]: And what do they work on?Matt [00:58:55]: What do they work on?Swyx [00:58:55]: Do What was the class of problem they work on that would require a private arena?Matt [00:59:00]: Oh, pretty much any enterprise application. That's the point. Yeah. enterprises are not willing to put up their deployment agentsSwyx [00:59:07]: Oh, that's greatMatt [00:59:07]: On the arena for For the general public to come hit. They're fine if it's, 20 people that we've handpicked from the arena.Swyx [00:59:14]: Just for listeners who might be interested What do I make as a participant? What's on the table here?Matt [00:59:20]: Well, so for the for the public competitions We communicate a pricing and incentive structure, upfront, and it, and it differs for each arena, right? ‘Cause designing, the right set of incentives to get people focused on finding useful vulnerabilities and problems without reward hacking and just finding, de minimis things is,Swyx [00:59:47]: Are you human judging the reward hacks if it happens?Matt [00:59:50]: Sometimes, yes.Swyx [00:59:51]: Oh, that's messy.Zico [00:59:53]: Well, so we have a lot of automated graders, right? A lot of automated graders. But ultimately, if they can beat all those graders, there is a humanMatt [00:59:59]: There in the YeahZico [01:00:00]: That can, that can take a look at the at theMatt [01:00:01]: Oh, okay. Yep. And we work with the UKEC and Casey and so forth. they'll come in and work as independent judges and evaluators and lend their expertise to that.Swyx [01:00:11]: You're, you're a community that, any enterprise can call on and that's, that's really useful, data actually. It's almost McCore for red teaming.Matt [01:00:22]: For red teaming.Swyx [01:00:25]: One of our upcoming guests is, on the other side of this, the AI, underwriting company. I don't know if you've come across that.Matt [01:00:30]: Oh, yeah. Absolutely.Zico [01:00:31]: Oh, wait. They're, they're one of the logos there. I know that we have the other one.Swyx [01:00:34]: What do you yeah, what do you what do you think of that market?Zico [01:00:36]: Oh, I think it's great.Swyx [01:00:37]: Because it's such an interestingZico [01:00:38]: And and I think it pairs extremely well with our model, right? Because how do you assess the risk of a company's AI deployment? Well, use a tool like Shade, or use Arena, right? And that's And we have And that's actually a lot of the work we've done with them is exactly for that thing. And then if a company finds this level of risk, but wants, so they can't be insured because they're too risky, wants to reduce their risk, what do you do there? I don't think look, we shouldn't be the only provider here, but what do you do there? Well, you put safety systems around your model, right? Including things like Cygnal. So it pairs extremely well because what in some sense we can be is a, author. I don't We're not getting there yet, so I don't this is hypothetical. I want, I wanted to emphasize. But we can be in some sense a authorized partner with them, so that they can do more than just say, “Hey, you're uninsurable.” They can both assess it more rigorously with tools like Shade and other tools as well, and then they can prescribe mitigations when there are problems using tools like Cygnal.AI Insurance, Compliance, and the Gray Swan EventZico [01:01:44]: So it's incredibly goodMatt [01:01:46]: These two models fit together incredibly well. They also bring us customers. Many customers want protection against bad outcomes, insurance for when things go wrong, and help staying compliant. Being out of compliance is also a risk.Swyx [01:02:10]: I think AUC is fantastic and got on this early. The parallel to cyber insurance is clear. When you apply for cyber insurance, you document the measures you have in place: detection, response, and controls. Structurally, they need an arm's-length third party.
Join us for the final episode of Defender Fridays as Eric Capuano, creator of Defender Fridays and co-founder of Digital Defense Institute, closes out the series with a candid conversation on how he's actually building and running agentic workflows in the SOC today.At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.What We'll DiscussIn this episode, Eric Capuano draws on years of SOC operations, detection engineering, and hands-on agentic workflow development to share what's actually working, what isn't, and where the industry needs to be more honest with itself.Key Topics:Why agentic workflows are the next evolution of SOAR, and what it takes to build them reliablyHow deterministic checkpoints at every stage are essential to making LLM-driven workflows trustworthyHow one team increased their detection engineering output by 900x using agentic workflows running day and nightWhy false positive tuning and detection engineering are the right place to start before tackling complex investigative workflowsHow to think about model selection in agentic pipelines: cost, task complexity, and stakesWhy organizations with poor data hygiene will struggle to get value from AI regardless of how sophisticated the tooling isThe risks of prompt injection when feeding untrusted inputs into LLMs, and why trusted inputs should always come firstWhy the goal is to use LLMs for as little as possible, and push everything else into deterministic stepsAbout Our GuestEric Capuano is the creator of Defender Fridays and co-founder of Digital Defense Institute. He has spent years doing SOC operations, detection engineering, threat hunting, and DFIR, and currently consults on building and deploying agentic SecOps workflows for security teams. He is also the author of the "So You Want to Be a SOC Analyst" training, which has put over 500 students through hands-on SOC workflows using LimaCharlie's free tier.Watch Us LiveDefender Fridays ran every Friday at 10:30am PT for over 100 sessions. Subscribe to our YouTube channel to catch up on past episodes.Sponsored by LimaCharlieThis episode is brought to you by LimaCharlie, the Agentic SecOps Workspace (ASW), where AI agents operate security infrastructure using the same controls and authority as human analysts, with every action visible, governed, and auditable.Why LimaCharlie?Eliminate vendor sprawl and tool complexityDeploy and scale effortlessly on native multi-tenant architectureReduce costs with intelligent data routing and free 1-year retentionBuild custom solutions with 100+ security capabilities on-demandAccelerate response with agentic AI that acts directly within predefined workflowsTry the Agentic SecOps Workspace free: https://limacharlie.ioLearn more: https://docs.limacharlie.ioFollow LimaCharlieSign up for free: https://limacharlie.ioLinkedIn: / limacharlieioX: https://x.com/limacharlieioCommunity Discourse: https://community.limacharlie.com/Host: Maxime Lamothe-Brassard - Founder at LimaCharlieGuest: Eric Capuano - Co-founder of Digital Defense Institute
Der Markt der Notebookprozessoren ist in Bewegung: Intel und AMD erreichen mit ihren x86-Prozessoren nur noch kleine Performancesprünge, Qualcomm hängt sie mit seinen Snapdragon-X2-CPUs meinstens ab und Apples M-Chips laufen sowieso allen davon. Hinzu kommt im Laufe des Jahres die Firma Nvidia, die mit dem RTX Spark ein SoC für (zunächst recht teure) Notebooks bringt. In dieser Folge des c't uplink sprechen wir über die kommenden CPUs von Nvidia, die aktuellen von Qualcomm und was für ARM-CPUs noch kommen könnten (und welche eher nicht). Außerdem: Warum die Situation bei Linux-Treibern bei Nvidia erquicklicher werden könnte als bei Qualcomm, was AMD so plant, was Intels Panther-Lake-Chips doch ganz gut hinbekommen und mehr. Mit dabei: Florian Müssig Moderation: Jan Schüßler Produktion: Tobias Reimer ► Mehr zu Nvidia RTX Spark und Intel Panther Lake lesen Sie bei heise+ (€): - Analyse: Wie Nvidias Einstieg bei Notebookprozessoren den Markt verändert: https://www.heise.de/hintergrund/Analyse-Wie-Nvidias-Einstieg-bei-Notebookprozessoren-den-Markt-veraendert-11321616.html - Vergleichstest: Vier Notebooks mit Core Ultra 300 alias Panther Lake: https://www.heise.de/tests/Vergleichstest-Vier-Notebooks-mit-Core-Ultra-300-alias-Panther-Lake-11168671.html
Der Markt der Notebookprozessoren ist in Bewegung: Intel und AMD erreichen mit ihren x86-Prozessoren nur noch kleine Performancesprünge, Qualcomm hängt sie mit seinen Snapdragon-X2-CPUs meinstens ab und Apples M-Chips laufen sowieso allen davon. Hinzu kommt im Laufe des Jahres die Firma Nvidia, die mit dem RTX Spark ein SoC für (zunächst recht teure) Notebooks bringt. In dieser Folge des c't uplink sprechen wir über die kommenden CPUs von Nvidia, die aktuellen von Qualcomm und was für ARM-CPUs noch kommen könnten (und welche eher nicht). Außerdem: Warum die Situation bei Linux-Treibern bei Nvidia erquicklicher werden könnte als bei Qualcomm, was AMD so plant, was Intels Panther-Lake-Chips doch ganz gut hinbekommen und mehr.
Der Markt der Notebookprozessoren ist in Bewegung: Intel und AMD erreichen mit ihren x86-Prozessoren nur noch kleine Performancesprünge, Qualcomm hängt sie mit seinen Snapdragon-X2-CPUs meinstens ab und Apples M-Chips laufen sowieso allen davon. Hinzu kommt im Laufe des Jahres die Firma Nvidia, die mit dem RTX Spark ein SoC für (zunächst recht teure) Notebooks bringt. In dieser Folge des c't uplink sprechen wir über die kommenden CPUs von Nvidia, die aktuellen von Qualcomm und was für ARM-CPUs noch kommen könnten (und welche eher nicht). Außerdem: Warum die Situation bei Linux-Treibern bei Nvidia erquicklicher werden könnte als bei Qualcomm, was AMD so plant, was Intels Panther-Lake-Chips doch ganz gut hinbekommen und mehr. Mit dabei: Florian Müssig Moderation: Jan Schüßler Produktion: Tobias Reimer ► Mehr zu Nvidia RTX Spark und Intel Panther Lake lesen Sie bei heise+ (€): - Analyse: Wie Nvidias Einstieg bei Notebookprozessoren den Markt verändert: https://www.heise.de/hintergrund/Analyse-Wie-Nvidias-Einstieg-bei-Notebookprozessoren-den-Markt-veraendert-11321616.html - Vergleichstest: Vier Notebooks mit Core Ultra 300 alias Panther Lake: https://www.heise.de/tests/Vergleichstest-Vier-Notebooks-mit-Core-Ultra-300-alias-Panther-Lake-11168671.html
DOCKET ALERTS: Alabama Senator Tommy Tuberville is facing a residency challenge to his gubernatorial campaign. The Justice Department dismissed a case seeking to enforce a moratorium on offshore and onshore windfarm permits. Instead they're buying back leases for windfarms, so that energy companies can develop natural gas plants in the midwest. Murica! The DOJ is trying to take advantage of a half-assed plot to attack Trump's UFC to get the court to let him build his ballroom. Doofus of the Day: Covid denier Alex Berenson, who got a $150,000 payout from the Trump administration because he got booted from Twitter in 2021. MAIN SHOW: It was an opinion day at SCOTUS, and every decision was authored by a bizarre coalition of justices. Of most interest was US v. Hemani, in which the Court held that regular marijuana use cannot be a reason to deny Americans the right to own a gun. The US Attorneys Office in Minnesota announced conspiracy charges against protesters of the immigration surge into Minneapolis earlier this year. Like the Broadview 6 case, it's a transparent attempt to criminalize activities protected by the First Amendment and impose collective punishment on opponents of the administration's policies. The Federal Trade Commission sued the World Professional Association for Transgender Health (WPATH) in Texas, alleging that its Standards of Care document (SOC-8) violates Section 5 of the FTC Act. SUBSCRIBERS: No FISA for you! Trump just blew up the deal to get FISA reauthorized and his new Director of National Intelligence confirmed. Tuberville Residency Challenge [via ALReporter] https://www.alreporter.com/wp-content/uploads/2026/06/Tuberville-Filings.pdf US v. Hemani [Supreme Court] https://www.supremecourt.gov/opinions/25pdf/24-1234_g2bh.pdf Hunter v. US [Supreme Court] https://www.supremecourt.gov/opinions/25pdf/24-1063_5ifl.pdf T.M. v. Univ. of Maryland Medical System [Supreme Court] https://www.supremecourt.gov/opinions/25pdf/25-197_bp7c.pdf US v. Sant [MN protesters] https://www.courtlistener.com/docket/73489496/united-states-v-sant FTC v. WPATH [docket via CourtListener] https://storage.courtlistener.com/recap/gov.uscourts.txnd.421590/ WPATH SOC-8 https://www.tandfonline.com/doi/pdf/10.1080/26895269.2022.2100644 HHS's "Treatment for Pediatric Gender Dysphoria: Review of Evidence and Best Practices." https://opa.hhs.gov/sites/default/files/2025-11/gender-dysphoria-report.pdf Show Links: https://www.lawandchaospod.com/ BlueSky: @LawAndChaosPod Threads: @LawAndChaosPod Twitter: @LawAndChaosPod
This episode is sponsored by Fig.This episode features a conversation with Nir Loya Dahan, Co-Founder and CPO at Fig, recorded at RSAC 2026. Our discussion covers telemetry health and SOC infrastructure resilience: what breaks in a log pipeline, why silent failures are so hard to catch, and how detection teams can build more confidence in their data foundation.Resources:Nir's Email: nir@fig.securityFig Website: https://www.fig.securityContact, Courses, and More:For feedback, reviews, guest pitches, or to get in contact with me for any other reason, head to blueprintpodcast.live!Check out John's SOC Training Courses for SOC Analysts and Leaders:SEC450: SOC Analyst Training - Applied Skills for Cyber Defense OperationsLDR551: Building and Leader Security Operations CentersFollow and Connect with John: LinkedIn
What It Takes To Be Successful in Cyber Media All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark, the producer of CISO Series, and Dave Bittner, producer and host, The CyberWire. Joining is Graham Cluley, host of Smashing Security podcast and Leo Laporte, founder of TWiT (This Week in Tech) and host of Security Now podcast. In this episode: Format follows function The decision gap Practitioner fingerprints Beyond the news cycle A huge thanks to our sponsor, Palo Alto Networks Cortex Cloud unifies code, cloud, and SOC on a single data, risk, and control plane — giving teams the context, workflows, and agentic intelligence to turn risk into resolution. Native AI agents investigate and act within enterprise guardrails, delivering real-time protection from workload to network edge. Cloud security that outpaces machine-speed threats. Learn more at paloaltonetworks.com/cortex/cloud/demo.
Got a question or comment? Message us here!A single unpatched VPN could be all it takes. Qilin ransomware is actively exploiting VPN zero-days to breach networks and accelerate ransomware deployment. We walk through the tactics, the real risk to your organization, and actionable SOC strategies to stay ahead.Support the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.
This Week In Startups is made possible by:Every.io - visit every.ioSentry.io - sentry.io/twistVanta - vanta.com/twistToday's show:The next SpaceX won't be building rockets; it'll build the first hotel on the Moon. Today on TWiST, GRU Space founder Skyler Chan brings a brick made from lunar soil into the studio and lays out a plan to manufacture on the Moon as early as next year. We get into the science, the business model, and the regulatory land-grab ahead!Then, the US government forces Anthropic to pull Fable 5 and Mythos 5. Jason and Lon unpack what it means when a single AI model can vanish overnight, and the US government's emergency order.Stick around for the winner (or winners?!) of the $5,000 AI podcast-companion bounty!Timestamps:0:00 Knicks playoff run, San Antonio & Texas BBQ (Black's vs. Terry Black's)8:23 Plaud: If your work depends on conversations — interviews, meetings, calls — you need a Plaud NotePin. You can check it out at https://Plaud.ai/twist and use code TWIST for 10% off!9:52 Guest intro: Skyler Chan, GRU Space — and the lunar-soil brick10:29 Every.io - For all of your incorporation, banking, payroll, benefits, accounting, taxes or other back-office administration needs, visit https://every.io12:14 Why the next SpaceX builds habitats, not rockets15:18 NASA's $20B moon-base signal & the TRL contracting path16:13 Business model: from construction contractor to owning lunar land18:06 Building the hotel robotically + $1M refundable deposits20:00 Sentry - Your team should be focused on shipping features — not chasing down bugs. New users can get $240 in free credits when they go to https://sentry.io/twist and use the code TWIST31:09 Vanta - Get $1000 off your SOC 2 at https://www.vanta.com/twist39:28 News: US government blocks Anthropic's Fable 5 & Mythos 541:34 The politics: Hegseth, Sacks, Jassy & the "conspiracy" angle1:09:39 Why no single model dependency is safe (multi-model harnesses)1:18:47 Bounty results: MySidecast wins $3,0001:19:07 Honorable mentions: Couchverse (Lemon Slice) & Convalenz1:29:44 Next bounty: the Annotated app
At Infosecurity Europe 2026 in London, Bill Peterson, Senior Director of Product Marketing at Sumo Logic, joins us to unpack a tension every regulated security team knows well. When an incident hits, the business has to keep running. At the same time, regulators expect sensitive data to stay in region. For a long time, those two demands have pulled in opposite directions. Sumo Logic has spent 15 years as a SaaS platform on AWS, processing roughly four exabytes of data a day for around 2,000 customers. The core promise is speed, driving mean time to resolve as low as possible. Peterson frames it in business terms, because the person signing the check wants to know the return, not the bits and bytes. The news from the show is Sumo Logic availability on the AWS European Sovereign Cloud. EU organizations can keep their data in region, handled by EU staff, while still running the full platform for incident response. That turns a painful either/or into a checklist a regulated buyer can complete. Genesys is the first customer live in the sovereign cloud, with payment processor OpenPay preparing to follow. How does this play out for highly regulated industries? Sumo Logic is focused on finance, healthcare, telco, and government, the verticals feeling the most pressure. The path Peterson describes is simple: let Sumo Logic handle incident management, let AWS move and grow the data in region, and check the sovereignty box without giving up operational readiness. Underneath sits a full-featured SIEM and Dojo AI, the agentic approach Sumo Logic launched earlier this year. The goal is not to replace analysts but to keep a human in the loop while handing proven, repetitive work to an agent. Fix one server, confirm the solution, then let an agent patch the other 599 under oversight. A SOC Analyst Agent reaches general availability at Black Hat later this year, alongside an MCP server. On observability, the differentiator is reading both structured and unstructured data without normalizing it first. A zip code is structured; a cryptic web hook error is not. Sumo Logic reads both, which feeds directly into faster time to identify and faster time to resolve. For any leader weighing sovereignty against uptime, Bill Peterson makes a clear case that they can finally live in the same plan. This is a Brand Spotlight. A Brand Spotlight is a ~15 minute conversation designed to explore the guest, their company, and what makes their approach unique. Learn more: https://www.studioc60.com/creation#spotlight GUEST Bill Peterson, Senior Director of Product Marketing, Sumo Logic LinkedIn: https://www.linkedin.com/in/williampetersonjr/ RESOURCES Learn more about Sumo Logic: https://www.sumologic.com/ Sumo Logic on the AWS European Sovereign Cloud (announced at Infosecurity Europe 2026): https://www.sumologic.com/newsroom Infosecurity Europe 2026 event coverage: https://www.itspmagazine.com/infosecurity-europe-2026-infosec-london-cybersecurity-event-coverage Are you interested in telling your story? ▶︎ Full Length Brand Story: https://www.studioc60.com/content-creation#full ▶︎ Brand Spotlight Story: https://www.studioc60.com/content-creation#spotlight ▶︎ Brand Highlight Story: https://www.studioc60.com/content-creation#highlight ▶︎ Get your own Brand Briefing at an upcoming event: https://www.studioc60.com/buy-brand-briefings KEYWORDS Bill Peterson, Sumo Logic, Sean Martin, brand story, brand marketing, marketing podcast, brand spotlight, AWS European Sovereign Cloud, data sovereignty, incident response, mean time to resolve, SIEM, security operations, Dojo AI, agentic AI, SOC analyst agent, observability, log analytics, Infosecurity Europe 2026 Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.
At Infosecurity Europe 2026, Matt Middleton-Leal, Regional Vice President for Qualys across Northern Europe, joins Sean Martin inside the Risk Operations Center built into the Qualys booth. The premise is blunt: cybersecurity has spent years getting good at measuring risk and almost no time getting good at fixing it. The Risk Operations Center, or ROC, is the Qualys answer to that imbalance. So what is a ROC? It is not a product. Middleton-Leal describes it as an operating model that pulls scattered risk signals together, ranks them by business context and financial impact, and drives them toward remediation. If a SOC looks in the rearview mirror at what already happened, the ROC looks through the windshield at the risk ahead. Why now? Because risk moves at machine speed. In an AI-driven world of frontier models and autonomous agents, Middleton-Leal argues that remediation tied to service desk tickets is already too slow. He shares what happens when a client prepares to deploy tens of thousands of new agents before anyone knows what those agents touch or where their data goes. The example that lands hardest is a number: 62 million risk findings across one client's combined tooling. Middleton-Leal walks through how threat intelligence, business context, and safe exploitability testing collapse that figure to under one percent of fixes that genuinely reduce loss. It is a concrete look at how to prioritize remediation instead of drowning in dashboards. There is a quieter shift underneath it all: financial risk quantification, long reserved for the largest banks, reaching companies that never had the analysts to build it. Working with Richard Seiersen, Chief Risk Technology Officer at Qualys, the company is building ways to answer questions like what a ransomware event would likely cost a business in your sector and region. Middleton-Leal closes with the one place every organization should start, whether they use Qualys or not. This is a Brand Spotlight. A Brand Spotlight is a ~15 minute conversation designed to explore the guest, their company, and what makes their approach unique. Learn more: https://www.studioc60.com/creation#spotlight GUESTMatt Middleton-Leal, Regional Vice President, Northern Europe, Qualys LinkedIn: https://www.linkedin.com/in/matt-middleton-leal-a56557/ RESOURCES Qualys: https://www.qualys.com ITSPmagazine Infosecurity Europe 2026 coverage: https://www.itspmagazine.com/infosecurity-europe-2026-infosec-london-cybersecurity-event-coverage Richard Seiersen, Chief Risk Technology Officer at Qualys, co-author of "How to Measure Anything in Cybersecurity Risk" Connect with Matt Middleton-Leal on LinkedIn: https://www.linkedin.com/in/matt-middleton-leal-a56557/ Are you interested in telling your story? ▶︎ Full Length Brand Story: https://www.studioc60.com/content-creation#full ▶︎ Brand Spotlight Story: https://www.studioc60.com/content-creation#spotlight ▶︎ Brand Highlight Story: https://www.studioc60.com/content-creation#highlight ▶︎ Get your own Brand Briefing at an upcoming event: https://www.studioc60.com/buy-brand-briefings KEYWORDS Matt Middleton-Leal, Qualys, Sean Martin, brand story, brand marketing, marketing podcast, brand spotlight, Risk Operations Center, ROC, risk remediation, cyber risk quantification, exposure management, vulnerability management, Richard Seiersen, AI security risk, Infosecurity Europe 2026, machine speed remediation, security operations Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.
Join us for this week's Defender Fridays as Carlo Anez, Founder and Lead Instructor at IgniteCyber Academy and DEFCON Training Instructor, breaks down how to build practical blue team skills using open-source labs, MITRE ATTACK, and real-world defender workflows, and where AI fits into the picture without replacing the analyst.At Defender Fridays, we delve into the dynamic world of information security, exploring its defensive side with seasoned professionals from across the industry. Our aim is simple yet ambitious: to foster a collaborative space where ideas flow freely, experiences are shared, and knowledge expands.What We'll DiscussIn this episode, Carlo Anez draws on years of SOC operations, detection engineering, and cybersecurity instruction to make the case for hands-on, open-source training as the foundation for developing confident, capable defenders.Key Topics:Why cybersecurity training must move beyond passive learning and into real defender workflowsHow the OpenSOC initiative uses open-source tools like Wazuh, MISP, The Hive, and TimeSketch to simulate a small-scale fusion center environmentHow open-source stacks build transferable skills that translate to enterprise platforms like Splunk and LimaCharlieWhere AI fits in the SOC: summarizing noisy alerts, mapping activity to MITRE ATT&CK, drafting investigation questions, and improving report clarityWhy AI literacy means knowing how to validate AI output against evidence, not just knowing how to write promptsWhy the analyst owns the evidence, the decision, and the communicationHow the DEF CON boot camp and online pilot program structure five days of scenario-based training around a final analyst report and CTF capstoneAbout Our GuestCarlo Anez is the Founder and Lead Instructor at IgniteCyber Academy and a DEFCON Training Instructor. He spent five years at Rapid7 doing detection engineering, threat hunting, and DFIR workflows, and has supported SOC operations, government contractors, and projects with DARPA, the US Army, and the US Navy. He currently creates SOC-focused content with TCM Security and leads Blue Team Village at DEF CON, where he also presents and trains annually.Register for Live SessionsJoin us every Friday at 10:30am PT for live, interactive discussions with industry experts. Whether you're a seasoned professional or just curious about the field, these sessions offer an engaging dialogue between our guests, hosts, and you, our audience.Register here: https://limacharlie.io/defender-fridaysSubscribe to our YouTube channel and hit the notification bell to never miss a live session or catch up on past episodes on our website!Sponsored by LimaCharlieThis episode is brought to you by LimaCharlie, the Agentic SecOps Workspace (ASW), where AI agents operate security infrastructure using the same controls and authority as human analysts, with every action visible, governed, and auditable.Why LimaCharlie?Eliminate vendor sprawl and tool complexityDeploy and scale effortlessly on native multi-tenant architectureReduce costs with intelligent data routing and free 1-year retentionBuild custom solutions with 100+ security capabilities on-demandAccelerate response with agentic AI that acts directly within predefined workflowsTry the Agentic SecOps Workspace free: https://limacharlie.ioLearn more: https://docs.limacharlie.ioFollow LimaCharlieSign up for free: https://limacharlie.ioLinkedIn: / limacharlieioX: https://x.com/limacharlieioCommunity Discourse: https://community.limacharlie.com/Host: Maxime Lamothe-Brassard - Founder at LimaCharlieGuest: Carlo Anez - Founder & Lead Instructor at IgniteCyber Academy
At Infosecurity Europe 2026 in London, Matt Ellison, Director of Sales Engineering EMEA & APAC at Corelight, joins Sean Martin to unpack the visibility gap widening across security operations. The SOC is either drowning in data or missing the data that matters most. Corelight, custodian of the open-source Zeek project, builds a platform that turns raw network traffic into evidence teams can actually use. Why do today's most evasive attacks slip past endpoint detection? Because they are designed to. Ellison points to typhoon-style campaigns staged from network and hardware devices specifically to avoid EDR. When a platform sees all of the network traffic moving backwards and forwards, those moves stop being invisible. Seeing more is only half the battle. Ellison describes teams trapped by a fear of missing something, switching on every "just in case" detection until alert volume becomes its own crisis. The real question shifts from "what fired" to "what does this actually mean for my environment." How do you investigate a detection you cannot see inside? A black box hands down a verdict with no evidence behind it. Corelight takes an open approach, exposing the data behind every conclusion so analysts can follow a flow to its root cause and apply the one thing no vendor ships: their own knowledge of the network. The proof tends to show up fast. Ellison recalls a proof of value where, within thirty minutes, the team surfaced sensitive information moving unencrypted across the network. Other finds are smaller but telling, like a finance team's certificate using a weak cipher. Corelight even names its catch-all logs plainly, the "weird" log and the "unknown" log. Visibility feeds compliance too. Frameworks like NIS2, DORA, and GDPR demand evidence, not a tool humming in the corner that no one reviews. Ellison previews a coming release that adds asset classification, identifying every device on the network and explaining the why behind it. This is a Brand Spotlight. A Brand Spotlight is a ~15 minute conversation designed to explore the guest, their company, and what makes their approach unique. Learn more: https://www.studioc60.com/creation#spotlight GUESTMatt Ellison, Director of Sales Engineering EMEA & APAC, Corelight LinkedIn: https://www.linkedin.com/in/matthewrellison/ RESOURCES Learn more about Corelight, including customer stories: https://corelight.com Zeek, the open-source NDR project Corelight maintains: https://zeek.org Infosecurity Europe 2026 coverage from ITSPmagazine: https://www.itspmagazine.com/infosecurity-europe-2026-infosec-london-cybersecurity-event-coverage Are you interested in telling your story? ▶︎ Full Length Brand Story: https://www.studioc60.com/content-creation#full ▶︎ Brand Spotlight Story: https://www.studioc60.com/content-creation#spotlight ▶︎ Brand Highlight Story: https://www.studioc60.com/content-creation#highlight ▶︎ Get your own Brand Briefing at an upcoming event: https://www.studioc60.com/buy-brand-briefings KEYWORDS Matt Ellison, Corelight, Sean Martin, brand story, brand marketing, marketing podcast, brand spotlight, network detection and response, NDR, Zeek, open source security, network visibility, threat hunting, SOC alert fatigue, EDR evasion, encrypted traffic analysis, NIS2, DORA, GDPR, Infosecurity Europe 2026 Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.
In this special Founder Initiative pitch episode, four cybersecurity founders pitch their startups live to Robert Lowry, CSO of Tonic AI and former security leader at organizations including NASDAQ and the Federal Reserve Bank. Robert Lowry- https://www.linkedin.com/in/lowryrobert/ The conversation covers some of the biggest emerging enterprise security challenges around AI agents, shadow AI, runtime protection, memory systems, cybersecurity data infrastructure, and modern SOC operations. Featuring: * IceGuard — next-generation AI-native cybersecurity data infrastructure - Anders Holden, https://www.linkedin.com/in/andersbholden/ * Optimus Labs — agent defense and AI runtime governance - Nipun Gupta - https://www.linkedin.com/in/guptanipun/ * KeyCaliber — AI usage visibility and cybersecurity asset intelligence - Roselle Safran - https://www.linkedin.com/in/rosellesafran/ * Dyng/Pilot AI — AI memory and contextual learning systems - Ricardo La Rosa - https://www.linkedin.com/in/ricardo-larosa/ Instead of polished demos and sales decks, this episode captures real buyer reactions, live feedback, objections, and the kinds of questions enterprise security leaders actually ask before considering a product. If you're building for CISOs, enterprise security teams, or AI infrastructure buyers, this episode gives a rare inside look at how technical buyers evaluate early-stage startups in real time.
This Week In Startups is made possible by:Grasshopper Bank https://grasshopper.bank/twistVanta https://www.vanta.com/twistRender https://render.com/twistPlaud https://Plaud.ai/twistToday's show:Anthropic wrote a blog post calling for a global AI slowdown. Meanwhile, Sen. Bernie Sanders wants the government to seize 50% of every major AI company's stock. Find out why JCal is reconsidering universal basic (or even high!) income policies, and why he thinks the 2028 presidential election will likely come down to AI policies.PLUS a live ComfyUI demo from founder Yoland Yan. Find out why the free-to-use open-source node-based platform has become a crucial part of millions of designers' and VFX experts' workflows, and how their tool has been used to create everything from “The Wizard of Oz” at the Vegas Sphere to those viral Coca-Cola holiday ads.GuestYoland Yan: http://x.com/yoland_yanComfyUI: https://comfy.org/AI Models and ToolsIdeogram 4.0: https://ideogram.ai/models/4.0/Stable Diffusion: https://stability.ai/LTX Video: https://github.com/Lightricks/LTX-VideoLoRa: https://huggingface.co/docs/diffusers/training/loraGoogle Veo: https://deepmind.google/models/veo/Relevant Links:Anthropic: “When AI Builds Itself”: https://www.anthropic.com/institute/recursive-self-improvementBernie Sanders: “The Public Should Own Half of the Big AI Companies”: https://www.sanders.senate.gov/op-eds/the-public-should-own-half-of-the-big-a-i-companies/Bloomberg: “Sam Altman-Backed Group Completes Largest US Study on Basic Income”: https://www.bloomberg.com/news/articles/2024-07-22/ubi-study-backed-by-openai-s-sam-altman-bolsters-support-for-basic-incomeTimestamps:0:00 Guest 1: Yoland Yan, ComfyUI — live demo intro2:06 Plaud: If your work depends on conversations — interviews, meetings, calls — you need a Plaud NotePin. You can check it out at https://Plaud.ai/twist and use code TWIST for 10% off!4:34 Guest 1: Yoland Yan, ComfyUI — live demo intro9:47 Grasshopper Bank - Time is money. Don't waste either. Go to https://grasshopper.bank/twist and get an exclusive $500 cash bonus just for opening an account.20:05 Vanta - Get $1000 off your SOC 2 at https://www.vanta.com/twist22:24 What is Outpainting?30:01 Render - Find out why 5 million developers are already using the all-in-one cloud platform, Render. Go to https://render.com/twist and apply for the Render Startup Program to get $500-$100,000 in free credits, depending on your stage and backers.32:13 Jason's insider sales team advice38:42 LA mayoral race: Bass vs. Pratt42:25 Anthropic wants AI to slow down?48:45 Will Sen. Sanders' argument resonate with the public?59:39 Why 2028 will be the AI jobs election1:05:32 Brian Chesky's new AI lab1:15:21 Jason's "Mandalorian and Grogu" review1:18:53 YouTubers take over the box office1:24:16 Dean Potter vs. Alex HonnoldSubscribe to the TWiST500 newsletter: https://ticker.thisweekinstartups.comCheck out the TWIST500: https://www.twist500.comSubscribe to This Week in Startups on Apple: https://rb.gy/v19fcpFollow Lon:X: https://x.com/lonsFollow Alex:X: https://x.com/alexLinkedIn: https://www.linkedin.com/in/alexwilhelmFollow Jason:X: https://twitter.com/JasonLinkedIn: https://www.linkedin.com/in/jasoncalacanisCheck out all our partner offers: https://partners.launch.co/Great TWIST interviews: Will Guidara, Eoghan McCabe, Steve Huffman, Brian Chesky, Bob Moesta, Aaron Levie, Sophia Amoruso, Reid Hoffman, Frank Slootman, Billy McFarlandCheck out Jason's suite of newsletters: https://substack.com/@calacanisFollow TWiST:Twitter: https://twitter.com/TWiStartupsYouTube: https://www.youtube.com/thisweekinInstagram: https://www.instagram.com/thisweekinstartupsTikTok: https://www.tiktok.com/@thisweekinstartupsSubstack: https://twistartups.substack.com
Anthropic brings Mythos to the NSA. A Palantir executive emerges as a possible CISA pick. A Linux flaw is under active attack. Minecraft malware goes commercial. An npm package gets caught in the Miasma worm campaign. Researchers document the first AI-driven container escape. A browser supply-chain compromise and a university breach with unexpected victims. Our guest is Ashu Savani, Co-Founder at TryHackMe, discussing building high performing SOC & IR teams. The web becomes machine majority. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest On today's Industry Voices segment, we are joined by Ashu Savani, Co-Founder from TryHackMe, discussing building high performing SOC & IR teams. You can listen to the full conversation here. Selected Reading US National Security Agency using Anthropic's Mythos for cyber attacks (Financial Times) Trump considers Palantir exec to lead CISA (The Record) CISA Warns of Active Exploitation of Linux Container Escape Flaw (Beyond Machines) Game Over: WeedHack - The Rise of Minecraft Malware-as-a-Service Campaigns (McAfee Blog) Detecting Claude Cowork Insider Threat Activity (DTEX) Trojanized ai-sdk-ollama Delivers Miasma, a Self-Replicating npm Worm via binding.gyp (Endor Labs) Agentic threat actor hits the orchestration plane: AI agent-driven container escape (Sysdig) You do surprise me.exe: An unexpected executable in Hola Browser (SOPHOS) My SSN was exposed in a breach at Columbia—a school I have no connection with (Ars Technica) ‘Bots have now passed human traffic online,' Cloudflare boss laments — says agentic traffic wasn't expected to eclipse real people until next year (Tom's Hardware) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices
In this sponsored Soap Box edition of the Risky Business podcast Patrick Gray chats with Edward Wu, founder of Dropzone, about what AI is doing to detection, response and the SOC more generally. Dropzone makes AI agents that conduct alert investigations in your SOC, but will the SOC as we know it even exist in the future? Ed has a deep expertise in SOC tech, having previously led AI/ML detection engineering at Extrahop. This interview is a fantastic look at what the future may bring for detection and response professionals. This episode is also available on YouTube Show notes
Why the Most Profitable Prompt Engineers Never Call Themselves That Episode Summary Online entrepreneurship myths are costing AI entrepreneurs thousands. In this episode, we expose why the anti-AI approach to building freelance income ideas is the secret weapon parents are using to escape the side gig treadmill—and how rejecting commodity AI tools unlocks real, sustainable income. Based on years of contrarian insights. https://DarkHorseEntrepreneur.com Sponsor: https://Hostinger.com/DARKHORSE20 and use code DARKHOUSE20 for 20% off. Discover how to build a six-figure "invisible" AI consulting business by positioning yourself as a workflow optimization specialist rather than an AI consultant. Learn the exact language, positioning strategies, and retainer models that land enterprise contracts paying $2,500-$5,000 monthly - all while keeping the AI technology completely invisible to clients who just want their problems solved. Key Moments 00:00 - Opening: 34-year-old built an invisible B2B prompt agency 01:10 - The Core Problem: Most people selling the wrong thing to the wrong people using the wrong language 02:05 - The Enterprise Truth: Fortune 500 companies don't buy AI - they buy outcomes. 04:10 - The Language That Sells: Instead of "AI prompt engineer," you say 06:15 - The Retainer Model: the MRR that separates this from every other AI side hustle. 07:05 - The Credibility Requirements 09:40 - The Budget Reality 10:25 - The Uncomfortable Truth 13:25 - The Whiskered Wisdom Resources Mentioned AI Escape Plan Newsletter: For parents ready to break free from the 9-to-5 grind Workflow optimization vs. AI consulting positioning Enterprise compliance requirements (SOC 2, data handling practices) Industry association strategies for credibility building Sponsor: https://Hostinger.com/DARKHORSE20 and use code DARKHOUSE20 for 20% off. Action Item Identify one business process that takes more than 5 hours per week and involves repetitive decision-making. Document it step-by-step, time each step, and note where delays and errors occur - this becomes your first "process audit" that enterprises will pay thousands to create.
The CEO of Sophia Space, Rob DeMillo, is here to explaining what's different about space startups in 2026 vs. five years ago. Plus Nvidia announced a new Soc the RTX Spark which combines 20-Core Grace CPU With a 5070-Like Blackwell GPU and a partnership with Microsoft that will see a version of Windows for the platform. And we've got a special space movie quiz to help end the week. Starring Sarah Lane, Tom Merritt, Robb Dunewood, Rob DeMillo, Len Peralta, Roger Chang, Joe. To read the show notes click here! Support the show on Patreon by becoming a supporter!
Send us Fan MailPeaches here with the no-BS daily drop. Something's gotta die if you wanna level up—stop repeating weak shit. Army's dumping real money into leader training and brutal exercises. Navy's got five carrier groups owning the map. Marines and Coasties are out there smoking narcos, seizing fentanyl and coke by the ton. But Marines—explain the “special operations capable” tag on your MEU because it sounds like straight dork energy unless you're a Raider. Love the logistics Marines staying riflemen first and crushing endurance courses while the rest of the military whines. Air Force fixing Eagles, Space Force hardening sats. Hegseth just ordered a full UCMJ review—about damn time, that justice system is broken as hell. CENTCOM strikes in Hormuz, Trump on Iran talks, NK lobbing missiles. Ends with the truth bomb: drive ain't some motivation video, it's purpose—others may live. Lock in or stay average.⏱️ Timestamps00:00 Something's Gotta Die01:05 Sponsor Truth: Tasty Gains, Operator Training Summit, Membership03:33 Army Leads Extended Basic Leader Course05:50 Able Crucible: Breaching, Live Fire, Chem Hell07:15 Fifth Corps NATO Saber Strike Drills08:10 Navy Carriers Dominate Global Hotspots09:00 Marines MEU Narco Raids Explode10:00 Peaches Grills Marines on “Special Ops Capable” BS11:45 Logistics Marines Crush It—Rifleman First12:30 Air Force F-15 Upgrades & Sustainment Wins13:45 Space Force Satellite Resiliency Contracts14:30 Coast Guard $45M Coke Bust & Offshore Rescues17:00 Hegseth Launches UCMJ Review—Justice System FUBAR18:30 Memorial Day + Trump Iran Update19:30 CENTCOM Hormuz Strikes & NK Missiles21:50 Real Drive: Purpose That Others May Live
© 2020-2026 Ivy Podcast Discovery LLC
