Insecure Agents Podcast

What Changes When Agents Write the Code: Gabriel (Yalo) on Software Factory Security

"I haven't seen in the past months a pull request from a human at Yalo for something related with UI."

Gabriel Brolo, Staff Security Engineer at Yalo and a @snyksec Ambassador, joined us live at @AISecSummit to explain how you secure a software factory when agents write the code. His answer: defense in depth, re-secured constantly, because one layer isn't enough.

We get into:

> Scoping authorization on APIs and services that were built before agents
> Agent firewalls at the edge, backed by asynchronous LLM judges
> Scanning every skill for credentials and exfiltration paths
> Why blocking a misbehaving agent at runtime is a hard problem

TIMESTAMPS

(00:00) Gabriel, Yalo, and teaching compilers
(01:00) Two years as a Snyk design partner
(02:40) The Secure Software Factory reference architecture
(03:00) An agent that builds agents: securing it is securing the factory
(03:40) Role-based access and authorization on pre-agentic services
(04:10) Agent firewalls: redacting PII and blocking topics in microseconds
(05:00) Asynchronous LLM judges when the edge isn't sure
(05:40) Red teaming against prompt injection and the OWASP LLM Top 10
(06:30) From drag-and-drop flows to Yalo Code (09:00) Responding to a misbehaving agent, and why live blocking is still open
(12:50) No human UI pull request in months
(15:40) Scanning skills for credentials and exfiltration (16:40) Re-securing the factory as models change and zero days land weekly
(21:20) Automated pentests after every deploy: one scan doesn't work

AAuth Night content is LIVE on our YouTube channel!

This includes @jaredhanson's demo showing intent based authorization using AAuth missions natively integrated into a Pi agent.

Thanks again to @KeycardAI and @AISecSummit for the support.

Lots of good pods coming soon 👀

We had great conversations last night about agentic runtime security and intent based auth at AARM intercept night.

It was our pleasure to help host and look forward to the next event!

Governance Is the Accelerator: Josh Woodruff (CSA) on Getting Agents Out of Pilot Purgatory

"Zero Trust taught us to check who you are and what you can reach on every request. But agents need one more check on top of that. What are you doing right now?"

Josh Woodruff, Co-Chair of the Zero Trust Working Group at @cloudsa, Founder and CEO of Massive Scale AI, and creator of the Agentic Trust Framework, joined us to explain why treating every AI agent like a new hire that earns its autonomy is what lets the business move faster with agents.

We get into:

> The five questions you have to answer about every agent, and the intern to principal autonomy ladder
> Why agents running under a human's identity turn every kill switch into a work stoppage
> Why intent is a useful signal
> Why many smaller scoped agents is better than one monolithic one

TIMESTAMPS

(00:38) Helping leaders say yes to agents and keep the power to stop them
(01:29) The book, the Agentic Trust Framework, and donating it to CSA
(04:01) ATF and Agent Baseline land in the same place
(05:12) Why every agent needs its own identity and behavioral baseline
(09:07) Inventory, access reviews, and the 20-year-old shared service account
(14:35) Human sponsors, tool scopes, and the roster as a forcing function
(19:36) Intent-based auth, AAuth missions, and the deleted inbox
(21:44) The Resy ban and the $1.4 million floor cleaner order
(24:59) ATF and AARM: earned autonomy meets runtime action control
(30:48) Fine-grained kill switches and microagents
(32:45) Tokenomics and why constraints are rocket fuel
(39:52) Reversibility and the never list
(43:11) Secure action, not just access, and the Stop Rogue AI bill