Shahir Daya says that in cybersecurity, institutions that acted early were better positioned than those that waited for a crisis.
“the institutions that acted early were positioned much, much better than the ones that waited for a crisis to happen”
Person
Shahir Daya
1 episodes · 19 quoted claims
Shahir Daya says Uber's president publicly said the company used up its entire 2026 AI coding budget by April and could not link the token surge to better customer outcomes.
“saying the company burned through its entire 2026 A I coding budget by April in four months. And they could not link the surge in token consumption to better outcomes for customers.”
Shahir Daya says Safe Software went from about $20,000 to $100,000 a month on AI tools in six months.
“six months ago, they were spending about 20,000 a month on A I tools. Today, they're spending $100,000 a month.”
Shahir Daya says Anthropic moved its enterprise customers from flat-rate plans to usage-based billing earlier in the year.
“You saw Anthropic, they moved from they moved their enterprise customers from a flat rate plans to usage based billing”
Shahir Daya says analysts project AI pricing will normalize to real infrastructure costs, raising enterprise AI bills another 30 to 50% above current levels.
“Analysts are actually projecting that the pricing normalizes, you know, the pricing normalizes to reflect real infrastructure costs. Enterprise A I bills will go another thirty to 50% above current levels.”
Shahir Daya says Lloyds Banking Group recently put an AI agent in its boardroom to help directors analyze materials and prepare for meetings.
“I think Lloyd's Banking Group recently put an A I agent in its own boardroom to help directors actually analyze the materials and prepare for a meeting.”
Shahir Daya says North American regulators have warned that AI summarization tools may cause directors to miss critical details by not reading materials in full.
“I believe the North American regulators have already raised concerns about that, warning that A I summarization tools may actually cause directors to miss critical details by not reading the materials in full.”
Shahir Daya says Zafin AOS defect-fixing agents reproduce a defect, fix it, prove both steps and then create a pull request with the fix.
“They know the defect, they have to fix, they reproduce the defect, they fix it, they prove that they could reproduce it, they prove that they can fix it, and they create a pull request with the fix.”
Shahir Daya says a scheduled agent in Zafin AOS runs every Saturday at 5 a.m. to do a vulnerability scan and penetration test of a production application.
“I have an agent in Zafin a o s again that actually comes up every uh Saturday at five a m. And it does a vulnerability security scan and a penetration test of an application I have in production.”
Shahir Daya says Zafin's orchestration moves each case through defined states, including to do, in progress, awaiting a human, review and done.
“Here's a to do, then it's in progress, then it's awaiting a human, maybe, and then finally, it asks the human a question, the human answers, then it goes into a review, and then it's done.”
Shahir Daya says Zafin's agents operate under the same identity system, role-based access control, zero trust and least-privilege principles as employees.
“Agents need to live inside the same governance envelope that our employees do, the same identity system, the same role based access control system, same principles of zero trust and least privilege.”
Shahir Daya defines agent sprawl as several teams quietly building near-identical agents with slightly different prompts, running against the same data without anyone knowing.
“The situation where three different teams have quietly composed three near identical agents with slightly different system prompts, and no one knows they're running against the same data and so on.”
Shahir Daya says Zafin's agents document their work in far more detail than human engineers do, including recording videos of what they are doing.
“But the agent is so verbose and they put so much detail, they record videos of what they're doing.”
Shahir Daya says Zafin AOS captures each agent's phase-by-phase execution plan and full step transcript in a record that cannot be changed.
“And the execution plan, phase by phase, is captured as a plan file, the full transcript of what the agent is doing, every single step is all documented and can't be changed.”
Shahir Daya says Zafin AOS runs evaluations and experiments against different models using different rubrics to pick the right model for each task.
“So we in in our A O S platform, we have evaluations, we run experiments against different models with different rubrics.”
Shahir Daya says institutions that skip controls early may spend about eighteen months retrofitting them, which is harder than designing them in from the start.
“And then you spend the next eighteen months trying to bolt on those capabilities back into what whatever you've built, which is far harder than designing them correctly from the start.”
Shahir Daya says he spent twenty-seven years at IBM before joining Zafin and saw that regulated organizations must lock down their taxonomy early or struggle for a decade.
“I spent twenty seven years at IBM before joining Zafin, and the pattern I saw over and over again in regulated environments is that the taxonomy is the thing you either lock down early or you fight for the next decade.”
Shahir Daya argues that institutions will use multiple large language models and mix internally built and purchased agents across cloud and on-premises workloads.
“You will use multiple large language models, you will build some agents internally, you'll buy others, some workloads will run in the cloud, other workloads you'll be forced to put on prem”
Shahir Daya says Zafin was the first customer of its own Zafin AOS, which now handles most of its defect fixing and builds enhancements and new features.
“We ourselves at Zafin, we were customer zero for our own Zafin AOS operating system. Now it's doing most of our fixing of our defects, building new enhancement requests, new features.”