Sep 11, 2026 · 42 min
Security vendors pitch faster ways to find and fix exposure
Snake Oilers: watchTowr, XBOW and CoreView
The episode examines how organizations can shorten the gap between emerging exploitation, vulnerability discovery, and remediation across applications and Microsoft 365.
- 1Threat intelligence and existing web application firewalls can provide rapid protection while deeper remediation continues.
- 2Autonomous penetration testing aims to turn vulnerability volume into validated, actionable findings using specialized AI agents.
- 3Microsoft 365 governance tools can expose configuration drift, risky sharing, third-party applications, and excessive administrator privileges.
Don't miss
The CoreView discussion maps how Microsoft 365 security risk can hide in configuration drift, risky sharing, third-party applications, and overprivileged accounts.
The brief
Patrick Gray introduces a sponsored Snake Oilers edition built around three vendor pitches, each addressing a different source of security risk: active threats, application flaws, or cloud misconfiguration.
Ben Harris presents Watchtower’s approach to emerging threats, combining intelligence, research, appliance reverse engineering, honeypots, and existing WAFs to deploy protection before remediation is complete.
Fede Kirschbaum pitches Expo’s autonomous AI penetration testing for custom applications, arguing that specialized agents could help separate actionable findings from the noise of vulnerability discovery.
Andrew McAllister presents CoreView’s Microsoft 365 governance platform, which inventories configurations and usage while detecting drift, risky sharing, third-party Entra applications, and excessive privileges.
The episode’s common thread is operational speed: security tools must not only identify weaknesses, but help organizations contain or remediate them before exposure compounds.