SK /

AI SECURITY · FRAMEWORKS · SPEAKING

Salah
Khan.

Making AI risk observable,
controllable, and enforceable.

I work where AI agents meet the real world—turning security questions into frameworks, working tools, and conversations that move teams forward.

Field CTO, WitnessAI / Creator of SALAI

ON STAGE Innovate Cybersecurity Summit
Experience & community

WitnessAI

Palo Alto Networks

Dell

OWASP

THE QUESTION BEHIND MY WORK

When AI can act,
what keeps it
within intent?

Agents can read data, invoke tools, retain memory, and make decisions across systems. Understanding the model is only one part of understanding the risk.

My work follows the full path from a request to its consequences: what the agent can access, what it is allowed to do, what we can observe, and where we can intervene.

Read: Intent is the new unit of control

SELECTED WORK

Ideas you can
put to work.

Frameworks to structure the problem.
Tools to test it in practice.

SIGNATURE FRAMEWORK

SALAISecure All Layers of AI

A layered approach to understanding AI security—from access and interaction to models, agents, tools, and infrastructure.

Explore the SALAI series
8I

SALAI-8I

Eight invariants.
Questions you can test.

A self-audit for agentic AI deployments: concrete questions, runnable tests, and evidence to look for.

Try the self-assessment
View all projects

ON STAGE & IN THE ROOM

Make the risk clear.
Make the next step useful.

Keynotes, practitioner sessions,
and conversations with security leaders.

KEYNOTE · MARCO ISLAND

Protecting the return on AI.

At Innovate Cybersecurity Summit, connecting AI security with the enterprise investment and business outcomes leaders are working to protect.

View event post

OWASP NORTHERN VIRGINIA · AUGUST 2026

Intent is the new perimeter.

A practitioner session on the agent attack surface and eight invariants for governing agents, each paired with an audit test teams can run.

View event post

SPEAKING TOPICS

Agentic AI & the intent perimeterSecuring AI across every layerFrom guardrails to runtime controlAI security & business value

ABOUT

Built in the field.
Shared with the community.

I’m an AI security practitioner, builder, and speaker. As Field CTO at WitnessAI, I work with customers and partner with sales, product, and marketing teams to connect AI security with enterprise adoption.

Before WitnessAI, I spent a decade at Palo Alto Networks across security operations, Cortex, cloud security, and specialist overlay roles. Earlier at Dell, I brought network security into larger infrastructure conversations.

That field experience shapes how I work today: explain the risk clearly, build something that makes it tangible, and give people a practical way forward.

LET’S TALK

Bring practical AI security
to your next conversation.

For speaking, practitioner discussions, and collaboration.