Izar Tarandach, Matt Coles, and Chris Romeo
116 episodes listed below
Security claims, tested at the table.
The Security Table treats security news like a working problem, not a headline. Its panel moves from jokes and corrections into pointed questions about AI agents, ransomware, invisible code, privacy, tooling, and what practitioners can actually verify.
PRESS PLAY
The Security Table is a cybersecurity panel show built around argument, correction, and practical skepticism. It rarely enters through the front door. A loose opening about Vegas, medical dramas, black shirts, old slogans, or whatever is happening on someone’s video feed can turn into a precise question about risk, access, automation, or trust. That looseness is part of the method. Chris Romeo, Matt Coles, and Izar Tarandosh sound less like presenters delivering segments than practitioners trying to force vague security claims into testable shape. Recent episodes spend real time on AI agents, but the show keeps dragging the subject back to ordinary security ground. Tokens matter. Service accounts matter. API keys matter. Prompt injection matters less when the larger issue is over-agency and real access to real systems. The same grounded pressure shows up in conversations about agentic ransomware, where the panel questions what the label proves, what the code comments reveal, and whether the evidence really supports the hype. AppSec tools get similar treatment. DAST, SAST, false positives, linters, and AI-assisted triage are judged by how they behave in workflows, not by how impressive they sound in a claim. The invisible-code discussion is especially typical: the panel moves from character scanning and package repositories to the harder question of where malicious behavior becomes executable and stoppable. Privacy and security are treated as recurring tradeoffs rather than slogans. Risk is not outsourced to a dashboard. In the episode with Brooke Schoenfeld, the conversation stretches into storytelling, responsibility, and the discipline of explaining risk without surrendering judgment to whoever argues most cleverly. The show can be funny, but the humor is usually doing work. It resets the room, then gives the next technical objection a sharper edge. Listeners should expect shorthand, side paths, and occasional old-internet references. They should also expect the central question to keep returning: does this mitigation, tool, or AI feature actually reduce risk where people build and ship software?
Made for: For security practitioners, AppSec teams, technical leaders, and curious developers who already know the jargon but still want claims dragged back to concrete failure modes.
What sets it apart: The show’s strength is its unsmoothed practitioner rhythm: banter, pushback, correction, and then a hard turn into access, verification, and risk. It treats AI security as security first, hype category second.
The Security Table is four cybersecurity industry veterans from diverse backgrounds discussing how to build secure software and all the issues that arise!
Based on 5 episodes we listened to · September 2026
Experienced security voices test AI-era claims against practical questions of access, verification, tooling, and responsibility.
The Security Table turns security claims into arguments among Chris Romeo, Matt Coles, and Izar Tarandosh. Research on agent access, automated ransomware, and hidden malicious code becomes a starting point for testing what is genuinely new, what evidence supports the label, and…
At this security table, your AI agent gets API keys, a threat model, and relentless heckling.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A 100th-episode AppSec check-in on noisy findings, false positives, and the limits of AI.
The Security Table marks its 100th episode with a loose, self-aware run that starts in Vegas and settles into AppSec's recurring grind: noisy findings, false positives, and the hard limits of current AI in security tools.
A skeptical security conversation about package scanning, repo controls, and the limits of static analysis.
The Security Table keeps its focus on a familiar security problem: code can be hard to spot, and package scanning does not make that uncertainty go away.
Security framed as shared responsibility, with stories and an ensemble feel.
Brooke Schoenfeld keeps the focus on security as responsibility, returning again and again to risk ownership, the limits of engineer pushback, and the point where a security lead has to make the hard call.
Technology's mechanisms, power's consequences.
Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.
The Security Table marks its 100th episode with a celebratory mess.
The Security Table opens with banter and then settles into the problem of hidden code.
This episode discusses the complexities and crossroads in cybersecurity, featuring hosts Chris Romeo, Izar Tarandosh, and Matt Coles.
The Security Table opens with the usual table banter and quickly hands the room to Brooke Schoenfeld.