VP & Chief Technology Evangelist · Zscaler
Brian Deitch
Zero Trust AI. Explained before the market catches up.
Two decades in the trenches. Zero Trust before it was a buzzword. Cloud when everyone said it wouldn’t scale. Still here.
Feature
The lightboard is the weapon.
No slides. No hand-waving. Just glass, a marker, and someone who actually knows what he’s talking about.
Index
What Brian talks about.
Zero Trust Architecture
Not a product. The only architecture that actually works at scale.
SSE / SASE
Where the network ends and the platform begins.
SSL/TLS Inspection
You can’t secure what you can’t see.
Cloud Security
Cloud when everyone said it wouldn’t scale.
Agentic AI Governance
MCP, API, and toolchain security for the agent era.
AI Data Security
DSPM, asset discovery, and secure access to AI apps.
Identity & Access
The new perimeter is a person, not a firewall.
Threat Intelligence
Honest assessments. Not vendor decks.
On Repeat
Things Brian says a lot.
“AI security has to be inline, not adjacent.”
If the control point is off to the side, it’s a dashboard. If it sits in the path of users, apps, data, APIs, agents, and models — it’s enforcement.
“Agentic AI turns Zero Trust into a business requirement.”
Agents aren’t chatbots. They act at machine speed — so every agent needs identity, least privilege, policy, inspection, and blast-radius reduction.
“You cannot secure AI you cannot inventory.”
Shadow AI is embedded SaaS AI, MCP servers, agents, models, and RAG pipelines. Maturity starts with discovery: what exists, who uses it, what data it touches.
“Prompt injection is not a bug. It is a design reality.”
It’s not SQL injection in a hoodie. LLMs blur instructions and data — assume manipulation and layer the defense: isolation, inspection, tool restrictions, output validation, least privilege.
“The real risk is excessive agency.”
The nightmare isn’t a weird chatbot answer. It’s an agent with access to email, Salesforce, GitHub, and production data making bad decisions very quickly.
“Data security is AI security.”
Every AI conversation is a data movement event. Prompts, uploads, embeddings, and outputs all need DLP, classification, masking, and monitoring.
“Red teaming AI cannot be a one-time launch checklist.”
Models, prompts, tools, and permissions change constantly. Red teaming has to be continuous, automated, and mapped to real attack paths.
“AI governance needs runtime enforcement, not just policy PDFs.”
Boards love policy. Attackers love it too — policy doesn’t block anything. Define allowed models, apps, and permissions, then enforce at runtime.
“The AI supply chain matters.”
Models, datasets, vector databases, plugins, MCP servers, frameworks — any one can become the attack path. Treat the pipeline like supply chain + data + identity + runtime security.
“The winning architecture is Zero Trust for humans and non-humans.”
The enterprise is about to have two workforces: humans and agents. Both need identity. Both need least privilege. Both need data controls, monitoring, and segmentation. And neither should be trusted just because it’s inside the environment.
0+
Years in security
0s
Talks delivered
0+
Podcast episodes hosted
∞
Takes on the industry
Profile
Security is not a checkbox.
“I’ve been in enterprise security long enough to watch the industry invent problems, then sell the solution. I call that out.”
At Zscaler, Brian helps organizations understand Zero Trust not as a product, but as an architecture. The conversation starts with honest assessments, not vendor decks.
CAREER ARC AAL → APOL → WFC → BAC → FFIV → ZS
Book
Need a speaker who actually knows?
Zero Trust, AI security, and cloud architecture — explained without putting the room into a medically induced coma.