The Mobile Security Imperative for Regulated Industries - with Tom Tovar of Appdome

2026-07-21 · Source: The AI in Business Podcast · Field: Technology & Digital — Artificial Intelligence & Machine Learning, Cybersecurity & Data Privacy, Robotics & Autonomous Systems · Depth: Intermediate, extended

Summary

Tom Tovar, Co-Creator at Appdome, explains how agentic AI is revolutionizing mobile security for regulated industries, replacing slow, manual vulnerability assessments with machine-speed protection. Attackers now operate in milliseconds, far outpacing developer patch cycles that take days, creating a critical security gap. The discussion emphasizes that cyber teams must transition from evaluating vulnerabilities to actively producing protections directly within applications. This shift requires adopting agentic protection pipelines, moving away from manual implementations and disparate point products towards unified data systems. The conversation also explores the evolution of security policy, from application-wide standards to release-specific and eventually personalized, user-level defenses, envisioning a future where each user has a unique security agent.

Key takeaway

For Directors of AI/ML or CTOs overseeing mobile application security, your current manual patch cycles are critically outpaced by agentic threats. You must transition your cyber function from an advisory role to a production unit, directly embedding agentic protections into applications. Prioritize platforms that enable continuous, data-driven protection pipelines and support personalized security policies by release and user. Failing to adopt agentic transformation risks obsolescence and severe security breaches.

Key insights

Agentic AI is critical for mobile security, shifting cyber from risk evaluation to direct protection production at machine speed.

Principles

• Attackers move in milliseconds, developers in days.
• Cyber must produce protections, not just assess vulnerabilities.
• Security policy should personalize by release and user.

Method

Implement a continuous agentic system with a feedback loop: deliver, measure, analyze, decide. This pipeline leverages agents for production, captures decision context, and uses data for iterative improvement.

In practice

• Re-anchor cyber as a production unit in SDLC.
• Evaluate vendor stack for agentic future support.
• Transition from human-gated to agentic security checkpoints.

Topics

• Mobile Security
• Agentic AI
• Fraud Detection
• Risk Assessment
• Application Security
• CI/CD Pipeline
• Personalized Protection

Best for: VP of Engineering/Data, Executive, AI Security Engineer, Director of AI/ML, CTO

Related on AIssential

• Your AI Agent Doesn’t Need to Be Compromised. It Just Needs to Be Convinced. — Agentic AI risks arise from misdirected legitimate authority, necessitating external controls beyond model-level guardrails.
• A Doomer’s Guide to Saving Cybersecurity — and the Internet — AI-driven threats necessitate autonomous AI defenders to achieve machine-speed cybersecurity and overcome human latency.
• Announcing Agentic Development Security (ADS) — Agentic Development Security (ADS) shifts security from code to the system producing it, embedding controls directly into AI-driven workflows.
• Security in the Age of AI Agents: Office Hours with Jonathan Jaffe — AI agents transform security from human management to automated policy architecture, accelerating defense.
• Five Eyes spook shops warn rapid rollouts of agentic AI are too risky — Agentic AI systems introduce significant security risks due to expanded attack surfaces and unpredictable behavior.
• Identity-first AI governance: Securing the agentic workforce — Autonomous AI agents require distinct, governed identities within enterprise IDPs to mitigate significant security and compliance risks.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by The AI in Business Podcast.