About this session AI is transforming software security. Vulnerabilities that once required deep manual research can now be surfaced faster, at greater scale, across the entire open source software ecosystem. For defenders, this creates a new challenge: how do you move from detection to protection before attackers can take advantage? In this video, Thomas Graf and Dan Lorenc explore how the industry’s approach to vulnerability management is changing in the age of AI. They discuss how models such as Mythos are accelerating vulnerability discovery, why coordinated remediation across open source is becoming critical, and how Athena, the coalition created by Chainguard with Cisco as a founding member, aims to help turn AI-discovered findings into fixes and protections for everyone. Dan and Thomas discuss how Chainguard brings the secure software foundation for this model: trusted open source artifacts, hardened container images, SBOMs, provenance, and continuous rebuilds designed to reduce vulnerability exposure before workloads ever reach production. The conversation also covers how Isovalent’s innovative runtime shielding fits into this new model, with security shifting down the stack into the kernel as well as shifting left. Using eBPF-powered runtime visibility and enforcement, Isovalent’s Tetragon technology can help teams understand what is actually happening in production and immediately apply runtime shields that reduce exposure while fixes are developed, tested, and deployed. This is the same technology that powers Cisco LiveProtect to dynamically shield smartswitches from vulnerabilities. The combined approach connects secure-by-default software artifacts with kernel-level runtime protection, helping organizations reduce vulnerability risk from build time through production. What You Will Learn How AI models such as Mythos are changing vulnerability discovery and remediation Why open source security requires faster, more coordinated industry response How the Athena coalition helps turn vulnerability findings into fixes and protections at scale How build-time hardening and runtime protection work together to defend modern infrastructure