AI Summary
→ WHAT IT COVERS Datadog CISO Emilio Escobar outlines how a 4,000-engineer organization deploys coding agents securely, covering credential management, AI skill vetting, software supply chain risks, and why the real AI security threat is not rogue models but an explosion in discovered vulnerability volume. → KEY INSIGHTS - **Broad AI Access Over Blocking:** Datadog issued ChatGPT licenses to all employees rather than restricting access, achieving a 98% adoption rate across engineering, marketing, and sales. Escobar argues that blocking tools never prevents use — it only creates blind spots — while early, permissive adoption identifies power users worth rewarding and avoids unsanctioned shadow usage entirely. - **Role-Based MCP Servers for Data Governance:** AI flattens organizational data hierarchies by enabling any employee to query databases they technically had access to but lacked the SQL skills to exploit. Datadog's solution is deploying role-based MCP servers — for example, a dedicated SDR server — so each employee's AI agent only surfaces data appropriate to their specific organizational function. - **Ephemeral Credential Injection for Agent Security:** Rather than letting coding agents access static credential files in home directories, Datadog built a sandbox where agents receive ephemeral, short-lived tokens only at the moment of need. AWS secrets, npm publish keys, and GitHub tokens are injected on-demand via CLI tooling, eliminating the risk of a compromised agent exfiltrating persistent credentials. - **LLM-Based Intent Judge for Skill and Code Vetting:** Datadog built an internal LLM judge that evaluates whether a piece of code or a marketplace skill is designed to cause harm — not just scanning for known CVEs. This judge now gates every third-party skill before agent adoption, has detected malicious packages in major marketplaces, and also flags reward-hacking agent outputs where code technically solves a metric while causing unintended damage. - **Volume of AI-Discovered Vulnerabilities Is the Real Risk:** Escobar is less concerned about AI models autonomously hacking systems than about the operational collapse that follows when AI multiplies discovered CVE counts by orders of magnitude. Current security frameworks still mandate fixing every critical finding, a standard incompatible with a world where vulnerability discovery volume increases a thousandfold practically overnight. → NOTABLE MOMENT Escobar describes an internal business intelligence tool that inadvertently let a sales rep query compensation data meant for a separate team — not because permissions were wrong, but because AI enabled anyone to generate the SQL that technically-permissioned data had always allowed, exposing a structural gap invisible before agents arrived. 💼 SPONSORS None detected 🏷️ AI Security, Agentic AI, Software Supply Chain, Credential Management, CISO Strategy