Codrut Andrei

Codrut Andrei is a Director of Product Security with more than 18 years of experience across IT, cybersecurity, Application Security, Product Security, and secure software development.

He has built and scaled security capabilities from greenfield environments to enterprise operating models, working across complex technology organizations and helping engineering teams turn security requirements into practical decisions about what can safely be built, released, accessed, and operated.

His current work focuses increasingly on AI Product Security, AI governance, agentic systems, secure AI development, and the security implications of introducing models, retrieval systems, tools, autonomous agents, and machine identities into modern products.

Codrut writes and speaks regularly about Product Security, Secure SDLC, AI security, governance, and security operating models. His core belief is that security is not simply a collection of tools or controls. It is a decision system that determines what technology is allowed to ship, access, decide, and execute.

Through his writing, Codrut aims to help security practitioners move beyond AI security checklists and build the technical foundations, governance mechanisms, and Product Security operating models required for AI-enabled and increasingly autonomous systems.