I came to the United States with two suitcases, $200, and I was willing to do anything, anything at all to make sure that I made a life for myself because there was no way to go back. I was a security guard. I took notes for the disabled. I flipped burgers at Burger King. I had $200. I had to find a way of paying my tuition.
In the hot seat today, we have Nikesh Arora, the CEO of Palo Alto Networks. They have a market cap of 225 billion. Nikesh is one of the most respected operators in technology.
I think the long-term token pricing should be one-tenth of what it is today. Mythos, I think, ends up being an accelerant to cybersecurity and technology. You miss one trick, you can survive. You miss two tricks, you're partly imperiled. You miss three tricks, you could be obsolete.
Ready to go.
Nikesh, last time we did a show, I was 22 hours into a 24-hour fast, and I listen back now, and I just think, my word, you had the audacity to be with one of the OGs of this business and be hangry. Like, I was hangry with you and short.
Well, the good news is I told you earlier, we're chatting, I have total memory loss. I have no recollection of what I said and what we talked about. So I have to go back to listen to it. Just happy to be here. It was a great show. We got on blissfully well. It was wonderful. I don't know what that was about.
I think we should stop doing podcasts remotely.
I think you should force people to come in here.
So I actually do, and the nice thing about size is they do. But the only challenge is they actually sometimes come quite jet-lagged because they come for the day and that's a little bit tough.
Maybe you should do it at 11:00 p.m.
Yeah. If you take people from California, it's a perfectly nice time for them at 10 p.m. or 9:00 p.m. Maybe you need to adjust.
Maybe I need to adjust. I'm the selfish one. Yeah, Mark Andreessen said something. Mark Andreessen said, I really actually embraced it. Haven't even got the first question, but damn it. He said you need to embrace how is it all your fault. If you embrace everything in life with how is it my fault, actually a lot of the world changes.
Actually, let's spin that a bit. How do I make it better?
Just change the outlook is how do I make it better. What can I do to make this better? That's how I run my day and run my life or my company. How can I make it incrementally better today? And how can I make it radically better in 3 years?
Have you ever had something that you couldn't make better?
Not for the lack of trying. So all we can do is try. If it works out, it's great. And if you try a lot, you succeed more often than you think.
We were talking downstairs about your personal brand. And speaking of making it better,
I don't think about it like you do because this is what you do for a living. I think about running my business.
Okay. So, I think this is fundamentally wrong.
I'm here to learn. Teach me, Harry.
I'm here to learn. Teach me.
The audacity of a podcaster. That's all right. No, but I actually think your personal brand is your business. I think if you build a great product, a great company, people like your product, eventually your brand survives all of it. I think you can have a great brand, shitty product, shitty execution, and your brand goes to hell in a handbasket. So I flip around. Do you think that is still the case today though? Like I think brand can be such an accelerant today, especially in a world where it's just so noisy.
See, I spent many years at Google as you know. I actually was chief marketing officer for 5 years. And if you look historically in technology, there are companies which have died who had great brands. Remember Sun Microsystems?
It's a darling, you know, 30 years ago, it doesn't exist. Why? Because their brand went dead or the product went to hell. What about Yahoo? Remember that company? It's a great brand. Amazing, right? It's way before Google.
I think it's probably a fraction, probably even two decimal point number versus what Google is. So I think product helps make brands.
But I think those were founded and broke into the public diaspora when there was much less noise. And so I think if you were to put that today, you need to have a brand first to get into.
Look, let me speak against my own thesis. There's a spectrum. On one end of the spectrum is when you have real differentiated product, in which case the product helps build the brand, like Google search. You Google something. On the other end, it's a commodity. It's water. I don't know why this is called Evian, but this is a commodity here. Only brand matters. So it depends where you are on the spectrum. If all you are is a commoditized product, yes, brand matters a lot. If you are a differentiated product, then you build the brand in the back of the differentiated product. And you can decide where you want to be in that spectrum.
Well, speaking of that brand, I saw your tweet and I was like, this is masterful. You tweeted: the frontier model problem is a breadth versus depth problem.
Can you explain that to me?
Yeah. Look, I've been listening to some of your podcasts and I've been paying attention to what happens in the market because I want to understand where all this settles down. Not just because I want to understand it, but also it impacts how I build my own business. So you got these phenomenal frontier models and they keep leapfrogging each other. Every few days there's a net new model delivered by OpenAI or by Google or by our friends at Anthropic. And the question becomes, okay fine, these models are moving into space, what do I need to build, what do I need to do with these models? And as we came with that Mythos moment when everybody was busy chasing Mythos and that was kind of important, you realize even the best model has a high false positive rate. But for some reason in the consumer space we don't seem to care. I was talking to my sister this morning, she said I just went to ChatGPT and asked all these questions. It was very helpful. So I guess what happens is the consumers are way more tolerant of false positives because there's always the person in the middle understanding what the model says and making their own judgment whether they believe the model or not. People get rid of some false positives, some people don't care about the false positives, some people believe the false positives. So the consumer is highly tolerant on this notion of false positives. I literally had Gemini produce an investment memorandum for something I was looking at. I looked at it, it looked pretty accurate, give or take, I tweaked a few things but it seems passable. So on the consumer side it's a breadth issue. It wrote an investment memorandum for me, which is cool. I would have had to hire a banker and a bunch of investment analysts. It would have taken me days and I did it in 4 minutes. So the breadth is there, which means it's my go-to place. And as you know in consumer, if you become the go-to brand, talking about brands, it's hugely beneficial. Whether it's YouTube that's the only place to go look for streaming video or Google that's the only place to go do a search, it becomes hugely multiplicative from a distribution perspective. So our frontier model friends are chasing the consumer brand and the false positive doesn't matter. On the enterprise side, false positives matter a lot. They matter because if you imagine a future where an agent is going to make independent decisions and act on it, you have zero tolerance for false positives. Now take Waymo. In my view, Waymo is the biggest agentic product that is out there because you've replaced a human being called a driver. All decisions are made by AI and machine learning. It decides when to turn, when to stop, what to do. But think about the amount of edge case training it took to replace that human agent with effectively an AI-driven agent. I don't know, tens of billions of dollars. So that's what it takes to take one use case and train the hell out of it. They could have used an equivalent AI model, but then they built so much context and intelligence and edge case training and proprietary data to make that happen. That data is not available on the internet. You can't stick the next model from Anthropic into your Mercedes and say, okay, drive me home. It's not going to be able to do it. And that's the depth issue. Because you need the depth of the context and understanding and the intelligence around the model to make it useful for the truly agentic use case. So I just think there's this constant tension. The frontier models want the consumer attention because that drives post-training for models. It drives the consumer brand of the model. On the other hand, the real enterprise revenue is going to come from use cases that require a lot more context. The one standout use case we all know is coding. Coding is a universal activity. Everybody does it. So everybody's data is helpful in training the model and that becomes a large enterprise application. Hopefully there's a few more out there. But I think that's the tension that I wrote about.
When you think about the workflows and the way that enterprises are engaging with AI, specifically models, to what extent do you think we will be locked in a frontier model dominant world versus the majority of enterprise workflows can be done with open source and we will be more cost-efficient moving towards them most of the time?
I think more than half the enterprises are still not getting it right on the use of AI perspective. I think we're still busy trying to incorporate AI into our current business practices. How do I take what I do today, use a little bit of AI, get marginally more efficient because I don't want to do this the old way. I think the opportunity is to rethink your workflow fundamentally with AI. That's where the true benefit is going to come. I think the winners in the long term will be people who actually rethink their companies with AI, not people who adapt their current workflows marginally with AI.
How can you do that if you're an enterprise? We have thousands of CEOs of big enterprises that listen. That sounds great. What do I do? Do I do a brainstorming session?
No, I think there's going to be perhaps two or three different categories. One category is let's take the workflows of today. We have workflows around ERP, sales team management, human resource management. There are existing workflows which have been SaaS-ified, as in some software company decided we all have common processes, let me build a container where these common processes can be marginally customized by enterprise. They can code their workflow into my SaaS application and we're off to the races. Now, that workflow required a lot of human judgment and human interaction. The software is not intelligent. It's been coded. You define input, you define output, I do the input, I know what output I'm going to get. The idea is imagine workflows where, in the hiring process, most of your workflows are containers. Imagine where AI actually is helping you make judgments. If I put every CV into AI and it says these are 20 people you should interview, this looked at the CV, you should ask this person these following questions, sends a note to Harry saying interviewing this person, ask the following 10 questions because your three other colleagues only asked the following five. We needed no false positives to human beings. So AI could be hugely helpful in informing and making the process more intelligent. But that requires us to give up human control and let AI do 80% of the thinking for us. And that's not how we're doing it right now. All we're doing is let's take this invoice, let's scan it, abstract the data, put it into AI and say look at that, it's happening 20% faster.
Do you think we are willing to give up that human control? You see cases like Meta today where I think 1,700 people signed a petition that they are unwilling to let it track their mouse and keystroke behavior. We are seeing resistance to giving the data.
I think two different points. I think mass collection of data to inform AI is a little dangerous because people see the outcome of what that's going to happen. I've heard of companies where people are using cameras to track people folding laundry and ironing clothes because they want to be able to train physically in the future to do those things. So that aside, I think on the enterprise side we can actually run a business much more effectively and efficiently if we decide where we are willing to relinquish control to AI. Perfect example, marketing. Anything that is required to train a marketing model is already out in the public domain. By definition, marketing is public domain. If it didn't market it, it's not in the public domain. So I have the best training data in marketing. I don't need to train an AI model with more marketing content. I may need to train it for tone of voice and what my brand is. And I'm pretty sure an AI model, if I throw my marketing collateral into it, will tell me this is not consistent with your brand. They can actually analyze earnings scripts of companies and say the last 20 years, what has Company X done? And when does the CEO start getting away from a topic because perhaps it's not going so well. This is really smart. They can do that stuff. So it's the best marketing training database in the world, the frontier models. Why do I need 400, 600 people in marketing? Because my biggest problem in marketing is I have 600 people, but I'm not sure they all fully understand how to consistently deliver my tone of voice, my value proposition, and how not to break my brand by having different collaterals in the public domain.
You have 600 people in marketing?
Give or take, on 21,000 people. Well, it's not going to be 600.
No. What is it going to be?
I don't know. My rule of thumb is that in the next three years, we'll probably have half the people in G&A-type activities in companies, things like marketing, finance, HR, because there's a lot of process management there. A lot of process management can be made more intelligent using some version of an adapted future AI application. So SaaS applications will give way to AI applications. The difference being SaaS applications have no opinion. AI applications will have opinions, and that's a fundamental rethink we need from a workflow perspective.
Can you just help me out? AI applications will have opinions. What does that mean in terms of how you use them in terms of the output that they have?
Everything. Like your AI assistant, whether you want to call it an AI marketing assistant, AI HR assistant, is going to say I looked at your copy. It sucks. That's not good enough. It's not consistent with tone of voice. Here's what I would recommend. This has an opinion that will make my average employee much smarter than they were today. Then I don't need so many of them because they're doing most of the work for you.
What would you say to the people that say you're wrong? We won't see that halving of those functions and actually marketing teams will create more copy, more content, be in more places.
No, like I think the places where people could be wrong is how many technical resources we need in the future. I think we need more, not less. I think there's this fallacy people believe we're going to have less people working because AI is going to take over our jobs. I don't believe that. I think what's going to happen is you can't imagine the number of people on my team who want more technical resources, more AI-savvy resources, because they want to do exactly these things. They're saying, oh, I've got an amazing project to transform marketing. I've got an amazing project to transform HR. What do you need? I need more people who understand how to prompt frontier models, build harnesses, bring proprietary data into play. I need more compute, more storage because I want to learn everything. So I think we're going to need more technical resources. I think we're going to need more sales resources because if your product's really good, you need more people to go out there and cover the universe because not enough people know about it. I'm in Europe. I met 20 customers last week. I still see half of them don't know all the stuff we have. I'm like, dude, we've been around for 20 years. Why is my team not out there pounding the pavement telling them everything we do? And the problem is not enough time in a day because I'm too busy dealing with some arcane piece of software at work which I have to go feed. Well, if I had that software be really intelligent, it'd tell me what to do. In terms of wanting more technical resources, I would put it in the more technical resources camp.
How do you think about effective token allocation today? You're seeing very different camps from your Metas and Ubers and Microsofts who put in budgets to your free-for-all, be creative. How do you approach it?
Look, I know this whole world of token maxing has kind of gone topsy-turvy with the whole conversations around how many tokens people are using. The challenge right now is 90% of the enterprise employees are not AI-savvy. They're not. They have to learn. I can't send them to university. There's no course you can take in any school anywhere. They have to be able to learn on their own. I think we're back to a Darwinian moment where everybody has to figure out who's really good. Now, you've seen people like Brian Armstrong and Jack Dorsey go out and say, I'm going to decimate my organization. I'm going to start building from scratch. And they've gone to some version of 30, 40% less people because they've figured out there's no redemption. I can't train these people. I'm going to just find the people who are going to come in and help me do this stuff. That's one model. The other model is sort of gradual. We've been hiring people only through hackathons now, and we see natural attrition of 2% give or take a month, and we just replace them with people who actually are AI-savvy. We hire from hackathons. Give me 12 months, I'll have transformed 20, 25% of my team. Give me 3 years, I'll have hopefully enough AI-savvy people working at Palo Alto. So there are two different ways to get there. I think part of what you're seeing in the token maxing world is people are learning, people are experimenting. The risk is your smartest employee who knows how to use AI really well could be using 20 times the tokens that an average employee uses. And if you get into this whack-a-mole moment saying, oh my god, I'm going to stop people spending too many tokens, you actually will hurt the best AI-savvy people more than you will hurt the average employee. And by the way, I think the best talent will want to go where they will be best equipped with the most expensive frontier models, the biggest budgets. I think that will almost be like an employee benefit.
Yes, possibly. But I think part of the challenge is, right now everybody's experimenting at everything. And you have to figure out what is it that I need to build as an enterprise and what can I get off the shelf. If I can get an AI-based thinking application that does marketing for me, I don't need to build it. It's a generic problem everybody needs to solve. I can tweak it, I can customize it just the way I did with SaaS applications, but I don't need to build mine from scratch.
So I've made sure that everything my team is building is proprietary to us. This is where do we have unique, distinguished knowledge that we bring to bear which nobody else can do on the outside. Let's put that, let's package it, let's use it. Where it's going to be a generic AI application 12 months, 24 months from now, let's just wait.
So, you have a free-for-all on tokens? To allow your teams to do the best?
We have a use-it-judiciously model for tokens. It's not a free-for-all. Free-for-all sounds like you can go token-max the hell out of it. We have use it judiciously, and we keep track of it to see what people are doing. And if we find somebody who's using it well, we won't constrain them. If we find somebody's gone a little over the top, we'll find a way to cap.
Benioff said the other day that he spends 300 million on Anthropic a year for his devs, and that works out to be about 3.8% of developer salary spend. If it stays there, the valuations of Anthropic and OpenAI are grossly overvalued. And if it moves to 20%, they're actually very undervalued. And if it becomes what Brandon at McKinsey said, which is we'll spend as much on tokens as we do on salaries, they're grossly undervalued. I want to talk about where you think percent of developer salary spend on tokens will be in 3 years.
That's still a narrow lens for me. If I abstract, if I step back today, there's not enough compute for what the world is demanding. Unequivocally not enough compute. You can't buy compute. Compute is costing 2 to 3x or 4x more than it used to cost 2 years ago. There's not enough compute. That scarcity of compute and that excess cost required to build and deliver compute, which allows us to go make AI useful, is causing the constraint and forcing pricing. And interestingly, I think more than half of the compute is going to feed the consumer, which is a fundamentally lossmaking entity right now. I don't think any of the frontier models make any money in trying to get you and me to use ChatGPT or Claude or Gemini every day. It's free. That's a lot of compute. Imagine there's billions of people around the world using it for all kinds of queries every day. That's sucking away half the compute which is making no return. Guess where the pressure goes? The pressure goes on the other half of compute which is being used for coding and enterprise applications. So now you're saying enterprise applications and coding have to pay until we build transaction models or advertising models on the consumer side, because they're not ready. Now you can say, well that happened in search too. Google search was around, that happened. YouTube, people used a lot of YouTube, a lot of compute, but it wasn't paying for itself. The problem is the compute requirements and the cost is now 10x of that when we were in that era versus today. So that's forcing token prices to go up. I think the long-term token pricing should be one-tenth of what it is today. When that happens, you will see that people will consume more. You can decide if 3.8% or 15.8%. Not sure we can tell the answer right now because pricing will move very drastically in the next 3 to 5 years. I think at some point in time,
Sorry, you think we'll see dramatic reductions in token pricing?
I think so. I think in the next 3 to 5 years we will see reduction in token pricing. I think at some point in time the consumer use of AI will get constrained by these frontier AI companies because they have enough post-training data, more than they need, and each user is inherently unprofitable in their activities they do on frontier AI models.
Do you not think they just build advertising engines like OpenAI is doing now to pay for that business?
You know, that's an interesting question. It has to come from somewhere. When I started at Google in 2004, we were 2% of the global advertising revenue and global advertising revenue was estimated between $500, $600 billion. I think online is about 70% by last count of total advertising revenue. And I don't think the overall number has changed by more than 3% a year or 5% a year. So I don't think the total advertising pie is going to increase. You've already taken away 60, 70% of the advertising pie in the online world. Unless you tell me there's going to be an explosion at the top where more people are going to spend more money in marketing, that money that you're hoping to fund consumer AI from advertising will have to come from current advertising revenues. So I don't think that changes the equation drastically to make the consumer profitable. I do think there's an opportunity that AI ends up taking more transaction revenue, which has not been into the purview of AI.
Can you explain that to me?
Well, think about the marketing chain. We do advertising. Advertising is inherently inefficient. What's the best conversion rate you get in online advertising?
That's fine. The best of breed is 7 to 10%.
Sometimes. But the average is probably 1.5 to 2%. Which means 85 to 90% of your marketing is wasted. So now if you get really smart, you have memory, you have context, and you get smarter in targeting Harry when he's trying to buy something out there in the world, then your conversion rate goes up. If you look at the entire value from the time you decide to buy something till the end, you get the product. Take the case of consumer goods today, I would say the cost of consumer goods is probably in the 5 to 8% of total list price. The 92% is distribution and marketing. It's highly inefficient. So you could imagine a world where AI makes marketing really efficient and you get more dollars coming from traditional marketing into the online world because it's coming in the form of transaction.
If tokens get cheaper, why are we not seeing frontier models get cheaper? We all thought that this would be cheaper.
Well, right now they're figuring out that all your frontier model companies are value-maxing, not token-maxing. They're raising money at a trillion dollars. At some point in time, they realize, oh my god, where's the next hundred billion of compute going to come from? Financial markets are not going to bear the cost of another $100 billion at a trillion dollars or a trillion and a half, because I'm going to need it again the following year. So you say, well, I need to build a sustainable business model which starts showing some degree of gross margin profitability. The only lever they have is to take the fastest-growing thing that they have in their portfolio from an economic perspective and charge us more for it. That's where you get the price of tokens from. I think the price of tokens is high now. You can imagine if the price of tokens is high, every technologist is trying to figure out how do I make my compute more efficient in the future. So I'm sure we'll see a whole bunch of advances in the world where memory and compute is going to start getting used more efficiently from a modeling perspective. And I still believe I don't need Fable 5 or Mythos 5 to do 90% of what people do with AI today. Why is the last model not good enough for certain tasks?
I think the view is that the model overhang in terms of capabilities, and especially consumer and most enterprise demand, the models from two years ago were good enough for most of the queries that we understand.
That's right. The problem is they were inefficient from a compute perspective. Totally right. So you're seeing the efficiency come in. The problem is the cost of R&D is now being spent in terms of what the tokens have to pay for. So I think token prices come down. I think the amount of compute that we need is going to be huge for the next 10 years. I think the frontier AI models are in a position to capture a significant amount of the future economic value of the use of AI.
Everyone is fundamentally looking at the stack. And this is me being very open as a venture investor. That's why the show has been successful, I'm just saying what every venture investor feels. We're all looking at it going, oh Jesus, I have no idea where value is accruing. You've essentially got infra which is kind of top, and then you've got models and apps.
Look, infra is making money. Infra is more expensive than it's ever been. That's why you're seeing trillion-dollar market caps in the infra space because of the scarcity of compute and this need for speed.
Do you think we're in an infrastructure bubble, like people think or suggest?
The question which I don't know the answer to, you can tell me. You spend more time with people here. I have to go do my day job.
Is at what point in time does physics kick in and we just can't produce the compute as fast as we want to? While the infrastructure people are gearing up for large amounts of capacity, large amounts of demand on the infrastructure side. And you come to a point where it's only so many data centers we can build. There's only so much energy we have. Well, I mean, now there's shortages of copper, dude. The Pentathassa is building data centers at sea. You've got Elon building in space.
So I think there may be a digestion period at some point in time when we think the demand for compute is there but the capacity to execute is now limited by physics and the infrastructure players have built up too much capacity for this demand. Now I don't know when that rationalizes. Maybe it rationalizes and causes us to think about a different time frame for putting all this compute out. That doesn't take away from the need of compute. We'll still want as much compute as we can deliver as fast as we can deliver. I think some of the model companies have outstripped anybody else's ability to build frontier AI models of that capacity at that speed in the training. So I think you are seeing perhaps a settling down of who's going to be the frontier model player in the future. The question becomes, in the economics, what value accrues to the model, what value accrues to the application layer, as you said. And I think the application layer is probably a simplistic term because for the first time you have memory in applications. Applications understand context. They understand context specifically as to what you want, what I want. You're seeing that in the consumer space. That has not yet come to the enterprise space, funnily enough. I think that shows up in the enterprise space, which means the demand for compute and memory goes up on the enterprise side. These coding models have to get really smart about understanding individual context of enterprises and humans. That's how they'll be more effective and more efficient. For that, we're going to still need more compute and more memory. So I think that will start defining where the value occurs. I think the value gets shared between frontier models and the context that gets created in enterprise play. I think the frontier models are fully understanding that this is where the gap is. I suspect the frontier AI models, if I had a crystal ball, they will spend a lot more time in the next year or two building memory around consumption.
Building memory around consumption. What do you mean? Like expanding context windows?
More than that. If you look at the consumer interaction that you have with your favorite frontier model, it's starting to remember, oh, you asked about this yesterday, you asked about that. Should I take the question you just asked me in the context of everything I know about you, or should I just limit the answer to as if I don't know anything about you? Now, having context of what I said to you over the last 30 days, or last 60 days, 90 days, requires you to store a lot of information.
It requires a lot of personalized interaction that it needs to have.
Now, if you want to maintain your moat with Harry and Nikesh in the future, the more context you have about me, the easier it becomes for you to give me the answers in the future. And as you start building context on a user basis, you create stickiness and that becomes your moat.
To what extent does Mythos cannibalize a business for you? To what extent does it make a business for you?
Mythos, I think, ends up being an accelerant to cybersecurity. I think what happened when Mythos came out, it demonstrated that all the training we've been giving these models on how great code is written, the models were able to turn around saying, well, I also know how to find bad code. So what happens, you point the gun the different way and the model says, oh my god, look at all this code that you have, there are so many flaws in it. As we talked about, the challenge is like every model, it also suffers from false positives. So if you're an offensive actor and I point the model against, let's just say 20 enterprises and I go look at everything you've done, somebody's left a websocket open, somebody's done some mess-up with IP addressing. So it finds the flaws outside-in that allows the bad actor to go figure out how can they daisy-chain vulnerabilities and get into your infrastructure. It's not good enough from a defensive perspective because I can't use the model and say go take every vulnerability you found and build a patch and go patch my system and protect me, because it's going to patch 30% of things which are not wrong. Who knows what that's going to do to blow up your infrastructure. So when Mythos came, we looked at it. We treated it with respect. We ran it against our code. We discovered it finds bad stuff much faster than humans can. We found in 6 weeks what would have taken us 5 to 6 years. So we got it. We ran around, we patched it. But cloud code helps build the patch, but you should have to run it through human eval, through testing, through production testing, through sandboxing to see does this patch break anything in infrastructure. Only then, after 6 weeks, were we able to go patch everything. So what does this mean? This means that every enterprise better fix their stuff faster because if I point the next generation of models against your infrastructure, it's going to find security flaws, security vulnerabilities, misconfigurations, things that you've not been paying attention to. So it creates a bit of an urgency on the parts of the customers to improve their cybersecurity posture, which I think generally is a good thing for cybersecurity companies.
This is not fundamentally bad. Like when we just summarize what you just said, it allows you to weaponize bad actors to find holes, but isn't good enough to provide the solutions.
Well, look, the solutions are there. The challenge is sometimes getting the attention and focus of the customer, saying, listen, I got to go fix my stuff because it's important. What this has done is it lit a fire under the security practitioners around the world saying this thing is not good, this is going to weaponize the bad actors, I better make sure my defenses are in place. Now remember, cybersecurity is two fundamental things. One thing is if it's bad and I'm at the gate, I'll stop it, which means you have to have somebody at the gate. Now we have 150 million sensors in the world where we stand at the gate protecting our customers. So if I can find a way of infusing AI at the gate and taking all these vulnerabilities and finding a way to protect you, I'm good. I don't have to change the gatekeeper because there's no Claude endpoint agent that exists out there. There's no open endpoint agent that exists out there that I can replace Palo Alto or the other people in the space with. The problem is not at the gate. What happens is despite all the perimeter defense you put in, things come in, things leak in, people make mistakes, passwords get breached, there are vulnerabilities, people get in. Then the question becomes, the bad actor is in my infrastructure. How quickly can I find him and get rid of him or her? That becomes an AI task. That becomes the same conversation we've been having so far, is I need context. I need intelligence. I need to know what this means. So creating that context, that intelligence within the enterprise of what this intrusion means and how to protect against it becomes a challenge. This is the AI cybersecurity challenge. Something we spent 5 years trying to build that capability inside enterprises. So in the net, it ends up being an accelerant. Does that mean I have everything I need? Not everything. Does that mean I need to get AI models to start helping me? Yes. So we're going to infuse more AI into our defense infrastructure.
Do you think it is good or bad to have government intervention when you have models as powerful as we have them?
I think we're going through a discovery process. I think this notion of guardrails has not been built robustly enough because these models seem to be easy to get past. Remember the early days when you used to read about somebody had this conversation with a model and found a way to obey the guardrails, because they asked questions differently and the model was able to get jailbroken? It became a hobby amongst people and they had all kinds of conversations with models. The same challenge: how do you make sure that you can put enough guardrails around AI models that you build to make sure it's only used for the purpose that you had? That's the challenge that there is. I think the guardrails need to get better. To the extent the government feels the guardrails aren't robust enough, it's trying to tell us it's a national security issue, I need to go fix the guardrails. But I think it's a simple matter of trying to treat the guardrails as a real problem and solve it.
I hope it is too. If you would start, and this was, I spoke to one of the world's best cyber ambassadors who remained nameless because he asked some spicy questions too.
Oh, he has questions for me.
Yeah, he asked questions for you. He asked some interesting ones. But he asked if you were to start Palo Alto Networks as a cyber company again today, starting today in the age of AI, what would you do differently that you're not doing now? The paranoia I have if I look at self-driving,
Different courses for different horses, right? I don't think in our business we can go implode the organization. The paranoia I have if I look at self-driving, there are broadly two or three approaches out there. One was my car is not going to have a human in it. It's called Waymo. I'm going to keep pounding it, training it until it learns by itself to drive and no human should be holding the steering wheel ever when my customers are in it. You see, it's out there. Many cities have it. I saw one down the street from here. So that's one way of doing product development. And what you do is every edge case gets discovered, you build training around it, every experience is a learning experience. You keep training, you keep training, get to a point of total autonomy. The other version is I'm going to start taking segments of the driving and start automating that segment where I get really comfortable. So my car drives 50% of the time. The other 50% the human gets in on the edge cases. That's my Tesla. Tesla used to drive just the highway for me and now it's getting better at other streets. It's slowly getting better, but still I'm holding the steering wheel very often. It'll tell me you're not paying attention. And I know FSD gets better. But that's another way to get there. The third one is I'll infuse some degree of self-driving into my car because I've come from the traditional model of having amazing cars, great V8 engines, beautiful, sleek cars, and I'm not into the technology aspect. We have all three versions out there. My fear is, do we all need to stop and start thinking the Waymo way as enterprises, or is there room for the Tesla approach to self-driving in our businesses? Because we have an existing set of customers to satisfy who are not going to take kindly from me saying, guess what, I changed my product, it's right 80% of the time, and I'm going to take another three years to train the product to be right 100% of the time. So my fear is, am I pivoting fast enough in my product strategy that over time my products become more self-driving than they are today? Or do I need to go faster and can I get there by automating or AI-enabling certain parts of my product where I can apply the models that are capable to do certain aspects of cybersecurity today and keep doing the other through machine learning and managing edge cases? Or is it time for me to pivot? My view right now is you have to have the Tesla approach if you're an enterprise that is building AI-infused capability, but you can't have the approach of traditional car manufacturers which are trying to stick a little bit of AI and sort of AI-wash their cars and saying I'll get there eventually.
Would you like to do the Brian Armstrong, Jack Dorsey? I often think a good question is what would you like to do but you're held back from doing.
Different courses for different horses, right? I don't think in our business we can go implode the organization because I don't think the underlying application software is there. I don't want to build a lot of software that is proprietary to me for things that should be available for everyone. I don't want to build an AI marketing stack. I don't want to build an AI HR stack. I don't want to build an AI ERP stack. I'm hoping that somebody goes and does that much more effectively and efficiently for the world at large. Perhaps it's the next iteration of Salesforce, next iteration of SAP, or the next iteration of Workday that is going to help me do that. Because I do believe it needs to become more intelligent. We talked about it needs to be more AI-enabled or AI-controlled. I do want to build things that are particular to
Me. I have all the information, all the intelligence, the context and the memory from an organizational perspective. I think the right way to get there is to hold people accountable. And I run a meeting twice a week now called AIO. It's kind of funny. It's like Old McDonald had a farm. AIO because everybody in my company wants to do AI. So I use it as a converging function to do brainstorming across my team. How do we think about this? Why are we building this? Because I have to AI.
What happens in that meeting?
Everybody comes and shares how they're adapting to the new world of AI. What are they doing from a product development perspective? How are they thinking about it? How are they including agents in their products? How are they going to build the backend infrastructure? How do we think about how they're using tokens? How do we think about the capability of resources? Remember, for me to transform a 21,000 people organization, I have to get the hearts and minds of the leaders to make sure we're all swimming in the same direction or pulling in the same direction. So, this is my way of ensuring the top 15 or 20 technical leaders in my company are pulling in the same direction. And you know if there's no expert then a group of smart people do better than an expert. I don't think there's an expert for future enterprise design yet in terms of here's the blueprint like you said as a VC you're saying holy shit where's the value going to accrue? Is it going to be in models? Is it going to be in the application layer? Trust me, we have to have a point of view in that stuff and what's going to emerge in the future before I can start transforming my company. Like how should I build my products? Are your leaders AI built? I interview CROs as well, some of the best CROs, some of the best CPOs and in all honesty the bigger the company the less AI-matched they are. To the extent where one the other day, public company doing 5 billion plus in revenue, CRO goes, you know we don't have that AI talent internally but we'll bring it in.
Yeah, like I discovered this in 2004 when I was in Europe. I ran Google Europe. I used to go around meet CEOs. You know there was this fad where CEOs would hire this 24-year-old sherpa, they were called the web sherpas or internet sherpas. Right. It's like chief internet officer. Remember those companies had chief internet officers at one point in time.
You don't remember. Well, we've seen this movie before and sometimes it's fine to have seen this movie before. And the task of the chief internet officer was to make sure the organization was ready for the internet because I'm too busy in my traditional business and I don't know who Amazon is. I don't know who Google is. So this wonderful 20-year-old who understands this stuff is going to be my savior. And then CEOs would wash their hands about the internet because they have this wonderful team of people who would be frustrated because they can't get anything done because nobody's giving them attention. The risk of that happening is true with AI as well. I'm so busy doing what I did yesterday. I have no time to think about tomorrow. So meet my chief AI officer who was probably a researcher at some amazing university before and has low execution skills. So until I can get my leadership to understand and agree the extent of the AI challenge and the AI opportunity, we're not going to make progress.
What specifically are you not focusing on today because of the burdens of today's problem?
Look, everything. When you go talk to a product manager at any large company, I'm pretty sure they have a product road map that exists in their heart and their hands which is 6 months or 12 months long. I got to go fix all these things. I'm like, what's interesting is in the 6 to 12 month thing, there's nothing called agents in there. How come like the world is talking about identifying everything and your product road map doesn't have that? I'll get to it once I get this done because it's what customers want right now. I'm like, no, that doesn't work. How do I get you to do more agentic work? How many people are you going to free up doing development the way you're doing it today so I can use that excess resource to go make new things happen? So, those are all important conversations. I can have them one at a time across 14 or 20 people or I can have them twice a week with them and people demonstrate how they are. And what's fascinating, remember, you have to make sure your leaders are ambitious. You have to make sure they're competitive. You have to make sure they want to win. You have to make sure that they have a learning mindset. When they watch their peers around them do cool shit they want to show up with cool shit the next time. So for me it's getting 14 people together and saying hey Harry tell me today what have you done for AI in the last three days since I last talked to you in your organization and whatever motivates you whether the fear of Nikesh asking you 3 days again what you did or your sort of inherent learning ambition or it's your team pushing you, you will show up with something and then you'll see what the other guys are doing, you'll say oh my god I'm doing a lot or I'm not doing enough. So it creates a little bit of Darwinian competition amongst them. It creates this urge to go embrace this new technology and I think hopefully I get 14 people fully motivated and then they go do that with the next set of people because I need to transform from the top down not from the bottom up on this topic. There's a bottom up experimentation of course, right, people using tokens to see who's really good at that allows me to find the best talent. So you got to find a way of transforming 20,000 people over the next three years in that direction. Bottoms up, top down.
You got to get into these organizations.
That sounds naughty. [laughter] Sit down.
Clearly, I need to get out more when that's... [laughter] Um, I just sit in this dark room all day, Nikesh. I'm sorry. The question is how do you get in effectively and how do you get implementation and adoption done? Well, I've had guests on the show say before, you cannot do enterprise adoption without FDEs today. And then I've had Matan come on the show, our friend from Factory, and say, if you need FDEs, you have a shit product. Bold. And I love Matan. And I think it was a great clip. So grateful for the virality that came with that.
Okay. Is that, that went viral?
That went very well. Yeah. Cheyenne from Palantir then obviously chimed in and my job is to create a discussion. What is true and what is right? Do you have to have FDEs to sell into enterprise?
So I think what is true is we've only been chasing the enterprise dream for AI for the last what 12 months.
And if you think about everything that happens on a weekly basis we see new things come which we don't quite fully understand and grasp, right? We're all busy trying to get our arms around LLMs and how they're going to be great for chatbots to talk to our customers as an enterprise and suddenly agents showed up like oh my god I got to figure out agents are going to start working internally. Agents are going to do a lot of stuff. I'm pretty sure you could still have an agent fest and have everybody tell you what an agent is. You'll still walk out and say, I'm not quite sure that his agent or her agent is the same as what the last guy said. So, because AI is moving so fast, I don't think the products are fully there yet. Like the enterprise products at the application layer don't exist in their entirety because we haven't been tested against the enterprise ask. So FDE is a short form for saying my product's not fully there because it's evolving as the technology evolves. I'm going to send some people across who are going to sit in your office and build my product while I adapt it to your needs. That's what it is, right? That's what we saw from Palantir. That's what we're seeing from all these companies. So what you're saying is I'm going to send my product engineers or developers to your enterprise. They're going to build my— if you do it right. Again, FDEs have different versions. Some people are just trying to get you to consume AI, which is actually not an FDE. It's just a technical sales consultant who's trying to help adoption. On the other hand, an FDE truly is somebody who actually brings the code back from a customer side and goes back to your product and say, listen, I built this at the customer side because they had this need. We should incorporate this into our product because everybody's going to need it. That's an FDE in my mind. So I think FDEs are needed for the short term because remember all the enterprise AI startups are hungry for revenue. For some reason we've created this notion that don't worry just keep selling it. There's a huge sort of pent-up demand around AI applications. Sell it before the product's fully ready. That's what you're seeing.
Do you think that's right?
I think that's the case. I think as things evolve in the next 12 to 24 months, people will switch from one set of products to another because something will emerge as a better product. Look at the coding conversations, right? How many coding companies have you heard of the last 24 months? I think we had Windsurf, we had Devin, which is now Cognition. Windsurf got sold. So those are the early guys in coding. They don't exist in their then form. Now you've got Codex and Claude and Anthropic. You got Factory doing SDLC. You've got Cognition doing SDLC. So you can see as the market evolves, people who have concentrated on different parts of the value chain around coding are getting formed. The products getting more and more formed over time and who knows in 2, 3 years who's going to be the leader in that space because a product's not fully ready when you start.
Do you want to make a bet on who will?
No, you do that. You do it for a living. I just need a good one my teams can use. I don't need to make a bet.
I love that and I agree. Can I ask you how do you choose who you decide to help? You know I spoke to your daughter Aisha before and she said one thing that, well lots of things that many people don't know about you. But she said one is you help a lot of people, a lot of founders and you ping them.
How do you choose who you ping and who you help? Matan obviously being one of them.
Well, my current paradigm as I told you is this market is moving so fast that based on what you read, you know, Open Claw comes out, suddenly there's this thing that people are going to have agents. There was a moment if you heard, if you saw, there was agentic browsers. Remember we don't hear about them much but there was a moment when everybody was going to have an agentic browser, your browser was going to be your computer and that's going to sort of do all the agentic tasks. When I hear about these things I'm trying to assess which one's going to work. If it works, how does it impact my product portfolio? What do I need to build in anticipation of this technology becoming mainstream? And that window from the idea to execution is shortening in the AI world as you can see, right? Like the way these companies are coming out and getting formed in 12 months and 24 months and getting 100 million ARR is probably the fastest ever, which means if that's what my enterprise customers are using I have to figure out a way to secure that stuff while my team doesn't fully understand all this stuff. So I'm busy listening to podcasts, listening to people, watching people tweet, watching people on LinkedIn and saying this is an interesting technology, helping the founder. So my first step is to ping somebody who's doing something interesting which I don't fully comprehend. They seem to be getting to a degree of success which gets me a feeling this could be something relevant, perhaps not this company but the construct that they're working on, the concept they're working on.