Sabrina Halper Show · 3 min · Oct 7, 2026

Consumer agents need permission and audit checks

YC

Yinon Costica

Co-founder, Wiz

Co-founded Wiz, the cloud security company Google bought for $32 billion, and leads its product organization.

Sabrina HalperHost · Host, Sabrina Halper Show
Has worked as an investor at HOF Capital and founded SHS Media.

About this segment

Costica recommends checking permissions, audit logs, and data handling before trusting consumer agents with sensitive access. He says provider responsibilities and regulation are still evolving.

From “Google’s $32B Bet on Cybersecurity in the AI vs. AI Era | Wiz Co-Founder Yinon Costica”, Oct 7, 2026. Watch the full episode

“Maybe we need to look at the audit logs. Maybe we need to look at the permissions.”

YCYinon Costicaat 29:58 · Sabrina Halper Show29:58

Takeaways

Check where data goes and who receives it.
Review logs and permissions before granting access.
Provider responsibilities and regulation are still evolving.

Watch 3:00 from 28:38

In this episode

Up next · Behind the CraftA design system helps engineers and agents ship consistently6:57

Transcript

Transcribed by machine (Whisper) from the episode’s audio, so a word may be off here and there.

28:44
what's your message to consumers? Absolutely. I think one, it's very in a smaller scale of an individual it's very similar to what we see in the enterprises but here i think the first thing that we basically realize is that the opportunity is immense right the transformational ability to do things differently and instinct i think also the technology is not new in agents and what it can do instinct has made it easy and that's what actually triggered many to just okay it's i don't need to be understood exactly so I think that this ability shows us that ease of use can unlock tremendous potential for really you know just better life right better use of technology and maybe that's the most important thing to remember before we talk about the other aspects because the opportunity is huge and it's positive. But the second thing is that we also need to put guardrails and think about
29:53
what is the risk that we might incur, right? So like you've said, maybe we need to give it some time before we give it our credit card. Maybe we need to think about how do we secure it. Maybe we need to look at the audit logs. Maybe we need to look at the permissions. And there is a whole sequence of questions that we need to be asking ourselves. Where does our data sit? Where is it sent for who is this company and what but you know what regulatory compliance they actually just were like do they you know so there are many many questions that over time we need to ask I think that you know there is an ecosystem that needs to be created in terms of the regulatory responsibility like we had GDPR for personal data like we need to think okay so what does it mean when companies that provide these services to individuals, what responsibility they have.
30:48
So it's all it's an evolving ecosystem. I think it's not going to be, you know, we're not going to solve it overnight. But I think that we all have a great incentive to build an ecosystem that we can all trust eventually because we understand the benefit in it. And the one thing I will say that I do think is very different than in the past. I think that in the past, we really had to explain the risks of cyber and why it's important and, you know, even what does it mean.
31:23
And I think today the level of awareness is much, much, much higher. Not across everybody, of course, but I think in general, the average person understands more.