How SaaS Wins in World of Agents with Box's CTO Ben Kus

VentureBeat · 2026-11-05 00:00 UTC

Beyond The Pilot Podcast AI agents can now be weaponized to run elite-level cyberattacks at scale — and your perimeter won't stop them. Box CTO Ben Kus lays out exactly how enterprises defend against agentic threats without locking down the tools their teams actually need. Ben Kus spent years at IBM's BigFix patching vulnerabilities at enterprise scale. Now at Box — where 95% of the codebase is permissions, security, and compliance — he's dealing with a new threat model: cheap, scalable AI agents that give any attacker access to elite hacking capabilities previously limited to nation-state actors. Only 14% of companies in VentureBeat's September survey said they could shut down a misbehaving AI agent within minutes. Ben explains why that gap is dangerous and what the architecture of a real defense looks like. The conversation gets technical fast. Ben walks through the "lethal trifecta" (untrusted input + sensitive data access + outside communication = critical risk), how Box uses action guardrails to sandbox agents even if they're compromised, why 44% of enterprise agents running on shared human credentials is a ticking clock, and how newer Anthropic models have dropped prompt injection success rates from 60% to roughly 2%. The second half shifts to retrieval. Ben breaks down why standard RAG fails at enterprise scale — permissions gaps, vector space degradation, poor lexical matching — and what Box's context retrieval system (hybrid embeddings + reciprocal rank fusion + agentic search) actually delivers: 90% token cost reduction and 4–5x speed improvement over naive model-provider retrieval. He also addresses the harness question directly: 59% of companies that swapped models in production saw performance drop, and the reason is usually the harness, not the model. 🎙️ GUEST: Ben Kus | CTO, Box 🎙️ HOSTS: Matt Marshall | VentureBeat, Sam Witteveen | VentureBeat --- **CHAPTERS** 00:00 Intro — AI agents as elite-scale attack tools 02:00 Episode overview: Box CTO Ben Kus on agentic security and retrieval 03:00 What's actually changed in enterprise security: speed, severity, AI-assisted vulnerability discovery 04:20 How AI finds multi-domain vulnerabilities humans miss (PHP, font exploits) 05:00 When agents become attackers: democratizing elite hacking 06:20 Why perimeter defense is dead and what layered security actually looks like 08:00 VentureBeat survey: only 14% of companies can kill a misbehaving agent in minutes 09:20 Agent identity and credential sharing: when it's acceptable and when it's not 10:40 Misaligned agents: the agent-with-your-identity threat model 12:20 The lethal trifecta: untrusted input + sensitive data + outside communication 13:00 How Anthropic models dropped prompt injection rates from 60% to 2% 13:20 Box's approach: action guardrails, sandboxing, MCP server restrictions 14:00 Prompt injection via documents: how Box cleanses untrusted content 15:20 Action Guardrails feature: containing damage when agents are compromised 16:20 The SaaSpocalypse question: will Box become just a connector? 17:00 Why systems of record survive the agentic shift (headless platforms, MCP) 18:40 Agent-to-agent delegation: when Claude routes work to the Box agent 21:20 Why enterprise search has always been broken — and what's changing 22:40 Vector embeddings, semantic search, and the limits of pure RAG 24:00 Reciprocal rank fusion: combining lexical and vector search at scale 25:00 Box's "librarian" model: returning pages, not books 26:20 Context retrieval in Box Works: 90% token reduction, 4–5x speed improvement 29:40 Why throwing away shipped work every 3–6 months is now a core skill 31:00 59% of companies saw performance drop when swapping models — why the harness matters more than the model 33:00 Custom vs. generic harnesses: how the answer has changed three times in one year 33:40 Closing thoughts --- Subscribe to VentureBeat: https://www.youtube.com/@VentureBeat Apple Podcasts: https://podcasts.apple.com/us/podcast/venturebeat/id1839285239 Spotify: https://open.spotify.com/show/4Zti73yb4hmiTNa7pEYls4 Website: https://venturebeat.com LinkedIn: https://www.linkedin.com/company/venturebeat Newsletter: https://venturebeat.com/newsletters #EnterpriseAI #AIAgents #CyberSecurity #RAG #AIInfrastructure

Read the full story at VentureBeat · All coverage of this story