DOP 349: Shadow AI Is Going to Be a Thousand Times Worse Than Shadow IT

About this episode

Ben Wilcox discusses the implications of shadow AI and its potential risks compared to shadow IT.

#349: Every platform you already own is about to have AI baked into it. Not next year. This year. That is Ben Wilcox's blunt prediction, and Ben is the CTO and CISO at ProArch, so when he says shadow AI is going to make shadow IT look quaint, it is worth slowing down to figure out what that actually means. The data leaves your stack through tools you already paid for, through features the vendor shipped without asking, through copilot agents nobody filed a ticket for. Here is the uncomfortable part. This is not a new problem. It is the exact same retroactive-security failure pattern that broke DevSecOps, just with higher stakes and a faster clock. A pen test done six months ago is already obsolete because the app added AI in the meantime. Models get deprecated on seven-month windows while frameworks still get years of support. The whole "we will deal with it at the end" approach that worked badly for cloud and worked worse for containers is going to be catastrophic for AI. The fix is older than the problem. Landing zones. Well-architected frameworks. A storage account that already has the right policy. An API gateway already in front of the API. The developer should not be…

People in this episode

Hosts: Darin Pope, Viktor Farcic

Guest: Ben Wilcox

Topics covered

• AI
• shadow IT
• DevSecOps
• security
• cloud computing
• software development

Keywords

• shadow AI
• DevSecOps
• security failures
• cloud
• API gateway
• well-architected frameworks
• storage account

Mentioned in this episode

Organizations: ProArch

More episodes of DevOps Paradox

• DOP 348: Now It's Time to Panic · April 29, 2026 · 50 min
• DOP 347: Cozystack Turns Bare Metal Into a Managed Services Platform · April 22, 2026 · 48 min
• DOP 346: Fighting AI in Your Project Is a Terrible Mistake · April 15, 2026 · 55 min
• DOP 345: From Chat Prompt to Working Software with Kiro · April 8, 2026 · 39 min
• DOP 344: KubeCon EU 2026 Review · April 1, 2026 · 54 min
• DOP 343: Your APIs Were Never Built to Be the Front Door · March 25, 2026 · 46 min