Imagine a giant gorilla that has read the entire internet, speaks every language, can plan, decide, and act on its own, and gets stronger every week. Would you cross your fingers it means well and let it run free, or would you put it in a cage? Today we are diving into how to the heck do you cage AI, what does this even mean, why is it important and what you should be doing it now. Hi, I'm Eva Benn. Every Monday morning I bring you the best global security leaders with practical AI security guidance you can turn into action this week. If you have ever found value in this show, please do me a huge favor, drop me a comment, hit the thumbs up on this video and make sure you are subscribed. This tiny action costs you nothing, but it has a huge impact the entire security community, because it helps bring the voices of some of the most incredible leaders in our industry to more people. Every episode is designed to give you practical things you can go and implement in your organization this week. I was super stoked to chat with Fredrik Alexandersson, who most of you already know as STÖK. He is a Security Solutions Architect at Visma, runs BLKNRTH Security, and co-runs Builders & Breakers with KUGG in Stockholm. He has presented original research on the Black Hat USA Briefings stage twice, and this year Google invited him to Seoul to break its flagship AI products, where he placed second overall and won the Most Creative Report award. Let's just say he knows what he's talking about. Today we unpack what an AI cage actually is and where to start building one, whether an LLM judge can police your agents, where a top AI hacker looks first, what has to change when attackers can run agent swarms cheaply, what monitoring and kill switches look like at scale, and the questions to ask before you say yes to the next team that wants to ship an agent. Connect with STÖK: - LinkedIn: https://www.linkedin.com/in/fredrikalexandersson/ - X: https://x.com/stokfredrik - YouTube: http://www.youtube.com/stokfredrik - Builders & Breakers: https://www.buildersandbreakers.com Resources we mention in the video: STÖK's research, talks and conversations: - AI cages post: https://www.linkedin.com/feed/update/urn:li:activity:7480881913050775552/ - Agentic monitoring open question: https://www.linkedin.com/feed/update/urn:li:activity:7496113414759600128/ - They hacked Google's AI in Seoul (vlog): https://www.youtube.com/watch?v=tJhuAINZWQ0 - Break it, Build it, Ship it, In the Wild with Michael Bargury, ep. 4: https://www.buzzsprout.com/2634323/episodes/19849362-break-it-build-it-ship-it-w-fredrik-stok-alexandersson - Builders & Breakers: Building Hackbots with Hamid Kashfi: https://www.youtube.com/watch?v=MYK9-66qe6w - Builders & Breakers: Local AI for Offensive Security with Thomas Olofsson: https://www.youtube.com/watch?v=xn5mIBaRzWw - Weaponizing Plain Text: ANSI Escape Sequences as a Forensic Nightmare, Black Hat USA 2023: https://i.blackhat.com/BH-US-23/Presentations/US-23-stok-weponizing-plain-text-ansi-escape-sequences-as-a-forensic-nightmare-appendix.pdf Other resources: - Google bugSWAT in Seoul, April 2026: https://bughunters.google.com/blog/bugswat-in-seoul-april-2026 - OWASP Top 10 for LLM Applications 2026: https://genai.owasp.org/resource/owasp-genai-llm-top-10-2026/ - OWASP Agent Control Standard: https://genai.owasp.org/resource/agent-control-standard-acs/ - gVisor: https://gvisor.dev/ - bubblewrap: https://github.com/containers/bubblewrap - Daniel Miessler's LifeOS (formerly PAI): https://github.com/danielmiessler/LifeOS Follow along for more free cybersecurity education. 🤗 LinkedIn: https://www.linkedin.com/in/evabenn/ Instagram: https://www.instagram.com/evabennofficial/ TikTok: https://www.tiktok.com/@evabennofficial Website: https://www.evabenn.com/