Uncapped with Jack AltmanThe Future of AI Software Security | Ep. 39
CHAPTERS
AI “bears” and why software security is about to get harder
Daniele Perito frames the coming shift in security: attackers get “abundant intelligence” via AI, turning today’s sporadic threats into scalable, automated ones. The episode’s central premise is introduced—defending software in a world of many AI-powered attackers.
The founding insight behind Faire: take discovery and payment risk off retailers
Daniele recounts Faire’s contrarian origin: betting on brick-and-mortar retail growth by fixing wholesale discovery and purchasing friction. The key idea was enabling retailers to order with net terms and easy returns, with Faire underwriting the risk using technology.
Finding product–market fit: experiments, then “try before you buy” clicked
The team explored several approaches (including consignment and rewards) before landing on messaging that instantly resonated. A fast iteration loop—trade show feedback plus overnight code changes—made the winning concept obvious.
Operating a marketplace: rigorous truth-seeking in a chaotic, recursive system
Daniele explains why marketplace businesses demand unusually high operational rigor: small tweaks can ripple across supply, demand, risk, and onboarding. Data analysis must be paired with intuition to avoid getting trapped in incremental optimization.
Epistemic humility: why A/B tests reveal the limits of “knowing”
Marketplace iteration teaches a specific kind of humility: strong beliefs routinely fail due to second- and third-order effects. Daniele describes the market as a “truth-seeking machine” for practical product questions, rewarding experimentation over certainty.
Convincing the world: PMF isn’t instant understanding of TAM or inevitability
Even after early traction, Faire still faced years of explaining the opportunity to investors and recruits. The total addressable market was hard to size, and broad external validation lagged internal conviction.
Starting companies in the AI era vs 2017: faster shifts, higher stakes
Daniele contrasts the steadier assumptions of 2017 with today’s rapidly changing AI landscape. The pace of change affects strategy, competition, and the psychological intensity founders feel.
Cash App’s early days at Square: outsized impact through security and fraud work
Daniele shares how he approached Square with a belief that an individual could dramatically change outcomes inside a large organization. He joined the Cash App effort through a security lens, then led anti-fraud improvements that helped the product scale safely.
Why Depthfirst exists: security as a prerequisite for AI safety and control
Depthfirst is positioned as both a commercial company and a mission-driven effort: without major improvements in software security, broader AI safety goals are compromised. The strategy is a flywheel—secure open source and critical infrastructure while selling enterprise security outcomes.
AI security landscape: toward a unified “AI security engineer” that reasons
Daniele argues AI changes security tooling from narrow, heuristic scanners to systems that can reason across code and infrastructure. This enables deeper vulnerability discovery, fewer false positives, and consolidation of fragmented security categories.
Attackers vs defenders: imperfect security, lower attack cost, but defenders have context
Security is framed as economics: perfect defense is impossible, enforcement online is limited, and AI reduces attacker cost—raising attack frequency. Still, defenders can regain leverage by using full-system context and continuous scanning to tilt the balance back.
Building superhuman attackers for defense: Depthfirst’s tech stack and team design
Depthfirst combines infrastructure-heavy agent scaffolding with deep research (including reinforcement learning) to push beyond shallow vulnerability detection. The team’s composition—infra/security leadership plus advanced AI research—supports both production reliability and frontier capability.
How humans and AI work together + platform vs pipeline lessons from Faire to Depthfirst
Daniele expects a collaborative model: AI accelerates reviews and reduces the security-vs-productivity tradeoff, while humans retain final contextual judgment. He also contrasts marketplace coordination needs with pipeline-style experimentation, sharing a practical decision habit: study ~30 concrete examples to build intuition fast.
Get more out of YouTube videos.
High quality summaries for YouTube videos. Accurate transcripts to search & find moments. Powered by ChatGPT & Claude AI.
Add to Chrome