Charles Guillemet is CTO of Ledger and founder of the Donjon, Ledger’s internal offensive security lab that breaks the company’s own products before attackers can, after a decade in cryptography and secure hardware design. On Chain of Thought he argued that software alone cannot secure an AI agent moving real money, and made the case for hardware-enforced signatures in the agentic economy.
Latest episode with Charles Guillemet · EP 65
You Can't Secure an AI Agent with Software
Charles Guillemet, Ledger ·
Episodes
In their words
Securing an agent is not something possible. People are telling differently. I think they are either a little bit too optimistic or maybe they don't understand what we are talking about. This is not something that is really possible. The only way to have very strong security guarantees is to have the dedicated hardware. And when it comes to your money, the incentives for the attacker are very high. So hardware will be part of the equation.
You Can't Secure an AI Agent with Software