In this episode of the Innovator Series, we sit down with Dan Shiebler, Co-Founder and CTO of Artemis Security, on why AI can’t defend an environment it doesn’t understand.
Attacks now run end-to-end at machine speed. Defense still runs at human speed – manual reconstruction across consoles, hours per alert.
Artemis was built to close that gap by inverting the model: rather than storing logs and searching them after an alert fires, it builds a living model of the environment – every user, device, account, resource and AI agent, and what’s expected of each – and runs detection, investigation and response against that model directly.
Dan spent a decade building large-scale AI systems. He led AI/ML at Abnormal AI, and before that spent five years at Twitter building the ML organization behind its web ads business, following a PhD in AI at Oxford.
He explains why AI reasoning over raw logs is guesswork, what has to be true architecturally before it becomes trustworthy, and what changes for a security team when investigation stops being the analyst’s job.
Building Security Operations For The AI Era
Security teams have no shortage of data, yet defenders continue to struggle with alert fatigue, fragmented visibility, and increasingly sophisticated attacks. As AI reshapes both offensive and defensive capabilities, the challenge is no longer collecting more telemetry – it’s making sense of it quickly enough to stay ahead of adversaries.
Together with co-founder and CEO Shachar Hirshberg, who led product for Amazon GuardDuty and helped build Demisto (acquired by Palo Alto), Shiebler started Artemis Security around the idea that AI should do more than summarize alerts or assist analysts after the fact. Their vision is to build a platform that helps security teams understand how disparate signals fit together, providing the context needed to investigate threats more efficiently and respond with greater confidence.
As organizations continue to adapt to an increasingly AI-driven threat landscape, Artemis is part of a new generation of cybersecurity companies shaping the security operations center without replacing the people who run it.
The Innovator Series is designed to get inside the mind of the founder and learn what inspired them to build the next generation of cybersecurity technology. Learn more about Dan Shiebler, Artemis Security, and the future of AI-powered security operations in our 16-minute conversation on YouTube.