What is Varonis?

Varonis managed detection telemetry shows 70% of caught incidents at the identity layer, 20% at the network layer, and 10% at the data layer or involving an insider threat.

“We looked at all the alerts about seven out of 10 of the things that we caught were at the identity layer, two out of 10 at the network layer, and one out of 10 would make it to the data and, you know, or an insider threat, right?”

Brian Vecci argues time-to-resolution, not time-to-detection, is the metric that matters in security.

“Everybody's focused on time to detection because everybody can look at logs. But, time to resolution is the key.”

Frontier AI models are being deployed inside enterprises today with no logging whatsoever, creating a blind spot for defenders.

“There are frontier models and frontier technology that is being deployed in enterprises that do not have any logging.”

AI has collapsed the difficulty of vulnerability identification to near-trivial levels, covering not just CVEs but posture and configuration issues.

“The ability to identify a vulnerability has collapsed with Mythos. It's the easiest thing in the world now, not just CVEs, but to identify posture and other configuration vulnerabilities.”

Brian Vecci contends that controlling AI agents through authentication frameworks misses the point, because adversaries or the agents themselves will bypass them.

“If you try to shoehorn them and funnel them through a specific like authentication framework, you are missing the forest for the trees.”

Brian Vecci explains that data discovery alone is not security. enterprises have spent the past 12 to 18 months learning that finding data is only the first step, not the goal.

“Discovery by itself isn't security, and I think that is what people have really come to understand in the last I'm going to say 12 to 18 months.”

An enterprise of 10,000 people is projected to manage roughly 1 million identities once AI agents are fully deployed.

“An enterprise of 10,000 people is going to have a million identities because of the number of agents that are going to be deployed.”

Varonis, represented by Brian Vecci at Black Hat 2026, is positioning around identity explosion from AI agents and the gap between data discovery and active data security.

“An enterprise of 10,000 people is going to have a million identities because of the number of agents that are going to be deployed.”