Keep Calm and Secure AI: A Chat with Field Effect's CEO Matt Holland

Host David Shipley interviews Field Effect CEO Matt Holland about how AI coding agents can behave like malware and why visibility into their actions is essential. Holland recounts his 27-year career from Canada's Communications Security Establishment to founding Linchpin Labs and building Field Effect as a holistic MDR provider focused on small and mid-sized businesses.

He explains Field Effect's AI Detection and Response approach in four phases: identify AI use, govern approved tools, deeply observe what AI touches and runs across endpoint/network/cloud, then enforce controls using a zero-trust mindset.

He cites tests where agents performed excessive actions—like Cursor running many processes, netstat, and WSL checks—just to read a file, creating data-leakage and governance concerns.

Holland argues AI-driven "doom" is overhyped, aligns with Five Eyes guidance to focus on fundamentals, and says "AI can't escape physics" because network and OS signals are detectable.

00:00 AI Tool Goes Wild

01:28 Meet Matt Holland

04:43 From CSE to Startup

08:20 Building Full Stack MDR

10:14 Four Phases of AIDR

14:53 Why Coverage Everywhere

18:40 Agents Acting Like Malware

24:39 Hype Versus Practical AI