* [![perspectives](https://origin-www.paloaltonetworks.com/perspectives/wp-content/uploads/2025/02/prespective-icon.png)](https://origin-www.paloaltonetworks.com/perspectives) * AI Wrote the Code...So Now Who's Accountable? # AI Wrote the Code...So Now Who's Accountable? ![AI Wrote the Code…So Now Who’s Accountable?](https://origin-www.paloaltonetworks.com/perspectives/wp-content/uploads/2026/01/ai-wrote-the-code-featured.jpg) **By [Dr. Aaron Isaksen](https://origin-www.paloaltonetworks.com/perspectives/author/dr-aaron-isaksen/ "Posts by Dr. Aaron Isaksen") and [Gunjan Patel](https://origin-www.paloaltonetworks.com/perspectives/author/gunjan-patel/ "Posts by Gunjan Patel")** | **6 min read** | ![share icon](https://paloaltonetworks.com/content/dam/pan/en_US/cxo-perspectives/images/cxo-share.svg) * LinkedIn button ![linkedin-icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/microsite/cortex/images/share-linkedin.svg) * Twitter share button ![twitter-icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/microsite/cortex/images/share-twitter-x-black.svg) * \[Email share button ![email-icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/microsite/cortex/images/share-email.svg)\](mailto:?subject=AI Wrote the Code…So Now Who’s Accountable?\&body=Check out this article https%3A%2F%2Forigin-www.paloaltonetworks.com%2Fperspectives%2Fai-wrote-the-codeso-now-whos-accountable%2F "Share in Email") * ![copy-icon](https://origin-www.paloaltonetworks.com/perspectives/wp-content/themes/csp2025/dist/images/icons/icon-share.svg) [](https://origin-www.paloaltonetworks.com/perspectives/ai-wrote-the-codeso-now-whos-accountable/?pdf=download&lg=en&_wpnonce=39327a23eb "Click here to download") MEET THE AUTHOR ![](https://origin-www.paloaltonetworks.com/perspectives/wp-content/uploads/2025/06/dr-aaron.jpg) Aaron Isaksen is a VP of AI/Engineering at Palo Alto Networks, Cortex, leading the Foundational AI Research group which advances the state of the art in AI in Cybersecurity through research and development. Aaron has a PhD in CS from NYU, where he focused on researching AI techniques for automated interactive software design, and additional degrees from MIT and UC Berkeley. He has over 25 years of software engineering experience, and a long career in leveraging AI and ML, with patents, papers and products developed for cybersecurity, computer vision, embedded systems, Generative AI, and natural language processing.... [Learn more](https://origin-www.paloaltonetworks.com/perspectives/author/dr-aaron-isaksen/) ## IN THIS ARTICLE A phrase is floating through the software development world that is quickly garnering attention --- "vibe coding." It describes a concept where developers intuitively express ideas in natural language, letting AI generate and refine executable code on the fly, with AI in complete control of the code writing process. For a startup that's racing to build a minimum viable product or a hobbyist sketching out a new idea, this approach has an undeniable appeal. It sounds like a future where engineering can be reduced to a completely automated process with limited overhead. For the enterprise, however, while the productivity gains of vibe coding are appealing, trusting an AI to write every line of code without oversight might sound more like alarm bells. Organizations that have trust, security and reliability at their brands' foundation cannot afford to build their future on unverified outputs from a technology that, while useful, is still in its infancy and has many shortcomings. After all, if you don't know whatthe code does, how it was built, where your data went, what the agent did, or howit interacts with other systems or monitors, the question of accountability becomes meaningless. The real path to AI-driven productivity is a feat of engineering. It requires a new philosophy --- a hybrid of elite human leadership and a profoundly secure, enterprise-grade software development framework. ## New Framework for Engineered Trust To move beyond the risks of vibe coding, leaders must build a new foundation of engineered trust. Rather, it's a strategic framework for asking the right, hard questions before a single line of AI-generated code is committed to your repository. Building this framework begins by asking about intellectual property (IP) control and data ownership. Before a single prompt is written, you must have an absolute guarantee of where your most valuable IP is going. You might ask: What models are processing our source code? Have those models been sanctioned to see our IP? Is our proprietary logic being used to train a third-party model that could one day suggest it to a competitor? Make no mistake about it because, in the age of AI, IP control and data ownership are a matter of competitive survival. ​​Once you have wrestled control over your data, the next challenge becomes the code integrity itself. Recent industry research has already identified a "downward pressure" on code quality in AI-assisted development, characterized by increased churn and a tendency to add bloat rather than refactor. AI that writes insecure or low-quality code is no longer a productivity tool. Instead, it becomes a liability engine that's capable of generating vulnerabilities and technical debt at a scale no human team could ever match. Leaders now must ask: Can we trust this output? Is the code being tested in a secure sandbox that won't leak information? Is it being reviewed and scanned for vulnerabilities, quality and maintainability with the same rigor as human-written code? Without these guarantees, you'll accelerate your risk rather than your roadmap. Even with trusted data and secure code, the most critical vulnerability remains --- the question of how much autonomy an autonomous coding agent should be allowed. An AI coding agent cannot be treated like a trusted human developer. A human engineer understands context, intent and consequence. An AI agent understands only its instructions, making it especially vulnerable if compromised by a malicious prompt injection. Imagine if you entrust the agent with the ability to read and write across the file system, access any third-party tool, pull down any library and interact with public websites. Giving the agent the same broad keys to the kingdom as its human user is a catastrophic mistake waiting to happen. As the agentic tools get more agency and work autonomously for a longer time, from completing small tasks to medium and large coding tasks, the potential risk also increases with it. The principle of least privilege must be a non-negotiable prerequisite for secure agentic coding, and authorization and authentication must be present at every stage of the agentic process. ## Mandate for a Secure Agentic Enclave The answer to this trust deficit is to securely contain and control the immense promise of agentic coding. AI agents cannot be allowed to roam free on developer machines, operating with unchecked permissions. Enterprise-grade agentic coding requires an environment where the core issues from the previous section --- knowing where your data goes, ensuring the code is secure, and requiring least privilege and authentication for development agents --- are fundamentally addressed. Beyond a simple sandbox, secure agentic coding demands an environment intentionally designed around trust boundaries, where data movement is transparent and controlled, code execution is continuously verified and agent actions are both limited and accountable. The goal is to create the guardrails that make innovation sustainable and secure at enterprise scale. ## Human Dividend: Rise of the AI Team Leader This secure approach elevates the role of the engineer. As written about previously in the context of the SOC, this new model sees the senior engineer evolve from a tactical coder into a strategic [AI team leader](https://www.paloaltonetworks.com/perspectives/the-end-of-the-human-analyst-no-its-the-rise-of-the-ai-team-leader/). Their value shifts from the code volume they personally write to guiding, reviewing and orchestrating the quality and security of the output produced by their AI team. We call this shift the "human dividend" of a secure AI strategy. AI handles the repetitive, tactical coding tasks, freeing up senior engineers to focus on what they do best. They can focus on complex architectural design, creative problem-solving and the strategic oversight that ensures AI's work is aligned with the business's core mission. The AI team leader must also know what the AI is capable of doing correctly and only assign skill-level appropriate tasks to it. Accountability, after all, remains human. AI is a powerful tool, but the engineer is the leader who is ultimately responsible for the code that ships. ## Engineering the Future Securely The temptation to chase the false productivity of vibe coding is immense. The leaders who will win in the AI era recognize that speed without security is a dangerous fiction. The only path to sustainable, enterprise-grade innovation is to build on a foundation of engineered trust. This approach is how you unlock the true promise of AI and transform your engineering organization into a secure, world-class innovation engine. Ready to move beyond vibe coding? Discover how to [build an enterprise-grade framework to protect your AI, data and source code](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security) --- your most important assets. * [AI](https://origin-www.paloaltonetworks.com/perspectives/all-articles/?cat=ai) * [Staying Ahead of Evolving Threats](https://origin-www.paloaltonetworks.com/perspectives/all-articles/?cat=staying-ahead-of-evolving-threats) ## Related Content ![](https://origin-www.paloaltonetworks.com/perspectives/wp-content/uploads/2026/03/Securing-the-Wrong-Layer-featured.jpg) BLOG ### Staying Ahead of Evolving Threats **Cybersecurity in 2026: What we predicted, what surprised us, and what's next** At Palo Alto Networks, we are privileged to sit at the intersection of cybe... [Haider Pasha](https://origin-www.paloaltonetworks.com/perspectives/author/haider-pasha/ "Posts by Haider Pasha") [](https://origin-www.paloaltonetworks.com/perspectives/cybersecurity-in-2026-what-we-predicted-what-surprised-us-and-whats-next/) ![](https://origin-www.paloaltonetworks.com/perspectives/wp-content/uploads/2026/03/Why-Cybersecurity-KPIs-Are-Changing-featured.jpg) BLOG ### AI **Why Cybersecurity KPIs Are Changing (And What This Means for Security Leaders)** True cyber resilience is impossible to achieve without strategic and tactic... [Helmut Reisinger](https://origin-www.paloaltonetworks.com/perspectives/author/helmut-reisinger/ "Posts by Helmut Reisinger") [](https://origin-www.paloaltonetworks.com/perspectives/why-cybersecurity-kpis-are-changing-and-what-this-means-for-security-leaders/) ![](https://origin-www.paloaltonetworks.com/perspectives/wp-content/uploads/2026/03/Weaponized-Intelligence-featured.jpg) BLOG ### AI **Weaponized Intelligence** We are building the foundation that makes defense possible.... [Nikesh Arora](https://origin-www.paloaltonetworks.com/perspectives/author/nikesh-arora/ "Posts by Nikesh Arora") [](https://origin-www.paloaltonetworks.com/perspectives/weaponized-intelligence/) STAY CONNECTED ## Connect with our team today Job Level Sign me up to receive news, product updates, sales outreach, event information and special offers about Palo Alto Networks and its partners. By submitting this form, I understand my personal data will be processed in accordance with Palo Alto Networks [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) and [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown). This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. Reach out {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language