89. AI Agents Will Delete Your Database. And Then Lie About It (with Graham Neray)

About this episode

Graham Neray discusses the risks AI agents pose to SaaS companies and the importance of a robust authorization model.

AI agents can delete your production database and tell you everything is fine. Graham Neray, Co-Founder and CEO of Oso, breaks down why AI agents introduce a new level of risk for growing SaaS companies. If you’re adding AI to your product, moving upmarket, or selling into regulated industries, your authorization model is no longer a backend detail—it’s a growth dependency. Listen in to learn how automating least privilege protects your product, your customers, and your revenue. Graham: https://www.linkedin.com/in/grahamneray/ Oso: http://www.osohq.com Jon: https://www.linkedin.com/in/jon-mclachlan Sasha: https://www.linkedin.com/in/aliaksandr-sinkevich YSecurity: https://www.ysecurity.io 🔒 Sponsored by YSecurity Closing a big deal and getting hit with a vendor questionnaire, SOC 2 request, or pen test requirement? That's exactly what we handle. YSecurity embeds a team of security engineers with backgrounds from Apple, Uber, Microsoft, Robinhood, and Brex directly into your company. No full-time hire, no bloated retainer. You set a monthly cap and we handle everything. Book a free strategy call and we'll tell you exactly where you stand. 👉 Book your free call: 30 Min Meeting |…

People in this episode

Hosts: Jon McLachlan, Aliaksandr Sinkevich

Guest: Graham Neray

Topics covered

• AI agents
• database security
• SaaS companies
• authorization model
• automating least privilege

Keywords

• AI agents
• database deletion
• SaaS
• authorization
• least privilege
• Graham Neray
• Oso

Mentioned in this episode

Organizations: Oso, YSecurity

More episodes of The Security Podcast of Silicon Valley

• P96. They Don't Need to Hack You Now. They Just Need to Wait. (with Kevin Kane) · June 2, 2026 · 26 min
• 95. Stop Saying No: How Security Leaders Enable AI Instead of Blocking It (with Pranava Adduri and George Gerchow) · May 19, 2026 · 40 min
• 94. How one unsecured printer can take down 11,000 devices (with Jim LaRoe, Symphion, Inc.) · May 5, 2026 · 42 min
• 93. The Conversation Nobody’s Having About AI (with Jacob Andra and Stephen Karafiath) · April 21, 2026 · 43 min
• 92: The Real Problem Isn't Deepfakes. It's Identity (with Jasson Casey) · April 7, 2026 · 39 min
• 91. Why Asking Developers To Fix Everything Is... A Bad Idea (with Neatsun Ziv) · March 24, 2026 · 36 min