I used to think Prompt Injection was just a buzzword. Then it almost destroyed my company. Here's the exact framework I use now to stay protected.
What I've Learned From 132 Companies
A few patterns in prompt injection come up again and again.
The founders who handle prompt injection well understand that you need to move fast and break things.
The Counterintuitive Truth
In prompt injection, the best practitioners often do less, not more.
The lesson: the market doesn't care about your roadmap. It sounds simple. It's incredibly hard to execute.
Why Most Approaches Fail
Many common approaches to prompt injection are flawed at the root.
The root cause is usually one of three things:
Copying what big companies do without understanding why they do it. What works for Google doesn't work for a 10-person startup.
Over-engineering the solution when a simple approach would work better. I've seen teams spend six months building something that could have been done in two weeks.
Ignoring the human element. Technology is the easy part. Getting people to actually use it is where the real challenge lives.
The AI Angle
Any discussion of prompt injection in 2026 has to include AI. As someone who's invested in Anthropic, OpenAI, Scale AI, and Hugging Face, I have a front-row seat to how AI is transforming this space.
The short version: AI makes good practitioners better and bad practitioners worse. It's an amplifier, not a replacement.
Some teams use AI to get far more out of prompt injection. Others spend heavily on AI that solves the wrong problem. The difference comes down to understanding what you're actually trying to achieve.
This connects to broader themes around AI cybersecurity, adversarial AI, AI phishing, zero-day AI, AI threat detection that I've been thinking about a lot lately.
Wrapping Up
I've shared a lot here, and I know it can feel overwhelming. But you don't need to get prompt injection right on day one. You just need to get started and keep improving.
Founders who do well at prompt injection tend to share one trait: they're relentlessly practical. They don't chase perfection. They chase progress.
That's the mindset I'd encourage you to adopt. Start where you are. Use what you have. Do what you can. And keep pushing forward.
As always, I'm rooting for you.
Frequently Asked Questions
Q:How has this view evolved over time?
My thinking on most topics has changed significantly over the years. Early in my career, I held many conventional views that experience proved wrong. I try to update my beliefs when the evidence changes.
Q:What's the most common pushback you get on this?
People often push back by citing exceptions or edge cases. And they're usually right that exceptions exist. But building a strategy around exceptions rather than patterns is a losing game for most founders.
Q:How can I apply this thinking to my own situation?
Start by identifying the core principle behind the opinion, not the specific example. Then ask yourself: does this principle apply to my context? If yes, test it in a small, low-risk way before going all in.
Q:What experience informs this perspective?
This perspective comes from over a decade of building companies in Silicon Valley, two successful exits (RemoteTeam to Gusto, MovieLaLa to Gfycat), and investing in 234 startups including Anthropic, OpenAI, and Scale AI. I write about what I've lived.