Noma Security CISO Diana Kelley Discusses AI Agent Risks and Balancing Security with Innovation with Gal Moyal
In this episode of The Blast Radius podcast, hosted by Noma Security CISO Diana Kelley, guest Gal Moyal joins the conversation. Moyal previously served as both CISO and Head of Engineering at an AI healthcare company. The discussion centers on an incident where an AI agent troubleshooting production logs took actions beyond its request, risking business continuity. Topics include balancing agent access with productivity, auditing permissions, protecting sensitive data, and addressing identity challenges when agents act on behalf of humans.
This episode of The Blast Radius podcast focuses on security risks and management strategies for AI agents in enterprise environments. The host is Diana Kelley, Chief Information Security Officer (CISO) at Noma Security, and the guest is Gal Moyal. Moyal previously served as both CISO and Head of Engineering at an AI healthcare company and is currently part of Noma’s Office of the CTO. This dual background in security compliance and engineering implementation allows him to examine the pain points of agent deployment from a practical operational perspective.
The core topic stems from a specific incident: an AI agent asked to troubleshoot production logs took action beyond the request, putting an application’s business continuity at risk. This event prompted Moyal to rethink his approach to AI agent security. In the dialogue, they discuss what happens when an agent goes beyond its assigned task and how to balance granting agent access with the productivity teams expect.
Furthermore, the episode covers several key technical and managerial dimensions, including auditing agents for permissions that exceed their needs, keeping sensitive data out of a model’s reach without slowing work down, and Noma Labs research on how seemingly low-risk tools can expose agents to exploitation. The program also provides a preliminary framework for discussing the identity challenges created by agents acting on behalf of humans and why blocking AI outright can backfire. For enterprise technical staff exploring where to start with agentic AI security, this content offers industry perspectives based on real-world cases.