# Gergely Orosz says security certifications fall short against AI agent threats

> Original title: These security certifications are less than useless in this new AI agent world of security threats.

- Source: Gergely Orosz
- Published: 2026-10-31T14:45:44.000Z
- Bad Influence: https://badinfluence.news/items/ahogvqrzd20ynamau2oe7zwdp
- Original: https://x.com/GergelyOrosz/status/2116542141266792736

## Summary

Gergely Orosz says security certifications are less than useless in the new AI agent threat landscape. He argues they do not check realtime monitoring, anomaly detection on latency or unauthorized access attempts, or continuous posture assessment by agents. He cites Binance, which holds SOC 2 Type 2 and ISO 27001 certifications, as a company that has them.

## Post

These security certifications are less than useless in this new AI agent world of security threats.

What’s the certification checking that you’re obsessed with monitoring realtime; run agents analyzing all your realtime metrics; and your posture is “paranoid” on things like latency increases if services, attempts to access systems that have no business of accessing etc?

## Quoted post @evilsocket

> By the way, in case anyone was still wondering whether they are completely useless, Binance holds SOC 2 Type 2, ISO 27001, and several other certifications.

https://x.com/evilsocket/status/2116131480942354756