Sunava Pattanayak
Staff Engineer, BILL · Securing Payments in the Age of AI Agents
Seattle, Washington, United States
Actions
Sunava Pattanayak is a Staff Engineer at BILL (bill.com), focused on distributed payment systems and the infrastructure behind B2B payments for hundreds of thousands of small businesses. Before BILL, he spent time at Visa building large-scale payment network infrastructure - so he's seen the plumbing from both the network side and the fintech side. He cares about the hard, unsexy parts of financial software: authorization models that hold under pressure, audit trails that satisfy compliance teams, and systems that degrade gracefully when things go wrong.
Area of Expertise
Topics
API Security in the Age of AI Agents
As AI agents become more autonomous—and increasingly capable of discovering APIs, calling tools, accessing enterprise data, and taking actions on behalf of users—the traditional API security model is being challenged in entirely new ways.
This panel brings together security, API, and technology leaders to explore what happens when APIs are no longer primarily consumed by predictable applications and human developers, but by AI agents capable of dynamically deciding what to access, when to act, and how to use the information they receive.
Panelists will examine emerging attack surfaces created by agentic AI, including prompt injection, excessive permissions, identity and authorization abuse, insecure tool access, sensitive data leakage, compromised agents, and unintended API actions. The conversation will also explore how existing approaches to authentication, authorization, API gateways, rate limiting, monitoring, and zero-trust security need to evolve for an agent-driven ecosystem.
Beyond identifying the risks, the discussion will focus on practical strategies organizations can implement today. How should companies authenticate and authorize autonomous agents? How much access should an agent receive? How can security teams monitor agent behavior and identify suspicious or unintended actions? And how do organizations introduce stronger controls without creating friction that slows developers and AI innovation?
Attendees will leave with a clearer understanding of the evolving API security landscape and practical considerations for building secure, observable, and scalable API infrastructure as AI agents become increasingly integrated into enterprise systems.
AI Is Fancy. Infrastructure Is Reality.
AI is everywhere. From copilots and chatbots to autonomous agents, nearly every product today wants to be “AI-powered.” It has become a badge of seriousness, a signal to investors, and a promise to users.
But here’s the uncomfortable truth many teams discover too late: before the model hallucinates, the system will likely time out, become overloaded, retry indefinitely, or buckle under concurrency. AI may be the face of the product, but infrastructure is its backbone.
This session explores the foundational infrastructure required to support these new AI-driven capabilities—reliably, securely, and at scale.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top