The Reason 30 Years of Cybersecurity Has Failed - and What Actually Fixes It | Trent Telford, Qanapi

September 10, 2026

AI Summary

5 min read

For 30 years, cybersecurity has been a game of building higher walls—firewalls, permission systems, and network perimeters—while attackers simply find bigger ladders or pull a brick out of the base. Trent Telford, CEO of Qanapi, argues that this model is fundamentally broken, especially as AI, autonomous drones, and borderless systems make the old castle-and-moat approach obsolete. His company’s solution starts from a different baseline assumption: the data will be exposed. Instead of trying to keep attackers out, they encrypt data at the most granular level possible—individual words, paragraphs, or database cells—and tie each encryption key to a specific identity and a set of policies. The result is that even if an attacker gets inside the wall, the data they find is useless.

The Failure of Perimeter Security

Continue reading the full summary in the app — free to try.

Read Full Summary →

Free • No credit card required

Listen to Audio Summary Open in App

Never miss an episode of Eye On A.I.

Get every new episode summarized in your inbox — free, ~5 minutes to read.

No spam. Unsubscribe anytime.

What you'll learn

1 (00:00) **The Core Problem: 30 Years of Failed Security** - The internet was never designed to be secure, so 30 years of retrofitting walls and firewalls has failed because attackers just find bigger ladders or pull bricks out of the castle wall.
2 (00:54) **The Radical New Assumption: Assume Data Will Be Exposed** - The solution starts from the baseline assumption that data will be exposed, whether by an Edward Snowden-style insider or an external attacker, so protection must work even when the perimeter is breached.
3 (03:06) **How It Works: The API Service and Transparent User Experience** - The system is an API service that integrates with existing enterprise platforms (like Okta, Google Docs) to automatically encrypt and decrypt data at the cell or word level without the user managing keys.
4 (08:53) **Solving the AI Data Leak Problem** - The biggest current use case is allowing enterprises to safely use public LLMs by encrypting sensitive data before it is sent to the model, preventing leaks like the Samsung incident.
5 (12:48) **The Drone and Autonomous Systems Use Case** - For drones operating in denied, disrupted, intermittent environments (DDIL), the system pre-loads encrypted payloads and distributes key shards across multiple ground nodes, only decrypting when identity and temporal conditions (GPS, altitude) are met.
6 (15:09) **Agent-to-Agent Data Passing and Multi-Agent Workflows** - The same API service works for agentic AI systems where multiple agents pass data between each other, allowing each agent to decrypt only the subset of data it is authorized to see.
7 (17:52) **Red Teaming and the One Remaining Weakness** - The system has been rigorously tested against advanced AI hacking tools (including one that is “unbelievable” and cannot be named), but the ultimate weakness is poor identity and credential hygiene on the user’s side.

+ Full timestamped outline available in the app

Show Notes

Every major data breach in the last 30 years shares the same root cause: the data inside the wall was never protected, only the wall. And AI frontier models are now making that wall easier to breach than ever, scanning codebases externally to discover undisclosed vulnerabilities and write exploits before anyone knows the hole exists. Trent Telford, Chairman, CEO & Founder of Qanapi, joins Craig Smith to explain why the entire architecture of conventional cybersecurity is structurally broken, and what a genuinely different approach, built from the opposite assumption, looks like. Rather than trying to build a better wall, Qanapi starts from the baseline that the data will eventually be exposed, and encrypts it at the individual word, paragraph, or database cell level, tying each unique key to a verified identity and a set of conditional policies that must all be met simultaneously before anything can be decrypted.

The most commercially urgent application of this architecture is one that unlocks AI adoption for enterprises that have been sitting on the sidelines: Qanapi's gateway service encrypts sensitive fields before data reaches Claude, ChatGPT, or any other frontier model, and the model simply reports it cannot read the encrypted sections, while still reasoning over everything else. Trent discusses how Qanapi's Fathom tool confirmed in testing that Claude could not read the encrypted sections. He describes two major retailers - one using AI heavily, one abstaining entirely because of data security concerns - and asks the question every enterprise leader should be sitting with: how long can you last off the train before you get blitzed? The episode also covers drone security in denied wireless environments, the post-quantum encryption mandate that federal agencies have no practical plan to execute, and why Qanapi's business has exploded in the last six months as the AI gold rush has finally turned its attention from models to infrastructure.

Subscribe to Eye on A.I. for weekly conversations with the people building and deploying the future of AI.