Andy Berman

10 months ago, every public company board told their CEOs to "go all-in on AI" and basically just expected them to figure that out.

I talk to a lot of leaders today who are stuck in the same spot they were in January.

One VP of IT told me they're still on Copilot.

I'm not saying AI will take 15 years to take over like cloud did, but you're probably overestimating how fast the enterprise moves when security, proprietary data, and access are in play.

I talked to a VP of IT who said his customers get access to fancy agents throughout their product, and his employees get access to Microsoft Copilot.

How nice of them.

It's much easier to apply governance to customers than within your org.

A customer-facing agent runs inside one product you built, on infra you control, doing actions you picked.

Employee agents touch basically every system, permission, and laptop.

Whole different ball game.

4 of the biggest AI apps beg you to install the desktop app.

VPs of IT and security hate this. I know because they tell me.

The desktop app is where the chatbot gets access to your files, your terminal and your other apps.

They feel like they have to force employees to stay at the chatbot phase, so they don't automate work on laptops where data can easily leave.

It's backwards, yeah.

They're blocking the step that makes AI useful.

We learned this early, and built @Runlayer so agents can run centrally, and every action goes through policy either way.

One enterprise we're talking to has 4,500 agents deployed, and security hasn’t been part of the conversation yet.

Every one of those agents runs on somebody’s access.

I don't know what's worse here. 4,500 blocked agents, or 4,500 ungoverned ones.

You're either not using AI, or creating 4,500+ places for a security incident.

Security has to get to that table eventually. Better before an incident than after one.

Sometimes vibe coding comes with bad vibes.

Governance is the least-sexy word in tech until it's time to secure customer data.

Many will learn this.

x.com/intcyberdigest…