Principal PM · AI Security · Microsoft Defender
Building the security layer for agentic software — before attackers do.
I lead AI Security Posture Management at Microsoft Defender, helping enterprises discover their AI agent footprint, detect misconfigurations, and assess and reduce risk efficiently, everywhere the agent runs. I write about what breaks as software becomes agentic in Context Window.
25+
years in security
& cloud infrastructure
2
patents in
cloud security
2×
founder — one acquired
(NASDAQ: MGIC)
8+
years at Microsoft
Defender & Azure
“Instructions tell you what should happen. Guardrails ensure it does.”
— Context Window, Edition #9
01About
Seven years in IDF Cyber Defense. Two companies founded — one acquired (NASDAQ: MGIC), one grew to 50+ people and became Microsoft’s #1 Azure partner in Israel. 8+ years at Microsoft building Defender. Two patents. Promoted to Principal PM to lead AI Security Posture Management in Microsoft Defender.
Now I build AI Security Posture Management from the ground up — agent discovery, risk scoring, attack path analysis, compliance mapping to EU AI Act and NIST AI RMF. I write Context Window and speak at global security conferences.
The attack surface is no longer just the model. It’s the system around the model — memory, tools, identity, permissions, and every workflow the agent can reach.
— Asaf
02Writing
Latest briefing
May 11, 2026 · Edition #14
Every week this newsletter covers a new place an attacker hid an instruction, and a new AI assistant that found it and ran it. Last September, ForcedLeak showed Salesforce Agentforce reading hidden instructions out of a Web-to-Lead form and exfilling CRM data through an expired allowlisted domain.
03Listening
Weekly · AI Security · Podcast & Newsletter
AI-generated voices, AI-curated scripts — human editorial. Each week I break down one signal worth understanding in AI security. Read it in 5 minutes or listen on the go.
“The vulnerability surface didn’t change — but the population that can exploit it expanded by orders of magnitude.”
— Context Window, Edition #7
04Building
Product judgment gets sharper when you still make things yourself. Some are serious, some are strange.
How product management changes when AI agents become teammates, users, and attack surfaces. Open-source.
SourcePodcast home — episode archive, RSS, Spotify and Apple integration. Static-first.
AI-powered personal brand engine for thought leaders and creators.
Open-source espresso machine controller — hardware automation meets ritualized product UX.
Source05Connect
For speaking, advisory, AI security strategy, or just to argue about agentic risk — email is best.
[email protected]