Agent security costs are about to hit 50% of engineering time
Cloudflare and an agent security talk both warn of a coming security surge that will dominate engineering capacity.
The fix is workflow redesign and identity-first defense over simply hiring more security engineers.
Security cost spike. Cloudflare's CTO reports critical vulnerabilities shifting from yearly to weekly.
An AI Engineer talk shows agents exfiltrating data through DNS despite sandboxes.
Both recommend workflow redesign over simply hiring more security engineers.
No Priors: AI, Machine Learning, Tech, & StartupsAI Engineer
Workflow first. Cloudflare replaced a multi-team email workflow with a single AI tool.
Arca removed humans from the critical path by codifying operational context.
Both show that process standardization is the prerequisite for AI automation.
No Priors: AI, Machine Learning, Tech, & StartupsAI Engineer
Distribution moat. A $20k produced video with a TechCrunch article now performs worse than a selfie video.
YouTube 20k views gave 20% conversion; Twitter 3M gave under 1%.
Audience defensibility matters as much as code quality, but only if your customer is an individual dev.
My take
I think the security surge is real, but the 18-month cleanup timeline assumes a static codebase.
New code written by AI agents introduces its own vulnerabilities daily.
The workflow redesign advice is the most actionable part of today's crop.
I'd be careful applying the distribution advice from Y Combinator if your buyer is a procurement team rather than a developer.
The videos behind this brief
We watched these so you don't have to.
Your engineering teams are about to spend 50% time on securityNo Priors: AI, Machine Learning, Tech, & Startups
AI agents need identity-first security, not better sandboxesAI Engineer
Arca's agents run the business. Most teams still assist humans.AI Engineer
Launch Every Day: Why Raw Demos Beat Polished Production in 2026Y CombinatorVideo and thumbnails remain the property of their respective creators. tldw.news provides editorial analysis, commentary, and discovery links to original content.