To The Point - Cybersecurity · 2026-07-07 · 41 min
Ido Shlomo, co-founder and CTO of Token Security, makes a blunt case: an AI agent is not a person. It is a workload that impersonates one, chasing whatever goal it is handed without judgment, memory, or common sense. Treat it like an employee and hand it the keys, and enterprise security quietly starts to break down. Shlomo explains why agents inherit the same credentials and keys that service accounts have always used, why over-permissioning backfires on the business itself, and how identity teams can align an agent's access to its real intent. He also argues, against his own instincts, for more regulation of how agents connect to business systems and makes the case that reducing the blast radius matters more than trusting any single model. For links and resources discussed in this episode, please visit our show notes at
Autonomous Agents Need a Verified Identity with Rosalyn Curato78 / 100
AppSec Needs AI Employees, Not More Tools with Shan Kulkarni64 / 100
Unleash AI or Block It? The Answer Is Both with Steven Walchek
Agentic AI Needs Humans on the Loop with Michael Chavira
Human Behavior Is the Attack Surface | Part 2 with Jeremiah Baker