Questions Every CISO Must Ask AI Security Vendors
About this episode
The episode discusses critical questions for CISOs regarding AI security vendors amidst the hype at RSA Conference 2026.
RSA Conference 2026 is here and the AI agent hype machine is louder than ever. In this episode, Ashish and Caleb cut through the noise and arm CISOs, practitioners, and security teams with a clear-eyed view of what's actually happening in AI security this year. From the vendor floor at RSAC to the future of internal security automation, Caleb and Ashish speak about why 70% of "AI agent security" vendors can't even define what an agent is, why security team consolidation around 2–3 major platforms (plus internal AI capability) may be the most underrated CISO strategy of 2026, and why the window from vulnerability disclosure to live exploitation has collapsed from months to under two days. They also explore the emerging idea of a centralised AI automation function inside security teams and why the future of security isn't buying more point solutions, it's building internal AI capability on top of a standardised vendor stack. Questions asked: (00:00) Introduction: Preparing for RSAC 2026(03:50) The Year of the "AI Agent" Marketing Hype (06:50) The Secret to AI Context: Enterprise Search (Glean) (09:50) Why Your SOC Needs a Centralized AI Platform Team (13:30) The…
More episodes of AI Security Podcast
- Securing AI at the Speed of Engineering | DoorDash | Forward Deployed Security | GRC Engineering
- Verification vs. Validation: How Autonomous AI is Changing Cybersecurity
- Buy vs. Build AI Security: Why [Box.com](http://Box.com) CISO is Creating their Own Agentic SOC
- Anthropic's Project Mythos: Why the "Zero-Day Machine" is Terrifying the Security Industry
- Are AI Security Startups Faking It? How to Separate Signal from Noise
- How Lovable Manages 100+ Daily Changes, Vibe Coding & Shadow AI
Explore listener stats, chart rankings, contacts and more on the AI Security Podcast podcast page.