Pinned Tweet
I'm leaving Ramp and returning to the company I cofounded

Access control built for humans won't scale to a world of autonomous software

We're going to fix that

x.com/LeoMehr/status…
35
7
154
40,110
Deputy CISO of Anthropic "things are going to get a lot worse"
as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)
0
0
7
547
Want to give your agents more responsibility?

We launched MCP Governance so companies can have visibility and control over all their agents.
4
0
13
669
Replying to @LeoMehr
MCP Governance has been gaining incredible traction across our customers, and I can't be more excited to personally be building the product with an amazing team.
1
0
0
20
Replying to @LeoMehr
0
0
0
19
great post! Satya is stating the necessity of separating models <> harness <> access controls

for the near future, this is very sensible and every enterprise will need a separate system for agent access control
2
1
8
379
Last week was the first known case of government system hack by AI

OpenAI model hacked Australia’s national healthcare DB and several other private systems

What changed since the hugging face hack 👇🏻

cnn.com/2026/09/23/bus…
1
0
3
193
Replying to @LeoMehr
It’s a concerning trend

We should expect more security breaches and unintended actions by AI. Especially as open source/jailbroken models reach the same cyber capabilities
1
0
1
22
Replying to @LeoMehr
This is why companies and government need to harden cybersecurity defenses

And why we need to manage agent access better
0
0
1
18
Enjoy doing captchas while they last!
@LeoMehr @seboliver16obsolete: AI solvers and farms bypass image/behavioral ones at near-100% success for $0.5–3 per 1k. They block legitimate agents while taxing humans.

Industry consensus shifts to invisible risk scoring (Turnstile, device/behavioral signals, PoW like Cap/FriendlyCaptcha) plus entity classification over binary human/bot tests.

Most promising agent-friendly path: Web Bot Auth (IETF draft, live at Cloudflare/Amazon Bedrock/Google). Agents cryptographically sign requests via HTTP Message Signatures; sites/WAFs verify identity and allow selectively without puzzles. Complements proof-of-personhood for human-backed agents and policy-based trust platforms.
0
0
1
254
Today we’re launching MCP Governance

The most traction for any product we’ve seen in company history!
1
1
14
556
Replying to @LeoMehr
That’s why we’re launch MCP Governance at @lumosidentity, to provide visibility and runtime control over MCP servers and all tool calls in Claude Code and Codex
1
0
2
64
Replying to @LeoMehr
Our goal is to make it safe for companies to give increasingly capable agents the access they need to be useful

Would love to chat with anyone interested in or working on this problem!
0
0
1
34
Why I left Ramp to rejoin Lumos!
Lumos co-founder @LeoMehr on why he left Ramp to launch Lumos Labs:

"Andrej and I started the company when we were grad students at Stanford. And funny enough, we were actually inspired by a class on tech ethics. It's been a long journey. No founder path is a straight line."

"I nd then I joined Ramp. And the Ramp journey was amazing. I'm very grateful. It's an amazing company, and there's many things to learn, but the job was not done at Lumos."

"There was a wave that I feel is taking over the industry, and it's becoming obvious that cybersecurity is absolutely fundamental to the safe development and deployment of AI systems."

"I think the OpenAI Hugging Face breach incident is just the tip of the iceberg. It's just the recent sensation."

"But with that, I think the entire category of agent identity and agent access is just extremely important, and I think it's going to explode."
@lumosidentity
2
1
21
5,811