INFORMAZIONI SU QUESTO EPISODIO
In this episode of CyberBytes, we sit down with Ken Johnson (CTO) and James Wickett (CEO), founders of DryRun Security, to unpack what actually happens when AI coding agents start shipping your product and no one is checking the work.
Ken brings two decades of AppSec experience, including six years leading offensive and defensive security at GitHub and training developers at Black Hat and DEF CON. James has been on the front lines of developer security since before DevSecOps was a category.
Together, they tested Claude, Codex, and Gemini building real applications and found 140 vulnerabilities across the outputs. None were production ready. Broken access control, authentication flaws, and logic bugs showed up across all three.
But this goes beyond a benchmark.
Ken and James break down why the first few weeks of AI coding feel like magic, why that performance degrades, and what happens when companies make hiring and budget decisions based on that early signal. They also cover why traditional SAST approaches cannot keep up with AI-driven velocity, why AppSec is being rebuilt in real time, and what a code intelligence approach looks like going forward.If you are shipping code with AI, this conversation will change how you think about security.J
ames's LinkedIn - https://www.linkedin.com/in/wickett/
Ken's LinkedIn - https://www.linkedin.com/in/cktricky/
DryRun Security - https://www.linkedin.com/company/dryrun-security/
Oliver's LinkedIn - https://www.linkedin.com/in/oliverlegg/
Aspiron Search - https://www.linkedin.com/company/aspiron-search/
