2026-09-17

Charles Guillemet, CTO of Ledger, shares how AI found vulnerabilities his 15-person security team missed for nine years — and explains why security-by-design and key management matter more than ever.

Charles and Tobi discuss the changing economics of vulnerability discovery, why prompting AI to "find vulnerabilities" isn't a full strategy, his recommendation for restructuring engineering teams around AI-native pods and "harness engineering," and why he believes the CISO function should stay organizationally independent.

A sharp, sobering listen for any CTO thinking about AI, security, and how fast both are moving.