With AI agents, runtime is the only place truth lives

Lately, some of the most influential people in security and AI have been arguing publicly about how fast frontier AI models should be developed. While that’s an important debate with very real stakes, it's not the only one shaping what security teams have to deal with today. The AI agents that matter to our organizations right now have already been deployed, or are in the process of being deployed. They run in real infrastructure, hold credentials, and reach production applications. Our businesses already depend on them and won’t pause while we sort out the pace of what comes next. So, instead of focusing on that, I’d like to explore something concrete: What actually changed underneath our security programs in the last year and, in technical terms, what it takes to get ahead. For most of my career, cybersecurity meant defending people and organizations, and you did that by protecting their software assets: applications, data, and infrastructure. Software assets are…