How AI Is Reshaping the Buy-or-Build Equation in Cybersecurity
Summary
The article argues that AI has sharply reduced software development costs, weakening the moat for basic cybersecurity tools. It says durable products will depend on expertise, trust, proprietary data, execution, and better security decisions.
Key points
- AI coding tools and cloud-native platforms have lowered the cost and effort of building software.
- The author argues that basic cybersecurity products such as asset inventories, GRC tools, and vulnerability trackers are easier to reproduce, weakening technical complexity as a competitive moat.
- Using AI alone is not a durable product strategy when competitors can access the same foundation models.
- The article describes a shift from systems of record and workflow toward systems of intelligence that help security teams prioritize risks and actions.
- It identifies hardware and physical security, practitioner communities, deep tech and cryptography, security intelligence, and AI-native services as areas where durable companies may emerge.
- The author recommends starting with customer problems and security workflows rather than building around technology for its own sake.
Article Details
- Topic
- How AI is changing the cybersecurity software buy-versus-build equation and shifting product value toward expertise, judgment, and systems of intelligence.
People
Vendors
AnthropicAnthropic launched Claude Science — a platform that automates biology and chemistry research tasks: CRISPR screen design, protein structure prediction, experimental planning. Tasks that entire biotech companies wereGoogleNow look at cloud security. Most products collect data through AWS, Azure, or Google Cloud APIs. The platforms already expose the data. You are not reverse engineering operating systems anymore. You are just using APIs.OpenAITools like Claude Code, Gemini AI Studio, and OpenAI Codex allow a single experienced engineer to produce work that previously required an entire team.
Products
AppleBefore you write your next product spec, watch this 3-minute clip from 1997 Apple WWDC.AWSNow look at cloud security. Most products collect data through AWS, Azure, or Google Cloud APIs. The platforms already expose the data. You are not reverse engineering operating systems anymore. You are just using APIs.AzureNow look at cloud security. Most products collect data through AWS, Azure, or Google Cloud APIs. The platforms already expose the data. You are not reverse engineering operating systems anymore. You are just using APIs.Claude CodeTools like Claude Code, Gemini AI Studio, and OpenAI Codex allow a single experienced engineer to produce work that previously required an entire team.Claude ScienceAnthropic launched Claude Science — a platform that automates biology and chemistry research tasks: CRISPR screen design, protein structure prediction, experimental planning. Tasks that entire biotech companies wereGemini AI StudioTools like Claude Code, Gemini AI Studio, and OpenAI Codex allow a single experienced engineer to produce work that previously required an entire team.Google CloudNow look at cloud security. Most products collect data through AWS, Azure, or Google Cloud APIs. The platforms already expose the data. You are not reverse engineering operating systems anymore. You are just using APIs.JiraSecond generation — Systems of Workflow: SOAR platforms, ServiceNow workflows, Jira integrations, incident response orchestration. The value came from routing tasks efficiently.OpenAI CodexTools like Claude Code, Gemini AI Studio, and OpenAI Codex allow a single experienced engineer to produce work that previously required an entire team.ServiceNowSecond generation — Systems of Workflow: SOAR platforms, ServiceNow workflows, Jira integrations, incident response orchestration. The value came from routing tasks efficiently.