Building the AI Workforce for IT and Security Operations at @AtomicworkHQ.
Built @MinjarCloud, acquired by @Nutanix. Part of @trilogymafia
#ಕನ್ನಡ#తెలుగు
Thank you @JeffDean for letting me buy coffee for a few legends. My best purchase ever. 🫶☕️
Great running into @CoughranBill today, serendipitously after almost 4 yrs.
Bill’s advice to own the entire workflow loop, not just the AI, became a core premise behind @atomicworkhq.💜
Listen to @jliemandt, he built Trilogy Software which was the OG Palantir.
It was much harder to get a job at Trilogy than at Microsoft or Google. It was a cult brand for CS grads in late 90's and early 00's.
Joe Liemandt of Alpha School on why AI is today's 1910 tractor moment, and why parents once again have to rethink their kids' future:
"In 1910, 90% of America had an 8th grade education. There were basically no high schools. And over 30% of America is a farmer. So everybody's on the farm, 8th grade was enough."
"Then in 1910, the Case tractor rolled up on the American farm. You can go look at the ads, it literally looks like an Anthropic ad. 'Does the work of 50 programmers. Does the work of 50 farm hands.'"
"Literally everybody in America realized 30% of the jobs are going away. That path is gone, and we have to get our kids ready for this new future. And it was that same recognition I think that parents have today."
"What America did back then... they voted to fund an education that they never experienced. They knew they had to do something different than their background, see the world differently, to get their kids ready and get them the good jobs."
"That school system became the industrial system we've had the last 100 years. It served us really well for 100 years, but now it's time for the next change."
@jliemandt
In enterprise software, even the beef is pipeline.
Good to see @RamaswmySridhar and @alighodsi rip up the hectocorn playbook.
Hectocorn stakes. Pass the popcorn. 🍿🔥
I don't think we should fight. The two companies are complementary. Since you're not doing this AI stuff, I really think Snowflake should consider getting its AI tokens through Databricks. You can get both cheap OSS models as well as frontier (OAI/Ant/Gemini/Grok) models from our platform. It all goes through Unity Gateway which has Smart Routing, Budgets, and Access Control. You can even use Omnigent with any harness, including CoCo. Most of our customers used this to reduce token spend ~30% last few months while token count went up. Genie lets you then track, control, manage that spend, all your financials, marketing, etc. Quick POC?
We've entered the X2Shell era of Cyber Security.
It's beyond PHP2Shell or HTTP2Shell. Every layer of software and hardware is a potential attack surface.
Your IT and security teams face machine-speed exploitation with human-speed remediation. That gap is your business risk.
CEOs, CIOs and CISOs:
1. Your teams need reinforcements, not just reminders to patch faster.
2. Give your teams an AI Workforce for IT and security operations.
3. Be kind to your teams. Urgency just doesn’t create capacity.
#ITOps #SecOps #CIO #CISO #PHP2Shell
Everything is exploitable in AI era from hardware to software.
Start with visibility and control is a good advice from @toddmckinnon for IT and Security teams.
My thoughts on X2Shell coming soon!
Resolving the tension between security and innovation is simple, but not easy: We need visibility and control across every system that agents touch. https://t.co/m3ta1ASjSu
If you are a CIO or CISO, pay attention to what @nikesharora just said: "Deploy a second set of eyes to watch your deployments for drift, compliance and verifiability."
Human bandwidth cannot remain the last line of defense for enterprise IT and Security.
Hybrid patching and modern SOAR only work if the enterprise IT service management layer underneath can actually coordinate, verify and remediate at AI speed without creating new risk as new grants, approvals, requests and changes are deployed.
Most teams simply do not have the capacity to do this consistently. That’s the gap.
We need AI Workforce for Enterprise IT and Security.
It's been an eventful week. Multiple vulnerabilites in Internet facing software, coding repositories, examples of agent behavior that seem concerning and a flurry of security specialists with solutions that can partially solve your problem. There in lies the challenge. Given the state of IT and security infrastructure, no one solution works. Let's break it down:
1/3
1. Vulnerabilites are being found and will continue to be found as models get more capable, the fragmented nature of the effort denies us the opportunity for a comprehensive find and replace option.
2. Even if all vulnerabilities could be found instantly and patches available - we will be reliant on the ability of enterprises to deploy all these changes at speed. It is not clear what the collateral impact of all these patches will/could be to our infrastructure of deployed en masse.
We will need a hybrid patch approach.
3. Virtual patching(VP) is needed in conjunction with direct patching but for a comprehensive (VP) solve you have to be lucky enough to have "modern frontier defenders" (Cyber companies that have vaulted infrastructure that can create patches at speed and push content rapidly to protect their customers) you need them for your network traffic, your traffic to applications on the cloud, your WAF, your end point.
4. There will continue to be patches that will need to be deployed directly but virtual patching will take the heavy load off.
2/3 Medium term solve:
Unfortunately token economics and current cyber architectures will not allow for defender swarms to contend with an offensive attack launched using agents. (Some x pundits who aren't steeped in cyber should take heed). Yes, theoretically we should aspire to have these agentic swarms defend us when we are under attack, unfortunately an attack is a sniper moment, chained vulnerabilities, cloaked attack followed by swift exfiltration. It's a speed program not a brute force problem.
To solve for this, enterprises need to get their SOC architecture right, logs, feeds, cyber products orchestrated via a modern SOAR for swift response. Only then can we deploy agents to detect and remediate. In addition, enterprises need to modernize and dare I say platformize their perimeter stack to ensure consistency.
Unfortunately, enterprises still seem to not see the urgency across the board, decisions are stuck, CIO/CISO's have a lot on their plate. While some honestly have bit seen the scale of such a problem before and it's hard convincing the organization that one needs to open the floodgates on modernizing the IT and security infrastructure. So we will continue to see environments being brought down to patch today it's for PHP, tomorrow it will be for the next one.
3/3 AI deployments are the"wild wild west" - LLM capabilities are expanding faster than we can build products to secure them. Sure an agent will jump across guardrails in a research lab, which is a lesson for all of us to deploy agents securely. But there is a lag between the discovery, the availability of that in a public model and the time needed for the cyber industry to build governance or an antidote. And no, dear frontier lab friends, the world cannot just trust you to build the solve. The infrastructure industry in tech builds and the cyber industry secured and provides assurance to the boards and organizations around security and safety.
AI security is the new attack surface. CEOs (present company included) want AI adoption, getting the pace of adoption wrong could be the last decision we make, at the same time "deploying it wrong" could have the same consequence.
There are billions of dollars being spent on coding, is your coding harness secure? Start there. If agents can jump guardrails, they can hide stuff in code.
Validate business outcomes needed, test your user case and ensure agentic deployments are well guard railed. Deploy a second set of eyes to watch your deployments for drift, compliance and verifiability.
If you work in IT or Security, this one is for you.
Here’s why exploits exploded in 2026.
NIST scores AI models on a cyber capability index. This year, open-weight AI models crossed the 1000 mark.
GLM-5.3 is near 2400, just four months behind the U.S. frontier. That’s part of why so many critical vulnerabilities are being reported, even by non-security folks, in foundational software that enterprises and web applications depend on.
Some of these exploits sat hidden for 15 to 20 years, and AI can now turn them into working exploits that can compromise the entire system.
The real gap is the operational velocity between “we know about this” and “we’ve fixed it,” and that gap usually lives between IT and Security.
Human bandwidth cannot remain the last line of defense for enterprise IT and Security.
Here’s what I’d do this week: take your last critical advisory and trace where it sat waiting in your enterprise IT service management. Fix that handoff latency first.
This is a solvable problem and ops teams that tighten this enterprise service management loop now will be in a good shape.
I wrote up more of my thinking here: https://t.co/m0lhlTS8mg
#CIO #CISO #ITOps #SecOps
@ObserverRsv@nikesharora 100%, humans just cannot operate at warp speed of AI. We need extra pair of eyes, hands and legs. We call them AI Coworkers at Atomicwork.
We believe voice is the most natural way to interact with intelligence, so we created Dessa, the most authentic full-duplex speech model ever built. Talking with it feels like talking with a person…full of emotion, nuance, pauses, and a natural cadence.
https://t.co/r0qFLdvd6c
Frontier AI Makes the Exploitation Ladder Easier to Climb and IT Harder to Defend.
My thoughts on what it means for IT and Security teams - https://t.co/XndaXHrHtc
GLM-5.3 is the most cyber capable open weight model released to date.
Frontier AI is making the exploitation ladder easier to climb and enterprise IT harder to defend.
The fact that @AnthropicAI wrote a blog post about GLM-5.3 cyber capabilities almost 3 weeks ago should have sent alarm bells - https://t.co/Nk1CRFkYZk
OSS-Verify initiative from @theoremlabs and @AnthropicAI is much needed.
Mission critical softwares have always used formal verification and it's high time that foundational open source softwares get the same support.
Cyber resilience is like national security.
Passing a compliance audit doesn’t make you secure.
I repeat: compliance is not security.
Security is the work you do every day, long after the auditors leave.
And it’s more work in the AI era. Nobody is safe!