Notes on identity, AI security, and the practice of building software.
I'm Deepak Gupta, a founder and cybersecurity architect writing about the gaps between the categories everyone talks about and the categories that actually matter.
- 1B+
- users (CIAM)
- 5
- patents
- 15+
- yrs in identity & security
Featured writing
The pieces that capture what I think about most.
Growth Channels Ranked: Where Should Your GTM Team Actually Focus?
Referral and inbound carry the lowest CAC because the buyer arrives already educated. But the cheapest channel is not automatically the right one: deal size and whether demand already exists decide which channels can work at all.
Read the essay- Privacy
Billions in Fines, Barely a Bruise: What Big Tech Penalties Really Mean for Your Privacy
Every few months another tech giant is fined hundreds of millions for violating your privacy. The numbers are enormous, the violations keep accelerating, and the math explains why: the penalties cost far less than compliance. Here is what they really mean, and what you can actually do.
- GEO
Crawl Budget Is Now an AI Visibility Problem
Crawl budget is no longer a technical SEO footnote. Google's AI surfaces draw from the same Search index as the blue links, so whether you appear in an AI answer reduces to whether Google crawled, indexed, and kept your pages fresh.
- GEO
GEO Is a Product Discipline, Not a Marketing One
The entire GEO industry treats AI visibility as a marketing problem: track citations, optimize content, report share of voice. That framing is why most GEO programs plateau. The deeper truth is that GEO is a product discipline, and the teams winning at it have figured that out.
- Machine Identity
Top Non-Human Identity (NHI) Management Tools for 2026
The leading non-human identity (NHI) management tools for 2026, compared by job: discovery and posture, secrets management, machine identity, and workload identity.
- GEO
The AEO Strategy Playbook for 2026: Homepage Schema, Content Patterns, and an Experimentation Roadmap
A practical AEO playbook for 2026: how Answer Engine Optimization differs from SEO and GEO, the homepage and entity schema that makes a brand citable, the content patterns AI answer engines quote, and an experimentation roadmap to measure citation share.
- GEO
Why GEO Has to Be Vertical (When SEO Never Was)
SEO became a horizontal layer because its substrate was uniform: one ranking algorithm, one signal set, one results format. GEO can't collapse that way. Here is the architectural reason.
- cybersecurity
I Spent a Decade Building a Password Company. Here's Why I'd Tell You to Kill Yours
I spent ten years engineering, scaling, and defending password-based authentication for a CIAM platform that grew to a billion users.
- CIAM
The Future of CIAM: Why Legacy Identity Systems Are Dead (And What Replaces Them)
The CIAM platform that got you to 1 million users won't get you to 10 million AI agents.
- passwordless
Passwordless Authentication in 2026: 5 Methods Compared and How to Roll It Out
Passwords are responsible for 80% of data breaches. Passwordless authentication eliminates the attack surface entirely.
- CIAM
What Is CIAM? A Complete Guide to Customer Identity and Access Management in 2026
CIAM is the system that registers, authenticates, and protects your customers. How it differs from IAM, what it includes, and when to buy one.
- AI (Artificial Intelligence)
Stop Optimizing for Google. Start Optimizing for AI That Actually Answers Questions.
AI answer engines changed the game. It's no longer about ranking #1, it's about being cited in AI-generated responses.
- Machine Identity
The Identity Crisis No One's Talking About: How AI Agents and Vibe Coding Are Rewriting the Rules of Digital Security
Your IAM strategy is obsolete. Organizations now manage 96 machine identities per human, AI agents make autonomous decisions at scale, and 45% of
- AI (Artificial Intelligence)
MCP, RAG, and ACP: A Comparative Analysis in Artificial Intelligence
Discover how three emerging AI protocols are reshaping future of technology. This analysis reveals how MCP, RAG, and ACP can be strategically combined to
Recently published
What landed on the blog this past week.
· CIAMCIAM Observability: The Metrics Nobody Tracks
Vendor log retention ends months before the average breach is discovered. The funnel, security, and silent-failure metrics every CIAM deployment should have, and the seven-panel dashboard to start with.
· AI SecurityYour AI Agent Has No Idea Who Authorized It
Model providers solved the machine half of agent authentication in 2026. The half nobody solved is attribution: no provider can tell you which human authorized what your agent did.
· AI SecurityZero Data Retention: What Every AI Provider Actually Promises You
Zero data retention is not a setting, it is a contract term with a scope. The gap between what founders think ZDR covers and what it contractually covers is wide enough to fail an enterprise review.
Predictions & Postmortems
Two opinionated portals. Predictions worth betting on, and obituaries for the technology that defined us.
Passwordless Everything by 2030
Prediction · 2030By 2030, no top-1000 consumer app accepts a password as a primary factor. The 60-year-old interaction model is over.
Ten verifiable bets on what comes next
10 predictionsConcrete predictions with timelines and disruption scores. Each has a falsifiable first-signal evidence trail.
The Password (1961 to Dying)
ObituaryBorn at MIT in 1961, killed by passkeys in 2024. The autopsy of the most successful bad idea in computing history.
Ten obituaries for technologies that died
10 obituariesEach one tells the story of what killed it, what it took with it, and what we should have known earlier.
Go deeper
Research pillars for the landscape, guides for actually building it, a reference for getting cited by AI search, and opinionated tool comparisons for the shortlist. Pick the depth that matches the question.
- ResearchPillar · 13 min
The AI Security Stack of 2026
The five layers of AI security (Governance, Red Teaming, MLSecOps, Threat Detection, Agentic Defense) and what to build first.
Read more - ResearchPillar · 16 min
Application Security 101
SAST, DAST, IAST, ASPM, SCA: how the modern AppSec stack actually fits together and where to start.
Read more - GuidesHow-to · 9 min
Add SSO to Your B2B SaaS (and Escape the SSO Tax)
SAML vs OIDC, the reference architecture, build vs buy, multi-tenant modeling, and how to price SSO without the tax.
Read more - GuidesExplainer · 8 min
OAuth 2.0 vs OIDC vs SAML
Authorization vs authentication vs federation, the four token types, and a one-screen decision table for which to use.
Read more - GEO CompassFoundations · 12 min
AEO vs GEO: What Actually Differs
Your company is missing from ChatGPT answers and you cannot tell which discipline fixes it. Two foundations, two sets of KPIs, spelled out.
Read more - GEO Compass21 platforms scored
21 AI Visibility Platforms, One Rubric
Every AI citation-tracking tool scored on the same five dimensions, so you can tell what a platform measures before you pay for it.
Read more - Tools10 vendors compared
Top 10 PAM Solutions for 2026
CyberArk, Delinea, BeyondTrust, and the rest. Enterprise privileged access management compared with honest weaknesses.
Read more - Tools5 platforms compared
Top 5 SASE Platforms for 2026
Zscaler, Palo Alto, Netskope, Cato, Cisco. Converged SD-WAN + Zero Trust security from one cloud edge.
Read more - E-bookFree · No email gate
The AI Search Visibility Guide
How AEO and GEO actually work, what AI engines reward, and the playbook to get your company cited by ChatGPT, Perplexity, Claude, and Gemini.
Read more
Free security & privacy tools
Interactive tools I built and use myself, for data-broker exposure, passwords, and cryptographic hashing. Each one runs entirely in your browser: nothing leaves your device, no signup, no tracking.
- PrivacyFree
Data exposure check
An honest, browser-only read of your data-broker exposure, with a real opt-out plan. No data leaves your device, no signup.
Open tool - PrivacyFree
Password strength & breach check
Check a password's real entropy and crack time, and whether it has leaked in known breaches, all in your browser. Your password never leaves the device.
Open tool - PasswordsFree
AI password generator
Generate strong, memorable passwords with entropy hints. Runs in your browser, no tracking, no signup.
Open tool
Discover more
Four more directories worth a slow browse.
- Podcasts
A directory with opinions
Hand-curated technology, AI, cybersecurity, and B2B SaaS podcasts. Every show has a real editorial take. No SEO chaff.
Browse podcasts - Books
An editorial reading list
What each book actually teaches, who it's for, and who it isn't. Curated, not algorithmic.
Browse books - Identity Map
Which identity category is this vendor even in?
Fourteen branches from workforce IAM through IGA, PAM, CIAM, machine identity, and verification, with 255 vendors placed where they actually fit.
Browse identity map - Startup Offers
Founder-only credits & discounts
The mapped directory of every major startup credit program, with stage gates and application sequences that actually work.
Browse startup offers