AI Security & Governance Counsel · A global practice

Your company is deploying AI faster than it can govern it.

We help boards and executive teams close that gap — with security counsel from an operator who ran security at Netflix scale and builds with AI agents every day.

Book a 30-minute briefing→

A conversation, not a pitch.

The pattern the practice exists for: an agent moving with legitimate credentials, at machine speed.

Netflix — Business Security, M&A & Studios · Everbridge — VP Security Engineering · Sony DADC — Security Leadership · 21 years — security, privacy, governance · Independent — unconflicted, vendor-neutral counsel · Netflix — Business Security, M&A & Studios · Everbridge — VP Security Engineering · Sony DADC — Security Leadership · 21 years — security, privacy, governance · Independent — unconflicted, vendor-neutral counsel ·

The governance gap

Most AI governance is a document. It needs to be a set of controls.

AI systems now act — hold credentials, call APIs, move data — under policies your environment does not enforce. Boards are asking the Four Questions. Most management teams cannot yet answer them.

Which AI systems in our environment can take actions, not just generate text?

What credentials does each hold — and who approved the blast radius?

Would we detect an agent misusing legitimate access at machine speed?

After an incident, could we reconstruct what an agent did, and why?

Diagram: path of an autonomous agent moving through a corporate environment — **Exhibit 1** — Path of an autonomous agent through a corporate environment: legitimate credentials, machine speed, delayed attribution.

Engagements.

Fixed scope · Retainer · Board

I. AI Security Readiness Assessment A fixed-scope, three-week review of how your organization actually uses AI — and the gap between what governance promises and what your environment enforces. Ends in a board-ready readout and a 90-day roadmap. From $15,000Fixed scope · 2–3 weeks → II. Fractional AI Security Executive Standing senior counsel on AI risk without a full-time hire — roadmap execution, vendor and model review, incident readiness, board reporting. Monthly retainer2–4 days / month → III. Board & Executive Advisory Director briefings on AI risk, agentic-scenario tabletops, M&A diligence, and standing advisory seats. Per briefingOr ongoing seat →

An operator on both sides of the table.

KaNun Advisory is the practice of Munya Kanaventi.

Twenty-one years in security — Netflix (M&A, Animation, Game Studios), Everbridge, Sony DADC — and, since leaving, shipping AI-native products daily. He has operated at scale, and he builds with the technology he advises on.

Every engagement is delivered directly by Munya — never delegated. Where the work warrants specialists, they are brought in deliberately and always disclosed.

2018–25Netflix — Business Security Leader, M&A · Animation · Game Studios

PriorEverbridge — VP, Security Engineering

PriorSony DADC — Security Leadership

2025–KaNun Holdings — Founder · AI-native ventures in healthcare & consumer

Full background→

Latest thinking.

From the practice

Insight 001 · Board governance The Hugging Face breach: the question your board should be asking Aug 2026 · 5 min

If your board is asking questions your team can't crisply answer, request a briefing.

Thirty minutes · A conversation, not a pitch · Los Angeles / everywhere

If your board is asking about AI risk — start here. Request a briefing→