Economic Zero: The Vulnerability Nobody Can Afford to Find

AI discovery turns vulnerability hunting into a purchasing decision. The budget runs out at the part that protects you. “Software will always have vulnerabilities you haven’t found” has held as a working truth for as long as anyone in security has had a job. Security programs took the assumption as a foundation: triage, rank, accept […]

The Board Slide Hiding in Your Agent Telemetry

The measurements that earn an AI agent autonomy are the ones your CFO has been asking for. The quarterly security slide has looked the same for a decade. Vulnerabilities discovered: 14,000. Triaged: 9,200. SLA attainment: 94 percent. Every number on that page describes what the security team did. None of them describes what the business […]

Your Agent Produced the Right Answer. It Still Did the Wrong Thing.

Introducing PolicyEval, the open-source library that scores AI agents against their policy, not just their output. The first two posts in the series (#1, #2) landed on something uncomfortable. AI coding assistants ship vulnerability patches that compile, pass tests, and still break production. Roughly one in five. The fix wasn’t a smarter model – it […]

Shrink the Exposure Pile: Vulnerability Management in the Age of Vibe Coding

Part 1 of a two-part series. Security teams already own more scanners, exposure platforms, and dashboards than they can act on, yet the vulnerability backlog grows every week. The bottleneck has moved downstream, from finding vulnerabilities to remediating them, and AI-generated code widens that gap faster than any hiring plan can close it. On a […]

OpenAI’s Aardvark: A Welcome Step Forward in AI-Driven Security, But Just the Beginning

RiskOn Thursday, OpenAI introduced Aardvark, their Security Research Agent designed to help developers and security teams discover and fix vulnerabilities at scale. As someone who’s spent the past year building AI remediation solutions at Backline, I found myself reflecting on what this announcement means for our industry. My reaction? Genuinely positive. This validates what we’ve […]

The Rise of AI Agents in Cybersecurity: Insights from RSA Conference 2025

RSA Conference 2025 in San Francisco confirmed that AI agents are rapidly transforming cybersecurity, moving from simple copilots to autonomous systems capable of executing complex, multi-step tasks. This shift is already reshaping how organizations detect, respond to, and manage cyber threats, but the journey toward full automation, where AI can not only identify but also […]