AI security feels fragile right now — and in this episode, Ron Bennatan, VP of Strategy, AI and Database Security at Varonis and founder of Guardium, JSonar, and AllTrue.ai, explains exactly why.

Ron unpacks what "fragile" actually means in the context of AI: it's a black box that requires careful handling, is sensitive to pressure, and is being outpaced by change that isn't linear or polynomial — it's exponential. What took 30 years of AI development previously has been eclipsed by the last three months alone.

Drawing on 30 years in data security, Ron walks through how his journey from Guardium (structured data) to Varonis (historically unstructured data) represents a reunion that was always inevitable — because the policies and security motions were always the same, even when the industry split the two apart. Now, with AI agents becoming the dominant access pattern in the enterprise — potentially replacing 99% of traditional human-driven data access — the data layer is emerging as the most durable signal in AI security.

The conversation covers why the AllTrue.ai thesis — that consumability and bridging the governance/security divide are more important than the tools themselves — translated naturally into the Varonis platform. Ron also breaks down why least privilege is fundamentally harder with agents (the permissioning model can't be deterministic when the decision-making isn't), why agents being unaccountable — no salary, no fear of being fired — makes detective controls less effective, and why the industry must accelerate toward preventive controls and intent analysis operating at machine speed.

Key topics covered:

Why AI security is fragile: the black box problem and exponential rate of change
How Varonis unifies structured and unstructured data security for the agentic era
Lessons from AllTrue.ai on consumability, and collapsing AI governance and security
Why 99% of enterprise data access will soon flow through AI agents
Intent analysis and chain-of-thought as the next frontier of data security
Least privilege vs. least autonomy — and why the permissioning model must evolve
Why agents' lack of accountability breaks the detect-and-alert model
The shift from monitoring to prevention and assurance at the data layer