Security doesn't stand still, and neither does AI. This is where I publish the ideas, lessons, and field notes that didn't fit in the book—and everything I've learned since.

Capability Isn't Delegability

This post is adapted from my keynote at OWASP. If you'd rather watch it, the full talk is here on YouTube: https://www.youtube.com/watch?v=fg4O0tKKCW0 For the last few years, we've spent a lot of time asking what AI can do. Can it

How to Test an AI Agent After It Passes the Demo

Traditional software tests often check whether a known input produces an expected result. That is useful, but it does not tell us enough about an AI agent. An agent may take different steps or produce different answers to the same request, especially when it can choose tools, retrieve information, and

Autonomy Isn't Authority

An agent that runs by itself every morning and an agent that can move money are two entirely different security problems. But some AI risk conversations flatten them into the same thing. Two distinct agents The first runs every morning without anyone asking. It searches a set of approved public

Your AI Inventory Is a Graph, Not a Spreadsheet

Most AI inventories answer "what do we have?" and go stale the same week. The questions worth answering are what's connected to what, and what changed since. Every CISO I talk to about agentic AI opens with the same question: What AI do we have? It

AI Agents Should Inherit Delegated Authority

When I go on vacation, I don't hand my deputy CISO a copy of my job. I hand them a slice of it. While I'm out, they can approve an emergency firewall change. They can't sign a vendor contract. Finance still approves payments. HR

Build an Architecture, Not a Vendor Collection

One of the questions I've been getting a lot lately is some version of, "We're looking at several AI security vendors. Which one do you recommend?" On the surface, that seems like a straightforward question. Usually it isn't. A few weeks ago,

AI Agents Are Digital Workers. Govern Their Identities Like It.

Five questions second-line risk teams should be asking about the non-human identities behind agentic AI. Every AI workflow you put into production has an identity behind it. It might be a service account, a workload identity, a managed identity, an API key, an OAuth application, or another non-

Governing AI Agents Starts with Governing Their Identities

I made the broad case for agentic security-by-design at PlatformCon Live Day NYC. This is the identity piece, up close. Over the past several months, I've had versions of the same conversation with CISOs, identity teams, auditors, and risk leaders. The technologies differ, but the question

When You Turn On AI, Who Owns the New Signals?

Turning on generative and agentic AI floods the enterprise with alerts, logs, and telemetry. Here's how to decide what's cybersecurity's job — and what isn't.

Trust is the Wrong Word for AI Agents. Here's the Right One.

We spent a decade learning not to trust what we download. Here's why the same lesson — reframed around confidence, not trust — is how you stay in control of agentic AI. Adapted from my 2026 PlatformCon NYC talk.