Show Notes
Kevin Werbach speaks with Nadav Cornberg, co-founder and CEO of Eve Security, about securing agentic AI where it counts: at the moment an agent actually does something. He recounts how customers upended his own assumptions that AI agent security should focus on visibility and after-the-fact detection. Buyers insisted on runtime enforcement first, reasoning that learning a production database was deleted after the fact helps no one. With Eve's "interrogation" approach, when an agent attempts an anomalous, high-risk action, Eve's agent-in-the-loop pauses and questions it about its intent, before approving, blocking, or escalating to a human. Cornberg describes building a deterministic enforcement layer on top of inherently non-deterministic models, with the system minting explicit rules from observed behavior so that the large majority of everyday requests resolve deterministically. Ultimately, the consequenes are the same whether an unintended action originates in a prompt injection or a simple hallucination. On the perennial human-in-the-loop question, Cornberg argues that escalating everything would drown security teams as the agentic workforce scales, so the platform automatically handles lower-risk cases with justification and reserves human review for the genuinely critical. He closes predicting that "agentic security" will fragment into distinct segments much as endpoint, network, and cloud security once did, and that intent is fast becoming the field's organizing idea. Nadav Cornberg is the co-founder and CEO of Eve Security, an Austin-based agentic AI observability and policy-enforcement company whose platform governs how AI agents interact with an organization's most critical systems. He brings roughly two decades in product development and engineering, including an early decade in cybersecurity at RSA and Check Point and later work in physical access security across gaming and hospitality before returning to security for the agentic era. Transcript
Founders' blog: Why We Started Eve Security
More from The Road to Accountable AI
Kevin Werbach speaks with Joshua Tan, CTO of Current AI, about the case for public AI: The idea that AI can and should be public infrastructure, like highways, libraries, or the internet. Tan traces his path from theoretical machine learning at Oxford to starting the reseaerch group Metagov. He explains what work on decentralized and collective organizations can offer AI governance. He also discusses autonomous organizations run by AI agents, the safety questions that arise when agents hold bank accounts and manage human employees, and why incentives shift once these experiments reach real scale. Tan positions public AI as a third way between closed proprietary AI and open-weight models, which are struggling to keep pace with frontier-scale capital costs. Current AI focuses on everything beyond the model, aiming to build a fully open source stack on top of fully open models, a Linux for AI. He describes this as a Honda Civic strategy: not at the frontier, but close enough, cheaper, and reliable. The conversation also covers the role of government funding, a new Swiss cooperative, a community-owned data center effort in Maine, and what it would take for Europe and other middle powers to compete. Joshua Tan is CTO at Current AI. He also leads product and strategy for the public AI movement and leads Stanford AO, an incubator and lab for autonomous organizations at Stanford OpenLab. He previously co-founded Metagov, a lab for engineering institutions, completed his PhD and postdoc in computer science at Oxford, and held fellowships at Stanford, Princeton, and MIT. He founded and led DAOstar. Transcript Joshua Tan research page Current AI Not just the model (Artifacts Interview)
Kevin Werbach speaks with Brett Levenson, co-founder and CEO of Moonbounce, about building real-time controls that make AI systems follow the policies companies write for them. Drawing on his years leading integrity work at Meta after the Cambridge Analytica scandal, Levenson explains why content moderation policies there could not be enforced consistently. His team shifted from a decision-first approach to what he calls info-first enforcement, breaking complex policies into simple yes-or-no questions organized in a decision tree. Reviewer consistency jumped dramatically. That atomized approach now underlies Moonbounce, which acts as a semantic firewall that evaluates every input, output, and action an AI takes. Levenson argues that AI made the application layer non-deterministic, breaking security models that assume predictable software. He describes the challenge of making decisions within a few hundred milliseconds, and a decision memory system that keeps policies adaptive by incorporating customer corrections without hidden state. He also explains Moonbounce's move beyond simple allow-or-block choices to escalating to humans and rewriting outputs. Werbach and Levenson discuss the legal tension around audit trails, payment providers acting as de facto regulators, and why Levenson believes the industry needs measurable, falsifiable standards. Brett Levenson is co-founder and CEO of Moonbounce. He left Apple in 2019 to lead business integrity at Facebook during the Cambridge Analytica fallout, and later headed Meta's Integrity unit. He co-founded Moonbounce with CTO Ash Bhardwaj, a former Apple engineering leader who built large-scale cloud and AI infrastructure. Moonbounce has raised $12 million in funding co-led by Amplify Partners and StepStone Group. Transcript
Kevin Werbach speaks with AI journalist Sharon Goldman about her new venture, Ground Level AI. Goldman describes taking on the AI beat at VentureBeat in 2022, months before ChatGPT launched, and then learning to translate technical developments for Fortune's broad business audience. She explains why she left to launch her own newsletter and podcast, focused on infrastructure, security, governance, policy, and the communities absorbing AI's effects. Goldman shares her reporting from data center sites, and weighs how much of the data center backlash reflects local impacts versus broader anxieties about AI. The conversation turns to cybersecurity, where the speed and scale of AI-enabled attacks may outpace defenders. Goldman argues that the AI safety and cybersecurity communities, long divided by culture, must now work together. She closes on what she thinks is underappreciated: how quickly things are changing. Sharon Goldman is the founder of Ground Level AI. She spent four years covering the AI boom, most recently at Fortune and before that at VentureBeat, and has more than 15 years of experience covering technology and business for publications including Business Insider, Forbes, and CIO. She launched Ground Level AI in June 2026 as a newsletter and podcast on Substack. Transcript Ground Level AI Who gets a seat at the table to decide if frontier AI is safe? AI safety and cybersecurity have long been two different worlds. In the age of AI agents, they're colliding
Kevin Werbach speaks with Robert Levitan, Chair of the Ethical Tech Project, about what the early internet can teach companies deploying AI today. Levitan, who helped build iVillage and Flooz.com in the dot-com era, argues that the central lesson of those years is that new technologies always carry unintended consequences. Moving fast and breaking things is untenable, he says, now that AI sits on top of the internet and mobile. Levitan explains his essay comparing a coming AI disaster to the 1911 Triangle Shirtwaist Factory fire, which spurred workplace safety laws and helped shape the New Deal. He expects a comparable AI catastrophe to trigger regulation, and urges executives not to wait for it. Trust is a competitive advantage, he argues, and litigation will arrive much faster than it did for the internet. The conversation closes with why Levitan remains an optimist despite the risks, pointing to healthcare's ethical framework and guardrails as a model for other industries. Disclosure: Kevin Werbach is an advisor to the Ethical Tech Project. Over thirty years, Robert Levitan has founded, scaled, and advised companies including iVillage, Flooz.com, and Pando Networks, and his recent work focuses on the societal impacts of AI. He studied history and public policy in college and describes himself as a serial entrepreneur whose ventures have ranged from a high-profile IPO to a high-profile bankruptcy to a private sale to Microsoft. Transcript
In the final episode of our series on governing AI agents, Kevin Werbach speaks with Harish Peri, SVP and General Manager for AI Security at Okta. Peri frames agent governance as the natural next chapter of what Okta has done for two decades: standing in the middle of people accessing technology. The twist is that the new "software" is a non-deterministic agent with a brain, which imposes a much higher security bar. He argues that agents live at the application layer, where the real question is one of authorization: is this agent allowed to take this action or access this data, at this moment, on behalf of this user, given all available signals? Much of the conversation explores why a neutral, independent control plane separate from the frontier models and agent runtimes matters from a cybersecurity standpoint, spreading risk across multiple layers rather than concentrating it in one place. Peri notes that while awareness of rogue AI is universal, roughly 20% of agents carry about 80% of the risk. He distinguishes security threats like prompt injection and poisoned skill files from "intent mismatch," where an under-specified instruction such as "clean this up" gets read as "delete," and explains how coarse-grained limits, fine-grained context-based authorization, and selectively applied human-in-the-loop checks each play a role in agent governance. Harish Peri is the SVP and General Manager for AI Security at Okta, where he leads product, go-to-market, and commercial strategy for securing agentic AI. He has more than 20 years of experience across engineering, product management, marketing, and general management, spanning financial services, technology, and human capital management, with prior roles at Salesforce, ADP, and Proxyclick. He holds an MBA from the Haas School of Business at UC Berkeley. Transcript