Barracuda CEO Rohit Ghai on Cybersecurity in the AI Era

How should security leaders respond when AI-powered attacks compress detection and response windows from minutes to seconds?

At Barracuda TechSummit 26 in Alpbach, Austria, I spoke with Rohit Ghai, Chief Executive Officer at Barracuda. The conversation took place exactly one year after Rohit joined the company, giving us an opportunity to discuss what brought him to Barracuda, what he inherited, and how his first year has influenced his plans for the business.

Rohit explains that Barracuda's focus on smaller and resource-constrained organizations was an important reason he accepted the role. A cyber incident can threaten the survival of a smaller company, particularly when it has a lean IT team and limited access to specialist security knowledge. For these businesses, Rohit argues that AI-supported and increasingly autonomous security is a practical requirement.

We discuss Barracuda's platform strategy and why genuine integration must extend beyond a shared interface. Rohit compares loosely connected product portfolios to supermarkets. Customers may find it easier to purchase several products from one supplier, but that commercial convenience does not mean the products share data or produce a coordinated response.

Traditional tool sprawl forced analysts to interpret information across several screens. Agent sprawl could introduce systems that act independently, disagree with one another, or take conflicting actions. Rohit believes security platforms must connect information across email, identity, applications, data, and infrastructure so they can reason across the complete attack sequence.

Identity is another major part of the discussion. Barracuda's acquisition of Evo Security addresses privileged access for managed service providers and smaller businesses. Rohit expects machine and non-human identities to greatly outnumber human users, raising questions about excessive privileges and how organizations grant temporary access to autonomous agents.

We also discuss the economics behind AI security. Rohit explains how Barracuda is adapting its value reports to account for token consumption as well as staffing, software, and security outcomes. Barracuda absorbs the direct token costs associated with its own AI capabilities and selects different models according to the task, an approach intended to keep its products affordable for smaller customers and MSPs.

Rohit is cautious about calls for the AI industry to slow development. Coordinating a worldwide slowdown between companies and countries would be extremely difficult. He also argues that cyber defenders cannot pause while attackers continue using widely available models to improve their campaigns.

The conversation ends with a wider leadership question. Rohit believes intelligence will become widely available, making empathy and trust more valuable. AI can generate an answer, but customers, partners, and security professionals must decide whether they trust the organization acting upon it.

Will connected AI security platforms reduce complexity, or could autonomous agents introduce a new form of operational risk?

Share your thoughts.