AI Summary
5 min readKevin Mandia has spent 30 years in cybersecurity, building Mandiant into a defining incident-response firm before selling it to Google. He is now back with a new company, Armadan, and his view of the AI transition is blunt: “Everything I did is dead, and then everything else is new.” In this conversation with a16z’s David George, Mandia explains why AI gives attackers an immediate, structural advantage and why the only viable response is autonomous defense trained by autonomous offense. He also details how Armadan’s agents have already found over 90 zero-day vulnerabilities in production at Fortune 500 companies this year, and why the next two years will remake nearly every layer of the cybersecurity stack.
Why AI Changes the Offense-Defense Balance
Mandia’s core argument is that AI does not merely make existing attacks faster—it changes the nature of what is possible. A human attacker must be selective, devoting limited attention to one path at a time. An AI agent can probe thousands of paths simultaneously, map an entire network in minutes, and execute lateral movement at a speed Mandia calls “shocking.” “What AI does in a microsecond would take 70 humans,” he says. “They can’t even do it. It’s apples to oranges.”
Continue reading the full summary in the app — free to try.
Read Full Summary →Free • No credit card required
Never miss an episode of a16z Show
Get every new episode summarized in your inbox — free, ~5 minutes to read.
No spam. Unsubscribe anytime.
What you'll learn
- 1 (00:00) **Why Kevin Mandia Returned to Start Armadan** - The founder of Mandiant explains his motivation for getting back into the field after selling to Google.
- 2 (04:04) **What Armadan Does: The AI Offense Platform** - Defines the company's mission to use AI for continuous offensive security testing.
- 3 (05:17) **How AI Attacks Differ from Human Attacks** - Kevin explains the fundamental behavioral differences between human-led and AI-led intrusions.
- 4 (08:28) **Nation-State Attacks vs. AI Attacks** - Contrasts traditional sophisticated human hacking with the emerging AI threat model.
- 5 (11:14) **The "Hyper Attack" Methodology** - Explains how Armadan continuously probes customer networks.
- 6 (15:06) **Why This Isn't Traditional Pen Testing** - Kevin redefines the category away from legacy vulnerability scanning.
- 7 (17:15) **90+ Zero Days Found in Production** - A striking data point demonstrating AI's offensive capability.
+ Full timestamped outline available in the app
Guests on this episode
Show Notes
a16z General Partner David George sits down with Armadin founder and CEO Kevin Mandia to discuss what happens to cybersecurity when attackers can operate at machine speed.
After 30 years in security and building Mandiant, Kevin says AI convinced him to get back on the field. He explains how AI changes the economics of cyberattacks, allowing attackers to probe thousands of paths simultaneously, and why that means defense will ultimately need to become autonomous too.
They also unpack Armadin’s approach: continuously attacking customers’ systems with AI to find exploitable vulnerabilities before adversaries do, then building toward autonomous defenses that can respond in real time. Kevin shares what Armadin has learned from finding more than 90 zero-days in production environments this year, why humans can’t remain in the detect-and-respond loop, and how the entire security stack could change over the next few years.
Resources:
Learn more about Kevin Mandia and Armadin: https://www.armadin.com/team-members/kevin-mandia
Follow David George on X: https://x.com/DavidGeorge83
Learn more about Armadin: https://www.armadin.com/
Stay Updated:
Find a16z on YouTube: YouTube
Find a16z on X
Find a16z on LinkedIn
Listen to the a16z Show on Spotify
Listen to the a16z Show on Apple Podcasts
Follow our host: https://twitter.com/eriktorenberg
Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details please see a16z.com/disclosures.
Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.