The Candid CISO
Candid CISO Podcast
The Paved Road Is Dead. Long Live the Paved Road. — Candid CISO Live with Jason Chan
0:00
-44:52

The Paved Road Is Dead. Long Live the Paved Road. — Candid CISO Live with Jason Chan

Recorded live on October 8th in Palo Alto with Jason Chan, former VP of Information Security at Netflix, on whether security’s most-admired model survives the age of AI agents. Reception, recording, and candid Q&A with over 40 security leaders.

The Candid CISO is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber.

​The Paved Road Is Dead. Long Live the Paved Road.

​The safe path should be the easy path. That idea — security that paves a road engineers want to take instead of building gates they route around — is Jason Chan’s signature contribution from his years running security at Netflix. It became the most-admired model in the industry. It’s also, in Jason’s own telling, one of the most misunderstood.

​Now the ground under it is moving. Engineers are shipping AI agents faster than any platform team can pave. Agents get credentials, call APIs, take actions, and spin up other agents — a workforce nobody hired and few teams can see. Every security leader in the Bay Area is asking the same question:

​Does the paved road survive when the drivers aren’t human?

​What we’ll get into

  • ​What “paved road” was actually meant to be, and the ways it gets misread into something worse than the gates it replaced

  • ​Guardrails vs. gates when the thing you’re guarding moves at machine speed

  • ​Identity as the new perimeter — including the non-human identities your agents already carry

  • ​Who paves the road for an agentic workforce, and whether platform teams are set up to own it

  • ​What Jason would build first if he were starting a security program in 2026

About our guest

​Jason Chan led information security at Netflix, where he helped define the engineering-first, guardrails-not-gates approach to cloud security that fast-moving companies have been trying to replicate ever since. He is one of the most recognizable practitioner voices in the Bay Area, and he says what he thinks — which is why he’s here.

​Who this is for

​CISOs, deputy CISOs, heads of security engineering and platform, identity leaders, and the founders and investors who back them. This is a small room by design — 40 seats — so the conversation stays candid.

​Presented with HYPR

This live event was made possible by our Season 2 sponsor, HYPR. As organizations race to deploy AI agents, HYPR is building the identity and control layer to govern them, so you know who, and what, is acting on your behalf. Learn about HYPR AgentPass and their design partner program at hypr.com. Thank you, HYPR, for backing candid conversations.

Discussion about this episode

User's avatar

Ready for more?