Your API Security Wasn’t Built for AI Agents

Podcast: The Security Strategist podcastGuest: Eric Schwake, Director of Cybersecurity Strategy, Salt SecurityHost: Shubhangi Dua, Podcast Producer and B2B Tech JournalistAdopting enterprise AI is often seen as a productivity boost. However, a subtler change is happening behind the scenes, and security leaders are still trying to understand it. Enterprises now not only optimise AI tools but are also bringing autonomous agents into their workplaces.“We would call AI agents an additional workforce that enterprises are deploying,” says Eric Schwake, Director of Cybersecurity Strategy at Salt Security.The description is more literal than it seems. These agents can access systems, interact with data, and perform multi-step tasks with little human input. Unlike employees, they lack intuition and caution.In the recent episode of The Security Strategist podcast, Schwake sat down with Shubhangi Dua, Podcast Producer and B2B Tech Journalist to discuss AI agents, shadow AI, and API security challenges are transforming enterprise cybersecurity. Schwake explains how to secure autonomous AI systems at scale today. Has AI Surpassed Experimentation Across Enterprises?AI is no longer in the experimental stage. Leadership teams across industries are actively promoting its use to boost innovation. Executives like Jensen Huang, Founder, President & CEO of NVIDIA, are highlighting a larger trend where enterprises are measuring, incentivising, and expecting AI adoption.This urgency creates a familiar tension. Speed provides a competitive edge, but it also shortens the time available for governance. “You want them to use this innovation to do their work,” Schwake tells Dua. “But you don't want sensitive data leaking and getting into the wrong hands.”Also Watch: What Happens to API Security When AI Agents Go Autonomous?Key TakeawaysAI agents behave like employees and need the same level of security oversight.Most AI risk sits in the API layer where actions actually happen.Faster AI systems can turn small security gaps into major threats.Unmonitored “shadow AI” tools are quietly exposing sensitive data.Continuous visibility is the foundation of securing any AI ecosystem.Chapters00:00 Introduction to AI and Cybersecurity02:43 Insights from RSA Conference06:30 The Role of AI Agents in Security08:30 Transitioning from Discovery to Governance12:03 Protecting Sensitive Data in AI Systems15:21 Identifying Weak Points in AI Security18:54 The Need for Measured Security Approaches20:38 CISO Strategies for API Security23:22 The Future of AI in Cybersecurity25:14 Visibility as a Key Security MeasureFor more information, please visit em360tech.com and salt.security.To learn more about Salt Security and AI and API security, follow:Salt Security LinkedIn: Salt SecuritySalt Security X: @SaltSecuritySalt Security YouTube: @SaltSecurityEM360Tech YouTube: @enterprisemanagement360EM360Tech LinkedIn: @EM360TechEM360Tech X: @EM360TechEnterprise AI, AI Security, Cybersecurity, API Security, Autonomous Agents, Agentic AI, Shadow AI, AI Governance, Enterprise Technology, Digital Transformation, Security Leadership, AI Risk, Data Protection, AI Compliance, Cyber Risk, CISO Strategy, AI Infrastructure, Emerging Technology, Enterprise Security, Salt Security#AISecurity #EnterpriseAI #Cybersecurity #APISecurity #AgenticAI #AutonomousAI #ShadowAI #AIGovernance #EnterpriseSecurity #ArtificialIntelligence #AICompliance #DataSecurity #CyberRisk #TechPodcast #CISO #SecurityLeadership #GenerativeAI #AIInfrastructure #DigitalTransformation #CyberDefense #AIThreats #EnterpriseTech #SaltSecurity #EM360Tech #AIInnovation