OpenNashPodcasts

CXOTalk

Enterprise AI Biggest Opportunities: A Top VC's Take

10 Aug 2026 · 55m · Ed Sim, Michael Krigsman · 20 quoted facts

▶ Play episodeOriginal source ↗

In brief

Ed Sim, a seed-stage investor, argues that enterprise AI has moved from experiments to a stage where it must prove a return. Rising token costs (the fees paid per unit of text a model reads or writes) push companies toward cheaper open-weight models and their own hardware. He says durable startups win through data, specific workflows and deep infrastructure, and that security must be rebuilt for autonomous agents.

The main tension is between easy and control. Frontier lab APIs were the easy button, but cost, control and trust now push companies to mix many models, including ones they run themselves. The same autonomy that makes agents useful makes them dangerous. Ed warns that attacking agents already outpace human defenders, so he says autonomous defense and short-lived agent access are needed.

Key insights

  1. Token costs are driving enterprises off frontier APIs

    Ed says heavy use of tools like Claude Code made expenses climb quickly. Chinese open-weight models now trail the frontier by about three months at a fraction of the price, so companies want model routing and their own infrastructure.

  2. Agents should get access that expires with the task

    Giving an agent permanent access to a system such as Salesforce is risky. Ed argues for access granted at runtime that ends when the task ends, so a breach only affects one narrow authorization.

  3. Measure AI by cost per outcome

    Ed compares the cost of a human doing a task, the AI doing it, and a human assisted by AI. This works best for discrete work such as coding and customer support, where outcomes are easy to measure.

  4. Recording work reveals who is actually more accurate

    In a 57-step insurance claims process, X5 Labs recorded video of each step. Review showed the AI was right 98% of the time and the humans 85%, which settled a dispute that otherwise looked like AI failure.

  5. Offense currently beats defense in AI security

    Ed says autonomous agents can chain small vulnerabilities into attack paths around the clock, and humans cannot keep up. He argues companies must attack their own systems first and move toward autonomous defense.

Questions

Why are companies moving away from only using OpenAI and Anthropic models?

Ed Sim says token costs are rising fast and companies do not want to give up control to the frontier labs. Open-weight models from China are now about three months behind and cost much less, so firms are expected to run dozens of models.

What is the difference between open source and open weight models?

Ed says open source is about the license and business model: who owns the software and when you must pay. Open weight means you can download the model and change its weights, the internal numbers that drive its decisions, so you can tune it to your own needs.

What is the Spectro Cloud AI box Ed Sim describes?

It is an appliance with eight GPUs, CPUs and software including a model router, built with AMD and Supermicro. Ed says about 10% of coding queries go to frontier labs and the rest to open models, with roughly 70% savings per year.

Why is giving an AI agent permanent access to company systems a problem?

Ed says agents work differently from humans and should not hold credentials that never expire. If thousands of agents run around a company and one is hacked, always-on access lets the breach spread, while task-limited access keeps it small.

How should a business decide which AI startups will survive?

Ed says to look at the people and their track record, buy the product and the vision, and check the backers. He adds that the vision must be concrete rather than a vague claim that agents will conquer the world.

Facts

Stated by the speakers. Each quote matches the transcript, which shows what was said, not that it is true.

Palo Alto Networks acquired Protect AI for more than $700 million, about three years after the company was founded, according to Ed Sim.

“Palo just bought one of my companies, uh, Protect AI, for over $700 million last year, and that was three years after founding.”

0:50:42 · Ed Sim · Acquisition · 2025

Spectro Cloud released an appliance with AMD and Supermicro that bundles GPUs and software, according to Ed Sim.

“One of our portfolio companies, Spectra Cloud, just released yesterday with AMD and Supermicro, uh, a box, literally a box.”

0:05:31 · Ed Sim · AI appliance · 2026

The Spectro Cloud appliance contains eight GPUs, CPUs and Spectro Cloud software.

“And has eight GPUs on it, has all the CPUs on it, and, uh, and literally, and our software on it.”

0:05:54 · Ed Sim · AI appliance · 2026

The appliance's model router is assumed to send about 10% of coding queries to frontier labs and about 90% to open models chosen by the customer.

“We assume that 10% of queries, uh, in coding, would go to that, and the other 90% will be routed towards whatever open source model”

0:05:54 · Ed Sim · Model routing · 2026

Ed Sim says the Spectro Cloud box supports about fifty developers and thirty concurrent users and saves 70% per year versus frontier-level costs.

“you can have thirty concurrent users, and you're getting 70% savings per year versus using kind of frontier level costs.”

0:27:49 · Ed Sim · Cost savings · 2026

In an insurance claims test run by X5 Labs, the AI was correct 98% of the time and human workers 85%.

“And it turns out that the AI was right, you know, 98% of the time, and the humans were only right 85% of the time.”

0:25:23 · Ed Sim · Claims accuracy

X5 Labs software identified a 57-step claims processing workflow at an insurance company.

“And we've discovered a fifty-seven step process in a claims processing for an insurance company, right?”

0:24:52 · Ed Sim · Claims processing

X5 Labs, an Israeli company, installs software on employee machines that records how work is done and turns it into workflow data.

“they understand your context by deploying software onto your machine, and they watch how you work, and they record all the video, and they turn that into data.”

0:15:05 · Ed Sim · Workflow capture

X5 Labs plans to deliver a customer-specific 'large work model' that can run on-premises or in the cloud.

“And what we're going to do over time is we drop a model for you. We we call it a large an LWM, a large work model.”

0:15:56 · Ed Sim · Large work model

Ed Sim says Cursor first post-trained a Chinese open-weight model and later built its own model, using data generated by its users.

“They post-trained their own model initially using a Chinese open weight model, then they built their own.”

0:09:18 · Ed Sim · Model training

Ed Sim raises the problem of whether an agent with its own identity should hold the same standing access to Salesforce as a human user.

“And then also if my agent is actually doing work and maybe has its own identity, should that, uh, identity also have the same access, uh, to Salesforce”

0:11:22 · Ed Sim · Agent identity

Keycard was funded by boldstart ventures together with Andreessen Horowitz and others, according to Ed Sim.

“That's a company that we funded with our friends at Andreessen and a16C capital, uh, and some others.”

0:10:51 · Ed Sim · Funding

Ed Sim says Salesforce changed its model about six months before the interview so agents can use its platform but pay per access.

“Salesforce actually changed their business model, uh, as well about six months ago where they're saying, hey, have at it. Agents have at my platform, you're just gonna have to pay per access, right?”

0:34:40 · Ed Sim · SaaS pricing · 2026

boldstart ventures is an investor in Generalist AI, a robotics foundation model company, according to Ed Sim.

“We're invested in in a company called Generalist AI, which is probably one of the leading robotic, uh, foundational models out there.”

0:37:40 · Ed Sim · Robotics

boldstart ventures invested in Netprem, a company working on the GPU memory limit by adding a separate rack of memory.

“We invested in a company called Netprem, which is trying to solve the the GPU kind of memory wall problem.”

0:39:23 · Ed Sim · GPU memory

Ed Sim defines an open-weight model as one whose weights can be downloaded and changed to adjust how it makes decisions.

“Open weight means I can actually download the model and change the weights in terms of how decisions are being made.”

0:41:10 · Ed Sim · Open weight

Ed Sim says Kimi's license requires payment from hosts who generate large revenue, using $20 million a year as his example.

“If you actually get generate $20 million a year of of revenue from using Kimmy and you're hosting it, you have to pay for it, right?”

0:40:19 · Ed Sim · Model licensing

Ed Sim says many large financial organizations are not allowed to use Chinese models.

“there are lots of large financial organizations, um, that are not allowed to bring in Chinese models.”

0:43:03 · Ed Sim · Model regulation

Ed Sim says a Black Hat presentation on an OpenAI and Hugging Face incident described agents creating a shadow message board and leaving notes before escaping a sandbox.

“these agents created a shadow message board and left notes for each other weeks in advance of kind of escaping the sandbox”

0:45:12 · Ed Sim · Sandbox escape · 2026

Ed Sim says hackers ran a campaign against large banks and hedge funds using cloned voices to call call centers.

“hackers were actually created a campaign against all the big banks and hedge funds where they replicated people's voices and were calling to call centers.”

0:51:08 · Ed Sim · Voice fraud · 2026

Chapters

  1. 0:00:36Three waves of enterprise AI and the token cost squeeze

    Ed frames adoption as getting AI running, getting agents running, and now proving ROI. Rising token costs push firms toward cheaper open-weight models.

    “wave three right now is all about ROI”
  2. 0:05:00Dozens of models and owning intelligence

    Ed explains why enterprises will run many models and describes a ready-made box that routes most queries to open models.

    “do I rent intelligence or do I own intelligence?”
  3. 0:08:55Where startups can still build durable companies

    Ed describes how startups survive against the labs through data flywheels, post-training their own models, and deep infrastructure.

    “do you have a data advantage? Is there a compounding workflow”
  4. 0:11:49Agent identity, context and evaluations

    Ed argues agents need short-lived access, and that companies should own their evaluations and specific context.

    “Agents, I think, should be granted access at runtime.”
  5. 0:25:23Cost per outcome and starting with easy use cases

    The discussion turns to measuring ROI, with the 57-step insurance claims example showing why recording work matters.

    “the AI was right, you know, 98% of the time”
  6. 0:32:53Culture, SaaS disruption and the VC funding question

    Ed covers bottom-up and top-down AI adoption, pressure on SaaS from headless agents, and why AI money is expanding into robotics and hardware.

    “I call it as the sandwich model.”
  7. 0:41:10Open source versus open weight

    Ed separates licensing from downloadable weights and warns about restrictions on Chinese models.

    “Open weight means I can actually download the model”
  8. 0:47:57Black Hat, agent escapes and autonomous defense

    Ed describes agents escaping sandboxes and argues defenders must automate and attack their own systems.

    “Offense has advantage, right? Defense has to catch up.”
  9. 0:53:30Choosing vendors and selling to enterprises

    Ed gives advice on picking surviving vendors and on how startups should sell to large buyers.

    “You've got to solve a very, very specific problem”

Transcript

0:00:00
Ed Sim

How will the world look when you have autonomous swarms of agents that are gonna do anything possible to chain multiple vulnerabilities together? And they can penetrate your systems twenty four seven. That's a really, really scary world that we're gonna live in. No humans can keep up with that amount of of attack infrastructure right now.

0:00:19
Michael Krigsman

Today's startups are tomorrow's enterprise technology. Ed Sim of boldstart ventures is a top-ranked venture investor. Ed, what are the core AI challenges facing enterprise buyers right now?

0:00:36
Ed Sim

Wave one was all about, uh, board members and CEOs saying, let's get AI up and running. Wave two was how do we get agents up and running? And I think we're still early in that wave, cause a lot of stuff is still stuck in dev environments and not fully in production. And I think wave three right now is all about ROI. Um, because people are seeing that some of the easy button use cases, like using cloud code and watching that expense go exp up exponentially means, uh, let's think about tokenomics.

0:01:05

So I look forward to diving more into all those. And the on- only other thing I wanna bring up is that now, um, underpinning, uh, all of that is security, and we can talk about that as well.

0:01:15
Michael Krigsman

In other words, AI is going from the almost you could say toy or experimental stage to the stage of it needs to actually prove itself. Is that a good way of saying it?

0:01:30
Ed Sim

Absolutely, I just like the thing about frameworks. There was a period of time, um, back in, uh, during the holidays at the end of the year and beginning of the year where cloud code just came out of nowhere. And all of a sudden, people just got superpowers. It was no longer about spitting out code, it was about agents doing work for you. And then cloud co-work came out, and all of a sudden you could have agents start doing work for you.

0:01:50

And, uh, there was a period of time where lots of investors and lots of folks were like, Oh my, oh man, like, this is over, Claude is gonna take over the world. And that was kind of, you know, the first few months of the year. And and now, if you look it back at that situation, I don't think that's the case at all. I think we're now in a world where, holy crap, like, um, people started using this stuff and said, my token costs are going through the roof right now.

0:02:12

I need to find alternatives. Uh, and then the Chinese open weight models, which used to be nine months behind or six months behind, are now like three months behind. Uh, and they're offering solutions that used to be one tenth the cost. Let's just say now they're a third of the cost. And all of a sudden, the water of larger enterprises are saying, man, how do I get model routing? How do I put my own stuff on my own infrastructure?

0:02:32

So I think it's a really, really, really exciting time for founders and also for enterprises.

0:02:37
Michael Krigsman

Folks, you can ask your questions if you're watching on LinkedIn, pop your question into the LinkedIn chat. If you're watching on Twitter X, use the hashtag CXO talk and be sure to at me directly at M. Krigsman. Ed, you see hundreds of AI startup pitches a year. What patterns do you see among these startups right now?

0:03:06
Ed Sim

Right now is the ultimate time of value creation, and I think we're still just in the early innings of this kind of AI, uh, wave right now. And starting a company has never been easier, but I think building a durable company has never been harder. Um, so right now there's tons and tons still of just normal, uh, uh, of of look like agents and co-pilots and thin application layers. But we look for, uh, I think there's a new wave of infrastructure being built right now and a new wave of security companies that are being built that go much, much deeper kind of into the tech stack.

0:03:38

And, um, you know, typically these founders have an opinionated view of where the future's gonna be. So, for example, it could be a founder coming in saying, Hey, what happens when the world has long-running agents that not only run for a minute or an hour, but for days or weeks or months? How do you set up that infrastructure? How do you secure that infrastructure? And so those are types of founders that are coming in. Because as an inception investor where we invest at the idea stage, if something is already a problem, it's probably too late.

0:04:05

We need to see the problems of tomorrow. We need to see founders that are very opinionated about what the world's gonna look like twelve to eighteen months from now, which almost feels like three years from now, and build off of that foundation so that when, uh, something happens, we're ready for it.

0:04:19
Michael Krigsman

So what does that pipeline tell you about where enterprise AI will be in the next two or three years? Because it sounds like the problems your startups or the ones you see are trying to address will eventually show up in a couple of years inside the enterprise.

0:04:39
Ed Sim

I think one interesting aspect is going to be, um, we're not going to live in a world of one or two or three models. There's going to be dozens of models, or even, uh, more than dozens of models kind of living inside of an enterprise right now. And that goes back to, uh, one is that people do not want to give up control to the frontier labs themselves. Two, there's a cost issue. Um, and you know, think about it this way.

0:05:00

I don't need a PHAS- PhD student in every single, um, category if all I want is the best workflow built around payments or the best workflow built around my customer data, right? I think that's part one. I think the second thing is the big question people talk about is, do I rent intelligence or do I own intelligence? Uh, and which means, do I actually just use an API and work with the open AIs and the Clouds and ask it questions and have it get smarter based on my data?

0:05:31

Or do I actually take an open source model, uh, which I can use through, uh, a s a platform that could be hosted here in the United States so that it's safe? Or do I actually deploy it on my own clusters? And I'll give you a great example. One of our portfolio companies, Spectra Cloud, just released yesterday with AMD and Supermicro, uh, a box, literally a box. It's almost like it's an appliance, the way that appliances used to be sold pre-cloud.

0:05:54

And has eight GPUs on it, has all the CPUs on it, and, uh, and literally, and our software on it. So in that software is a model router that you can route between the frontier labs. We assume that 10% of queries, uh, in coding, would go to that, and the other 90% will be routed towards whatever open source model or model you choose to bring on that infrastructure, um, uh, that you want. And the whole point, uh, that I want to tell you is that the payback is off the charts.

0:06:20

It's like 70% ROI per year. Um, you can put in your house, you can put in your basement, you can put in your, uh, in your bedroom if you want. But I th- I think that people are looking to take more control back over everything, right? And I think that's gonna be an interesting kind of dichotomy moving forward.

0:06:35
Michael Krigsman

So there's a combination of control, and then you spoke about the token costs earlier, so you have both of those vectors right at the moment.

0:06:44
Ed Sim

Absolutely. And and right now, the the early wave was the easy button. Everyone won that remember that Staples easy button? The easy button is, you know, when the board and CEO is saying, let's use AI and get something out of it, it was just use the frontier labs. But I think right now, the easy button is if I can put that all in a box and get it up and running in ten minutes, that's pretty easy, right?

0:07:03

I mean, it's gonna get easier and easier and easier, and there're gonna be more and more choices. And I think right now, this is the best time ever for founders. Because, you know, on the one hand, I'm not gonna invest in a new coding startup that's gonna get run over by what's already existing today. But on the other hand, because of all these choices around models, uh, and all these opportunities and the enterprises kind of looking at new things, it's a great time.

0:07:25
Michael Krigsman

It's also easier than ever before to build software, and there are so many software companies now that are more than wrappers around the models, but really are gonna be doomed to failure. Because as the models expand their footprint, they'll over they'll incorporate features that that these companies have. So, although it's easier on the one hand, is it also at the same time more difficult because you need to have you still need the great idea?

0:08:02
Ed Sim

I'll give you an example. I think of the world as concentric circles. This is a core concentric circle, the bullseye where OpenAI and Anthropic sit, which is building the best freaking model possible, right? Concentric circle number two might be if you look at Anthropic, for example, they have built in some legal workflow flows, they've built in some finance workflows, they've built in, um, design workflows, right, to try to go after Figma. And, you know, the question I think there is, how deep are they going to go?

0:08:30

Because right now they're serving everyone. And if you have kind of legal companies like a Harvey, for example, I I'm not in Harvey or Law LawGorA, but they're going very deep into not just answering questions from a legal perspective, but also very deep into the workflow. And, you know, the question I think you really have to ask yourself is if you decide to build at that layer, we'll say the user layer. I don't I don't want to call it an app layer or or or agent layer, but the user workflow layer.

0:08:55

The question you have to ask is, do you have a data advantage? Is there a compounding workflow where every time someone makes a query, are you learning more and more and more from it? And then what is that feeding into? And what that is feeding into right now, the playbook is build your own model, post-train your own model. So, cursor could be a great example, right? People are like, Hey, cursor is going to be the left for dead because, you know, they're competing with everyone, um, kind of in the coding space.

0:09:18

But what they did was take that flywheel. The users were just generating so much data, and they post-trained their own model initially using a Chinese open weight model, then they built their own. And that is the playbook that a lot of the smarter companies are doing is taking this compounding data flywheel effect, post-training models now, which didn't exist six months ago. People are not doing that, but now they found that holy cow, if I can get a smaller model post-trained in a very specific area, then I could get some really, really amazing frontier-like performance at a much cheaper cost.

0:09:47

So that's part one. Part two is I'm not really that worried on the deeper, deeper infrastructure side because the whole idea of vibe coding these things, that doesn't exist right now. No one's going to go into, for example, into hardcore agent authentication, authorization infrastructure and trust, a vibe coded application to go do that. So that's part two. And then part three is something we should talk about is the last mile of the enterprise. That is the longest mile that ever exists.

0:10:11

This is talking about security issues, who owns context, um, who does the evaluations and who owns the evaluations when an AI agent performs a task, where does that go, right? So there's a lot of other things that go into this that ultimately comes down to who the founders are. Because we haven't talked about, you just got to invest in amazing people that are high sloping, you can build trust around.

0:10:31
Michael Krigsman

So we have a question on LinkedIn from Swami Vaidyanathan, who says, From your inception stage vantage point, what is the attack surface in agentic AI that most enterprise security teams are not thinking about yet?

0:10:51
Ed Sim

It's kind of funny. I was talking to a bank, uh, at RSA, and they said they interviewed ninety different agentic security companies. And, uh, there are a lot of different companies, there are a lot of different companies in the stack. Um, and I'll mention one of my portfolio companies called Keycard dot ai. That's a company that we funded with our friends at Andreessen and a16C capital, uh, and some others. And I think the biggest problem is is understanding that agents, uh, people think that agents should get access either through, uh, my authorization.

0:11:22

So if I'm logged onto Salesforce, should my agent get forever access to Salesforce? And then also if my agent is actually doing work and maybe has its own identity, should that, uh, identity also have the same access, uh, to Salesforce, which means it's a an always-on identity. And and I think the biggest problem that people have is that they just don't understand that agents do work differently than humans. You know, you don't sign up for Salesforce and just have that credential working all the time.

0:11:49

Agents, I think, should be granted access at runtime. It should be granted, uh, access dynamically, and it should be, uh, granted access. That kind of dies out very quickly when the task is over. And why that is important is because when you have a world where thousands of of agents are running around an enterprise, um, if something gets hacked, the blast radius is is contained to that kind of one little unit of very specific authorization versus going through me or going through an agent that has forever access.

0:12:17

So I think that is very hard to build, very hard to deliver at runtime, and I think that's probably one of the biggest holes that's missing. And by the way, that when we started talking about that a year ago, no one really understood what we were talking about. But over the last three months, um, it's been incredible how people were like, Oh, man, that really makes a lot of sense.

0:12:35
Michael Krigsman

Let's go to another question, and this is from Sean Reynolds, who is a very seasoned enterprise exec who I've known for years and years since he was at SAP a long time ago. And Sean says, Would like your perspective on the importance of decision intelligence, automation of decision making and enterprise use of decision intelligence is growing at a rapid pace. These platforms are likely to become agent platforms. Your point of view?

0:13:08
Ed Sim

Decision intelligence also ties into who owns the context, right? Um, and and then basically when you have context, when you ask a query and an agent does work, then you have to do an evaluation. Did the agent do good work or did the agent do bad work? Um, and then after that, a decision is made, right, based on that, on that, um, on on what is performed, right? And I think over time, um, that becomes the DNA of the business.

0:13:32

It it's kind of like what Satya said before. Satya talked about that the the evals are the most important part of the business. So, for example, if, uh, Michael, you have a certain way of doing things in your workflow, and maybe there's three other people that have a same kind of podcast platform, and there's other ways of them doing the workflow. And the question, uh, I then have is how you do those things and how an agent gets evaluated on the performance of those is a benchmark for you.

0:13:58

Should it be a benchmark benched against all podcasters that are building things, or benchmarked against you and benchmarked into me and someone else, right? So I think that is where the decision intelligence comes comes in, and where it's important for, uh, these companies to start owning kind of their own, um, you know, from my perspective, own decisions and also their own evaluations. That is where the valuable data kind of really comes in, and that's what Microsoft is trying to offer to people.

0:14:20

And whether you believe that they're going to do it or not, there's also going to be tons of opportunities for startups to do it faster and better.

0:14:26
Michael Krigsman

What are startups doing to help large organizations introduce more complete context into their workflows and environments so that AI functions more effectively?

0:14:41
Ed Sim

I'll give you some examples. Well, first and foremost, I get pitches every, uh, day, many pitches every day talking about someone wanting to own the context layer and someone wanting to own, uh, kind of the government's layer for enterprise. And by the way, that's that's a nonstarter to go and say you're going to own that whole thing because you have lots of large companies like ServiceNow and Salesforce and even like Atlassian trying to own that layer.

0:15:05

So that's one. So I think if you're going to do context, it has to be very specific context, and I'll give you two examples. I have a company called X5 Labs dot com out of Israel, uh, and what they do, and this will sound familiar, is they understand your context by deploying software onto your machine, and they watch how you work, and they record all the video, and they turn that into data. And if you deploy that, let's just say into the payments team, you can see what workflows are.

0:15:29

And we can say, hey, look, you've got fifty workflows, uh, that are being run throughout your, uh, team. Would you like me to automate some of those? Right? And so once you actually automate some of those, uh, let's say you pick three of them, we will create agents for them, and you decide where you want human humans in the loop. Um, and once you do that, uh, what happens is we constantly look at the agents working over time, and you learn more and more, and you can fine-tune that workflow, not fine-tune the model, fine-tune that workflow.

0:15:56

And what we're going to do over time is we drop a model for you. We we call it a large an LWM, a large work model. We drop it on-prem or in the cloud, and it is only for your finance department or only for your company. And all that intelligence it gets kind of built into your system and is something you own. So that would be one. So that would be a very focused kind of perspective.

0:16:16

Let's talk about security. Um, if you talk about security right now and you talk to Anthropic or OpenAI, they'll tell you, Look, we can find all the vulnerabilities that are out there, uh, better than anyone else. And in fact, what we can also do is do attack path reasoning. We can actually take these small, small vulnerabilities, daisy chain them together, and turn that into a real attack path. And sure, we can share that for you. And we can also share with you how to patch those.

0:16:42

What we don't have is the context. We don't have the context of your IT systems. What happens if I make this patch? What is the upstream, what's the downstream impact of all the software that is sitting in my organization? Do you think a large bank is going to want to hand all that over to those people? Nope, they're not going to want to do that, right? So a company like Snyk, for example, has all of that information because we've been selling our product for years and we have all that security contest context organized so that when you do find these vulnerabilities, you can patch them on a more deterministic basis.

0:17:12

Because we understand, um, how the systems operate and how all the systems and dependencies kind of function together, right? So those would be two examples.

0:17:21
Michael Krigsman

Delighted that you said, uh, that it's a nonstarter when companies come to you, startups come to you and they say they want to own the context layer or governance layer. Because those two terms have become a kind of sinkhole of hype, where if you don't have a clear understanding of a particular problem, say, Oh, well, we need more context. Or if AI is not delivering its ROI, we we need better governance and better control. Uh, so I find that to be, uh, a refreshing point of view, so thank you for that.

0:17:59

So Arslan Khan on Twitter X says, What's the biggest architectural business process red flags that VCs see today that signal an enterprise AI startup won't survive the coming market consolidation?

0:18:16
Ed Sim

There are so many of them. I I do have to tell you, like, it's not the architecture, first and foremost, it's always about the people. I I like to evaluate people and we only back technical founders. And I want to know that based on your experience and your history of doing things, um, kind of, you know, what is that unique insight that you're providing, uh, that is going to change the world, right? And and how do you kind of give me an opinionated view of the future?

0:18:39

Not today, but maybe two years from now, so that we can build towards that future. And I think one of those is this is I want to always understand if you're looking at the architecture perspective, have you built a system, and I say system, that gets smarter with every new model release versus gets killed or or worries me about that. Do you have a system that allows you to swap models, right? How do you think about that, right?

0:19:01

And and so, and then thirdly, do you have some type of if you're an AI or an infrastructure, um, and if particularly if you're at the workflow layer, how do you keep learning? How does your system get smarter and smarter over time that perhaps gives you a proprietary edge, right? And those are the things I think about. And when you look at infrastructure, it's a completely different kind of build in and of itself, right? It's it's basically trying to understand, you know, for example, in security, for example, um, how are we going to solve, uh, um, a world where, um, hackers have the advantage, where they're always kind of on the twenty four seven offensive, where they do attack path

0:19:35

reasoning. And I think the answer there would be, I want to see a world where you have autonomous defense. And I know that's an aspirational goal, um, but the sooner that you can build trust and have a system that is really, really intelligent, that's probably deterministic and stochastic, um, and the sooner you get there, the the more, uh, the safer that everyone will feel. And I think that's the aspiration, right? So those would be some examples around kind of if you look at the architecture, but it's always the people first.

0:20:02

I just want to really highlight that.

0:20:04
Michael Krigsman

Let's grab another question, and this is from Raja Ganesh S, who says, The way companies are using AI definitely makes employees productive, but how do you see that translating to organizational productivity? Do you see something fundamentally missing in the problems AI products are solving, or is it just evolution?

0:20:30
Ed Sim

Honestly, I I think it's just way too early to tell right now, frankly. And and I think part of, uh, productivity, uh, would be, uh, a couple things to look at, right? Because I I look at it as as cost per outcome, right? And like, cost per outcome is basically here's a human, uh, they have a task they want to do, and this is how much, how much should that task cost for the human? Then you have here's a task, and how much does that co- task cost for the AI?

0:20:56

And then you have a, uh, third one, which is a human assisted, uh, with AI kind of outcome on that task, right? And part of that also, if you look at that curve, it has to be accurate, um, and it has to have kind of ROI around that. And and my answer to you basically is really that people are just getting started right now. Like, we're in that wave where people are trying to figure out what ROI is because we were in the early part of the curve, which was just get me something.

0:21:21

Uh, and then now I think people are much more intelligent about, uh, what outcomes will look like. And I think that is the world that we're going to strive for in the next twelve months is perhaps cost per outcome or cost per task. You have got companies like Sierra, I mean, in customer support, that are trying to, s um, you know, charge, uh, from that perspective, or, uh, intercom from thin, or one of our our portfolio company's customer was going to charge per outcome because those are really discrete, measurable tasks.

0:21:46

And I think the more of those that we have, um, I think the better off we'll be, and it'll be easier to understand ROI.

0:21:52
Michael Krigsman

So your view then is the future of AI, and I'm assuming especially agents, is pricing on the basis of specific outcomes. And therefore, the hard question, or one of the hard questions becomes, how do you define what is a specific unit of outcome that you can therefore link back to what the software is doing so that you can charge for it?

0:22:22
Ed Sim

Right now, the easy button is coding, and then there's customer support. But then the question is, what is it for everything else? And every organization will have their own. And this goes back to my other point is once you have a let's just just call it even not a task, a workflow, um, the evals become very important. Because when eval does, it tells you, was that a, did the agent solve this correctly? And it do, did it do really well, or where can it improve?

0:22:46

And then you've got to take that learning and feed it back into the systems that get smarter and smarter over time, right? So so it's not only just a task. When you take multiple tasks and tie them together, it becomes a workflow. And I think that's where we're trying to strive, but the data is imprecise right now. People aren't getting there, but that that is where we're going, I have no doubt.

0:23:04
Michael Krigsman

When you say the data is imprecise, which data are you talking about specifically?

0:23:10
Ed Sim

I'm talking about that first and foremost right now, a lot of enterprises don't even know where to get started from an agent perspective outside of the let's start with coding, uh, and maybe let's start with support. So part one is, um, that's the reason why all these four deployed engineering organizations exist, right? This is why, um, OpenAI and Anthropic have their own FTE kind of organization to to go solve this problem. That's why Accenture was tearing it up for a while because enterprises needed help.

0:23:38

So that's part one is what workflow should I actually start with? And then what would, uh, what would be the definition of success for those? So once you do that, that's that's part one. Part two would be then what is the evaluation framework in which I can do that, in which I say that this is a good outcome or a bad outcome, and then how do I keep learning from it? And right now, people just don't know how to measure it, and the data isn't great right now.

0:23:58

That's why they need help. And right now, it's bodies being thrown at it until, uh, you've got really good software that makes it more precise.

0:24:05
Michael Krigsman

So then fundamentally, the question is, where are the use cases, or which use cases will map in a straightforward way to the application of agents in such a way that you can define measurable outcomes? So use cases therefore become a critical, a critical path item.

0:24:29
Ed Sim

And the smartest organizations start with the easiest ones, the low-hanging fruit in which they can actually automate them, uh, and then actually measure those. And once you get successes from there and wins from there, if I were an IT person, I would start with the small and the easiest and then expand from there. And once you buy get buy-in from everyone else and show that this really, really does work. Like, I'll give you a great example, like X5 Labs is working with an insurance company doing claims processing.

0:24:52

And, uh, I told you that has software that sits on people's desktop, watches, watches how you do work. And we've discovered a fifty-seven step process in a claims processing for an insurance company, right? And we said, Okay, let's run humans versus, uh, AI for a week. And we came back and said, Okay, we have a problem here. Um, like, you know, I think our answers are different from the human answers. Uh, and the company was, you know, upset that said, I don't think this AI works.

0:25:23

The good news is we recorded all the video around that too. So we went back step by step and they said, Oh, actually, the human error was actually worse. You're actually right. And it turns out that the AI was right, you know, 98% of the time, and the humans were only right 85% of the time. So that would be an example of why you need some software that can constantly measure this, uh, and actually even save kind of what happened during a process so you go back and look and look at it.

0:25:47
Michael Krigsman

By the way, you also gave us the secret, I think, to running successful AI pilots that will then translate into actual use cases, ongoing use cases, which are number one, start from an easy pers- uh, an easy use case that you can also measure and convert into a set of productivity-defined productivity outcomes, or ROI is another way of saying it. Uh, because if you can do that, then you're well on your way to having AI success and passing through that horrible pilot purgatory and pilot death area.

0:26:36
Ed Sim

Absolutely. And and the easy button, once again, for most was just using the frontier lab APIs and and kind of making it work, and that's fine. And then over time, what you'll find is that, hm, maybe I can start optimizing around the edges. Maybe I only need the smartest PhD brain for 10% of that workflow. And the other eighty or 90% is pretty straightforward. Uh, and I can maybe use some open source. Maybe I can use GLM 5.2 or Kimmy or Quan or DeepS DeepSeek or one of those to do the rest.

0:27:00

And that's how people optimize things, but they're not going to build it themselves. Michael, there's just not enough talent there. So they're gonna they're gonna borrow that too. They're gonna find people that actually have the infra where you can where you can have another API, perhaps, to to do that. Or maybe take the box I mentioned earlier that you and I talked about much earlier where, uh, one of my companies, SpectraCloud, partnered with AMD and Supermicro, and I call it back to the future.

0:27:22

Because once upon a time before the cloud, we had these appliances. You could drop a box, you can drop one in your basement, in your bedroom if you so choose, where, um, you can get GPUs, you can get, um, SpectraCloud software where there's a front-end router on it that routes to your frontier lab of choice. And then I call it BYOM, bring your own model. You can bring any model you want onto that, and and the ROI is basically we can actually have fifty developers, uh, on one kind of box.

0:27:49

You can have thirty concurrent users, and you're getting 70% savings per year versus using kind of frontier level costs. Um, and so that just got announced yesterday. But this is the world where I see it, and that's an easy button now. There used to never be an easy button to kind of have one of these, but now you can have one. And I think that is kind of the infrastructure that's going to be built in the next two years, and it'll be just as easy to use use those things as it will be to do cloud or or open AI.

0:28:14
Michael Krigsman

So here's a question from John Akinmade, who says, We're hearing a lot about AI due diligence before acquisitions. Do you think enterprise buyers will eventually expect the same level of independent qualification before deploying AI internally, not just when buying companies?

0:28:36
Ed Sim

When when companies are bought, uh, I'm just going to start with the basics. Um, people are mostly buying people, right, talent. And in this day and age, as I mentioned, there's tons and tons of AI companies. In fact, every category that exists today probably has thirty or forty companies kind of trying to do something. And when companies get bought, uh, they're they're buying talent. They want to make sure that the talent there is like next-gen AI, that they're, uh, building for the future, that everything internally perhaps might be coded in loops where the agents are just doing work.

0:29:08

And, you know, 80% or 90% of the pull requests are happening through agents. Because a lot of these larger companies that are making these purchases want to actually buy the future. Uh, and I can tell you that the diligence is centered around that. Hey, how are you guys building stuff? How are you guys coding stuff? How are you guys shipping stuff? In addition to what the product is, right? What is the product that you're building?

0:29:26

Is it something that allows me to get to the market six or nine months or twelve months faster with your team and that product than without? And and so, you know, from that perspective, the AI due diligence is not just it's not the architecture, it's not not not all that stuff. It's about who are the people and how are they going to help me, uh, bring in all this intelligence into my organization and bringing in a faster moving culture to do things better, faster.

0:29:48
Michael Krigsman

I think the consulting companies are really trying to work on this and the especially the cultural aspect. How do we change the culture of the organization to embrace, as you said earlier, for many companies, they're s they're trying to figure out the basics, and the really strong ones are leaping far ahead. But they need outside help, whether it's in the t from consulting or from software.

0:30:17
Ed Sim

Look, as much as I do the inception stuff, I've been doing this for thirty years, investing in technical founders from the very beginning. And look, I have a bunch of companies that have 500, 800, one thousand, 2,000 employees. And some of them actually had raised capital at the height of the zero era, which is a zero interest rate policy era, where, you know, a lot of valuations were extremely high. And and that was kind of the the go-go SASS era where people just hiring and hiring and hiring and and a lot of them had to get fit, right?

0:30:42

And so let's just say now that you're fit, what is every company doing? In every board deck starting about a year ago, it was, how fast are we bringing AI internally into the infrastructure? Um, how are we doing that, starting with coding first? Um, and how do you measure that? And initially was kind of lines of code, how many lines of code are being written? I mean, that's not the most efficient way to do things, but the point is, is just, you know, kind of, where do you start?

0:31:05

Uh, and then it was customer support, and then how are people in sales and marketing do it? How do you empower these people? So that cultural aspect is something that's very, very important. I like to say that some of our best companies had internal hackathons where they have a skills management platform where people upskill the week and they'll demo it and show it to others to just empower them to say, Hey, now that you have, you know, AI here, why don't you actually do your own skill?

0:31:26

Why don't you automate your own thing? I mean, Michael, you and I were talking about today, you have a whole bunch of things that you built on your own and you're not a coder. And I think you've got to create that, um, um, curiosity, you've got to share the curiosity and share what success looks like, even if it's small. And and it's a day by day thing, and and then it gets much harder when you have 100,000 employees versus, you know, a thousand.

0:31:47
Michael Krigsman

But there is no substitute, as you say, for actually trying it. And finding those low-hanging fruit use cases with specific, definable, beneficial outcomes will only happen if people understand the process, right? Because it's people inside the organization that understand their particular process the best. And if they're not involved using AI, then they're not going to solve these problems, okay? The problem of where can we apply AI agents to do a better job?

0:32:27
Ed Sim

Yeah, and they have to feel empowered versus, uh, feeling scared that's gonna rep- replace them, right?

0:32:31
Michael Krigsman

We recently had a guest who said that he thought AI is really whole company transformation. And that's essentially what you're we what we're just talking about now because we're talking about people who are actually doing the work. And you just brought in they need to be empowered, which is a senior leadership job.

0:32:53
Ed Sim

I call it as the sandwich model. Sure, the CEO has to talk about it, but it also has to start start from the bottom up, right? And you got to have these small wins, uh, and the small wins compound, uh, and it has to be shared with everyone else, right? And that's what the best orgs do.

0:33:05
Michael Krigsman

Let's jump to some more questions. This is from Nick Koreshi, who says, How do you see the SaaS model being disrupted by agentic workflow companies taking over in various industries?

0:33:19
Ed Sim

I kind of think SaaS, right? Yeah, you know, there's there's different kinds of SaaS companies, right? There is, um, application area companies from the like Salesforce, for example, or like a HubSpot, uh, or a ServiceNow. And then there's, um, infrastructure companies, which some could call SaaS, right? Because it's subscription revenue, like a Datadog, um, or a Snowflake or a Databricks. Um, and I think what we're really talking about is the first area, right? The application layer companies.

0:33:45

Look, at the end of the day, I think, will we have an interface two or three years from now? I mean, look, have you gone inside of, like, ServiceNow or or or Salesforce? That software is kind of clunky and ugly to use, sorry to say. Um, and and I think the real battle is going to be around, uh, around headless, um, headless systems. And, uh, either I'm gonna have agents kind of interacting and pulling the data that I need and writing the data into some of these systems of record, um, or, um, you're gonna go to the systems of record themselves.

0:34:14

Like, uh, Salesforce is trying to build agent force, or ServiceNow has their control tower platform. And so there's this battle between the systems of record having their own kind of platforms in which they want you to build, and then others wanting to have their own horizontal layer of agents, um, you know, pulling out and writing data, uh, in a headless fashion. And by the way, the interesting thing is there are some companies like an SAP, I think, that, uh, if you're not approved, you're gonna have to pay.

0:34:40

You're gonna have to pay to to get access for that. In fact, Salesforce actually changed their business model, uh, as well about six months ago where they're saying, hey, have at it. Agents have at my platform, you're just gonna have to pay per access, right? And I I think that's going to be we're just getting started right now in that area. And I think that's going to be another interesting curve where eventually is, you know, do these systems of record continue to exist ten years from now or not?

0:35:02

Or do you do you have agents that go out there and and do the read write and maybe write a different database on the back end? And then over time, um, you know, you have your own system of record. I I don't know that that's that's going to be a very interesting area. But I can tell you this is that, uh, investors, um, you know, when you're looking at new inception companies, no one's coming into us, uh, saying I'm going to start one of these businesses, that's for sure.

0:35:22

Uh, unless they want to just, uh, destroy complete completely from scratch, uh, and reimagine and reinvent it, uh, uh, from from an agent-first perspective.

0:35:31
Michael Krigsman

It is funny to think about a company like Salesforce as being a legacy software provider, which we have a sea change in the technol- both the technology and the expectations that people have of how they interact with systems. And Salesforce comes from an older day.

0:35:54
Ed Sim

I don't think anyone's going to rip it out because I don't think people understand kind of that layer between the user and Salesforce. There's so much cuts customization built into it, so many rules built into it. Not to say that AI can't write some of that up where people can get around, uh, uh, at the wedges. But I do think that the pressure that they're going to get is that every time there's a new renewal, people are going to say, Hey, I can take these, you know, one, two or three different systems together or agents, uh, doing work, uh, and it's going to put pressure, uh, on on their platform, uh, unless they can find this new revenue curve from

0:36:28

agents accessing it, uh, versus humans.

0:36:31
Michael Krigsman

This is from Chris Peterson on LinkedIn, who says, Some industry pundits seem to think that gen AI has taken so much VC money out of the system that there's not much left for the next round of startups. Is that a misperception?

0:36:48
Ed Sim

I don't think it's a misperception. I just think that basically AI is the future, and I think we're probably still in the first inning. I mean, this is this is the industrial re revolution kind of all over again. Um, and the amount of money you're talking about is first is, do you believe that the amount of compute, you know, the $1 1 trillion that's being being spent in data centers right now, will that be used or not used?

0:37:10

I think I think the answer's pretty clear right now that token consumption is just going through the roof. And whether it is happening through the frontier labs or through models from China or open weight models from anywhere else, the winner is going to be kind of NVIDIA memory makers, um, and the data centers will actually, uh, continue to proliferate, um, until people say AI doesn't work, which I don't see that happening. Second thing is is that, um, gen AI, I mean, if you look at where the dollars are going right now, it's it's infiltrating everything, right?

0:37:40

Like, it's going into, um, robotics. We're invested in in a company called Generalist AI, which is probably one of the leading robotic, uh, foundational models out there. It's two guys from Google DeepMind and some someone from Boston Dynamics and raised from, you know, NVIDIA and some of the best. Um, but there's been a resurgence in robotics right now. So all of a sudden, a lot of the money's moving from software. And by the way, here's the interesting thing.

0:38:04

There is there are a lot of VCs out there saying software is dead. And of course, there's nuances and all that, right? But but the point is that they've hard pivoted towards hardware. They wanted to go towards moats that they could see, feel and touch. Where do you go? Robotics. Robotics, you know, seems to be like kind of the next frontier. And I think that's could be a very massive market if you look at labor, right?

0:38:22

If you look at kind of the amount of work happening in warehouses or where people kind of on the manufacturing lines. And there's been a massive resurgence in robotics. What else are people investing? They're investing in space. They're investing in defense. The we've been also investing in bio AI. We've got two bio AI companies that we've invested in. So I don't know, I I would say that it it's just AI is just everywhere. So it's not just gen AI, it's actually touches every industry.

0:38:45

So I think it's it's it's actually a wonderful time. It's not taking away, it's adding. It's getting people excited and creating kind of old industries and getting people really fired up about kind of reimagining them.

0:38:56
Michael Krigsman

Very interesting. I'll just mention for folks, uh, all the topics that Ed just discussed, whether it's physical AI or bio AI or space, we've had discussions with major experts here on CXO Talk. So if you want more, go to CXO Talk dot com, subscribe to our newsletter, and do a search, and we have lots of information about

0:39:23
Ed Sim

I would expect nothing less, uh, from you, Michael, to have the the the world's best. But that that's the future right now, right? It's kind of looking at all that, um, hardware actually is easier than it ever has been before, um, chips. We've also been investing some chips as well, right? We invested in a company called Netprem, which is trying to solve the the GPU kind of memory wall problem. There's only so much memory that can go in every GPU.

0:39:46

And imagine a world where you can take an existing, uh, interconnect that GPUs connect to one another and have a separate, um, a rack of memory, as much memory as you want. And and by the way, that's very important because, um, context windows are just getting bigger and bigger as agents are doing more and more work, or agents actually do long long-running work for thirty six hours or thirty days, you're gonna need more and more memory.

0:40:07

And that's the only way that you can scale kind of inference, uh, at a cost productive way.

0:40:11
Michael Krigsman

so. This is from Elizabeth Shaw. Can you talk about the distinction between open source and open weight models?

0:40:19
Ed Sim

Open source is a business model itself, right? And that is basically like, okay, um, I can use this software f- uh uh, for free, um, but I can't do, uh, these things. Maybe I can't sell it commercially, or if I sell it commercially, uh, I've got to charge a certain amount. So I'll give you a good example, Kimmy. Uh, people think that everything, uh, in China that open source is free. But if you actually get generate $20 million a year of of revenue from using Kimmy and you're hosting it, you have to pay for it, right?

0:40:48

So, um, if you look at kind of some of the people that are hosting Kimmy models out there, I think the base ten s and the firecrackers and some of those, they're charging, lo and behold, the same price for Kimmy. I think it's, uh, like 30% of frontier cost, as Kimmy is charging itself on an API perspective. So that's kind of open source. It's the business model. Who owns the license? Who owns the software? And when do you have to pay someone?

0:41:10

Open weight means I can actually download the model and change the weights in terms of how decisions are being made. And that is kind of the bigger deal, right? Because if you can kind of take these weights and understand how decisions are being made and change the weightings around what's important and then s constantly start running queries through it and getting evals, you can really, really fine-tune that model for your own use cases. Um, and and actually, that is kind of what you really want.

0:41:37

I mean, that's what people really want. That's the holy grail in terms of having your own intelligence, having it fully controlled by you. Um, and by the way, most of these Chinese models are also open weight. So I think it they they have both. Um, so I think that's that's kind of the difference between the two.

0:41:51
Michael Krigsman

How close are enterprises to being able to use open source and open weight models effectively? And I'll just mention a few, uh, recently we had the CTO of Mozilla talking about open source as a guest on CXO Talk, really diving into this. But how how close are the enterprise folks to using these these tools effectively in this way?

0:42:13
Ed Sim

Oh, you can go to OpenRouter now, you can go to Base ten, Firecracker. You could just grab an API and start using them today. Um, there are a lot of kind of, uh, companies that are tinkering around and and and downloading open weight models and kind of, you know, running it on their own machines or running it in their own clouds or virtual environments. Um, and of course, I got to tell you this, most of our startups right now that are building, uh, this is the most important part.

0:42:36

Most of our startups are using, uh, open weight models. They're using some combination of OpenAI and and Claude, but also a big portion of what they do i is open weight models kind of architected into their system. The big question, though, that I think we need to think about is what open weight models will be, uh, allowed to be delivered, uh, into enterprises at what point in time? Because you have that US-China tension right now.

0:43:03

Um, and I do know that, for example, there are lots of large financial organizations, um, that are not allowed to bring in Chinese models. So if you're a software vendor and you have a Chinese model under the hood, perhaps make sure that you have other available alternatives, uh, underneath that. I don't know, maybe it's a Mistral, uh, maybe it's a a Gemma, maybe it's a NeMoTron. By the way, all those US. open weight models aren't that very aren't that good right now.

0:43:29

So we there's a big difference between frontier, uh, China, and then kind of what's happening in the US. So there's got to be more investment around that so we can do that. But I do know that enterprises, yes, they're using them now, but you have to be careful of the ones that have regular regulatory issues or the government, for example, they're not going to be using Chinese models, right? So you have to have a flexible architecture around that.

0:43:52
Michael Krigsman

Sean Reynolds says he's talking about, uh, decision making, and humans use, uh, data insight and insight to make a decision. Agents will become autonomous, empowered to make a decision. This return on decision making is rising and is important, and there are new use cases. Can you talk about this whole issue of agents and decision making?

0:44:23
Ed Sim

How agents make decisions are going going to be important. Uh, and then how you actually, uh, take those decisions being made and retrain the agents and put that back in the workflow, um, is where the intelligence comes from, right? I I think that's the bottom line. And it's something that enterprises are starting to understand. It's something that they should own versus giving away to the frontier labs. Uh, that's my simple, simple answer around that.

0:44:44
Michael Krigsman

Tell us about Black Hat.

0:44:46
Ed Sim

There's a video that everyone should watch called, um, uh, Black Hat USA 2026, the Breaking News, the Open AI Hugging Face incident. And, um, I got to tell you, so that just came out, that was from Black Hat. And, you know, when you actually have, uh, agents do work, uh, and you give it a reward system, i.e., pass this test, the agents will do anything possible to pass the test, right? Especially if you don't give it any parameters.

0:45:12

And in this case, the agent decided, I'm not going to pass this test, but let me figure out how I can get to the internet to actually get more help. And you know what's wild is? And what came out was that this, um, uh, these agents created a shadow message board and left notes for each other weeks in advance of kind of escaping the sandbox and kind of after escaped the sandbox to figure out how it could hack the system and pass the test.

0:45:36

So, so that's my point. These agents will stop at nothing if they're given, uh, a a a task to complete, uh, and they'll do anything possible. And so you're you're reading about, um, you know, this Hugging Face incident, but also Kimmy, uh, just announced today that, uh, some agents escaped the sandbox as well. And what I'm trying to say is that there are a lot of security founders out there that are building businesses and they talk to CISOs.

0:46:01

I talk to thirty CISOs, I talk to fifty CISOs. And I think this is something you and I probably talked about years ago is that if I only build for what's happening today or what CISOs want today, then I'm missing out on something. And I think what I'm really trying to say is that, how will the world look when you have autonomous swarms of agents that are gonna do anything possible to chain multiple vulnerabilities together? That may not seem like a a big deal, but when you exploit all of them and create an attack path around it and they can penetrate your systems twenty four seven, that's a really, really scary world that we're gonna live in.

0:46:35

And I can tell you this is that no humans can keep up with that amount of of attack infrastructure right now. Um, and it's very similar to the web days. In the web days, the hyperscale internet companies were the ones that actually experienced growth like never seen before, and they built their own systems. They built infrastructure. Confluent or Kafka came out of there, right? Uh, temporal came out of, uh, came out of there as well. And I think that's the same thing right now.

0:47:00

It's the opening eyes, it's the hugging faces, it's the Kimmy's. They're the ones that are shooting the crazy security incidents right now because they're on the frontier. And if I were a security founder, I would figure out what the hell they're doing and how they're doing it and what they're building, and then reverse engineering that work backwards so you can bring it to everyone else. So that that would be my one perspective around Black Hat and why I honestly think this is going to be this is just the beginning.

0:47:21

This is the tip of the iceberg in terms of what's happening on the security side right now. It's it's a scary world out there.

0:47:26
Michael Krigsman

The startups that you're seeing, how good are they in terms of being able to address this kind of thing? I mean, how in the world do you stop a frontier model from on its own independently identifying a zero day defect in some product out there or some set of libraries and then taking advantage of it? How do you s how do you stop that?

0:47:57
Ed Sim

It's hard to stop, right? Offense has advantage, right? Defense has to catch up. But it's, um, we need to move to a world where you have autonomous defense. And of course, autonomous defense means you need context, Michael, in order to actually find the problem and solve the problem. And right now, you have humans kind of all in the loop, constantly doing things. There's not enough trust built into the AI systems. And so for now, the attackers have the advantage.

0:48:21

And the faster that people can get to autonomy, the fa- the better off we are. So if you look at the labs, they're moving toward the world of autonomy faster because they know that's the only way they can solve the problem. And what they're doing is the tip of the iceberg. What everyone else is doing is, you know, maybe they're taking their time and just trying to test things, but we don't have the time right now.

0:48:39

And that that's kind of what's happening. And and people are doing a lot of other things. I'll say that offense is the new defense. People are getting, uh, systems where they're just constantly attacking their own systems and trying to find the problem themselves using models before the hackers come and get them, right? I mean, there's so many ways that that that people are going after, but you need hardcore autonomous kind of, uh, defense if you want to keep up with this.

0:49:03
Michael Krigsman

Given all of this right now, what does this mean for CISOs today in the enterprise?

0:49:11
Ed Sim

The most sophistic- there are a bucket of CISOs who are super sophisticated from some of the leading banks. They're working very closely with some of these large frontier labs right now to figure out what they're seeing and how they can protect themselves. The biggest problem around that is that, um, you know, a lot of these models are handicapped, Michael, right? If you think about Mythos or Fable, um, people are getting access to it through a trusted mechanism, um, but some of that still is handicapped.

0:49:36

They're still not getting the full access that a hacker could if they actually reverse engineered some of the models and got got their own access. Second thing is it's the frontier is too expensive. I've heard so many people complain about every time new code is being spit out and generated, you can't pay Fable at prices. Think about the code base, the amount of money it costs people. So there's got to be other solutions, for example, where you can maybe use some open weight models that are post trained on your system that provides frontier like performance, maybe at one tenth the cost or one third the cost.

0:50:05

Because otherwise, you're not going to be able to to constantly scan the system. So there are going to be so many different architectural decisions that are being made. But ultimately, the goal has to be, how do I just make sure that continuous autonomous trusted defense as these attackers are hitting my systems? And that's that gap of how long it takes is going to be how protected and secure you feel.

0:50:26
Michael Krigsman

The huge market for security, and that market is

0:50:29
Ed Sim

It's a golden age. I I say, if this is not the golden age for cybersecurity, then I don't know what is.

0:50:33
Michael Krigsman

and, of course, you have established players like Palo Alto Networks who are intensely focused on this set of problems as well.

0:50:42
Ed Sim

Yeah, everyone is. So Palo just bought one of my companies, uh, Protect AI, for over $700 million last year, and that was three years after founding. So, uh, and they were providing a full on, uh, AI security. It was before agents even took off. We're doing the whole AI AI security kind of one platform, uh, uh, from that perspective. And now we've already moved on. There there's so much more going on right now with agents like Keycard or or models or even human, uh, engineering, right?

0:51:08

Did you see that two days ago that, um, um, people, hackers were actually created a campaign against all the big banks and hedge funds where they replicated people's voices and were calling to call centers. That's just classic social engineering, but at scale. Uh, I have a company called Humaniacs with an X dot AI that actually solves that problem. So there are so many things coming down the pike that are automated at scale and you're going to need AI to answer that.

0:51:32
Michael Krigsman

There are so many look-alike AI startups. How can enterprise buyers judge which AI vendors will survive an industry shakeout? And, uh, Arslan Khan referenced the industry shakeout earlier. Very quickly, please.

0:51:48
Ed Sim

It's about the people. You've got to invest in, uh, amazing, uh, you as an enterprise, has to invest in amazing people that have a background that, you know, has, uh, a pattern of of success. And then two, I like to say, is that you buy the product, but you also buy the vision. So is this product solving my problem today? But are they also showing me a future that I'm not ready for that they're building towards as well?

0:52:08

And you take those three things together, and that's kind of how you choose. And then you look at the backers. Are they financially secure? Who are the VCs behind them? Are they the top VCs on the planet or people I've never heard of before? And you add those things up, that's the best way you can look at it from a startup perspective.

0:52:22
Michael Krigsman

But when you talk about that vision, every startup is talking about, you know, they're going to change the world and all of this. But how can a how can a CIO or a CISO see through that?

0:52:33
Ed Sim

Oh, it has to be concrete. Like, here's a vision. Like, um, I'm going to build, uh, like a company like Surf AI, one of my portfolio companies. Um, I am going to actually tie every asset to an owner. Um, I am going to actually create a and offer you agentic processes, uh, and suggest them to you, and you can create a human in the loop. But my vision is that eventually, here's my concrete vision is that eventually it's going to be full autonomous loop that's going to close the eighty of vulnerabilities you can't ever get to.

0:53:00

Um, and it's only a question of when you decide you trust the system to do that. That's my vision. It's not like I'm selling the future. It's a really concrete vision that it's all up to you, uh, end user, that you choose to decide to turn it on or off.

0:53:13
Michael Krigsman

So specificity is a key point.

0:53:15
Ed Sim

Yes, absolutely. Can't just be a wide vision. Hey, agents are going to conquer the world and attack path reasons coming. It has to be very concrete.

0:53:22
Michael Krigsman

What advice do you have to startups on selling AI to the enterprise?

0:53:30
Ed Sim

I wouldn't sell AI. You've got to solve a very, very specific problem and you have to and you have to do it uniquely. Um, and you have to show kind of why you are the ones that they're going to trust to kind of work with you, right? And and and a couple ways to do that. One is you could be a founder that actually already has worked with hundreds of executives in the past, so you have trusted relationships there.

0:53:51

Uh, or you may get an investor like ourselves or some other investor as well that also has those relationships. So you cause what I screen for is can I walk this person, this founder, into the room? Can they talk the talk from a technical perspective, but can they also talk the talk from a personal perspective with the people that I'm going to bring them into the room with, uh, in order for them to make a decision or a bet take a bet on you?

0:54:10

Because what they're doing is ultimately investing in you the same way that we're we we, uh, from Boldstart, are investing in you. It happens to be with cash and time in a different way, and ours is cash to get a return.

0:54:20
Michael Krigsman

Great advice. Ed Sim is the founder and general partner of BoldStart Boldstart Ventures. Ed, thank you so much for being a guest on CXO talk today. I'm very grateful to you.

0:54:34
Ed Sim

Thank you for having me for round three.

0:54:37
Michael Krigsman

And everybody, thank you for watching. Now before you go. Go to CXO talk dot com and subscribe to our newsletter. We do interactive shows like this all the time and we will notify you so you can participate. It's a great opportunity to ask the most amazing people in the world pretty much whatever you want. So take advantage of it. Check it out. And folks, thanks so much and we'll see you again next time. Have a great day.