Craig Thomas

speaker

382 appearances 2 recordings 1 series first heard Jun 2026 last heard 8 Jul

Craig Thomas’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

Recordings per month over the last 12 months — 2 in all, peaking in Jul 2026 with 1.

Appearances

newest first · ▶ plays the moment

Code Story | Startup Podcast for CTOs, CEOs and Technical Founders · The AI Control Loop: What's Missing in AI Security Today - with Craig Thomas of Wallarm · 8 Jul 2026 podcast

They actually enable the business and the developers to

And so the shift really then is from security as the team that says no at the end to security as the team that gives you the signal you need to be able to ship that code faster with confidence.

You see this in modern EGRC tools.

You see this in modern security programs, right?

Governance becomes evidence-based rather than attestation-based.

It's not just a checkmark once a year, once every three years, when you just roll it out.

You're not just asking, do you have a policy?

You're producing logs and evidence that show the policy was actually enforced correctly.

So that accountability then, though, it gets tied to specific AI sessions, specific agent identities, specific tool calls, not just, hey, we use this model.

And those artifacts now are continuous, not a point in time.

When a border regulator asks, you pull the timeline, not just a self-assessment from six months ago.

This also can now limit the impact if there is an actual security event, right?

A story I've heard in the past is once you have that actual attestation based, even if you do have an incident, you can say how it was limited, how it was contained, right?

Those notifications don't have to go to all 5 million, 10 million customers.

You can say, hey, these five customers were impacted today.

So fewer notifications, lesser fines, even if there is an incident because you have that attestation and that limit.

And so then that risk quantification becomes possible.

You can say this agent accessed this data 4,000 times in Q2.

Every access was within policy rather than, hey, we think our controls are good.

And so fundamentally, that changes.

Showing 161–180 of 382 · page 9 of 20