The AI Control Loop: AI Security is API Security - with Tim Erlin of Wallarm

0:02 [SPEAKER_00]: Hello listeners, today we are kicking off a new series entitled the AI Control Loop.

0:07 [SPEAKER_00]: How enterprises govern the AI they've already deployed, sponsored by our friends at Walmart.

0:13 [SPEAKER_00]: Walmart is the AI Control Platform for Enterprise AI, protecting every AI workload, API and application in production, giving CSOs the governance they need and CIOs the speed

0:32 [SPEAKER_00]: Using patent and AIML based threat detection and blocking that operates at production traffic speeds.

0:39 [SPEAKER_00]: Today's episode is entitled AI Security is, API Security, and joining us is Tim Irland, VP of Product Marketing at Wal-Arm.

0:47 [SPEAKER_00]: We discussed the foundational link between AI Security and API Security, digging into the role that APIs play in the dev deployment and operations of AI.

0:57 [SPEAKER_00]: We explore how they contribute to the risk profile of AI transformation projects and how securing APIs is critical for successful AI transformation.

1:07 [SPEAKER_00]: them.

1:07 [SPEAKER_00]: Thank you for being on the show today.

1:09 [SPEAKER_00]: Thanks for being on code story.

1:11 [SPEAKER_00]: My pleasure.

1:11 [SPEAKER_00]: I'm happy to be here.

1:12 [SPEAKER_00]: Really excited to dive into Wall-Arm and all the things there and are topic for today, which today's episode isn't entitled.

1:20 [SPEAKER_00]: AI Security is.

1:22 [SPEAKER_00]: AI Security.

1:23 [SPEAKER_00]: Really excited to dive into all things there before we do.

1:25 [SPEAKER_00]: Tell me in my audience a little bit about you.

1:28 [SPEAKER_01]: Sure.

1:28 [SPEAKER_01]: My name's Timmer.

1:29 [SPEAKER_01]: I'm the VP of product and security strategist at Wall-Arm.

1:34 [SPEAKER_01]: I've been in cyber security for only plus years and really joined Wallarm because I saw this gap in the market around API security and it was a gap that I tried to sit into in the past or tried to solve in the past and I felt like Wallarm really was well positioned to address something that

1:49 [SPEAKER_01]: Just seemed like it was missing in the space, so that's why I dove into API security.

1:53 [SPEAKER_01]: Amazing.

1:54 [SPEAKER_01]: That's very cool.

1:55 [SPEAKER_01]: What do you do for fun?

1:56 [SPEAKER_00]: Fun.

1:56 [SPEAKER_00]: Play soccer and I'm mountain bike as much as I can.

1:59 [SPEAKER_00]: Nice.

2:00 [SPEAKER_00]: Very cool.

2:00 [SPEAKER_00]: So you're obviously in good shape.

2:02 [SPEAKER_00]: Both of those are very grueling sports.

2:05 [SPEAKER_00]: I do both of those things much more slowly than I would like to, so.

2:09 [SPEAKER_00]: Okay, cool.

2:10 [SPEAKER_00]: Let's dive into the meat of it then.

2:11 [SPEAKER_00]: My first question is around AI security.

2:14 [SPEAKER_00]: And when people hear AI security, they often think first about models, prompts, or training data.

2:21 [SPEAKER_00]: Why do you argue that AI security starts with APIs?

2:25 [SPEAKER_01]: So I think to answer that question, you just have to start thinking about how AI works.

2:31 [SPEAKER_01]: Not from a model standpoint, but from an interaction standpoint.

2:34 [SPEAKER_01]: So when you connect to an AI tool,

2:38 [SPEAKER_01]: you're connecting over an API that web interface that you might be using.

2:41 [SPEAKER_01]: Ultimately, that's a web interface backed by APIs that connect to those models.

2:46 [SPEAKER_01]: When you interact with an AI enabled tool where AI is embedded in the application behind the scenes, those are all APIs.

2:55 [SPEAKER_01]: And then the AI tools themselves, the agents, the applications, when they connect to the things they need to get the job done, that might be just another API,

3:04 [SPEAKER_01]: Or it might be an MCP server, which is frankly just another API, or a tool which is usually over an API.

3:10 [SPEAKER_01]: The conclusion you inevitably come to is that all of the AI interactions are underpinned by API interactions.

3:17 [SPEAKER_01]: And that's why

3:18 [SPEAKER_01]: I argue that AI security starts with APIs.

3:21 [SPEAKER_00]: That makes a lot of sense.

3:22 [SPEAKER_00]: And like you said, when you think about the components and how they fit together, they are communicating through exactly what you said through APIs.

3:30 [SPEAKER_00]: Where do you see organizations underestimating API risk?

3:34 [SPEAKER_00]: And as they move AI projects from pilot to production, where are they falling short and how they estimate the risk here?

3:42 [SPEAKER_01]: So, over the last few years, a lot of organizations have come to realize that the APIs they expose out to the world present risk, exhibit risk.

3:50 [SPEAKER_01]: They've started addressing that risk through API security tools.

3:53 [SPEAKER_01]: What's missing where organizations underestimate that API risk is on all of the internal tools and APIs that their AI capabilities are their AI applications connect to.

4:03 [SPEAKER_01]: So you might think, hey, this API is internal to my organization, it's less of a risk.

4:11 [SPEAKER_01]: But if you've got AI tools that are using those APIs, there is actually a route to them from an external standpoint.

4:19 [SPEAKER_01]: And I think that's where that underestimation occurs.

4:22 [SPEAKER_01]: It's really not understanding all of the connections between the AI applications, AI agents, and the tools and APIs that they're using internally.

4:31 [SPEAKER_01]: Yeah, that's clear there.

4:32 [SPEAKER_00]: How does the rise of AI agents change the stakes for API security compared with traditional application architectures?

4:40 [SPEAKER_01]: But we all understand that the difference between an LLM and an agent is that the agent is designed to take actions on the users behalf to actually do something rather than just generate textory images and pass those back.

4:52 [SPEAKER_01]: And so as you have these agents taking more actions, whether it's booking a flight or issuing a refund or I have an agent that I use to help manage my day to day tasks, so it connects to a third party task management system and manages tasks and they're for me.

5:07 [SPEAKER_01]: All of those interactions that agents make, that's what increases the stakes.

5:11 [SPEAKER_01]: That's what changes the stakes for API security, because those API connections now are part of your AI infrastructure.

5:18 [SPEAKER_01]: And they weren't before necessarily.

5:20 [SPEAKER_00]: Yeah, that makes sense.

5:21 [SPEAKER_00]: You essentially have the agents representing any sort of interactions you'd have with these other systems with these APIs.

5:27 [SPEAKER_00]: Yeah, totally.

5:28 [SPEAKER_01]: And you have to keep in mind the authentication and authorization there.

5:30 [SPEAKER_01]: So they're acting on your behalf, understanding what they're allowed to do

5:36 [SPEAKER_01]: A context, the user context in which they're acting is a big part of that challenge as well.

5:41 [SPEAKER_00]: Absolutely.

5:41 [SPEAKER_00]: I would imagine that what you just said is wrapped into an answer for this next questions.

5:46 [SPEAKER_00]: What are the most common API security assumptions that break down once you have this sort of setup where AI systems are taking action autonomously?

5:55 [SPEAKER_01]: It's a tough question to answer because people's assumptions are varied and very different.

6:00 [SPEAKER_01]: But a lot of those assumptions are around authentication and authorization.

6:04 [SPEAKER_01]: So the assumption is often that if an agent can do something, it's allowed to do that thing.

6:10 [SPEAKER_01]: And what I've seen from a lot of organizations in this sort of period of AI transformation is giving up on or making exceptions for core security principles that have always been applied to new technology.

6:24 [SPEAKER_01]: But for some reason, with AI, we can throw them out the window and say, you know what, I'm not going to worry about

6:29 [SPEAKER_01]: I'm not going to worry about problem authentication and authorization because I just really have to adopt and use these AI tools.

6:34 [SPEAKER_01]: And I expect we're going to see a series of breaches and incidents that are the result of those assumptions or any assumptions that we want to phrase it.

6:43 [SPEAKER_01]: AI systems become more integrated and act more autonomously moving forward.

6:47 [SPEAKER_00]: Yeah, I think we are going to see some things that go down there.

6:51 [SPEAKER_00]: Okay, let's flip into threat stats, right?

6:53 [SPEAKER_00]: That's wall arms research, right?

6:55 [SPEAKER_00]: Wall arms threats, research points to APIs as a major overlap point for AI vulnerabilities.

7:01 [SPEAKER_00]: As we're discussing this, it really comes to light.

7:04 [SPEAKER_00]: A.A.I.

7:05 [SPEAKER_00]: vulnerabilities and exploited vulnerability.

7:07 [SPEAKER_00]: So the areas they're going to actually take advantage of.

7:09 [SPEAKER_00]: What does that tell us about where attackers are likely to focus?

7:16 [SPEAKER_01]: on an annual basis so at the end of the year we look back at the previous year and collect and analyze a bunch of different data from public sources and from our own platform.

7:24 [SPEAKER_01]: What we've seen over the last few years is this growing trend around AI and API overlap.

7:30 [SPEAKER_01]: The first question you asked about why is API security API security?

7:34 [SPEAKER_01]: It's not just opinion, there's data behind it that's sort of as pushed us in this direction.

7:39 [SPEAKER_01]: As an example, we've seen that from 2024 to 2025, there was a 390% increase year of a year in AI vulnerability.

7:50 [SPEAKER_01]: So the number of, and we're talking about DVE IDs, really.

7:53 [SPEAKER_01]: Not just CVIDs, published vulnerabilities, but published vulnerabilities is the key there.

7:58 [SPEAKER_01]: So 439 published AI-related vulnerabilities in 2024, 2185 in 2025.

8:05 [SPEAKER_01]: So massive increase, but AI doesn't necessarily mean API.

8:09 [SPEAKER_01]: So what's that overlap look like?

8:10 [SPEAKER_01]: And this is where it gets interesting.

8:12 [SPEAKER_01]: In 2024, the overlap was essentially 100%.

8:16 [SPEAKER_01]: I think there were 438 API vulnerabilities.

8:21 [SPEAKER_01]: that were also, or AI vulnerabilities that were also API vulnerability.

8:24 [SPEAKER_01]: So it was nearly a perfect overlap.

8:26 [SPEAKER_01]: In 2025, that overlap changed dramatically.

8:29 [SPEAKER_01]: There were only 786 overlapping vulnerabilities in 2025, but you've still got massive growth of 80% from 439 to 786.

8:39 [SPEAKER_01]: So what we saw was the trajectory for the overlap continued to grow at a high rate.

8:43 [SPEAKER_01]: But the trajectory for AI vulnerabilities overall would took off massively.

8:47 [SPEAKER_01]: So it shifted from 100% overlap to 36% overlap.

8:51 [SPEAKER_01]: If I remember correctly, just very clearly, there's a strong relationship between the AI vulnerabilities and the API vulnerabilities that drive this conclusion that AI security is API security.

9:03 [SPEAKER_00]: I just make so much sense.

9:04 [SPEAKER_00]: I mean, you think about the architecture of agents, you think about the architecture of AI, which you've already stated.

9:10 [SPEAKER_00]: There are API connections between those things, but now you look at the data, right?

9:14 [SPEAKER_00]: And there is a rise in those vulnerabilities based on the fact that it's AI, how should security leaders think differently, moving into authentication, authorization, and API abuse when the user, quote-unquote, may be an AI agent

9:32 [SPEAKER_01]: Well, so I think it's a fair question to ask whether they should think differently or they should think the same.

9:37 [SPEAKER_01]: And the reason I say that is that when there's a new technology that sort of takes off, there's often a tendency to think that we have to build new tools for security controls that we have to think fundamentally in a different way.

9:49 [SPEAKER_01]: The reality is that the security controls themselves and concept don't change that dramatically.

10:01 [SPEAKER_01]: But the controls themselves don't necessarily change them.

10:03 [SPEAKER_01]: So if you take, for example, authentication authorization, though authentication, you need strong authentication.

10:08 [SPEAKER_01]: That is not unique to AI.

10:10 [SPEAKER_01]: You need to be able to authenticate agents in a robust way the way we authenticate human beings in a robust way.

10:15 [SPEAKER_01]: And if you don't, you're going to run into the same kinds of problems where an agent can interact with tools and APIs that it shouldn't because authentication isn't present or isn't strong enough.

10:25 [SPEAKER_01]: Authorization, you want to apply the principle of least privilege.

10:28 [SPEAKER_01]: The principle of least privilege is not new.

10:30 [SPEAKER_01]: It's been around for a long time.

10:32 [SPEAKER_01]: Now, that controlled isn't well applied to agents.

10:35 [SPEAKER_01]: We tend to think these AI agents can go do whatever it is they need to do.

10:38 [SPEAKER_01]: They have a degree of freedom right now and being creative about how they solve problems.

10:42 [SPEAKER_01]: But they really shouldn't have had some interesting conversations about applying zero trust to agents, which is a good way to think about it.

10:49 [SPEAKER_01]: Zero trust as a principle, not as a tool, is really a strong way to approach agent authorization.

10:55 [SPEAKER_01]: But the reality is that there aren't that many tools out there, if any, that really give organizations the ability to implement some of those security controls effectively for AI.

11:05 [SPEAKER_01]: So when you say how you're thinking differently, it's not necessarily about thinking differently.

11:08 [SPEAKER_01]: It's about thinking creatively about how to implement the controls you know need to be present.

11:13 [SPEAKER_01]: Those critical controls in an environment where

11:16 [SPEAKER_01]: AI is deployed or while you're undergoing an AI transformation.

11:19 [SPEAKER_00]: It's interesting to think about this.

11:21 [SPEAKER_00]: Some of this is SES practices here, the things that we're talking about, right?

11:25 [SPEAKER_00]: And in securing APIs and how people may or may not take that seriously, but with the advent of AI, it's really propagating this sort of problem here to get started.

11:36 [SPEAKER_00]: What is one practical step teams can take today to strengthen API security before AI adoption expands further?

11:45 [SPEAKER_01]: But before we talk about that practical step, I want to expand on something you touched on there because you almost set it.

11:51 [SPEAKER_01]: It's not just that API's underpin the AI interactions.

11:55 [SPEAKER_01]: It's also the growth in AI is driving a massive growth in the number of APIs.

12:01 [SPEAKER_01]: And almost exponential growth in the number of APIs that are out there because the more AI agents and AI applications need to interact with other tools via APIs.

12:14 [SPEAKER_01]: the more APIs there are out there.

12:16 [SPEAKER_01]: And the more of an attack surface is available for attackers, not an AI attack surface necessarily, but an API attack surface.

12:24 [SPEAKER_01]: And a good example of that actually is as a protocol.

12:26 [SPEAKER_01]: So MCPE is a protocol that allows an agent to access tools and resources and prompts in a programmatic way.

12:34 [SPEAKER_01]: interact with another tool.

12:35 [SPEAKER_01]: It is another type of API and it runs over an API protocol most of the time.

12:40 [SPEAKER_01]: So MCP is really as a growth area is really an expansion of the API attacks surface.

12:44 [SPEAKER_01]: So I don't want to leave that one said that it's not just that AI is growing but that it's driving a massive growth in API threat landscape as well.

12:53 [SPEAKER_01]: So what was the question that I completely ignored and decided to answer a different one?

12:56 [SPEAKER_00]: No, I'm glad you touched on that one.

12:58 [SPEAKER_00]: My question was around practical steps, right?

13:00 [SPEAKER_00]: Getting started.

13:01 [SPEAKER_00]: What is one practical step teams can do today to strengthen API security before AI adoptions expands further, because it's happening really fast.

13:09 [SPEAKER_01]: So if it's not clear, I'm a fan of looking at the patterns that have occurred in the past and applying them to the future.

13:14 [SPEAKER_01]: So any time we have a new technology, whether it's virtualization or cloud or an AI, there is a pattern that occurs from a security standpoint.

13:23 [SPEAKER_01]: That's worth following.

13:23 [SPEAKER_01]: It's not a bad pattern at all.

13:26 [SPEAKER_01]: So the first thing, the first practical step is inventory.

13:29 [SPEAKER_01]: It's discovery.

13:30 [SPEAKER_01]: It's understanding what you have in your environment.

13:32 [SPEAKER_01]: So if you want to do something immediately, start by creating an inventory of what AI tools AI workloads you have in your environment, expand that inventory to the resources that those AI workloads use.

13:45 [SPEAKER_01]: So that would be the MCP servers, the APIs, the data sources that they access.

13:50 [SPEAKER_01]: And that inventory is your starting point.

13:53 [SPEAKER_01]: So that you can then move on to the second step in that pattern, which is, now I have an inventory, but I don't know what those things are doing.

13:59 [SPEAKER_01]: So understanding the behavior, the interconnections, the connections between those assets and objects.

14:04 [SPEAKER_01]: That's the second step.

14:06 [SPEAKER_01]: That's why I think those are first two steps, and then you move on to locking bad actions, and then ultimately you end up with governance compliance, because

14:13 [SPEAKER_01]: the regulatory environment will eventually catch up.

14:16 [SPEAKER_00]: Okay, last question, Tim.

14:17 [SPEAKER_00]: So, once you accept that AI security depends on APIs, what do organizations actually need to discover before they can protect it?

14:26 [SPEAKER_00]: And knowing a little bit about Walmart, I kind of know where you're going to go with that, I'm excited for you to say.

14:30 [SPEAKER_01]: Yeah, I kind of hinted at it before, which is that your AI inventory isn't just AI.

14:36 [SPEAKER_01]: So, if you're looking at creating that inventory and you're cataloging the agents you're running,

14:42 [SPEAKER_01]: Maybe the LLMs that you have running or that you're accessing.

14:45 [SPEAKER_01]: That's only part of the puzzle.

14:47 [SPEAKER_01]: You have to also discover the things they connect to.

14:51 [SPEAKER_01]: The APIs they use, the MCP servers they use, the data they access, and that data has a, brings in a whole conversation of sensitive data and PII, because that's part of discovery too, understanding what data you're,

15:05 [SPEAKER_01]: AI agents and LLMs have access to and how it moves about in your environment, those are key components for a discovery in order to deliver protection because you can't protect what you don't know about and so you have to start by finding out about all of those elements in your environment related to your AI workloads.

15:22 [SPEAKER_00]: That just makes so much sense and the way you said that to you can't protect what you don't know about You have to discover these APIs you have to have a portfolio of them and you have to know what you have to secure out there I really appreciate you being on the show today It's very clear from our conversation that AI security is in fact a PI security

15:40 [SPEAKER_00]: Not only because that's what the architecture actually points to, but the data actually points to it as well.

15:46 [SPEAKER_00]: As you mentioned in Walaam's research, there's a rise in vulnerabilities related to AI, alongside the increase in a genetic representation of people's actions.

15:54 [SPEAKER_00]: So it's critical that businesses take this seriously and take a hard look at how they are securing their APIs in order to best secure their AI infrastructure and their agents.

16:04 [SPEAKER_00]: So Tim, thank you very much for being on the show today.

16:06 [SPEAKER_00]: My pleasure, thank you for having me.

16:08 [SPEAKER_00]: If it wasn't clear to you before, AI security is API security.

16:13 [SPEAKER_00]: And platforms like Wallarm are your go-to solution in order to discover your entire portfolio of APIs.

16:20 [SPEAKER_00]: And secure them before your AI and agents take more action than you're ready for.

16:26 [SPEAKER_00]: If you'd like to learn more about Wallarm, you can visit wallarm.com.

16:30 [SPEAKER_00]: That's WALARM.com.

16:36 [SPEAKER_00]: And thanks again for listening.