PODCAST · technology
Before The Commit
by Danny Gershman, Dustin Hilgaertner
AI is writing your code. Who's watching the AI? Before The Commit explores AI coding security, emerging threats, and the trends reshaping software development. Hosts Danny Gershman and Dustin Hilgaertner break down threat models, prompt injection, shadow AI, and practical defenses — drawing from experience across defense, fintech, and enterprise environments. Companion to the book Before The Commit: Securing AI in the Age of Autonomous Code. No hype, just tactical insight for developers, security engineers, and leaders building in the AI era.
Episodes
-
Episode 35: Graph Engineering
In this episode, the hosts discuss Opus V, Cursor subscriptions and usage, and the concept of graph engineering in AI workflows. They provide feedback on Opus V, compare it to 4.8, and share their experiences with Cursor subscriptions. They also delve into the principles of graph engineering and...
-
Episode 34: One Year Annivesrary
The conversation covers the release of Grok 4.5, the comparison between Cursor and Claude code, and the evolution of AI coding tools. It also delves into the impact of these tools on coding workflows and the changing landscape of AI-powered development. The conversation delves into the impact of…
more -
Episode 33: Agentic Loops
The episode delves into the concept of forward deployed engineering (FDE) and its significance, highlighting the challenges faced by established companies in adopting AI. It also explores the shift from SaaS to utilities and the impact on SaaS companies. The tool of the week, 'Loops,' is…
more -
Episode 32: Cursor
The conversation covers the introduction to Cursor, the transition to Riverside, experimenting with Cursor and Crow, SpaceX's acquisition of Cursor, Cursor's evolution and future predictions, features of Cursor and comparison with other tools, Nvidia's RTX Spark, and a discussion on AI usage and...
-
Episode 31: Sam Kassoumeh, Co-Founder @ SecurityScorecard
The conversation covers the topics of AI security gateways, SaaS-based companies, AI in coding, the evolution of Security Scorecard, and the impact of AI on threat intelligence data. The conversation delves into the transformative impact of AI and Threat Intel on data analysis, product…
more -
Episode 30: Steve Thomas, CEO @ HackNotice
The podcast episode features Steve Thomas, CEO of Hack Notice, discussing the evolving landscape of AI in cybersecurity and its broader impact.**AI's Disruption and Industry Parallels:**\The conversation begins by drawing parallels between AI's impact and the software engineering industry. Just…
more -
Episode 29: Agentgateway and Portkey
Here's a summary of the video transcript:The podcast episode covers several key topics related to AI and technology.**SpaceX Acquires Cursor:** A significant portion of the discussion revolves around SpaceX's potential acquisition of Cursor, an AI-powered code editor. The deal is valued at $60...
-
Episode 28: Cloudflare AI Gateway
The video discusses several key topics related to AI and its impact on the tech industry.Firstly, it delves into Anthropic's "Mythos" model and "Project Glasswing." The speaker expresses skepticism about the hyped claims surrounding Mythos, suggesting that the limited release might be due to...
-
Episode 27: CMUX and Crow
The video discusses recent developments and challenges in the AI landscape, focusing on Anthropic's Claude and its evolving pricing and usage policies. The conversation highlights concerns about the sustainability of the AI model market, with predictions of a potential bubble burst due to...
-
Episode 26: Agent Client Protocol and Antigravity
This video transcript covers several key topics related to AI and technology, with a particular focus on Nvidia's new inference chips, the Agent Client Protocol (ACP), and Google's Anti Gravity IDE.Nvidia's GTC 2026 event highlighted their advancements in inference chips, emphasizing a "one chip...
-
Episode 25: AI Ethics, Government Contracts, and the Future of the Web
This episode delves into the complex intersection of artificial intelligence, government policy, and technological advancement. The discussion kicks off with the controversy surrounding Anthropic's refusal to remove guardrails for the Department of Defense, a move that led to calls for a…
more -
Episode 24: Codex
This video discusses OpenAI's Codex, a GPT model for coding, and its implications for cybersecurity and software development. The speakers, Sam and Dustin, explore various aspects of Codex, comparing it to other AI coding tools like Claude.They begin by touching upon OpenAI's warning that Codex...
-
Episode 23: OpenClaw
Welcome everybody to Before the Commit episode 23. With me as usual, I have my friend Dustin Hillgartner. This week, we're talking about Open Claw, all things Open Claw. There's really not much more to say other than we hope to break down what it is, some of the risks associated with it, and why…
more -
Episode 22: AI Bubble Projections
In episode 22 of "Before the Commit," hosts Dustin and Danny dive into a range of AI and tech topics. They start by discussing the evolving landscape of AI, including Anthropic CEO Dario Amodei's "ominous warning" about AI testing humanity and the emergence of "Moltbot" (formerly ClaudeBot). The...
-
Episode 21: OpenCode and Claude Cowork
The podcast episode "Before the Commit" episode 21 covers several key topics. The hosts discuss OpenAI's decision to test ads within ChatGPT, which raises concerns about privacy and the potential for a "slippery slope" in how user data is utilized. They draw parallels to Google's integration of…
more -
Episode 20: Claude Code SDK
This episode of "Before the Commit" dives into several significant developments in the AI and tech landscape. The hosts discuss the controversy surrounding Anthropic's Claude Code, specifically how third-party developers were allegedly exploiting a subsidized usage model, leading to a crackdown…
more -
Episode 19: Ralph Wiggum and Grok Heavy
**Tailwind Labs and AI's Impact on Business Models:**\The conversation begins by examining how AI is affecting established open-source projects like Tailwind Labs. Traditionally, companies monetize open-source by offering premium add-ons or services. However, AI, by enabling users to generate…
more -
Episode 18: Claude Code Commands, Skills, Sub-agents, and more.
This episode of "Before the Commit" (Episode 18, the last of 2025) features hosts Dustin and Sam discussing various AI topics. They begin by reflecting on their podcast journey over the past six months, noting its unexpected benefits in clarifying their own thoughts and keeping them updated with...
-
Episode 17: Datacenters In Space
The hosts, Danny Gershman and Dustin Hilgaertner, open by celebrating the official release of their book, Before The Commit. Dustin shares his excitement about receiving the physical proof, describing the book as a "playbook" for CISOs and engineering leaders. The book addresses the current…
more -
Episode 16: LLM Council
Episode 16: Code Red at OpenAI, LLM Council, and the HashJack Exploit Is OpenAI in crisis mode? This week Danny and Dustin dive into the reported "code red" at OpenAI following Google's Gemini 3 release, and the curious reversal just 24 hours later claiming everything is fine. The hosts break…
more -
Episode 15: Autonomous Vehicles
In this episode we cover, Autonomous Vehicles, sensors and AI. Claude Opus 4.5 cost drops, AI bubble concerns. KawaiiGPT and the risks associated with malicious model outputs. We close out with a brief chat about Time Warners parnership with Sano.
-
Episode 14: Devcontainers and Sandboxing with Claude Code
This episode focuses on Claude Code Sandboxing a security construct. They also talk about AI attacks with Claude Code that were orchestrated by a nation state actor. News topics on Gemini 3, Gemini AI Studio, AI transportation, and a novel idea with AI ads.
-
Episode 13: OpenAI Atlas
It looks like the previous summary was too long. Here is a summary of the podcast episode, limited to 4,000 characters. The episode kicked off with the news of Amazon's largest-ever corporate layoffs , with reports citing 16,000 workers and potentially up to 30,000 employees affected across…
more -
Episode 12: Speech to Text
OpenAI's "Atlas" browser is seen as a strategic move to secure market share, with some calling it a "Chrome killer". By owning a piece of the web browser, OpenAI gains leverage in the search market, challenging Google. The browser's key feature is using the current web page as context for AI...
-
Episode 11: Agentkit
The main focus is OpenAI's Agent Kit, dubbed a potential "N8N killer." Agent Kit includes Agent Builder, a drag-and-drop interface for creating agentic workflows, inspired by N8N but with enterprise features like guardrails (e.g., hallucination detection via vector stores, PII moderation…
more -
Episode 10: Claude Code Security Reviewer
Episode 10 of Before the Commit dives into three main themes: the AI investment bubble, Claude Code’s AI-powered security review tool, and AI security vulnerabilities like RAG-based attacks — closing with speculation about OpenAI’s Sora 2 video generator and the future of generative media. Danny...
-
Episode 9: Open Source Models
In episode nine, hosts explore open source AI models and introduce the "KILLM chain" segment on LLM vulnerabilities. Co-host Dustin mentions an upcoming move, prompting an early recording. The discussion expands on last week's open source AI model talk, referencing Anthropic CEO Dario Amodei’s…
more -
Episode 8: LLM Caching
In this episode, the hosts discuss the latest news and trends in AI, focusing on LLM caching, a new EU regulation on AI-generated code, the changing landscape for Stack Overflow, and a recent AI security vulnerability. The hosts explain LLM caching as a technique to boost efficiency and cut costs...
-
Episode 7: LiteLLM
Hosts Dustin Hillgartner and Danny Gershman discuss securing large language models (LLMs) amid rising "shadow AI" risks, where employees use unmonitored tools like ChatGPT, leading to unintentional data spills (e.g., sensitive info, code). Echoing shadow IT, they stress education, policies, and...
-
Episode 6: Model Context Protocol (MCP)
This episode discussion AI coding topics, starting with MCP ("Model Context Protocol"), an open-source framework by Anthropic for reflective APIs. MCP enables LLMs to self-discover and use external capabilities dynamically, bypassing traditional API integration. It comprises four primitives: -...
-
Episode 5: AWS Kiro
Before the Commit Episode 5 Summary Hosts Dustin Hillgartner and co-host discuss Amazon's Kiro (pronounced "Kira Code" or "Cairo Code"), AWS history, AI coding security, and news on AI browsers and emotional distress. AWS Origins and AI Impact: Amazon started as a 2000s bookstore; hosts recall...
-
Episode 4: Claude Code Github Action
In this episode of Before the Commit, the hosts dive deep into the evolving landscape of software development, automation, and AI’s role in reshaping industries beyond tech. The discussion spans GitHub Actions with Cloud Code, the challenges of technical debt in an AI-driven era, the evolution of...
-
Episode 3: Claude Code
In episode three of "Before the Commit," the hosts delve into a detailed comparison of AI coding assistants, the implications of the new GPT-5 model, the evolution of search optimization, and a plausible AI-related security threat. The discussion opens with a deep dive into Claude Code, which one...
-
Episode 2: Cursor Background Agents
🎧 Before the Commit – Episode 2 The Future of Coding Isn’t Coming — It’s Already Here. In this episode, we dive into the cutting edge of agent-powered development with Cursor’s new background agents — are we on the verge of coding without ever opening an IDE? Can AI truly handle the dev work…
more -
Episode 1: Kilo Code
Kilo Code, Cloudflare Blocks, and Apple Intelligence Shifts
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
AI is writing your code. Who's watching the AI? Before The Commit explores AI coding security, emerging threats, and the trends reshaping software development. Hosts Danny Gershman and Dustin Hilgaertner break down threat models, prompt injection, shadow AI, and practical defenses — drawing from experience across defense, fintech, and enterprise environments. Companion to the book Before The Commit: Securing AI in the Age of Autonomous Code. No hype, just tactical insight for developers, security engineers, and leaders building in the AI era.
HOSTED BY
Danny Gershman, Dustin Hilgaertner
CATEGORIES
Loading similar podcasts...