Artificial Intelligence

On buying intelligence as a service

 October 19, 2026

In the last couple of years, most companies have adopted some kind of AI. Most of them have done so by buying API access from a small number of frontier labs. This approach has the lowest barrier to entry and is often the preferred starting point, but it’s problematic because of the huge, unmanageable costs it creates, the shrinking, potentially useless gap in capabilities with open-weight models, and many sovereignty issues.

On finding vulnerabilities and shipping fixes

 August 17, 2026

Over the last year, I’ve watched AI models and tools that find vulnerabilities in code take a central role in security industry communications. Every few weeks, a new product announcement promises impressive results, such as AI tools that detect SQL injection, spot memory corruption bugs, identify logic flaws at scale, or chain tens of known vulnerabilities together. This can be impressive for attack purposes, but it is more an interesting novelty than defensive security.