
State of CIAM 2026: 14 Trends from 200+ Vendor Changelogs
An annual research piece based on 12 months of monitoring 200+ CIAM vendor changelogs. The 14 trends shaping customer identity in 2026 and the vendors leading each shift.
Writing
Page 4 of 22.

An annual research piece based on 12 months of monitoring 200+ CIAM vendor changelogs. The 14 trends shaping customer identity in 2026 and the vendors leading each shift.

Google's Knowledge Graph is the entity layer beneath AI Overviews, ChatGPT, and Perplexity. Here is the exact playbook for becoming a recognized, citable entity, and how AEO and GEO build on top of it.

Most "use bcrypt" posts are from 2014. Argon2 won the Password Hashing Competition in 2015 and nobody updated. Here is the actual 2026 decision framework for picking a password hashing algorithm.

Founders apply for credits in random order and get rejected because they tripped a referral-required gate they could have unlocked first. Here is the sequence that unlocks $250k+ in 90 days.

The five CIAM contenders in 2026 don't compete head-on. Each wins for a different stage and buyer. Here's the framework I use, with the honest tradeoffs each carries.

Your ISP logs every site you visit through unencrypted DNS lookups. Three free tools (Cloudflare 1.1.1.1, Google 8.8.8.8, Apple Private Relay) fix most of it. Here's how each one works and what it can't do.

I tracked 50,000 citations across ChatGPT Search, Perplexity, Claude, Gemini, Google AI Overviews, and Bing Copilot for 90 days. What actually moved citation share, and what didn't.

A founder's practical travel security checklist for 2026: realistic threats, what to actually do before, during, and after a trip, and where to skip the paranoia.

A founder's guide to the difference between authentication and authorization in 2026, with passkeys, agent auth, JWT pitfalls, and the mistakes I see at scale.

Most GEO buying decisions start with the wrong question: which tool monitors the most AI platforms. Here is a practical checklist for evaluating whether a GEO solution actually fits your industry.

How to build a cybersecurity product roadmap that survives AI security, compliance deadlines, and threat-driven emergencies. A founder's four-lane framework.

Security buyers research vendors in AI tools before a sales rep ever hears from them. The way a CISO interrogates ChatGPT looks nothing like how a marketer does. Here is what GEO actually looks like for cybersecurity.

Building software just got 10x easier with AI. That breaks most of the 2015 SaaS playbook. Here are the new hard truths every SaaS founder needs to see clearly.

SEO became a horizontal layer because its substrate was uniform: one ranking algorithm, one signal set, one results format. GEO can't collapse that way. Here is the architectural reason.

The ten skills that actually move the needle for tech founders, from a CIAM founder who scaled to a billion users and is now building in AI security.

An honest practitioner's view of AI-assisted software development in 2026: what Cursor, Claude Code, Copilot, and Devin actually do well, and where they still break.

A categorised, founder-curated list of 44 cybersecurity YouTube channels organised by what you actually want to learn: offense, defence, bug bounty, certs, careers.

Google I/O 2026 shipped an entire agent stack: Gemini 3.5 Flash, Antigravity 2.0, WebMCP, Gemini Spark, and Agent Payments Protocol. What it means for builders.

A curated, categorised guide to 30 search engines that security researchers actually use: Shodan, Censys, Dehashed, ExploitDB, and the rest.

First time on the SaaStr stage. 12, 500 founders and operators. One message: if your company isn't showing up in ChatGPT, Perplexity, and Google AI

Per-seat pricing made sense when software was a tool. When software becomes the labor, the math breaks.

I spent ten years engineering, scaling, and defending password-based authentication for a CIAM platform that grew to a billion users.

AI generates code faster than humans can review it. So why are computer science enrollments hitting record highs?

Every headline put the 19 billion figure in 60-point type. Almost none of them mentioned that the unique entry rate is in the single digits.

Traditional marketing metrics are becoming less predictive of pipeline as buyers shift to AI-powered research.

A buyer-journey-mapped framework for cybersecurity vendors to win Answer Engine Optimization.

The cybersecurity industry's reliance on gated PDFs and MQL-driven content is actively destroying future pipeline by making the best content invisible to

We cancelled Auth0 over a year ago. Not because it stopped working, but because scaling to 350,000 monthly active users made the pricing model untenable.

No single organization can defend against AI-powered attacks alone. Project Glasswing's $100M consortium model may be the template for the next decade of

The opinionated guide to running Claude Code well. CLAUDE.md, skills, subagents, hooks, and the workflows that produce quality code for engineers, QA, and