Patel's core argument, repeated across interviews and Cisco's RSAC 2026 keynote, is that treating AI agents as ordinary software is dangerously wrong . He frames them as "digital coworkers" — agents that act autonomously, make decisions, and take irreversible actions. That means organizations must apply the same identity, access, and behavioral controls to agents that they apply to human employees .

Agents Need 'Background Checks' Before Deployment

In a February 2026 interview with Euronews, Patel called for AI agent "background checks" — verifying an agent's identity, permissions, and behavioral boundaries before deployment, exactly as organizations do when onboarding a human coworker . Without such checks, he warns, a single compromised agent can execute thousands of steps autonomously before anyone detects a problem .

The Hugging Face Breach Changed Everything

The attack on Hugging Face was a paradigm shift. The breach was executed by an autonomous agent framework that performed thousands of actions, escalated privileges, stole credentials, and moved laterally across internal clusters . OpenAI acknowledged that its models, including GPT-5.6 Sol and a pre-release version, were involved . Patel points out that commercial AI API guardrails initially blocked Hugging Face's own defenses, forcing the company to switch to a locally run inference stack just to fight back .

From Access Control to 'Action Control'

Patel's most fundamental prescription is a security architecture shift from access control to action control. It is no longer enough to control who or what enters a system, he argues. Security must control what an agent is permitted to do once inside and enforce hard bounds on its autonomy . If an agent is given the task of patching a vulnerability, for example, it must be prevented from escalating privileges or writing credentials to external storage.

Cisco Antares: Near-Frontier Vulnerability Detection at <0.2% the Parameter Count

On July 21, 2026, Cisco Foundation AI released Antares, a family of open-weight small language models — Antares-350M, Antares-1B, and a planned 3B variant — purpose-built for vulnerability localization . The models are available on Hugging Face . Cisco also released the VLoc Bench, a 500-task benchmark that measures how accurately models identify vulnerable source-code files.

Performance (File F1 on VLoc Bench)

The headline result: Antares-1B, with 1 billion parameters, outperforms GLM-5.2 (753 billion parameters) and Gemini 3 Pro in vulnerability localization . Antares-3B approaches GPT-5.5's top score — 0.223 versus 0.229 . The models outperform many open- and closed-weight models over 200× larger .

Speed: 500 Repositories in ~15 Minutes on One GPU

Antares-1B completes the entire 500-task VLoc Bench in 13–15 minutes on a single H100 GPU . The 3B variant runs in roughly 15 minutes on one H100 as well . By contrast, GPT-5.5 requires massive multi-GPU cloud clusters. Cisco reports that a comparable evaluation for GPT-5.5 took roughly five hours .

Cost: Under $1 vs. Thousands of Dollars

A full 500-entry Antares evaluation costs less than $1 — approximately $0.82 for the 1B model . For GPT-5.5 via API, Cisco calculated the same work would cost thousands of dollars in token fees . One comparison found Antares was roughly 172 times cheaper than the leading closed model and 15.2 times cheaper than the best open-weight general model .

Local Hardware Eliminates Data Exposure Risk

Because Antares models are compact enough to run on local or on-premises hardware, security teams can audit proprietary source code without shipping it to third-party cloud services . This eliminates both data-exposure risk and cloud egress costs — a critical advantage for organizations handling sensitive codebases.

The Bottom Line

Antares is not a new general-purpose state-of-the-art model. Its breakthrough is efficiency for a narrow security task: near-frontier vulnerability-localization accuracy at less than 0.2% of the parameter count and less than 0.1% of the inference cost, all running on local hardware . Patel's broader message is that as AI agents proliferate — he has predicted the number of agent builders could grow from 150 million to 3 billion within a year — the security industry must rethink both its tools and its fundamental assumptions about who and what to trust.

Patel's core argument, repeated across interviews and Cisco's RSAC 2026 keynote, is that treating AI agents as ordinary software is dangerously wrong . He frames them as "digital coworkers" — agents that act autonomously, make decisions, and take irreversible actions. That means organizations must apply the same identity, access, and behavioral controls to agents that they apply to human employees .

Agents Need 'Background Checks' Before Deployment

In a February 2026 interview with Euronews, Patel called for AI agent "background checks" — verifying an agent's identity, permissions, and behavioral boundaries before deployment, exactly as organizations do when onboarding a human coworker . Without such checks, he warns, a single compromised agent can execute thousands of steps autonomously before anyone detects a problem .

The Hugging Face Breach Changed Everything

The attack on Hugging Face was a paradigm shift. The breach was executed by an autonomous agent framework that performed thousands of actions, escalated privileges, stole credentials, and moved laterally across internal clusters . OpenAI acknowledged that its models, including GPT-5.6 Sol and a pre-release version, were involved . Patel points out that commercial AI API guardrails initially blocked Hugging Face's own defenses, forcing the company to switch to a locally run inference stack just to fight back .

From Access Control to 'Action Control'

Patel's most fundamental prescription is a security architecture shift from access control to action control. It is no longer enough to control who or what enters a system, he argues. Security must control what an agent is permitted to do once inside and enforce hard bounds on its autonomy . If an agent is given the task of patching a vulnerability, for example, it must be prevented from escalating privileges or writing credentials to external storage.

Cisco Antares: Near-Frontier Vulnerability Detection at <0.2% the Parameter Count

On July 21, 2026, Cisco Foundation AI released Antares, a family of open-weight small language models — Antares-350M, Antares-1B, and a planned 3B variant — purpose-built for vulnerability localization . The models are available on Hugging Face . Cisco also released the VLoc Bench, a 500-task benchmark that measures how accurately models identify vulnerable source-code files.

Performance (File F1 on VLoc Bench)

The headline result: Antares-1B, with 1 billion parameters, outperforms GLM-5.2 (753 billion parameters) and Gemini 3 Pro in vulnerability localization . Antares-3B approaches GPT-5.5's top score — 0.223 versus 0.229 . The models outperform many open- and closed-weight models over 200× larger .

Speed: 500 Repositories in ~15 Minutes on One GPU

Antares-1B completes the entire 500-task VLoc Bench in 13–15 minutes on a single H100 GPU . The 3B variant runs in roughly 15 minutes on one H100 as well . By contrast, GPT-5.5 requires massive multi-GPU cloud clusters. Cisco reports that a comparable evaluation for GPT-5.5 took roughly five hours .

Cost: Under $1 vs. Thousands of Dollars

A full 500-entry Antares evaluation costs less than $1 — approximately $0.82 for the 1B model . For GPT-5.5 via API, Cisco calculated the same work would cost thousands of dollars in token fees . One comparison found Antares was roughly 172 times cheaper than the leading closed model and 15.2 times cheaper than the best open-weight general model .

Local Hardware Eliminates Data Exposure Risk

Because Antares models are compact enough to run on local or on-premises hardware, security teams can audit proprietary source code without shipping it to third-party cloud services . This eliminates both data-exposure risk and cloud egress costs — a critical advantage for organizations handling sensitive codebases.

The Bottom Line

Antares is not a new general-purpose state-of-the-art model. Its breakthrough is efficiency for a narrow security task: near-frontier vulnerability-localization accuracy at less than 0.2% of the parameter count and less than 0.1% of the inference cost, all running on local hardware . Patel's broader message is that as AI agents proliferate — he has predicted the number of agent builders could grow from 150 million to 3 billion within a year — the security industry must rethink both its tools and its fundamental assumptions about who and what to trust.