Tytunovich: Self-Declared AI Signatures Will Create Major Security Loopholes
Guy Tytunovich · The Secret Problem With AI Agents and How To Solve It — With Guy Tytunovich · Mar 31, 2025 · at 13:05
CHEQ CEO Guy Tytunovich discusses bot verification mechanics with Alex Kantrowitz, comparing AI agent declaration to historical vulnerabilities in web crawlers.
0:00 / 0:57exact quote · 57.7s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“There's a very high likelihood, in my opinion, that the proprietors behind the main AI agents, like OpenAI, like Google, would find a way to declare an AI agent as one operating on their behalf. That being said, that is the very definition of a loophole. Such a thing kind of exists with Google's robots.txt. Google, many years ago, declared its But that is a aiming at indexing side so they can appear in Google search and it has a signature and it's called robot robots. TXT and that signature has enabled cyber criminals proprietors of other bots to mimic that bot and gain access to places that would have otherwise blocked them. I believe that this is the same Place the AI agents declaring themselves is going to go to.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Guy Tytunovich
Tytunovich: AI Agents Will Represent Double-Digit Share of Web Economy
“We believe that once they open AI releases, judge of the operator, for instance, from the 200 bucks a month package to the regular paid package, and once Opera, who just announced they're launching an AI agent of themselves within the browser, once that happen…”
Tytunovich: Legacy bot management and IAM platforms are obsolete for AI agents
“Biomanagement platforms and identity and access management platforms have been operating thus far, which is completely irrelevant for the world of agentic AI.”
Tytunovich: Almost no company can verify AI agent intent or identity
“Currently very few companies are able to not just decipher whether user is a human being or not, whether it's an AI agent and so on. Almost no company knows how to decipher the intent. And the identity.”
Tytunovich: The same privacy regulations for humans will apply to AI agents
“In my opinion, it needs to be exactly the same. It's a tool operating on your behalf. It's not a different it's got your permissions. It's an automation tool. So yeah, I think, or my opinion is, and I think it's also going to be the case of what's Going to hap…”
Tytunovich: AI Agents Currently Account for Under 1% of Web Traffic
“Not even remotely close. It's way less than one percent.”
Tytunovich: AI agent pricing will commoditize to free or modest tiers
“There's a hundred percent chance, and OpenAI already said it, and the same is going to go with Google Gemini and Chrome, their browser, and many others. It's going to be commoditized in terms of pricing. It's going to be either free or costing a modest price, …”