Many startups and small companies aren’t adopting AI tools in software developmentthrough a top-down strategic plan. Instead, the implementation is mostly organic, developer-led exploration, with individual contributors using tools to boost their personal productivity. Although this bottom-up innovation is powerful, it can place leadership in a difficult situation in which it reacts to new security risks, code quality questions and IP concerns instead of getting ahead of them.