Secured by Galah Cyber
About Brendan Dolan-Gavitt
Brendan Dolan-Gavitt is a distinguished engineer and AI researcher at XBOW, where he builds AI agents that find and fix software vulnerabilities before attackers can exploit them. He spent roughly a decade before that as an associate professor at NYU Tandon School of Engineering, researching software security and the security implications of AI-assisted coding tools such as GitHub Copilot. He holds a PhD from Georgia Tech and has previously worked at Columbia University, MIT Lincoln Laboratory and Microsoft Research. He co-authored StarCoder, a large language model for code generation, and helped build the AI system that became the first to reach number one on HackerOne's US leaderboard. On Secured by Galah Cyber, he discussed how AI penetration testing actually works and where it breaks down.
- Talks about
- AI
In conversation.
1 episode
Secured by Galah Cyber Go straight to the good bits.
Key moments from How AI Pen Testing Actually Works (and Where It Breaks).
- 3:10From academia to building autonomous security tools
- 5:00Human pen testers vs AI agents: what is actually different
- 6:40Where AI helps most: boring tasks and low hanging fruit
- 8:30Scale: a thousand targets vs hiring a thousand testers
- 10:20Accessibility, economics, and Jevons paradox
- 12:30Accountability: audit evidence, traces, and “who signs off”
- 14:40Scope control: avoiding prod and preventing out-of-scope actions
- 16:20Safety checkers, overseer agents, and persuasion resistance
- 18:40The cost question: VC money, inference pricing, and efficiency
- 21:20When AI wastes money and why prioritisation matters
The path so far.
- Now
Distinguished Engineer · XBOW
- Earlier
Associate Professor · NYU Tandon School of Engineering
Sources: smashingsecurity.com
XBOW on Day One
XBOW is a US cybersecurity company that sells an autonomous penetration-testing platform.
1 person · 1 episode
Across the network.
In the room with
Spot something wrong? Suggest a correctionUpdated 28 October 2026
Be part of
the conversation.
Put your brand alongside the voices founders, investors and operators come to hear.
Explore sponsorshipWant a show of your own?
W2D1 Media — the team behind the Day One Network, which helped build Blackbird Ventures' Wild Hearts — builds and produces podcasts for funds, founders and operators. If you want a show built around your brand, let's talk.
