Questions Every CISO Must Ask AI Security Vendors

About this episode

The episode discusses critical questions for CISOs regarding AI security vendors amidst the hype at RSA Conference 2026.

RSA Conference 2026 is here and the AI agent hype machine is louder than ever. In this episode, Ashish and Caleb cut through the noise and arm CISOs, practitioners, and security teams with a clear-eyed view of what's actually happening in AI security this year. From the vendor floor at RSAC to the future of internal security automation, Caleb and Ashish speak about why 70% of "AI agent security" vendors can't even define what an agent is, why security team consolidation around 2–3 major platforms (plus internal AI capability) may be the most underrated CISO strategy of 2026, and why the window from vulnerability disclosure to live exploitation has collapsed from months to under two days. They also explore the emerging idea of a centralised AI automation function inside security teams and why the future of security isn't buying more point solutions, it's building internal AI capability on top of a standardised vendor stack. Questions asked: (00:00) Introduction: Preparing for RSAC 2026(03:50) The Year of the "AI Agent" Marketing Hype (06:50) The Secret to AI Context: Enterprise Search (Glean) (09:50) Why Your SOC Needs a Centralized AI Platform Team (13:30) The…

People in this episode

Hosts: Ashish, Caleb

Topics covered

• AI security
• CISO strategies
• vendor evaluation
• internal security automation
• AI agent marketing hype
• security team consolidation

Keywords

• AI security
• CISO
• vendor strategies
• security automation
• RSAC 2026
• API access
• MCP
• centralized AI platform

Mentioned in this episode

Organizations: RSA Conference, AI agent security, SOC, MCP, Glean, CISO, RSAC

More episodes of AI Security Podcast

• Why Asset Intelligence is Replacing the CMDB & Static Dashboards · June 11, 2026 · 43 min
• The AI AuthZ Problem: Why Human Least Privilege Fails for Autonomous Agents · June 4, 2026 · 48 min
• Securing AI at the Speed of Engineering | DoorDash | Forward Deployed Security | GRC Engineering · May 21, 2026 · 1h 3m
• Verification vs. Validation: How Autonomous AI is Changing Cybersecurity · May 13, 2026 · 1h 10m
• The Zero-Click AI Hack: How to Contain the Blast Radius of Autonomous Agents · April 29, 2026 · 47 min
• Buy vs. Build AI Security: Why [Box.com](http://Box.com) CISO is Creating their Own Agentic SOC · April 22, 2026 · 47 min