Cloudflare CTO:AI 正在制造安全末日,也是最快解药Cloudflare CTO: AI Is Causing a Security Apocalypse—and Is Also the Fastest Fix
The Takeaway:AI 既在引爆漏洞发现的指数级增长(每周级别的 Log4j 级事件),也将成为最快修复它们的工具,未来 18 个月多数工程时间会暂时转向安全。
Cloudflare CTO Dane Knecht 指出,过去一年安全从“事后补救”变成所有人的首要议题。AI 让高中生级别的“agent kitties”也能找到国家级漏洞,而模型与 harness 的组合正在把红队能力民主化。他预计未来一年公司会从一支红队扩展到四五支,但强调这只是过渡期:一旦 AI 扫完大部分存量代码,安全压力会回落,生产力会反弹。
Knecht 对“空气隔离一切”的末日论保持冷静:“人类很能适应,关键时刻竞争对手会变成同盟。”他更看好零信任架构和攻击面收缩。Cloudflare 内部已用 Codex 文档把安全原则固化成“十诫”,让 agent 在每一步评审中强制执行。同时他们推出内容变现网关和 x402 微支付,试图为 agent 阅读内容建立新的经济模型。
最直接的建议是:把站点放在 Cloudflare 后面。重大漏洞出现时,他们会把防护同步给免费用户,因为“这是我们提供的公共基础设施”。
“AI 成了导致这场安全末日的工具,但它也是能帮我们更快解决的工具。”
Cloudflare CTO Dane Knecht 指出,过去一年安全从“事后补救”变成所有人的首要议题。AI 让高中生级别的“agent kitties”也能找到国家级漏洞,而模型与 harness 的组合正在把红队能力民主化。他预计未来一年公司会从一支红队扩展到四五支,但强调这只是过渡期:一旦 AI 扫完大部分存量代码,安全压力会回落,生产力会反弹。
Knecht 对“空气隔离一切”的末日论保持冷静:“人类很能适应,关键时刻竞争对手会变成同盟。”他更看好零信任架构和攻击面收缩。Cloudflare 内部已用 Codex 文档把安全原则固化成“十诫”,让 agent 在每一步评审中强制执行。同时他们推出内容变现网关和 x402 微支付,试图为 agent 阅读内容建立新的经济模型。
最直接的建议是:把站点放在 Cloudflare 后面。重大漏洞出现时,他们会把防护同步给免费用户,因为“这是我们提供的公共基础设施”。
“AI 成了导致这场安全末日的工具,但它也是能帮我们更快解决的工具。”
The Takeaway: AI is both triggering an exponential surge in vulnerability discoveries (Log4j-class events now weekly) and the tool that will fix them fastest; the next 18 months will see a temporary spike in engineering time spent on security.
Cloudflare CTO Dane Knecht describes the past year as ten years compressed into one. Security shifted from afterthought to everyone’s top priority. AI has democratized red-teaming so thoroughly that high-school “agent kitties” are finding serious flaws once reserved for nation-states. Models plus better harnesses are raising the bar faster than human teams can respond. He expects Cloudflare itself to expand from one red team to four or five, yet insists the crunch is temporary: once AI has surveyed most existing code, the security tax will fall and product velocity will rebound.
Knecht rejects pure doomsday talk about air-gapping everything. “Humans are pretty adaptable… when critical moments happen, people rise to the challenge.” Zero-trust architectures already put many companies in a stronger position. Internally Cloudflare codified its principles into a “Codex” of best practices that agents must follow at every review step. On the content side they shipped a monetization gateway and x402 micropayments so agents can pay sites for reading, aiming for a new economic model that compensates creators instead of just burning crawl bandwidth.
His practical advice is blunt: put your sites behind Cloudflare. When major vulnerabilities drop, the company ships protections to free users as well as paid ones—“we view that as part of the utility we offer.”
“AI has become the tool that’s causing this kind of security apocalypse… it is also the tool that can help us solve it faster as well.”
查看原文 →
Cloudflare CTO Dane Knecht describes the past year as ten years compressed into one. Security shifted from afterthought to everyone’s top priority. AI has democratized red-teaming so thoroughly that high-school “agent kitties” are finding serious flaws once reserved for nation-states. Models plus better harnesses are raising the bar faster than human teams can respond. He expects Cloudflare itself to expand from one red team to four or five, yet insists the crunch is temporary: once AI has surveyed most existing code, the security tax will fall and product velocity will rebound.
Knecht rejects pure doomsday talk about air-gapping everything. “Humans are pretty adaptable… when critical moments happen, people rise to the challenge.” Zero-trust architectures already put many companies in a stronger position. Internally Cloudflare codified its principles into a “Codex” of best practices that agents must follow at every review step. On the content side they shipped a monetization gateway and x402 micropayments so agents can pay sites for reading, aiming for a new economic model that compensates creators instead of just burning crawl bandwidth.
His practical advice is blunt: put your sites behind Cloudflare. When major vulnerabilities drop, the company ships protections to free users as well as paid ones—“we view that as part of the utility we offer.”
“AI has become the tool that’s causing this kind of security apocalypse… it is also the tool that can help us solve it faster as well.”