Sam Curry

When decisions come from a network of agents, old management rules no longer apply: how do you maintain accountability and predictability with non-deterministic technology? They ask the audience to name the leadership challenges they see in AI-powered teams, leaving the question open.

The post states: "It's no longer a question of if we will work with non-human team members, but how we will lead them." It raises the two questions above and points readers to a longer article on the subject.

The posts carry no publication dates, so they cannot be ordered over time. They sit alongside Curry's arguments about identity and fundamentals rather than replacing them.

Read original

The key question is not what new capabilities offer, but whether basic security is done properly and what happens as agentic tools spread. They call out "sprawl," pointing to a hygiene and control problem rather than a purely technical breakthrough.

Curry describes sitting down with Sander Almekinders on the final day of RSAC to discuss securing agentic AI and getting the basics right, including fundamental problems and where agentic sprawl will lead.

Read original

They frame this as a core zero trust problem, not a side detail, making it the most operational position in the posts.

Curry describes a Dark Reading conversation with Alexander Culafi, alongside Yaroslav Rosomakho, about an RSAC talk on the workload identity challenge, titled "What Are You, Really?

• Authenticating Workloads in a Zero Trust World" and scheduled for March 26 at 12:20 PM.
• The post puts the question directly: as machines talk to machines, how do you know authN and authZ the silicon identities?

Read original

Both are verification and privacy-engineering questions, not adoption cheerleading. They connect these questions to the societal and cybersecurity impact of agentic AI.

Curry describes a recorded conversation with Richard Stiennon about the rise of agentic AI, lists the subjects the conversation covered, and asks listeners what it got right or missed.

Read original

They invite listeners and readers to assess the discussion—what was right, what was missed, and what challenges they see—making the audience part of the argument, not just its recipient.

Posts promote a CISO Series live recording in Boston on May 15, 2025 at the Battery Wharf Hotel, hosted by David Spark and Andy Ellis, and a Richard Stiennon conversation. One post asks what listeners think and what the conversation got right or missed; another asks readers about their biggest leadership challenges with AI-powered teams.

Read original · Original 2 · Original 3

This is the clearest single entry point because they list the ground the conversation covers rather than only promoting it.

Curry describes a recorded conversation with Richard Stiennon about the rise of agentic AI and "what is really happening and what we need to do collectively and individually about it."

• They flag the specific subjects covered: how to tell whether a feature is actually used, how to use information without knowing the information in order to build better systems, and what agentic AI means for society and cybersecurity.
• The tone is direct and self-critical: they ask listeners what the conversation got right or missed.

For brands planning a campaign

Useful when a security vendor wants to know how Sam Curry frames agentic AI in public: feature adoption in practice, privacy-preserving data use, and societal impact. A brief that only asks for "AI security thought leadership" will miss the practical focus on adoption and verification.

Newcomers get a quick sense of the argument they repeat across formats.

Curry describes sitting down with Sander Almekinders on the final day of RSAC to talk about securing agentic AI and "getting the basics right."

• They say the discussion covered fundamental problems and where agentic "sprawl" will lead, and that they got specific along the way.
• The post states a clear position: the interesting question is not the new capability but whether basic security is done properly as agents multiply.

For brands planning a campaign

Relevant to zero-trust, identity, and security-operations vendors: their public framing ties agentic AI back to governance and hygiene. A campaign built on "agent sprawl" and control basics will match how they talk; a purely capability-led pitch will not.

Curry describes a conversation with Alexander Culafi of Dark Reading, alongside Yaroslav Rosomakho, about an upcoming RSAC talk on the workload identity challenge.

• The stated problem: as machines increasingly talk to machines, how do you authenticate and authorize silicon identities?
• The post names the talk as "What Are You, Really?
• Authenticating Workloads in a Zero Trust World," scheduled for March 26 at 12:20 PM, and links to the article.

For brands planning a campaign

Central for machine identity, workload identity, and zero-trust vendors. It shows how they pair the abstract "agentic AI" theme with a named operational problem — authN and authZ for non-human identities — the most campaign-ready topic in these posts.

The post shows the management and risk side that runs alongside their security work.

Curry argues that the nature of leadership is changing as AI and autonomous agents enter workflows, and that the old rules of management no longer apply.

• They frame it as a matter of when, not if, people will work with non-human team members, and ask two concrete questions: how to maintain accountability when decisions are made by a network of agents, and how to achieve predictability with non-deterministic technology.
• The post points to an accompanying article and invites readers to name the leadership challenges they see.

For brands planning a campaign

Useful for vendors selling to executives rather than practitioners, including those focused on security leadership, governance, or risk platforms. It also offers a discussion prompt for a webinar or roundtable: they ask the audience directly rather than only stating a position.

Curry promoted a CISO Series podcast live recording in Boston on May 15, 2025, at the Battery Wharf Hotel.

• They named David Spark and Andy Ellis as hosts, noted doors at 5:00 PM and recording at 5:45 PM, and mentioned food, drinks, and conversation afterward.
• Admission is described as free with the password "Wicked Smart."

For brands planning a campaign

Points to event activation rather than content placement: a security vendor considering a live recording, regional CISO meetup, or hosted conversation has a concrete example of a format Curry takes part in, with the CISO Series as partner.

In one post, Sam Curry describes a conversation about the rise of agentic AI, what is happening and what needs to be done collectively and individually, including its impact on society and cybersecurity.

• Another post covers the fundamentals of securing agentic AI and where “sprawl” may lead.
• A third raises leadership questions about accountability and predictability when decisions come from a network of agents.

Interview and conference-linked commentary, supported by LinkedIn posts.

For brands planning a campaign

A strong fit for enterprise security campaigns that frame agentic AI as a risk, governance and operating-model issue—not a feature checklist. Useful for vendor content helping security leaders distinguish practical controls from hype.

Examples: Source 1 · Source 2 · Source 3

Sam Curry links the issue to a conference talk titled “What Are You, Really?

• Authenticating Workloads in a Zero Trust World” and a media conversation about the challenge.
• They frame it as a core zero trust problem, not a side detail.

Conference talk and media interview, with a LinkedIn post summarizing the topic.

For brands planning a campaign

Relevant to identity security, zero trust and machine identity campaigns. The content helps explain why non-human identities need authentication and authorization controls.

Examples: Source 1

They raise questions about maintaining accountability when decisions come from a network of agents and ensuring predictability in a world of non-deterministic technology. The post points readers to a longer article and asks what leadership challenges others see in AI-powered teams.

For brands planning a campaign

A fit for campaigns aimed at security and business leaders navigating AI adoption, team design and governance. The leadership angle can support executive-level content and event programming.

Examples: Source 1

Examples include a podcast conversation about the rise of agentic AI, a live CISO Series podcast recording in Boston on May 15, 2025, a conference-floor interview about securing agentic AI and a media conversation tied to an RSAC session on workload identity. Posts often promote the conversation and invite listeners to assess what it covered well or missed.

Podcast appearances, live recordings, conference interviews and LinkedIn posts.

One post promotes Sam Curry’s own article and discussion prompt rather than a third-party interview or event.

For brands planning a campaign

Brands can consider Sam Curry for moderated panels, podcast interviews, live event appearances, conference-adjacent conversations and LinkedIn amplification. They are a fit for campaigns seeking a knowledgeable interview subject or discussion participant, not just a bylined article.

Examples: Source 1 · Source 2 · Source 3 · Source 4

One asks listeners what they think and what the conversation got right or missed.

• Another asks readers about the biggest leadership challenges they see in a future with AI-powered teams.
• The approach uses discussion prompts and peer input, not just broadcast announcements.

For brands planning a campaign

Useful for campaigns seeking comment threads, community discussion or audience participation around cybersecurity and AI leadership. Brands can pair a post or event with a question that gives the audience a reason to respond.

Examples: Source 1 · Source 2

Ask whether the connection involves employment or sponsorship.

View example

Ask whether the tags reflect a role, sponsorship, or affiliation.

View example

View example

Authenticating Workloads in a Zero Trust World," and sat down with Sander Almekinders on the conference's last day to discuss securing agentic AI. The posts do not state the year of the March 26 session.

View example

View example

Ask whether the tag reflects membership, sponsorship, or a formal role.

View example

Desai writes from inside a vendor security-operations effort, describing the launch of Zscaler's Agentic Security Operations solution and testing frontier models against real attack and defense scenarios. Curry's posts are interview- and conversation-led, with a focus on accountability, leadership, and non-human identity.

Read original · Original 2 · Original 3 · Original 4 · Original 5

Chaudhry speaks as a platform CEO, sharing enterprise strategy and customer examples at CIO and CISO summits. Curry's material is more conversational and interview-based, focusing on leadership questions and workload identity rather than a company platform pitch.

Read original · Original 2 · Original 3 · Original 4 · Original 5

Grolmus writes market and financial analysis of security vendors, comparing ARR, growth, and strategic positioning. Curry's posts focus on security practice, identity, and leadership rather than company financials.

Read original · Original 2 · Original 3 · Original 4

Desai's public work is a closer fit for a vendor selling detection, investigation, and automated remediation to SOC leaders.

• One post describes an agentic security operations launch that unifies exposure and threat management, feeds agents inline telemetry across network, identity, endpoint, cloud, and AI, and closes the loop from detection to enforcement through a zero trust platform.
• Another describes testing frontier models against real attack and defense scenarios and reports how multi-step reasoning changed the way exploit paths get built.
• For a campaign showing security leaders how defenders find and contain attacks faster, this is the closer match.
• Curry's public framing focuses on authenticating and authorizing non-human identities, so a buyer whose product is the identity layer itself is making a different argument.

The posts start with a vendor launch and a product architecture case.

• The strongest example is an announcement naming the launch's own speakers and partners.
• A campaign that wants a practitioner to make the case for the problem before introducing a product is starting from a more commercial position.
• The focus here is telemetry feeding SecOps, not authenticating and authorizing machine identities, so a workload identity campaign would need another route into the subject.
• Nor do the posts demonstrate the exchange an identity campaign might require: they are written product and research summaries, not conversations with a counterpart.

Examples: Source 1 · Source 2

One post describes Gartner CIO and CISO Summit keynotes built around 'build for the secure agentic future,' including a CISO describing a legacy network dismantled and a CIO consolidating more than 20 legacy systems onto one platform.

• It also delivers a direct message to CEOs, CIOs, and CISOs: reduce inertia instead of bolting security onto legacy architecture.
• Another post argues that AI agents inherit massive privileges, that firewalls and VPNs will not secure them, and that every user and agent should be treated as untrusted.
• For a campaign aimed at executives buying a strategic zero trust direction, this voice fits better than a practitioner conversation, with the vendor positioned as the architect rather than the guest.

The audience is right, but the format is wrong for a podcast or interview slot.

• The posts show a vendor executive making the company's architecture case through customer case studies, keynotes, and written arguments—not a back-and-forth with someone responding to another person's framing.
• The subject is also broader: hiding attack surfaces, stopping lateral movement, and treating agents as untrusted, rather than the specific question of how to authenticate and authorize a silicon identity.
• A campaign that needs the problem stated and then answered in an exchange would lose that dynamic in a keynote.

Examples: Source 1 · Source 2

The posts walk through a quarter and a product launch in numbers: revenue and ARR growth, emerging-product share of new business, disclosure gaps the company had not updated, and the acquisitions assembled behind a SecOps launch.

• The second post benchmarks a smaller platform's quarter against a larger rival on ARR, growth rate, and net-new ARR, then assesses the strategy against that peer group.
• For a vendor preparing investor or board conversations, or a campaign that needs an outside analyst to frame a company's position against competitors, this is the work the task requires.

Grolmus writes third-party market analysis for people tracking public cybersecurity companies, not guidance for security leaders deciding how to authenticate machine identities.

• The campaign's target reader is therefore a different one.
• The posts offer neither a practitioner walkthrough nor a customer-facing argument a vendor could jointly carry, so they are better suited to supporting market context than serving as the campaign's main voice.

Examples: Source 1 · Source 2