The Balancing Act

Your enterprise may have hundreds of AI agents operating right now — and most security teams have no idea. As non-human identities multiply and agents gain the ability to connect to APIs, MCP servers, and sensitive data, the zero trust discipline organizations spent years building is quietly being bypassed.

In this episode, Tim Currie sits down with Michael Caplan, CTO of In Balance IT, to unpack what agentic security actually looks like in practice — from gaining initial visibility to implementing the right guardrails at runtime.

What we cover:

• Why organizations consistently undercount the agents in their environment
• The difference between binary and contextual guardrails — and why both matter
• Non-human identities: how they're over-provisioned and how they get compromised
• Prompt injection, memory poisoning, and MCP server risks
• The human-in-the-loop: where it fits and when it's essential
• How CISOs should prioritize their starting point

Start with discovery. You can't secure what you can't see.

To connect with In Balance IT: https://InBalanceIT.com/contact/

Most security teams can prove they're busy. Patching, scanning, phishing simulations, awareness training — the list is long. But ask them if they're actually better protected than they were last year, and the answer gets uncomfortable.

In this episode, In Balance IT's VP of Security Strategy Ryan O'Halloran sits down with Field CISO David Malcom to dig into why so many security programs are anchored to last year's threats — and what it takes to build one that keeps pace with today's AI-driven attackers.

They introduce Adaptive Defense, In Balance IT's framework for continuous, outcome-based security that evolves with the threat landscape instead of the compliance calendar.

What we cover:

• Why compliance and security have never been the same thing — and why that gap is wider than ever
• How AI-powered attackers are operating at machine speed while most defenses are still static
• The three core principles of Adaptive Defense: continuous compliance, consultant-led engagements, and phased implementation
• How the framework scales from mid-market to large enterprise
• What a free 45-minute security briefing with In Balance IT looks like

Think your security program needs a closer look? Request a no-cost 45-minute briefing at InBalanceIT.com

In this episode, Ryan O’Halloran and Chief Technology Officer Michael Caplan examine the specific economic pressures currently hitting enterprise IT environments. They discuss how a $600 billion capital expenditure wave from AI and cloud providers is consuming the global supply of NAND, DRAM, and hard disk drives, leading to 3–4x price hikes and 6–12 month lead times. The conversation provides a strategic roadmap for IT leaders dealing with canceled OEM contracts and budget overruns that have turned traditional infrastructure planning upside down.

Key Takeaways

• The AI Allocation Squeeze: Massive commitments from public and "neocloud" providers are leaving enterprise customers with fully allocated supply chains for server memory and storage.
• Contractual Volatility: Some OEMs have updated terms and conditions, allowing them to cancel purchase orders or request new ones at higher prices even after a deal is executed.
• The Death of the 5-Year Refresh: Traditional long-term planning is being replaced by a need for 12–18 month strategic windows and "burst" environments.
• Optimization as a Defense: Implementing FinOps-style right-sizing on-premises can reclaim wasted CPU and RAM, buying organizations time to navigate the crisis.

Broadcom's VMware licensing changes have left many organizations facing up to 10x increases in renewal costs. How do you find a path forward without being held to "ransom"?

In Episode 17 of The Balancing Act, Ryan O’Halloran (VP of Security Strategy) and Michael Caplan (CTO) dive into the reality of "VMware Freedom." They break down what happened to the vSphere Standard and Enterprise Plus tiers and share the specific strategies In Balance IT is using to help clients buy time, reduce TCO, and evaluate viable alternatives like Nutanix and Hyper-V.

Key Discussion Points:

• The 2026 Shift: Why Broadcom’s decisions with lower-tier licensing is a game-changer for IT budgets.
• Buying Time: How to leverage third-party partnerships to extend the life of your vSphere 7 or 8 environment.
• The TCO Flip: Why moving away from VMware now offers a better ROI than it did just six months ago.
• The Migration Path: Practical steps for evaluating Nutanix and Hyper-V without a total hardware overhaul.
• Strategic Freedom: Moving beyond the hypervisor to build a resilient, multi-year IT roadmap.

Stop paying the Broadcom ransom. Visit InBalanceIT.com to schedule a VMware Freedom strategy session.

AI-enabled attacks are no longer theoretical—they’re here.

In this episode, Ryan O’Halloran of In Balance IT sits down with Shane Harsch of SentinelOne to break down the first large-scale AI-orchestrated cyber espionage campaign and what it means for today’s security leaders.

They explore how attackers are accelerating the kill chain through automation, why human-speed investigation is no longer viable, and the architectural shifts organizations must make to defend at machine speed. From identity blind spots to modular automation, Shane outlines the capabilities modern SOCs need to shorten response time, detect novel threats, and recover quickly.

What we cover:

• How AI is reshaping attacker tradecraft and shrinking dwell time
• Why machine-speed attacks force a rethinking of SOC workflows
• The critical role of identity visibility and anomaly detection
• Why automation is now essential—not optional—for defense
• How SentinelOne is approaching hyper-automation and AI-native security
• What leaders must do to prepare for attacks that outpace human response

If you're asking how to build automation, regain visibility, or harden identity in a world of AI-driven threats, this episode offers a clear path forward.

Learn more: In Balance IT → inbalanceit.com SentinelOne → sentinelone.com

In Episode 15 of The Balancing Act Podcast “Calling All APIs”, Ryan O'Halloran (VP of Security Strategy at In Balance) invites special guest Tim Erlin (VP of Product at Wallarm) to discuss the state of API security in the threat landscape and how incredibly important APIs are to generating business revenue. Ryan and Tim also cover the trends in protecting API’s and the relationship with AI that fits hand in glove.

In Episode 14 of The Balancing Act Podcast, Ryan O'Halloran (VP of Security Strategy at In Balance) and Michael Caplan (CTO at In Balance) discuss an overview of the latest developments on securing end users in the age of AI and contrasting the advantages and disadvantages of performing security operations either in a traditional cloud proxy network (SSE) versus natively inside of the end users web browser (Enterprise Browser), and how that leads to security outcomes the business desires.

In Episode 13 of The Balancing Act Podcast, Ryan O'Halloran (VP of Security Strategy at In Balance) and David Malcom (CEO at Malcom Risk Advisors) discuss an overview of what makes a strategic cybersecurity advisor aka a “Virtual CISO” a fit for your organization’s security compliance readiness and posture improvement needs. David and Ryan then provide insights into how to strategically evaluate an advisor based on the ever-changing requirements of data privacy regulations and AI threats.

In Episode 12 of The Balancing Act Podcast, Ryan O'Halloran (VP of Security Strategy at In Balance) and Michael Caplan (Chief Technology Officer at In Balance) discuss what’s driving the market to explore alternatives to VMware by Broadcom for data center virtualization and cloud computing. Michael then provides insights into how to strategically evaluate the competitive landscape and plan for a successful migration over time if an offramp from VMware makes sense for your business.

In Episode 11 of The Balancing Act Podcast, Ryan O'Halloran (VP of Security Strategy at In Balance) and Michael Caplan (Chief Technology Officer at In Balance) discuss an overview of artificial intelligence threats, protections and future of AI security in the current state of the IT landscape.