Guest:

• Rick Caccia, CEO and Co-Founder, Witness AI

Topics:

• In what ways is the current wave of enterprise AI adoption different from previous technology shifts? If we say “but it is different this time”, then why?
• What is your take on “consumer grade AI for business” vs enterprise AI?
• A lot of this sounds a bit like the CASB era circa 2014. How is this different with AI?
• The concept of "routing prompts for risk and cost management" is intriguing. Can you elaborate on the architecture and specific AI engines Witness AI uses to achieve this, especially for large global corporations?
• What are you seeing in the identity space for AI access? Can you give us a rundown of the different tradeoffs teams are making when it comes to managing identities for agents?

Resources:

• EP226 AI Supply Chain Security: Old Lessons, New Poisons, and Agentic Dreams
• EP173 SAIF in Focus: 5 AI Security Risks and SAIF Mitigations
• EP84 How to Secure Artificial Intelligence (AI): Threats, Approaches, Lessons So Far
• Witness AI blog
• Shadow Agents: A New Era of Shadow AI Risk in the Enterprise
• Blocking shadow agents won’t work. Here’s a more secure way forward
• Shadow AI Strikes Back: Enterprise AI Absent Oversight in the Age of Gen AI
• Cloud CISO Perspectives: How Google secures AI Agents
• “The Soul of a New Machine” book
• Emoji Attack: A Method for Misleading Judge LLMs in Safety Risk Detection

Guest:

• Jon Oltsik, security researcher, ex-ESG analyst

Topics:

• You invented the concept of SOAPA – Security Operations & Analytics Platform Architecture. As we look towards SOAPA 2025, how do you see the ongoing debate between consolidating security around a single platform versus a more disaggregated, best-of-breed approach playing out?
• What are the key drivers for either strategy in today's complex environments? How can we have both “decoupling” and platformization going at the same time?
• With all the buzz around Generative AI and Agentic AI, how do you envision these technologies changing the future of the Security Operations Center (and SOAPA of course)?
• Where do you see AI really work today in the SOC and what is the proof of that actually happening? What does a realistic "AI SOC" look like in the next few years, and what are the practical implications for security teams?
• “Integration” is always a hot topic in security - and it has been for decades. Within the context of SOAPA and the adoption of advanced analytics, where do you see the most critical integration challenges today – whether it's vendor-centric ecosystems, strategic partnerships, or the push for open standards?

Resources:

• Jon Oltsik “The Cybersecurity Bridge” podcast (Anton on it)
• EP236 Accelerated SIEM Journey: A SOC Leader's Playbook for Modernization and AI
• EP242 The AI SOC: Is This The Automation We've Been Waiting For?
• EP202 Beyond Tiered SOCs: Detection as Code and the Rise of Response Engineering
• EP180 SOC Crossroads: Optimization vs Transformation - Two Paths for Security Operations Center
• EP170 Redefining Security Operations: Practical Applications of GenAI in the SOC
• EP73 Your SOC Is Dead? Evolve to Output-driven Detect and Respond!
• Daniel Suarez “Daemon” book and its sequel “Delta V”

Guest:

• Cy Khormaee, CEO, AegisAI
• Ryan Luo, CTO, AegisAI

Topics:

• What is the state of email security in 2025?
• Why start an email security company now?
• Is it true that there are new and accelerating AI threats to email?
• It sounds cliche, but do you really have to use good AI to fight bad AI?
• What did you learn from your time fighting abuse at scale at Google that is helping you now
• How do you see the future of email security and what role will AI play?

Resources:

• aegisai.ai
• EP40 2021: Phishing is Solved?
• EP41 Beyond Phishing: Email Security Isn't Solved
• EP28 Tales from the Trenches: Using AI for Gmail Security
• EP50 The Epic Battle: Machine Learning vs Millions of Malicious Documents