Todd Marlin

AI Risk Expert | CEO @Guardrail_Tech | Empowering people to harness AI securely + ethically, while staying in control

[Todd Marlin @AIRiskExpert]

@Guardrail_Tech has been selected for the @MassChallenge UK 2026 accelerator, being chosen from nearly 2k applicants globally.
Excited to join a distinguished network of global innovators and industry leaders tackling the world's most pressing challenges. Over the next 4 months we'll be proud to contribute to the program and advance #AISecurity.

[Todd Marlin @AIRiskExpert]

Turncoat AI Agents Emerge as the New Inside Hackers - WSJ

[Todd Marlin @AIRiskExpert]

Companies are deploying internal AI agents faster than they can govern them, and those agents are a new kind of insider threat.
Employees across teams are building agents with no visibility into the data they expose or the access they open.
I spoke to the WSJ about it - link below.

[Todd Marlin @AIRiskExpert]

Most boards have not been briefed on what is happening in AI-driven cyber conflict.

1. Cybersecurity is a survivability function on the same level as liquidity and physical safety.
2. If you operate in finance, energy, healthcare or logistics, you are a target under any current threat model.
3. Every coding agent your engineers deploy is also a new attack surface.

The window to treat this as a technical issue has closed.

https://t.co/MeJ0ZPw4YR

[Todd Marlin @AIRiskExpert]

Free for early adopters through June 2026. No credit card required. If you are shipping with AI, scan it before you deploy it. 6/6
https://t.co/dDuBgvGyb4

[Todd Marlin @AIRiskExpert]

Today we are launching Traffic Light for Code + AI.
It is the first security platform built to verify both what AI-generated code does and the identity of the humans behind the components AI pulls in. 1/6
🟢 Go 🟡 Review 🔴 Stop
https://t.co/9RiEuYFJTJ

[Todd Marlin @AIRiskExpert]

Most security tools verify known vulnerabilities. Traffic Light for Code + AI verifies behavior, identity and provenance, the three things AI risk depends on.
Every scan creates a record at the moment the code ships, so the evidence exists when it is needed. 5/6

[Todd Marlin @AIRiskExpert]

Read more here -> https://t.co/vjXnqo76Sk

[Todd Marlin @AIRiskExpert]

Spoke with Reuters on Mythos and what it means for banks. Two things coverage keeps missing:
1. Legacy infrastructure — decades of layered architecture, none of it built with AI exposure in mind.
2. Concentration — banks share vendors. One vulnerability doesn't hit one bank.

[Todd Marlin @AIRiskExpert]

Agentic "digital workers" aren’t tools - they're actors. This shifts the Cybersecurity landscape toward AI Risk.
We are scaling legacy failures of Insider Risks at machine speed. It’s time for a new framework of responsibility.
Read below & stay tuned to @Guardrail_Tech!

[Guardrail Technologies™ @Guardrail_Tech]

AI isn’t just a tool. It’s a digital worker.
When you grant autonomous agents access to your infrastructure, you aren't just deploying software—you are scaling AI Risk.
Reimagining the insider threat for the modern cybersecurity landscape: https://t.co/Mn4r5LfpSr
Follow @GuardrailTech for upcoming releases in our AI Traffic Light suite at https://t.co/vcyJ103wRy, built to help teams scan and secure the next generation of AI agents.

[Todd Marlin @AIRiskExpert]

I built my expertise in rooms AI will never enter. Mistakes were visible. Fixes were earned. You built confidence through repetition, until the work could carry your name...https://t.co/jMb4p95kWM

[Todd Marlin @AIRiskExpert]

Two lives lost, different stories, same pattern of harm. For anyone who still thinks these are “edge cases,” how many more before we stop calling them rare?
https://t.co/gChr4Jp0sU

[Todd Marlin @AIRiskExpert]

There are some stories you can’t read without feeling sick to your stomach. This is one of them https://t.co/L36vIEBZVh

[Todd Marlin @AIRiskExpert]

The bottom line is these LLMs are human decisions at scale. You can’t control who the humans are shaping them. Proceed with caution.

Source: https://t.co/TTejANdx7i

[Todd Marlin @AIRiskExpert]

We only know that Meta’s chatbots were allowed to have “romantic” or “sensual” chats with kids because internal documents leaked.

[Todd Marlin @AIRiskExpert]

So, if you’re deploying AI, ask for receipts: written safety standards ; what’s barred with minors and vulnerable people; red lines on health/finance/identity; audit policy drift; a kill switch; an escalation path.