Craig Thomas

speaker

382 appearances 2 recordings 1 series first heard Jun 2026 last heard 8 Jul

Craig Thomas’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

Recordings per month over the last 12 months — 2 in all, peaking in Jul 2026 with 1.

Appearances

newest first · ▶ plays the moment

Code Story | Startup Podcast for CTOs, CEOs and Technical Founders · The AI Control Loop: When AI Goes Rogue - with Craig Thomas of Wallarm · 24 Jun 2026 podcast

So the answer is not slow everything down.

Organizations that over-restrict AI experimentation, one, you'll lose your best engineers, you'll lose your best people to competitors that don't.

as well as the business is asking.

All of these quarterly earnings calls and other things, they're asking specifically what the AI strategy is and plan.

So we have to be able to support that, but do it in a secure way.

So I think the first thing is, hey, define the sandbox clearly, make it easy to use, Noah.

You can go out, you can innovate, you can test, but do it truly with a dev environment, isolated credentials, scoped API access, no production data.

logging enabled.

So you can understand that you can experiment quickly.

And that sandbox needs to be a first class experience, not just an afterthought.

And it needs to be usable, right?

We've all dealt with dev environments that didn't mirror production at all and caused all sorts of issues once it went to prod.

Being able to do that, to be able to support continuous AIS BOM going forward here as well, so that in those environments, you can understand what all is in your AI, what builds that out.

As well, and then create a fast path to production, right?

Shadow AI grows when that official path is slow.

So your point is you can't slow it down.

People are going to get around it one way or the other, right?

Either they're going to do their own thing outside your boundaries or they're going to leave.

So a lightweight AI system intake process, the security review, this data classification, runtime monitoring, it completes in days, not months or years in some cases, removes the incentive to go around it.

And then I think the last thing is your tooling being able to easily enforce new sandboxes or new environments that are stood up is important too, right?

Showing 341–360 of 382 · page 18 of 20