The Application Security Podcast
The Application Security Podcast is a practitioner-led show for anyone building or securing modern software—and now AI-powered applications. Hosts Chris Romeo and Robert Hurlbut talk with the people shaping application security about AI and LLM security, threat modeling, secure development, OWASP, cloud, DevSecOps, security champions, and building programs that help engineering teams move faster and safer. With more than 300 episodes, the show turns real-world experience into practical guidance for developers, architects, AppSec professionals, and security leaders.
The Application Security Podcast
Francesco Cipollone - Agentic AI Manifesto
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
Most products labeled as AI agents are little more than chatbots with tools. Francesco Cipollone, founder and CEO of Phoenix Security, explains what makes an agent genuinely agentic and why his team uses multiple specialized models instead of one all-purpose system. He and the hosts unpack the Agentic AI Manifesto's principles, including responsible adoption, human augmentation, transparency, and resisting automation for its own sake. Francesco also shares the practical economics behind multi-agent systems and the difficulty of applying them safely to vulnerability remediation. The conversation cuts through inflated promises while preserving a realistic case for useful automation: agents should increase human capability, remain observable and bounded, and solve a defined problem instead of becoming another vague digital-transformation initiative.
The Application Security Podcast is brought to you by Security Journey.
About Security Journey
Security Journey is an enterprise-class solution with lessons that are built on learning science principles to deliver long-term, measurable results.
→ Learn more about Security Journey
Connect with Francesco Cipollone:
→ Francesco Cipollone on LinkedIn
→ Phoenix Security
Mentioned in this episode:
→ Phoenix Security
→ Cursor
→ ChatGPT
Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook
Chapters:
00:00 Meet Francesco Cipollone
02:36 Are you sure Francesco is not a bot?
04:41 Why create an Agentic AI Manifesto?
07:08 Defining a true AI agent
09:21 The agent is not the LLM
09:43 Six models working as specialists
12:12 Why not use one super agent?
15:05 The manifesto's core principles
18:27 Augment people instead of replacing them
21:17 The emerging AI coach role
23:37 Escaping digital-transformation theater
24:23 Transformation never really ends
27:46 Agents and vulnerability remediation
31:27 Closing thoughts
People on this episode
Podcasts we love
Check out these other fine podcasts recommended by us, not an algorithm.
The Security Table
Izar Tarandach, Matt Coles, and Chris Romeo