The Agentic Shift: Why Security is No Longer the Brake

In this conversation, CrowdStrike CEO George Kurtz explains that the most dangerous force in the digital landscape is no longer the nation-state actor, but the "agent state." By flattening the adversary pyramid, AI agents have made advanced tradecraft accessible to everyone, allowing low-skill actors to execute attacks with the speed and sophistication once reserved for top-tier intelligence agencies. The primary takeaway is that security can no longer be a reactive, human-paced function. To maintain an advantage, organizations must stop treating security as a bottleneck and start using it as an operational gas pedal. This requires a rethink of how we deploy AI: moving from black box experimentation to instrumented, monitored, and defensive-AI-driven architectures. For leaders, the advantage lies in recognizing that the immediate discomfort of rigorous security oversight is the only way to avoid the long-term costs of shadow AI.

The Flattening of the Adversary Pyramid

Historically, cybersecurity was defined by a pyramid of pain. At the base were high-volume, low-skill hacktivists; at the apex were low-volume, high-skill nation-states. AI agents have collapsed this structure. Because these agents can be deployed without guardrails, a hacktivist today can wield the same technical capability that required a state-sponsored team just a few years ago.

The shift is not just in capability, but in the nature of the attack itself. As Kurtz notes, the threat has moved beyond traditional malware into the realm of dynamic, prompt-engineered logic.

> "The new Apex Predator is the agent state. The same level of capability that a nation state would have just a few years ago essentially a hacktivist would have today. That has dramatically changed the overall threat environment."
>
> -- George Kurtz

This transition creates a compounding problem: attackers are iterating at the speed of inference. Where human-led breakout time--the window between initial access and lateral movement--was once measured in hours or days, AI agents have reduced this to minutes, or even seconds.

The Hidden Cost of Shadow AI

The most overlooked consequence of the current AI boom is the proliferation of shadow AI. Enterprises are deploying agents with identities and access to compute without understanding where they reside or what they are doing. This creates a systemic vulnerability where the very tools intended to accelerate business are simultaneously creating massive, unmonitored attack surfaces.

The failure of conventional wisdom here is striking: organizations often treat AI deployment as a fire and forget task. They launch agents, grant them access to production code, and hope for the best. Kurtz argues that this is a mistake. Without instrumentation from the birth of an agent--tracking every tool call, sub-agent, and data pull--the system is essentially operating blind.

Why Defensive AI Must Mirror Offensive Speed

The conventional approach--relying on frontier labs to provide security--is increasingly insufficient. Frontier models are often heavily guarded, refusing to engage with cybersecurity-related tasks to prevent misuse. This creates a defensive gap where attackers using open-weight models have more freedom to iterate than defenders using restricted frontier models.

> "The only way to fight AI today is with better AI. The defender knows their own systems. The defender has the architectural diagram. The defender has the code. How do you put all of that into something that you can dramatically increase your probability of outsmarting the offensive AI?"
>
> -- George Kurtz

The solution, according to Kurtz, is to build frontier-caliber defensive models that are specifically post-trained on security data. By creating a digital twin of an enterprise environment, defenders can run red-team agents against their own architecture in a virtual loop. This creates a lasting advantage: the defender is not just reacting to a signature; they are using their intimate knowledge of their own systems to outmaneuver the attacker logic.

The 18-Month Payoff: Moving to Open-Weight

While frontier models dominate the current hype cycle, the long-term competitive advantage for enterprises lies in the shift toward open-weight models. The cost of token maxing on frontier models is becoming unsustainable for large-scale operations. Over the next 12 to 18 months, we will likely see a migration toward smaller, specialized, open-weight models that are post-trained on proprietary data. This approach is more economical--costing cents compared to dollars--and it addresses the critical issue of AI sovereignty, keeping sensitive data within the organization control.

Key Action Items

• Audit your Shadow AI footprint (Immediate): Map every instance of agentic software currently operating in your estate. Identify what identity they are using and what data they have access to.
• Instrument agent lifecycles (Next Quarter): Ensure that every new agent deployment includes logging for tool calls, sub-agent spawning, and data access. Treat an agent birth as a high-security event.
• Adopt a Digital Twin security posture (6 to 12 months): Move away from static defense. Invest in systems that allow you to simulate your specific environment to test how automated agents would attempt to breach your internal architecture.
• Evaluate Open-Weight alternatives (6 to 18 months): Begin testing specialized, open-weight models for internal tasks. The goal is to move off expensive frontier models for routine operations, reducing costs while maintaining performance.
• Shift to Security as an Enabler (Ongoing): Stop treating security as a brake. Use security instrumentation to provide the visibility required to go faster with AI. If you can prove an agent is safe, you can deploy it with confidence.
• Disrupt your own development cadence (Ongoing): If your security team is still working on a waterfall schedule, you are already behind. Move to small, agile squads that can iterate at the speed of the agents they are defending against.