{"id":16912,"date":"2026-11-02T17:05:14","date_gmt":"2026-11-02T22:05:14","guid":{"rendered":"https:\/\/blog2workato.wpengine.com\/?p=16912"},"modified":"2026-11-02T17:08:04","modified_gmt":"2026-11-02T22:08:04","slug":"security-agentic-ai","status":"publish","type":"post","link":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/","title":{"rendered":"A CISO\u2019s tips for running agentic AI in production"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Attackers are using AI at machine speed, and defenders cannot match that pace without equally powerful agents for threat detection, proactive product security reviews, and always-on evidence collection to maintain top-level security certifications and standards. At World of Workato 2026, <a href=\"https:\/\/www.linkedin.com\/in\/hgustavson\/\" target=\"_blank\" rel=\"noreferrer noopener\">Hans Gustavson<\/a>, Workato&#8217;s CISO, and two members of his team, <a href=\"https:\/\/www.linkedin.com\/in\/siddharth-yadav-2b144794\/\" target=\"_blank\" rel=\"noreferrer noopener\">Sid Yadav<\/a> (Senior Manager, Security Operations and Engineering) and <a href=\"https:\/\/www.linkedin.com\/in\/salhernandez\/\" target=\"_blank\" rel=\"noreferrer noopener\">Sal Hernandez<\/a> (Director, Governance, Compliance and Risk), showed what they have built in response: agentic workflows for security operations, audit evidence, and product security reviews.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you run integration, enterprise architecture, or business systems, this is worth your time. The building blocks on their slides are ones IT teams will recognize: Agents, Skills built as recipes, Knowledge Bases, event streams, and APIM. Hans pointed out that Workato has historically been seen as &#8220;really focused on the enterprise architect, and the IT leader,&#8221; and that the security domain is a strong fit as well.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>The pressure: AI works for both sides<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The session opened with three external data points, as cited on the team&#8217;s slides:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>87% of security leaders flagged AI-related vulnerabilities as the fastest-growing cyber risk (<a href=\"https:\/\/www.aigl.blog\/global-cybersecurity-outlook-2026\/\" target=\"_blank\" rel=\"noreferrer noopener\">World Economic Forum, Global Cybersecurity Outlook 2026<\/a>).<\/li>\n\n\n\n<li>Attack speed is up 65% from 2024, with the fastest observed breakout at 27 seconds (<a href=\"https:\/\/ir.crowdstrike.com\/news-releases\/news-release-details\/2026-crowdstrike-global-threat-report-ai-accelerates-adversaries\" target=\"_blank\" rel=\"noreferrer noopener\">CrowdStrike, 2026 Global Threat Report<\/a>).<\/li>\n\n\n\n<li>80 to 90% of tactics executed by threat actors in one AI-orchestrated campaign ran without human intervention (<a href=\"https:\/\/www-cdn.anthropic.com\/d7dd50dd1185f59be051b307150d877f2b82bd2c.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Anthropic Research, November 2025<\/a>).<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Hans drew a blunt conclusion for security teams:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;The notion of a human SOC is, I believe, truly dead. In order to protect yourself from the AI attacks and threats, we have to operate at the same speed.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Hans Gustavson, CISO, Workato<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The CISO framed it as a choice: AI expands what defenders can do and what attackers can do, and &#8220;the gap between the two is a choice, not a given.&#8221; Hans said the team&#8217;s work moved from AI-assisted use cases, to single-agent experiments last year, to solutions now running in Workato&#8217;s production environment.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>1. Agentic SOC: triage every alert, not just the loud ones<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Security tools are disconnected, and each new tool adds alerts, so an engineer looking at an endpoint alert may never see the cloud activity it connects to. Sid cited MDR (Managed Detection and Response) studies showing <a href=\"https:\/\/d3security.com\/blog\/ai-soc-report-d3-robust-solution\/\" target=\"_blank\" rel=\"noreferrer noopener\">40% of alerts are never triaged or analyzed<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The SecOps Agent works in stages:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Ingest and normalize.<\/strong> Alerts from many platforms land in one place and are normalized to the OCSF (Open Cyber Security Framework) format. The slides list sources such as <a href=\"https:\/\/www.sentinelone.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">SentinelOne<\/a>, <a href=\"https:\/\/www.wiz.io\/\" target=\"_blank\" rel=\"noreferrer noopener\">Wiz<\/a>, and <a href=\"https:\/\/aws.amazon.com\/guardduty\/\" target=\"_blank\" rel=\"noreferrer noopener\">AWS GuardDuty<\/a>.<\/li>\n\n\n\n<li><strong>Enrich.<\/strong> The enrichment agent correlates indicators of compromise against threat intel platforms and internal sources. It also adds context: who the identity is, what permissions it has, and what lateral movement an attacker could achieve from it.<\/li>\n\n\n\n<li><strong>Triage.<\/strong> The triage agent builds an investigation plan on the fly, runs it, and calls the alert a true or false positive, with its confidence and reasoning.<\/li>\n\n\n\n<li><strong>Respond.<\/strong> If the alert is a true positive and the agent has a remediation skill, such as quarantine, it acts. If not, it hands the alert to a human analyst. Containment workflows include human-approval gates.<\/li>\n<\/ul>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>SecOps<\/strong> <strong>Agentic SOC Workflow<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"488\" src=\"https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.47.24-PM-1024x488.png\" alt=\"\" class=\"wp-image-16918\" srcset=\"https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.47.24-PM-1024x488.png 1024w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.47.24-PM-300x143.png 300w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.47.24-PM-766x365.png 766w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.47.24-PM-1536x732.png 1536w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.47.24-PM.png 1956w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Sid said, investigations that used to take a couple of hours to days now take action within seconds. About 80% of alerts are auto-triaged by the agents, much of it false-positive noise, and only 20% go on to a human. Sid said the team no longer needs a team investigating alerts around the clock, and threats are being mitigated within their SLAs.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>2. Agentic GRC: collect evidence once, answer every audit<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sal shared typical pain around doing audit evidence collections the old way, which was manual and reactive. Auditors send long request lists, and the GRC (Governance Risk and Compliance) team chases other teams for screenshots. His summary of that experience: &#8220;You become extremely unpopular in about five minutes.&#8221; Workato holds 11 certifications, and by the time evidence reaches an auditor, a control gap is already too late to fix quietly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The team built two pieces:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>An Evidence Collector.<\/strong> On a schedule you configure (monthly or weekly), it pulls evidence from systems like Okta and compares it to baseline parameters and the last evidence collected. Sal&#8217;s example: a password policy says 15 characters, the collector finds 10, and the control owner is notified right away. The owner either opens a ticket to remediate or corrects the policy, so the finding rarely reaches the auditor. Evidence is stored in a central repository that GRC controls.<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>A GRC Audit Agent<\/strong> When the external auditor&#8217;s request list arrives (IRL, PBC, or spreadsheet), it is uploaded, mapped to control IDs, and matched to evidence in the repository. GRC reviews and approves any identified delta before the evidence goes to the auditor.<\/li>\n<\/ul>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>GRC Agentic Workflow for Audit Evidence Collection<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"479\" src=\"https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.52.16-PM-1024x479.png\" alt=\"\" class=\"wp-image-16919\" srcset=\"https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.52.16-PM-1024x479.png 1024w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.52.16-PM-300x140.png 300w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.52.16-PM-767x359.png 767w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.52.16-PM.png 1508w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The mapping covers about 1,300 controls across 23 frameworks. Sal said the team trusts it because it has been through Workato&#8217;s own 11 audits, using the most restrictive framework for evidence. One piece of evidence maps to many controls, so, in Sal&#8217;s words, &#8220;We get evidence once, and it complies with everything.&#8221; He estimated teams can save about 67%, even 80%, of the time.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sal, a former auditor himself, was candid about the human side. Auditors have to learn to trust you, so be ready to show the automation end to end the first time. Hans added that chain of custody matters. Workato logs the activity today and wants to sign evidence objects, which he said is not available yet. The team also plans to produce machine-readable JSON output alongside screenshots, for frameworks that require it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>3. Security Review Agents: streamlines product security design<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Hans described a familiar bottleneck. Developers filed a Jira ticket, a security engineer reached out, and with a globally distributed team, scheduling a design review was slow. The team was not meeting the bar for design reviews and threat models.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now a developer starts a conversation with an angent in Slack, attaches requirements, and links Confluence, Google Drive, or PMO tickets. The slides note the intake is kept to a short exchange (three messages at most). If a GitHub link is provided, a code analysis agent runs static analysis, secrets scanning, and dependency scans. The agent applies STRIDE-based threat modeling and a three-tier decision: approve, conditional, or escalate. Small, low-risk changes can be approved with no human review. Larger ones are escalated with a prioritized, pre-populated Jira ticket that includes risk rationale and a compliance mapping, so &#8220;security isn&#8217;t starting from a blank page.&#8221; The developer confirms the agent&#8217;s summary before anything is filed, and a report lands in Confluence.<\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong>Product Security Design Review Agents<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"364\" src=\"https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.56.17-PM-1024x364.png\" alt=\"\" class=\"wp-image-16920\" srcset=\"https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.56.17-PM-1024x364.png 1024w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.56.17-PM-765x272.png 765w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.56.17-PM-300x107.png 300w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.56.17-PM-1536x546.png 1536w, https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/11\/Screenshot-2026-11-02-at-1.56.17-PM.png 1570w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Hans said developer feedback has been &#8220;very, very positive,&#8221; because the team is helping developers do their jobs &#8220;and not trying to be a barrier&#8221; to shipping secure products. A PMO (Product Management Office) agent that watches Jira for new features and offers feedback proactively is something the Workato GRC team is currently working on for internal use.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What Security and IT teams can take from this<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Start where the signals already flow.<\/strong> All three workflows connect systems that already hold the data: alert platforms, identity systems, ticketing, code repositories, and collaboration tools. Connectivity came first, and the agents sit on top of it.<\/li>\n\n\n\n<li><strong>Put humans at the decisions that matter.<\/strong> Containment approvals, a developer confirming a summary, and GRC reviewing deltas are designed in, not bolted on.<\/li>\n\n\n\n<li><strong>Treat trust as a requirement.<\/strong> Audit trails mapped to MITRE ATT&amp;CK and NIST, activity logging, and a plan for signed evidence all came up because auditors and analysts will ask.<\/li>\n\n\n\n<li><strong>Engage your security counterparts early.<\/strong> The session slides made the case that enterprise security is a team sport across SecOps, Product Security, and GRC.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If you are thinking about agentic security in your own environment, the Workato Security and GRC team\u2019s templates, best practices, and accelerators will be a great place to begin.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.workato.com\/request_demo?utm_source=blog&amp;utm_medium=smm&amp;utm_campaign=security-agentic-ai\">Schedule a demo to explore security use cases with Workato.<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Attackers are using AI at machine speed, and defenders cannot match that pace without equally powerful agents for threat detection, proactive product security reviews, and always-on evidence collection to maintain top-level security certifications and standards. At World of Workato 2026, Hans Gustavson, Workato&#8217;s CISO, and two members of his team, Sid Yadav (Senior Manager, Security [&hellip;]<\/p>\n","protected":false},"author":120,"featured_media":16908,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[60,64],"tags":[],"class_list":["post-16912","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-agents-orchestration","category-ai-governance-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>A CISO\u2019s tips for running agentic AI in production - Workato<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A CISO\u2019s tips for running agentic AI in production - Workato\" \/>\n<meta property=\"og:description\" content=\"Attackers are using AI at machine speed, and defenders cannot match that pace without equally powerful agents for threat detection, proactive product security reviews, and always-on evidence collection to maintain top-level security certifications and standards. At World of Workato 2026, Hans Gustavson, Workato&#8217;s CISO, and two members of his team, Sid Yadav (Senior Manager, Security [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/\" \/>\n<meta property=\"og:site_name\" content=\"Workato\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-02T22:05:14+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-02T22:08:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/workato.com\/the-connector\/wp-content\/uploads\/2026\/10\/image-111-scaled.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1345\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Perri Bronson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Perri Bronson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/\"},\"author\":{\"name\":\"Perri Bronson\",\"@id\":\"https:\\\/\\\/www.workato.com\\\/the-connector\\\/#\\\/schema\\\/person\\\/5ff844db82a512ceaac2394cbb0e862d\"},\"headline\":\"A CISO\u2019s tips for running agentic AI in production\",\"datePublished\":\"2026-11-02T22:05:14+00:00\",\"dateModified\":\"2026-11-02T22:08:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/\"},\"wordCount\":1328,\"image\":{\"@id\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/image-111-scaled.png\",\"articleSection\":[\"AI Agents &amp; Orchestration\",\"AI Governance &amp; Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/\",\"url\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/\",\"name\":\"A CISO\u2019s tips for running agentic AI in production - Workato\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.workato.com\\\/the-connector\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/image-111-scaled.png\",\"datePublished\":\"2026-11-02T22:05:14+00:00\",\"dateModified\":\"2026-11-02T22:08:04+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.workato.com\\\/the-connector\\\/#\\\/schema\\\/person\\\/5ff844db82a512ceaac2394cbb0e862d\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/#primaryimage\",\"url\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/image-111-scaled.png\",\"contentUrl\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/image-111-scaled.png\",\"width\":2560,\"height\":1345},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/security-agentic-ai\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A CISO\u2019s tips for running agentic AI in production\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.workato.com\\\/the-connector\\\/#website\",\"url\":\"https:\\\/\\\/www.workato.com\\\/the-connector\\\/\",\"name\":\"Workato\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.workato.com\\\/the-connector\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.workato.com\\\/the-connector\\\/#\\\/schema\\\/person\\\/5ff844db82a512ceaac2394cbb0e862d\",\"name\":\"Perri Bronson\",\"url\":\"https:\\\/\\\/blog2workato.wpengine.com\\\/author\\\/perri-bronson\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"A CISO\u2019s tips for running agentic AI in production - Workato","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/","og_locale":"en_US","og_type":"article","og_title":"A CISO\u2019s tips for running agentic AI in production - Workato","og_description":"Attackers are using AI at machine speed, and defenders cannot match that pace without equally powerful agents for threat detection, proactive product security reviews, and always-on evidence collection to maintain top-level security certifications and standards. At World of Workato 2026, Hans Gustavson, Workato&#8217;s CISO, and two members of his team, Sid Yadav (Senior Manager, Security [&hellip;]","og_url":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/","og_site_name":"Workato","article_published_time":"2026-11-02T22:05:14+00:00","article_modified_time":"2026-11-02T22:08:04+00:00","og_image":[{"width":2560,"height":1345,"url":"https:\/\/workato.com\/the-connector\/wp-content\/uploads\/2026\/10\/image-111-scaled.png","type":"image\/png"}],"author":"Perri Bronson","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Perri Bronson","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/#article","isPartOf":{"@id":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/"},"author":{"name":"Perri Bronson","@id":"https:\/\/www.workato.com\/the-connector\/#\/schema\/person\/5ff844db82a512ceaac2394cbb0e862d"},"headline":"A CISO\u2019s tips for running agentic AI in production","datePublished":"2026-11-02T22:05:14+00:00","dateModified":"2026-11-02T22:08:04+00:00","mainEntityOfPage":{"@id":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/"},"wordCount":1328,"image":{"@id":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/#primaryimage"},"thumbnailUrl":"https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/10\/image-111-scaled.png","articleSection":["AI Agents &amp; Orchestration","AI Governance &amp; Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/","url":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/","name":"A CISO\u2019s tips for running agentic AI in production - Workato","isPartOf":{"@id":"https:\/\/www.workato.com\/the-connector\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/#primaryimage"},"image":{"@id":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/#primaryimage"},"thumbnailUrl":"https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/10\/image-111-scaled.png","datePublished":"2026-11-02T22:05:14+00:00","dateModified":"2026-11-02T22:08:04+00:00","author":{"@id":"https:\/\/www.workato.com\/the-connector\/#\/schema\/person\/5ff844db82a512ceaac2394cbb0e862d"},"breadcrumb":{"@id":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/#primaryimage","url":"https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/10\/image-111-scaled.png","contentUrl":"https:\/\/blog2workato.wpengine.com\/wp-content\/uploads\/2026\/10\/image-111-scaled.png","width":2560,"height":1345},{"@type":"BreadcrumbList","@id":"https:\/\/blog2workato.wpengine.com\/security-agentic-ai\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog2workato.wpengine.com\/"},{"@type":"ListItem","position":2,"name":"A CISO\u2019s tips for running agentic AI in production"}]},{"@type":"WebSite","@id":"https:\/\/www.workato.com\/the-connector\/#website","url":"https:\/\/www.workato.com\/the-connector\/","name":"Workato","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.workato.com\/the-connector\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.workato.com\/the-connector\/#\/schema\/person\/5ff844db82a512ceaac2394cbb0e862d","name":"Perri Bronson","url":"https:\/\/blog2workato.wpengine.com\/author\/perri-bronson\/"}]}},"_links":{"self":[{"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/posts\/16912","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/users\/120"}],"replies":[{"embeddable":true,"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/comments?post=16912"}],"version-history":[{"count":3,"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/posts\/16912\/revisions"}],"predecessor-version":[{"id":16923,"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/posts\/16912\/revisions\/16923"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/media\/16908"}],"wp:attachment":[{"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/media?parent=16912"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/categories?post=16912"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog2workato.wpengine.com\/wp-json\/wp\/v2\/tags?post=16912"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}