Scaling Europe
00:27:29 · Yinon Costica
[00:27:29] S1: I think it's... And what we see in the reality, it raised a significant awareness for what what we call AI threat readiness. With with Google, we launched AI's threat defense. The concept of understanding that these threats will evolve and evolve very fast. And actually, it it says... So what what do we need to do? So we we actually have a a four four step program. And the first one is use the red agent. Okay? First and foremost, most important, to scan the attack surface because that's where they're gonna hit first. Second, we have to improve our ability to remediate and correct, like fix our applications at scale. Because if we just find the stuff and we don't fix them, it's not gonna help anybody. So the ability to accelerate and scale out the remediation processes, segmentation capabilities, architecturing the environment in a way that is more resilient. I think this is a second area that we have to invest. That's where the green agent operates to automate. And then the third pillar is actually about code scanning where Wiz Atlas operates. So the ability to scan the code at the get go before we even launch it and try to find all of these holes and vulnerabilities before we even deploy. And then the last piece is AI threat detection and response, which is the blue agent in ways it's the ability to continuously monitor the environment using AI, not not humans. And then AI should find the attack, but also should respond live to it. And that small point of responding live means that we need to think about defense as much more of a dynamic space than static. And by by dynamic, I mean that if if we see an attack, I want the blue agent not only to tell me that, yes, it's a malicious attack. I want it to actually create additional detections to guardrail environments. I want it maybe to create some remediative actions or response sections to cut the blast radius as much as possible. And we need to think about it as a very dynamic response to a threat that doesn't require humans. So we need to push the limits on what we allow automation to do through agents so we can actually be effective in responding to threats live. So all of these these four pillars, these are the fundamentals of how we think about security against AI threats.
00:30:13 · Sebastian Johnson, Yinon Costica
[00:30:13] S0: Is the future of cybersecurity a sort of always on system? It's like you're constantly having things that are attacking, scanning, fixing, just run permanently and autonomously. [00:30:24] S1: Absolutely. That's... It's it's like we we are almost there today in that again. It's not like futuristic. Like, this is what this what... Exactly what needs to happen because we want the red agent to compute... Continuously test, the coding agents to continuously test. We want to fix automatically. We want to respond automatically, not only to attacks, but also to red agent findings. And we want all of this to operate in a self improvement loop that will allow us to continuously say, okay. I you know, I will use a metaphor here. Like, the agent wakes up in the morning. He doesn't really wake wake up. But when it starts, it needs to ask, okay. So what are the tasks I'm going to be active on? And in the end, we're gonna find ourselves asking as a security organizations, how much capacity do I want to allocate to these agents to run on on my behalf? Right? Do I I want to have an equivalent of, you know, one continuous agent, two, 10, 20. Okay? And then it will be cost... In in the end, it will be cost versus value question. How much can I accomplish with an agent? But it will be an always on. So, yes, absolutely. I think that's the direction security is heading towards when we're not far from there. Like, I, you know, I actually think 20... Let's say, '27 early, we should be already seeing loops like that.
00:31:50 · Sebastian Johnson
[00:31:50] S0: We've got time for one more question. I wanted to ask, you know, when you look for rules the next, like, six, twelve, eighteen months, you're talking about this sort of always on coming on. What is the one thing that you're most excited about working on?
00:32:02 · Yinon Costica
[00:32:02] S1: I I think that in general with today, what I'm most excited is really the ability. I know it sounds because we just talked about it, but the ability to close an end to end loop on security issues. I think that's something that for... Like, I've been in security for, what, twenty five years. I think this is something that if we can truly unlock it at organizations at scale, We have an opportunity to see the word, like the the security of our technology or digital world exceeds what we could only dream about so far. Right? Because if we can actually do this, and I'll give you a very small example. We... It already works. Let's say I find a red agent finding, the green agent finds the line of code and automatically deploys... Sends it to a coding agent that will create the fix, test, and automatically deploy to the environment. Maybe we can close a loop from red, green to the coding agent to deployment. Maybe we can close it in minutes. And if we can close it in minutes, what what does it mean about our security posture at scale? And I think that it means that over time, in the past, if if we go back to where we started, in the past, were all about, you know, risk management, prioritizing, trying to manage the bottlenecks. If we can remove a lot of these bottlenecks and offload a lot of these day to day tasks, the operation and overhead to an agentic platform, I think we will secure the word in ways that we couldn't have done before. I think that the other thing I'm super excited about at the same time is helping organizations to unlock AI at scale to be used because the capacity it allows, the the advantages, the innovation that it allows us to to basically apply to our businesses is unlimited. And I think this is truly exciting. And like any technology, if we don't do it securely, safely, so we're gonna hold back the business on using it. And we have to find the means to secure AI, to transform with AI, and that in the end, that's... I think we started with Google and AI, but I think that it's very, you know, symbolic that the month that Google acquired us officially, March, was a month that we released our agentic platform. And it represents not only the new phase of Wiz within Google, but actually the new phase of Wiz in securing the AI transformation that the world is going through.
00:34:47 · Yinon Costica, Sebastian Johnson
And I think this is what excites me the most in this journey. Yeah. A lot to do. Never at that moment. [00:34:54] S0: I bet. And it feels like such a match made in heaven given the way that the world has changed and moved and the way that the the scale and the opportunity that Google provides in capturing this this transformational change in AI. But, you know, thank you so much for joining me. It's been great to chat. Best of luck with the rest of the year and next twelve months. I'm going be following along and and watching you guys continue to crush it. [00:35:14] S1: Thank you very much it was a pleasure.