About this episode

The episode discusses the implications of using AI in cloud and application security, highlighting the challenges and costs associated with black box AI solutions.

Traditional SCA and SAST tools are notorious for drowning security teams in false positives, historically flagging nine out of ten alerts incorrectly. But while generative AI seems like a magic bullet, simply wrapping an out-of-the-box LLM around your code can result in confident hallucinations and astronomical costs extrapolating to as much as $52 million a year for a large enterprise using frontier models. In this episode, Ashish sits down with Harry Wetherald , CEO and co-founder of Maze, to discuss the evolution of AI-native AppSec and Cloud Security. Harry breaks down the critical difference between vulnerability reachability (is the code active?) and true exploitability (can an attacker actually trigger it logically?). He also explains why the historical walls between cloud security and application security teams are finally crumbling as AI acts as a perfect translator between the two domains. If your team is debating "Build vs. Buy" for AI security tools, this episode is essential. Harry shares the biggest red flags to watch out for in AI vendors (beware the "black box"), how to intelligently route across models to optimize token costs by 100x, and how…

More episodes of Cloud Security Podcast

• Who Governs Your AI Agents? Identity, Offboarding & Open Standards · July 2, 2026 · 35 min
• AI-Powered Forensics: How Attackers Automate Breaches · June 23, 2026 · 39 min
• The 4 Pillars of AI SOC:From Threat Hunting to Vibe Hunting · June 16, 2026 · 47 min

Explore listener stats, chart rankings, contacts and more on the Cloud Security Podcast podcast page.