Autonomous tech can drive real progress — but only if we can secure it. If you're building or using agents and struggling to secure them, I'd love to chat.

Today I'm back to being a founder, heads down with a team building the answer. I've been calling this space autonomous runtime security: real-time intelligence and enforcement for systems that act on their own.

This wasn't a Vanta limitation. It's industry-wide. The security stack we have today simply wasn't built for systems that act on their own.

I ran into this firsthand at Vanta. We were one of the first orgs globally certified under ISO 42001 for AI management systems. But as we built Vanta AI and our own agents, we were never satisfied with the security automation we could achieve. The right tools weren't there.

This isn't just a Clawdbot problem. It's a problem for all agents. They call tools, move data, and chain decisions at model speed. Humans aren't reviewing every action. So what secures the runtime when the runtime is autonomous?

Clawdbot is a live case study of what happens when agents meet our current security stack. Exposed instances. Prompt injection via email. Credential leaks. One-click RCE. 170k+ stars, massively viral, and a security model that can't keep up.

https://t.co/Ref8GgkIR5

yes things are changing fast, but also I see companies (even faang) way behind the frontier for no reason. you are guaranteed to lose if you fall behind. the no unforced-errors ai leader playbook: For your team: - use coding agents. give all engineers their pick of harnesses,

Today we launch the Agentic AI Foundation (AAIF) with project contributions of MCP (@AnthropicAI), goose (@blocks) and https://t.co/jBPxH1YTJa (@OpenAI), creating a shared ecosystem for tools, standards, and community-driven innovation. Learn more about this major step toward:

GO BLUE

Some awesome in-product marketing I saw in my @TrustVanta dashboard this morning Tells users how much-existing data/policy converts to getting certified in a new compliance category + makes it stupidly easy to get in touch with their sales team

When people copy you, the best strategy is usually to ignore them. People who copy you are (a) unoriginal and (b) opportunists, and those are both strong predictors of failure. If you wait them out, they'll eventually drop away.

4 ways for validate your B2B startup idea: 1. The do-it-manually path @christinacaci manually created compliance reports for a few companies and noticed (surprisingly) that they all found them very valuable. She then built @TrustVanta (last valued at $1.6B):

Watch Vanta CEO & co-founder @christinacaci's interview with @_pheebini of @Forbes on how the company built a resilient & fast-growing business focused on helping companies get secure & demonstrate trust. 🔗 https://t.co/8cTbDx1iqt

I so enjoyed this conversation!

Just in time for Mother's Day this weekend, Vanta CRO Stevie Case joined other moms & sales leaders from OpenAI, Fivetran, Atlassian & Amplitude to talk about scaling a career while scaling family in this special episode of the 20VC podcast. https://t.co/bslxGcqFBy

Fortunate to be part of such an amazing team. Thanks for spending time with us @mariogabriele

Congrats to all my fellow Vanta’ns on being recognized as a top 20 disruptor! And a big thank you to @christinacaci for letting me come along for the ride. More disruption incoming 👀 🦙 🚀

Visited @HF0Residency yesterday and was blown away by what @davefontenot has put together. So much so that I’m heading back there right now 😂

One difference between worry about AI and worry about other kinds of technologies (e.g. nuclear power, vaccines) is that people who understand it well worry more, on average, than people who don't. That difference is worth paying attention to.