See all open roles on LinkedIn

ThreatModeler

The faster AI builds, the less viable "secure it later" becomes.

AI agents are fundamentally changing the speed and scale of software development. But security can't become the bottleneck trying to inspect everything they produce.

The answer is to move security upstream - into the architecture and design itself.

That's why this piece from Jeremy Lai and Invictus Growth Partners resonated with us.

In an AI-driven world, continuous threat modeling and Secure by Design aren't just best practices. They're how security keeps pace.

A great read on what the "unhired workforce" means for the future of security 👇

Somewhere in your company right now, an employee nobody hired is hard at work.

It's writing code that ships today. It's holding credentials to your most sensitive systems. It never sat for an interview and will never show up to an access review.

And it isn't one employee. It's thousands of them.

The bad guys onboarded their unhired workforce first. AI-enabled attacks grew 89% last year, and average breakout time is down to 29 minutes (CrowdStrike). As David Kennedy (TrustedSec founder, Binary Defense co-founder) puts it: "Attackers don't hold change-management meetings. They operationalized AI the week it got good. Defense isn't losing on skill. It's losing on clock speed."

The unhired workforce shows up in three places. Each is becoming a control point where the next decade of security value gets built.

𝟭. 𝗜𝘁'𝘀 𝘄𝗿𝗶𝘁𝗶𝗻𝗴 𝘁𝗵𝗲 𝗰𝗼𝗱𝗲: When most of your code is AI-generated, the blueprint becomes the perimeter.

𝟮. 𝗜𝘁'𝘀 𝗵𝗼𝗹𝗱𝗶𝗻𝗴 𝘁𝗵𝗲 𝗸𝗲𝘆𝘀: Machine identities outnumber your employees 80 to 1, and nobody offboards them.

𝟯. 𝗜𝘁'𝘀 𝗽𝗼𝘄𝗲𝗿𝗶𝗻𝗴 𝘁𝗵𝗲 𝗦𝗢𝗖: If defense runs at human speed, the adversary wins on tempo. Every time.

In the full piece, we discuss how each shift plays out, why the hype around AI defense mostly misses, and where we've concentrated conviction and capital (ThreatModeler, Axiad, Binary Defense).