From frontier labs and enterprise platforms to emerging startups reshaping entire industries, The Deep View: Conversations podcast interviews the brightest minds and the most influential leaders in AI.
Jason Hiner: Alright, well Christian, welcome to The Deep View Conversations podcast. Thanks for being here.
Christian Rodriguez: Thanks for having me.
Jason Hiner: For those who aren't familiar, say who you are, what your role is at CrowdStrike.
Christian Rodriguez: Yeah, so Christian Rodriguez, I'm the field CTO of the Americas. I've been with the company for approaching 12 years and I run basically our field program for engaging our enterprise customers on strategy, right? Collecting feedback on how they're using the platform, how we can improve the platform, and how we can integrate the platform into their tech stack, their ecosystem of other security tools and non-security tools.
Jason Hiner: Very good. Here at Fal.Con 2026, CrowdStrike introduced a lot of new stuff, but it's actually around, you know, using AI to empower, you know, protectors, defenders to be able to fight attacks that are coming in that now have increased in volume and speed, as well as, you know, launching a lab, research, all of these things, launching your own models. What are the things that, you know, you go out and talk to CISOs, to CTOs, executives all the time. What's the stuff that now that you've launched, you can't wait to go out and talk to some of the customers and partners you work with?
Christian Rodriguez: Oh, yeah. I think, you know, SafeMind is a big initiative.
Jason Hiner: Your own harness?
Christian Rodriguez: Our own harness. I mean, the conversations we have right now with CIOs, CISOs, CTOs, they're all around the same concerns of the adversaries are getting faster, and how do we, as defenders, increase our ability to respond to threats that are AI driven, AI led, right, agentic. And, you know, having a platform or having an ability that, you know, increases the velocity of a responder or defender is just so important. You know, boards are, cybersecurity and AI have been, you know, number one board topic, right, over the past six months alone. So, sure, I present all the time to boards, and they're all saying the same thing. They're saying, if adversaries are getting faster, how does that impact and affect our business? And how do we also utilize it to, you know, bring our systems to a better state? How do we use it for better posture management? How do we use it to, you know, stop the attacker on a continuous basis? Because, you know, AI doesn't sleep, right, and defenders, traditional SOC analysts do. And so, you know, automation and AI needs to be in your back pocket. It really needs to be in your front pocket, right, at this point. All the pockets, right? You're just surrounded by, you know, just pocket system of AI agents. So that's exactly what we've been working on. And these announcements, I think, underscore how we can enable defenders to be faster at machine speed, basically, or inference speed, basically, at this point.
Jason Hiner: Okay. This summer, there was this little incident you may have heard of with OpenAI and Hugging Face, you know, I'm sure this has come across. I have to imagine that this has come across, you know, your desk when you're, or, you know, your board rooms and all the places you go and meet customers. You know, there's been this general sense of kind of a little bit of dread in the industry, right, of like, okay, these agents sort of got outside of their controls and started doing things that we hadn't anticipated or didn't want them to do. How is that, have you seen the same level of concern, panic, understanding, trying to reach, you know, level of understanding, what does this mean for us?
Christian Rodriguez: Unequivocally. I think what that attack highlighted, or that incident, rather, highlighted, was how powerful and how persistent these models can be to carrying out their objectives. I actually spoke about this recently and I gave this interesting analogy of when I was, when my kids were younger, I was grilling some burgers for them one day on the backyard. And, you know, I had, you know, burgers on the grill, put on a plate for them, you know, I had some asparagus on the grill, some fries going on, and I said, hey kids, you can have ice cream once you're done with your, your food, inclusive of your veggies. And they're like, okay, great dad. And so, they quickly ate their burgers, I was waiting for the asparagus to finish, I put on the plate, kids are gone. I go inside and they're sitting at this dining table with mom, they're all getting ice cream. And I go, what, what happened, you know, and mom looks at me like, what, what, they said they could have ice cream, right, and they completely bypassed, right, the asparagus initiative. Yeah, yeah. So for, you know, I think of AI very similarly, right, if you, if it has an objective that needs to carry out, and if there's a way to get to that objective faster, right, it'll bypass what we'll call the asparagus, you know, guardrail. And so, you know, I think what this incident did, again, is it emphasized the need to understand the potential impact of these models, the need to put guardrails around these models, and the need to also understand what's going into them, especially as you're deploying them internally, and you're, you know, for thinking about AI from the two perspectives of how businesses embrace them, there's workforce usage, right, so think of anyone that has access to, you name your frontier or commercial model, where they can upload sensitive data potentially, and now they've become this inadvertent insider threat where they're leaking data. But then from a CI/CD pipeline and developer perspective, you're using, you're spinning up agents, and these agents are allowing you to interface with them, and these prompts that are going into them are, it could be so impactful to the business, right, and the data that they're accessing and the identities that are being used, so it's this massive culmination of risk that is now surrounding this child that wants ice cream, right? And you need to ensure that you have better visibility controls, and I think that's what we're spearheading.
Jason Hiner: Okay, how about, you're out there talking to a lot of different kinds of customers.
Christian Rodriguez: Yeah, absolutely.
Jason Hiner: Yeah. Regulated industries, under-resourced, you know, areas of the economy, so government, healthcare, utilities, things like that, you know, they already were struggling to keep up with what was out there, and now these attacks are happening at, you know, this pace and breadth that, you know, is overwhelming, right? It was already overwhelming. What are you seeing with those folks, and are they finding ways to meet the moment?
Christian Rodriguez: I think they are, the under-resourced and under-staffed companies, or name your industry, that is kind of, it doesn't have a certain, you know, unlimited budget, for example, they're concerned, right? They're concerned, a lot of these, you know, companies are already trying to figure out ways for consolidation to reduce IT spends, and now we're talking about adversaries that are targeting them at a speed that they can't even handle. So those conversations are usually tied to, hey, how can CrowdStrike help us get our arms around this with a service offering more? like maybe they don't have the expertise, maybe their venture into AI is costly or too costly, and so for those customers that fit that profile, or those enterprises fitting that profile, we have service offerings that can help them get their arms around utilizing and maximizing our platform with a lot of these releases we announced today, or this week, to automate responses, right, or even managing the entire platform on their behalf, because again, they're, they don't have the staff, and we have a really good consolidation story around, how do we get ahead of the adversary with AI? Well, we can also manage all that for you, so that's kind of like one part of your answer, right, one part of your question, I'm sorry, but the other side is there are, especially in the SLED and the healthcare space, I've been meeting with some larger hospital systems that have absolutely ran towards this problem. Really got into using things like AgentWorks, for example, one of the features that we released, where you can customize your own agents and create almost this orchestration layer of agents that are doing all these actions on your behalf, and a lot of them said, we've been testing it out, we've been running it, and it's actually been very, very successful, and for them, that is a cost savings opportunity as well. Okay. Now we're reducing the amount of time it takes us to do manual analysis or triage or remediation, we can actually refocus and reassess where our research needs to be allocated, so that I think there's, there's an interesting opportunity to even consider the embracing of AI, a cost savings opportunity in terms of what your response program looks like, you know, kind of start to finish.
Jason Hiner: Now it's time for a word from this week's sponsor, Nooks. Most sales teams run outbound, inbound, and deal management in three separate tools. A lead comes in Friday night, nobody calls till Monday. A rep hangs up from a great call, the recap goes out on Thursday. Deals slip, and nobody can say where. Nooks puts every motion on one execution layer. AI agents work alongside your reps. They get calls answered, get emails delivered, send the follow up the same hour, and prep to secure the next step. While the reps do the selling. Teams on Nooks book three times more meetings, follow up 20% faster, and sales reps get back 10 hours a week. Over 1,800 revenue teams already run their go-to-market on Nooks. See what revenue agents can do at nooks.ai slash Deep View. That's nooks.ai slash Deep View. And we thank Nooks for their support of The Deep View. And now, back to the show. Yeah, I'm glad you mentioned that CrowdStrike announced a lot of products this week. But my question was, how much of that is, okay, we already help you protect your endpoints, we help you protect these things, and the environment is getting more dangerous, and so now we're going to sell you more stuff. How much is it? I mean, I'm sure there are some that are very dangerous environments that maybe they need more security, right? Or they were under-resourced before. But what you're getting at is like, there could be a case where for the same amount of budget you already have, we're now offering you a lot stronger protections. Is that the case?
Christian Rodriguez: Yeah, I think stronger protections. I think we've always been a very strong protection platform, right, just for the record. But I think the idea of AI from an adversarial perspective, what we've seen is this idea of adversaries becoming cross-domain, right, aware, if you will, right? Your enterprise has this massive tool stack from the SaaS applications to the identities that are being used, just think of whatever your identity provider is, think of the cloud services that you subscribe to, you meet with so many organizations and you're like, we have every CSP, right, that's out there, every cloud service provider that's out there. Then you actually have your endpoints, and the definition of an endpoint is your Windows, your Mac, Linux, your ephemeral workloads and so forth. And so an adversary is going to touch everything, right? They're going to touch the SaaS apps, that's where your data is, they're going to leverage your identities as an abusive mechanism to be very pervasive. And if you're managing five disparate tools to get your arms around a problem that is a multi-touch point, if you will, right? Like you're wasting cycles, right? You're spending a lot of money, you know, maintaining them, you're having to train folks to understand those products intimately. And for us, our story is saying like we aggregate that data natively, we have these protection capabilities to understand the path of the adversary, even if the adversary is agentic, right? The idea of an agentic adversary is velocity, but they still have to exploit a system, abuse credentials, get ready data, ready for exploitation, launch a piece of malware, all of these things are very much inherent to a playbook of attack techniques that are faster than ever because of the AI. So what is the cost savings opportunity? It's to say, well, we can do all of that for you, right? And so in lieu of having to, you know, spend on those five or six tools that, you know, you're managing disparately, like we're automating a lot of that, we're consolidating that. And there's a very big economic incentive behind that as well.
Jason Hiner: So the one console, one pane of glass to see everything.
Christian Rodriguez: Try to avoid that term, but yeah.
Jason Hiner: Yeah.
Christian Rodriguez: But it's one console, one single console, one single sensor. And Guardian is a really good example of how that single sensor extends protection into the AI, you know, kind of surface now.
Jason Hiner: Okay. So there's the adversaries. And that's a clear, you know, demarcation line, you know, they're trying to get into our network, or they're trying to get to our data, and we don't want them. What are you also seeing from companies that, whereas their own internally AI is part, is causing them problems. So there was shadow IT, shadow AI takes it to a whole other level. Because these tools can like, are really good at connecting to your mail, connecting to all of your stuff. And all of a sudden, now, you know, the enterprises, a lot of your data can get exposed by internal agents. Are you seeing a lot of that and can CrowdStrike help with that?
Christian Rodriguez: Unequivocally, right? You know, I've met with so many enterprises where they say, hey, everyone in the company at this point is a developer, because we've installed Claude Code, right? As an example. Yeah. And Claude Code, I saw recently a sales rep, no offense to the sales people. He had Claude Code on his laptop. He's really doing some really great automation. And I was like, oh, that's, you know, he showed me his command-line interface. I'm like, oh, that's interesting that there's a lot of folks in the industry in general, that are really embracing this. And so when I meet with companies, and they say, yeah, we've given everyone access to Claude Code, and we're enabling them and we're training them, and we're creating a culture to not fear this, right? To embrace it. What that also does is it creates this ripple effect of the impact of the AI tools usage, because someone's like, hey, this worked for me, let me try something else. That aperture of risk starts to expand with the introduction of new AI tools that are running on the endpoints now. And so what I've been hearing and what I've been seeing with these conversations is we do assessments where we come in to help customers and help enterprises get their arms around how widespread is the shadow AI issue. And we do assessments, we find like, you know, we'll have a single endpoint with like, you know, 40 or, you know, 50 different types of agents, right? Or they realize that the agents themselves are pulling down like an MCP server, and you're running skills, skill files that maybe, you know, or could be potentially malicious. And there are package dependencies or software dependencies that are being abused from a supply chain perspective that also introduce risk. And so, you know, they see this and are like, oh, I didn't realize this is that bad, right? And some of them know it's bad, they just didn't know how bad. So when we show them, they're like, this is a problem. And I think, I think what we see that the most is for enterprises that ran into embracing AI with limited governance or oversight or even a plan. And here we are now where, you know, you times that 50 agent or 40 agent number times like tens of thousands of systems, that's a very, really, really big problem. Right?
Jason Hiner: Yeah. So is this the motivation behind, like, Agentic IdP that you announced, like, which is essentially every agent gets a sort of cryptographic ID, so that it can't be spoofed or shared?
Christian Rodriguez: Exactly.
Jason Hiner: And so, so that when there are agents on your network, you sort of know, you know, what they're what they're doing, and who they're attached to, and all of that. That's sort of, trying to bring some order that chaos is what you're working on.
Christian Rodriguez: Yes, exactly correct.
Jason Hiner: Okay.
Christian Rodriguez: And you want context also.
Jason Hiner: Okay.
Christian Rodriguez: Is this outlier activity being generated by human or a non-human, right? You know, so who's asking for the ice cream, right?
Jason Hiner: Yeah.
Christian Rodriguez: Are they following the right path to that? And so this absolutely allows you to really implement guardrails. You need to understand the context behind that behavior, and then you can start to implement enforcement points. And this is truly game changing for us.
Jason Hiner: What else, Christian? Like when you go and talk to the CTOs and CISOs, what are they putting pressure on you saying, Christian, I need you to help me with this, that we haven't talked about, what else are they are they telling you like, hey, we just need some help with this, we don't feel like this is going well, and we want it to be better?
Christian Rodriguez: You know, I think the biggest problem where I ask, well, they always say, Hey, Christian, we have a problem. We have lots of problems. Yeah. Data. Data is always like the number one issue, right? So I usually ask folks like, Hey, how many of you think that your AI governance program is strong? And some of them like, Yeah, it's really good. I go, Okay, great. How is your identity governance program? Like, it's getting there. I go, How's your data governance program? And no one raises their hand. You know, some people like turn and walk away, right? You know, talk to me later. And I think the issue is your business is growing, right? And data becomes ubiquitous and data is kind of like the new oil, right? And it has been for quite some time, quite frankly. And so how do you ensure that you're protecting your IP? How do you ensure that you understand things like data lineage? How do you ensure that data is being moved to locations that are sanctioned and that the AI agents themselves accessing it should access that data? That's like a big question mark for a lot of enterprises, most enterprises, you're like, I don't know, right? Like we set up RAG or we set up this and we, we created an AI, an agent that would access this database and we realized it's accessing something else now or someone copied data into that that shouldn't be there, right? Or even in the with the idea with respect to generative AI, if you're using something internally, right? If you're putting unclassified data into a repo with classified data, and you're asking these models to generate something new, but now there's a question like, is that new output intellectual property as well, right? And so there's all these ideas of how do I classify that? How do I get my arms around where that goes? And how do I ensure that we don't end up, you know, in a major data loss event? And so that's a big concern that we're, I always get approached about like, hey, how do we control this? And we have capabilities for that as well, right? Where we are giving that data lineage view, we're helping you get your arms around control mechanisms to ensure that someone isn't inadvertently uploading sensitive data or an agent isn't taking data and sending it, you know, to a destination that it shouldn't. It's all around, again, how data is classified, how it's treated, and how you can track that movement. And that's a very big, you know, question that comes up. It's in almost every conversation that [trails off].
Jason Hiner: Okay. Not surprising.
Christian Rodriguez: Yeah, exactly.
Jason Hiner: Yeah. And now it's time for a word from our sponsor, Atlassian. If you're managing software development teams right now, you've probably noticed the speed gap. AI is making individual coding faster, but organizational friction, such as meetings and context switching, remains unchanged. Atlassian's 2026 State of Developer Experience Report surveyed over 1,500 professionals, and the numbers confirm this. Eighty-seven percent of developers say they're writing code and shipping faster, but only 28% actually feel less organizational friction. And there's more 65% are spending time correcting AI-generated work that missed intent while 49% are spending over four hours a week managing AI tools and reviewing code. Only 26% are saving 10 hours or more per week. The research shows that as AI writes more code, the developer's role is shifting to architecture, systems thinking and validation. To unlock full productivity, your team needs an AI-native SDLC software development life cycle to resolve the friction. Join Atlassian leaders and key industry thinkers on November 9th for a webinar focused on helping you develop a clear AI strategy that fixes the friction and builds workflows that actually work. Click the link in the show notes to reserve your spot today, or you can go directly to fandf.co slash webinar. That's fandf.co slash webinar. And our thanks to Atlassian for sponsoring this episode. And now, back to the show. How about, this week CrowdStrike launched its own models, a red model and a blue model, and the harness, you know, which we talked a little bit about. Do you feel like that is going to be used by the cutting edge, the people who are on the cutting edge of implementing cybersecurity banks, government, you know, agencies and that? Or do you have sort of regular customers that you think they're ready to sort of use these things at that level?
Christian Rodriguez: Yeah, the questions have come up for quite some time. We use AI for red team, blue team exercises. It's come up from a very wide range of customer types.
Jason Hiner: So not just the cutting edge?
Christian Rodriguez: Not just the cutting edge. I think what AI should, in the grand scheme of things, do is it should simplify certain objectives, right? Or at least the path to getting to a certain objective, it should simplify that. And so I think even the less sophisticated enterprises, they should realize that we're doing a lot of this work for them by developing this harness, we're developing these models, and leveraging the data that we're using and that we have in the platform based upon what their environment looks like and their end points and, you know, creating kind of a map iteration or a map iteration of that and then saying, let's have the AI model do an assessment of what is exploitable, what is vulnerable, and let's fix that for you. So I think quite frankly, I think really what we will have is a combination of large scale, very superior, very advanced, you know, enterprises using this, right? And then customizing it, and then we'll have kind of on the lower end, those that simply want to embrace it because they've been trying to do this in a more streamlined fashion and we're doing the majority of the work for them.
Jason Hiner: Yeah, you're carrying a lot of the water
Christian Rodriguez: Absolutely.
Jason Hiner: for making the models. Okay, you mentioned something that I wanted to go to next, which was, you know, this is built on the Nemotron models. But now a lot of the most advanced sort of enterprises are saying, we need to own our own intelligence. Can they take your models and then customize them themselves? Like are the models, are your models open models themselves? Can they take them and customize them, you know, with their own data recipes, all of that?
Christian Rodriguez: Yeah, yeah. I think for that use case specifically, we have this capability called AgentWorks in the platform. And the idea or the intention behind this initiative is that you can create your own custom agents and have the interface with the different types of data that live in the platform or even third-party data. And so for those scenarios where you're looking for more than just a blue team, red team exercise, think of creating, again, this kind of ecosystem of agents that are helping with orchestration, remediation, I actually created an agent for this financial institution recently just to demonstrate taking a very complex combination of incidents and then distilling that down into a board-level report with the potential impact and potential cost of the emulated breach that we ran in this lab. Just to showcase that if you have a series of events happening, these models can simplify the very complex concepts into very basic and actionable insights. And then you can kind of streamline and automate this for the rest of your organization. You can actually enable different business units. And the customization of those agents is there for any enterprise to use. And then we also are introducing a bring your own model. So think of the idea of bringing that into the platform as well. If you want to go beyond what we have.
Jason Hiner: Can the models be run, your all's models be run locally? Can they run them on-prem?
Christian Rodriguez: Yeah, so everything's going to be cloud-based. So the model's going to run cloud-based, absolutely. So the data comes in, we run the assessment, we give you the output, but it's running in our infrastructure.
Jason Hiner: Okay. For now?
Christian Rodriguez: No, no, just in our infrastructure.
Jason Hiner: Okay. All right. Very good. How about, as you think forward, what would an ideal state be a year from now at Fal.Con? There's a lot of challenges that we're dealing with. Shadow AI, adversaries running at sort of machine speed. And a lot of what was announced here was like, we're going to arm you to be able to keep up. But of course, the larger models, the frontier models, they're getting better and better and better. If we, a year from now, what do you feel like your hope is in terms of the ways that your customers have kind of caught up? What's the state look like for them?
Christian Rodriguez: The state is we won, right? We stopped the bad guys. I would say culturally, I'm going to answer this question a little. I'm going to go around it for a second.
Jason Hiner: Okay. It's okay.
Christian Rodriguez: AI culturally is labeled AI. And it's so novel and it's new and everyone's just so excited about this capability. And what happens culturally is that at some point we're so used to it that it just becomes automation. We don't even think about it as AI anymore. It's just what we do. And so what will happen is coming year from now, a lot of these agent capabilities that we're building in AgentWorks or what we're doing with the red and blue team capabilities that we're defining and other iterations of that is that there will be so much automation in the platform driven by AI that we want to enable defenders to be very proactive to start moving left of boom so that things like posture management and exposure management and getting your arms around, you know, business processes are something that you can focus on a little more deeply with a lot more trust in AI kind of carrying out a lot of the automation for you. Or like leveraging things like human-in-the-loop, human-on-the-loop, human-above-the-loop frameworks to say, let me create an orchestration agent, for example, to kind of, you know, run through different, you know, data collection efforts or again cultivating reports based upon a series of incidents attached to different business units and human can validate everything's fine. And you'll have other agents, for example, that will look at IT policy and hygiene and things of that nature, right? And then you'll have agents that are more focused on doing automatic network containment and remediation, right? And so you'll have a world of analysts that are acting as kind of an oversight agency, right? Where you'll have AI doing orchestration and assessment and policy reviews, but, you know, also driven by human analysts. And so we're moving left of boom where humans can be more proactive, putting more trust in these agents that we're creating. I think that's maybe the theme for next year.
Jason Hiner: More proactive, less reactive. Everybody will be into that.
Christian Rodriguez: Exactly. For sure.
Jason Hiner: All right, Christian, the last two questions are the same ones I asked everybody at the end of the podcast. The first one is, what's the AI tool that you're using right now that you think more people should take a look at? And then the second one is, what's the tip that you have for maximizing your time, maximizing your time for, you know, leverage in the AI era? For leaders especially. For leaders.
Christian Rodriguez: Yeah, so I use Slack a lot. Slack has a really cool Slack AI bot, actually. I think it's fascinating, quite frankly. I'm such a huge fan of it. And so,
Jason Hiner: The built-in one?
Christian Rodriguez: The built-in Slackbot. Yeah, Slackbot. It's very powerful. You do these cool canvases that you can create and embed different skills and create new skills. So I found myself gravitating to using that, quite frankly, a whole lot recently. And it saves me a lot of time in my day, honestly. I think it's fantastic. And, you know, I would say I kind of made a joke. I make a joke at keynotes that I used to use ChatGPT all the time, quite frankly, just personally in my personal life.
Jason Hiner: Yeah.
Christian Rodriguez: And I made jokes that I would much rather share my browsing history than my ChatGPT logs, right, just because it saves so much. But, you know, I found that in terms of being productive, that Slackbot AI has been pretty spot-on for me.
Jason Hiner: Very good. All right. How about the leadership time question?
Christian Rodriguez: For the leaders, I would have to recommend the same thing, actually.
Jason Hiner: Really?
Christian Rodriguez: Yeah, I would have to, if you are a Slack user and you have that ability, I've been using it for orchestrating workflows, giving me a full breakdown of what my day looks like, any follow-ups that I promised, it would say, hey, don't forget to do this, follow up. And for me, I start my day with that, actually, at this point. And I hate to say, but I've become subtly dependent on it. Look, did I miss anything? And let's actually look at the week, last week, and make sure my notes are there. And so for me, I think it's very powerful to help prioritize where I'm spending my time for the rest of the week.
Jason Hiner: Does it look at just Slack or does it look at email?
Christian Rodriguez: I have it integrated into some emails and some other applications, or even I have a note system, I have it go through some of the notes and help me say, hey, you said you're going to do this, make sure you did it. Or you didn't send that email.
Jason Hiner: Nice.
Christian Rodriguez: For me, that's everything.
Jason Hiner: We all need that.
Christian Rodriguez: We do need that. Yes, exactly.
Jason Hiner: Okay, Christian, thank you for the time.
Christian Rodriguez: Of course, absolutely. Anytime.
Jason Hiner: Good stuff. All right.