Astra worked coherently for 24 hours, and Brockman says defenders have a short window before attackers get the same capability. His 10 operating moves, plus the claims worth checking.
Moving a quarter of production engineers to defense says more than any AGI announcement. As AI capabilities grow, security must develop just as quickly—and the claims themselves still deserve careful verification.
The short window for defenders is the right frame, because it puts a clock on something most security teams treat as open-ended. When an agent can hold a task coherently for a full day, the first visible gain is hours handed back to analysts and engineers. I wrote about exactly that next step. The time dividend only pays off if someone decides in advance what it is for. For a SOC, that means pointing the freed hours at detection engineering and the exposure backlog nobody ever had time to close, while the window is still open. Moving a quarter of production engineers to defense is that same decision made at company scale.
the pen test anecdote is the most actionable paragraph here for a solo dev. point a coding agent at your own infra, ask for the findings, then ask it to fix them. 13 findings in 15 minutes on a static site. most indie projects have never been audited at all.
Moving a quarter of production engineers to defense says more than any AGI announcement. As AI capabilities grow, security must develop just as quickly—and the claims themselves still deserve careful verification.
The short window for defenders is the right frame, because it puts a clock on something most security teams treat as open-ended. When an agent can hold a task coherently for a full day, the first visible gain is hours handed back to analysts and engineers. I wrote about exactly that next step. The time dividend only pays off if someone decides in advance what it is for. For a SOC, that means pointing the freed hours at detection engineering and the exposure backlog nobody ever had time to close, while the window is still open. Moving a quarter of production engineers to defense is that same decision made at company scale.
https://cyrilsimonnet.substack.com/p/ai-gave-you-eight-hours-back-the?utm_source=substor&utm_medium=substack&utm_campaign=comment
the pen test anecdote is the most actionable paragraph here for a solo dev. point a coding agent at your own infra, ask for the findings, then ask it to fix them. 13 findings in 15 minutes on a static site. most indie projects have never been audited at all.