Counsel for boards governing AI.

Netflix — Business Security, M&A & Studios Everbridge — VP Security Engineering Sony DADC 20+ years

KaNun Advisory is an AI security and governance practice for boards and executive teams. Counsel from an operator who ran security at Netflix scale and builds with AI agents every day.

Request a briefing→

01 — The gap

AI systems now act — hold credentials, call APIs, move data — under policies your environment does not enforce.

  1. Which AI systems in our environment can take actions rather than only generate text?

  2. What credentials and permissions does each one hold, and who approved the blast radius?

  3. Would our detection flag an agent misusing legitimate access at machine speed? It was built to catch humans.

  4. If an agent caused an incident, could we reconstruct what it did — and why?

Three engagements

02 — The practice
01

AI Security Readiness Assessment

Fixed scope. Inventory of what can act, permission and blast radius, detection coverage, incident readiness. Findings written for the board.

Fixed scope & fee
2–3 weeks
Board-ready readout
02 Monthly retainer
Ongoing

Fractional AI Security Executive

Senior security leadership for organisations that need AI governance built and operating without a full-time hire.

03

Board & Executive Advisory

Briefings, director education, and counsel to boards and executive teams on AI risk oversight.

Per engagement
Board & committee
Policies don't stop agents.
Controls do.
03 — Position

Every organisation now runs AI systems with real agency. Almost none can produce the inventory. The work is not philosophical — it is inventory, permissioning, detection, logging, and playbooks that name AI agents as a threat-actor class, including your own.

04 — The principal

KaNun Advisory is the practice of Munya Kanaventi.

20+ years in security — Netflix (M&A, Animation, Game Studios), Everbridge, Sony DADC — and, since leaving, building AI-native products daily. He has operated at scale, and he builds with the technology he advises on. Counsel extends across information security, privacy, and data governance — AI is where boards need it first.

Every engagement is delivered directly by the principal. Independent and vendor-neutral: no software to sell and no referral commissions, so the recommendation is the only product.

2019—25Netflix — Business Security Partner. Built the M&A security program; security partner to Animation & Game Studios.
2016—19Everbridge — VP, Security Engineering.
2012—16Sony DADC — Security leadership.
2025—Founding Principal, KaNun Advisory.

Latest thinking

05 — Insights
Insight 002 Compliance has a date. Your agents don't. Aug 2026 · 6 min Insight 001 The Hugging Face breach: the question your board should be asking Aug 2026 · 5 min

If your board is asking— request a briefing.

Thirty minutes. A conversation, not a pitch. You get a straight read either way.