Episode Details

Welcome back to the playbook! We're diving back in with Kamil Mansuri, a privacy-first founder and software engineer. In PART ONE, we laid the groundwork for building with AI agents. In PART TWO, we’re getting brutally honest about why most AI products fail to gain traction and how to build one that lasts. What if the biggest threat to your AI startup isn't the competition, but the third-party models you rely on? How can a simple $20/month tool drastically improve your security? And why is the future of truly useful AI running entirely on your local machine?

⏮️ Catch Up on Previous Parts

💡 Unlocking the Playbook

Your $20 Security Blanket: Don't wait for a data breach to think about security. The first step is a simple audit of the customer data you're collecting (PII, cookies, etc.). For an immediate, high-impact boost, Kamil recommends using Cloudflare ($20/month) to set up a Web Application Firewall (WAF). This protects your domain from common vulnerabilities and is a foundational, cost-effective layer of defense before you even think about expensive penetration testing.

The AI Privacy Paradox: Most AI wrapper tools fail to achieve daily use because they're built on the same handful of third-party models (OpenAI, Anthropic, etc.). This creates a massive privacy vulnerability: you're sending your customer data to the tool, which then sends it to the model provider. For B2B or any privacy-conscious product, this is a deal-breaker and why a privacy-first approach is the ultimate competitive advantage.

Bet on On-Device AI: The solution to the privacy paradox is to bring the models to the data, not the other way around. Kamil argues the future of dominant AI tools lies in on-device, local models that run entirely on the user's computer. This eliminates the need to send sensitive data to external servers, building a truly private and secure user experience that fosters deep trust and wins in the long run.

🤫 PART TWO's Playbook Secret (The official No Trade Secret drops in PART THREE, but here is the hidden secret of PART TWO!)

Use AI against itself to audit your system. "I would actually spin up a separate agent that has no knowledge of your code base, no knowledge of anything. And you want that agent to ask you questions. And you could feed in those questions into other AIs... you wanna start developing a context and an understanding of your own system."

🗣️ Words to Build On

"[The] best tools are the ones that can leverage local models, the ones that can actually run on your computer and keep data local. And I think that's kind of why... those companies don't fully succeed." – Kamil Mansuri

"If you're building functionality on top of AI, you're essentially feeding it a new system prompt... The truth is you are sending that data to Anthropic, you're sending that data to OpenAI... which, of course, then violates that constraint." – Kamil Mansuri

"Sign up for Cloudflare. So your primary domain, it's $20 a month... You could put a WAF, a web application firewall. It will handle all sorts of crazy, like zero-day vulnerability." – Kamil Mansuri

👤 About Kamil

Kamil Mansuri is the founder of Bad Command AI, a Princeton, New Jersey studio building native AI applications for Apple platforms. Bad Command AI builds practical AI products, including Telescopo (a Markdown workspace for macOS), Telepath (an on-device AI voice agent call center for Mac), and Telefoto (an AI headshot platform). Before founding Bad Command AI, Kamil was VP of Engineering at Vapor IO, leading engineering across edge computing, cloud infrastructure, private 5G, automation, observability, and AI infrastructure. He previously led mobile backend engineering at Take-Two Interactive, helping launch Garden Tails on Apple Arcade, and served as CTO at Momentum Technology, working on telecom infrastructure and automation for pro