Kevin Werbach speaks with Nadav Cornberg, co-founder and CEO of Eve Security, about securing agentic AI where it counts: at the moment an agent actually does something. He recounts how customers upended his own assumptions that AI agent security should focus on visibility and after-the-fact detection. Buyers insisted on runtime enforcement first, reasoning that learning a production database was deleted after the fact helps no one. With Eve's "interrogation" approach, when an agent attempts an anomalous, high-risk action, Eve's agent-in-the-loop pauses and questions it about its intent, before approving, blocking, or escalating to a human.

Cornberg describes building a deterministic enforcement layer on top of inherently non-deterministic models, with the system minting explicit rules from observed behavior so that the large majority of everyday requests resolve deterministically. Ultimately, the consequenes are the same whether an unintended action originates in a prompt injection or a simple hallucination. On the perennial human-in-the-loop question, Cornberg argues that escalating everything would drown security teams as the agentic workforce scales, so the platform automatically handles lower-risk cases with justification and reserves human review for the genuinely critical. He closes predicting that "agentic security" will fragment into distinct segments much as endpoint, network, and cloud security once did, and that intent is fast becoming the field's organizing idea.

Nadav Cornberg is the co-founder and CEO of Eve Security, an Austin-based agentic AI observability and policy-enforcement company whose platform governs how AI agents interact with an organization's most critical systems. He brings roughly two decades in product development and engineering, including an early decade in cybersecurity at RSA and Check Point and later work in physical access security across gaming and hospitality before returning to security for the agentic era.

Transcript Founders' blog: Why We Started Eve Security