Building Cyber Defense for the Agentic Era

Video summary

Armadin CEO Kevin Mandia says AI attacks operate at machine speed, and Armadin has found over 90 production zero-days since January 2026.

After 30 years in security and building Mandiant, Kevin Mandia says AI’s rapid shift brought him back to operating, joining Armadin’s founding team. He describes AI attackers probing many network paths at once, while nation-states may evolve from targeted “sniper” operations toward broader drone-swarm tactics. Armadin’s AI-driven red team maps customer networks continuously and verifies whether vulnerabilities are exploitable; Mandia says it found more than 90 zero-days in production environments since January 2026, including at Fortune 500 companies. He argues that conventional penetration testing cannot match continuous, agent-led red teaming, and that defense must become autonomous: Armadin Blue aims to turn discoveries into rapid safeguards through tools such as EDR and firewalls. Discussing SOCs, the Hugging Face incident, and company-building, Mandia stresses that human response will be too slow, AI systems need expert-designed guardrails and detailed logging, and startups must scale funding, sales, and customer trust at AI speed.

Chapters

1. 0:00Intro: Armadin’s 90+ production zero-days and AI-driven defense
2. 1:06Why Kevin came back: Armadin’s founders and AI red-blue strategy
3. 4:19What AI attacks look like today: 25,000 agents and anonymous GPU access
4. 7:18Nation-state attacks vs. AI drone swarms: Armadin’s continuous hyperattacks
5. 14:34Why pen testing is dead: Armadin found 90+ production zero-days in 2026
6. 18:36Autonomous defense explained: Armadin Blue’s rapid EDR and firewall controls
7. 21:22The future of the SOC: AI-led response and the Mythos wake-up call
8. 27:04Lessons from the Hugging Face incident: Armadin models completed up to eight of 20 kill chains
9. 31:34Lessons from the Hugging Face incident: AI audit trails, human review, and agent-found zero-days
10. 35:44Building a company at AI speed: From Mandiant’s 2004 breach-response model to Armadin’s proactive intelligence
11. 39:32Building a company at AI speed: Armadin’s 80 mph tailwind, go-to-market buildout, and race to beat Wiz
12. 43:27Building a company at AI speed: Armadin’s enterprise focus, customer-led differentiation, and two-year security shift