Tag
All topics →Everything tagged identity.
65 stories, newest first.
Latest
Ten testable predictions for identity and AI security in 2027, from Know Your Agent rules to passkeys at 45% and EU wallet delays, each with a confidence level and a test.
Read the article
Pick a passwordless method per user group with the selection matrix, then ship it with the four-phase implementation checklist. Here is how to use both, grounded in NIST SP 800-63B-4 and WebAuthn Level 3.
The podcast stack I use as an identity founder: several identity shows at the core, Risky Business and Darknet Diaries for news and stories, AI agent identity episodes, founder shows, the six I quit, and how to build your own.
One first listen and one deeper episode for six major breaches: SolarWinds, NotPetya, Log4Shell, MOVEit, Scattered Spider and XZ Utils. Each verified against the show's feed, linked to a primary source, with the identity lessons pulled out.
The identity market consolidated in 2026, from Palo Alto Networks closing CyberArk to four NHI startups changing hands in ten weeks. The Identity Map sorts 255 vendors into 14 branches so buyers pick the right category before they pick a vendor.
A week-by-week security podcast plan for university, bootcamp and self-taught students: one short daily news show, two or three named episodes a week, and a phase on identity, MFA and passkeys. Mapped to Security+, CySA+ and the CISSP.
In 2026, Cisco bought Astrix, SailPoint bought Entro, Okta bought Permiso and Cyera bought Oasis. The Agent Security Map deals ledger tracks all 30 deals with SEC-filed prices and sources, and shows a security buyer how to check a vendor's ownership before the next call.
Model providers solved the machine half of agent authentication in 2026. The half nobody solved is attribution: no provider can tell you which human authorized what your agent did.
Email, AI agents, media files, and build artifacts all got cryptographic verification in 2026. Same architecture, same failure modes, same mistake.
An AI model manufactured fake identities to socially engineer a real maintainer, then edited its tracks when challenged. The request failed. The threat model should not.
Meta's settlement with 51 attorneys general commits at least $12.1 billion, but the money is the survivable part. Every teen safety term in the deal depends on knowing who is under 18, and nobody has solved that yet.
Mandiant ranked voice phishing the second most common initial infection vector of 2025. In the same window, thousands of businesses handed their phone lines to AI agents. Those two facts are related, and the security implications run in both directions.
Your identity stack was architected for humans with browsers and thumbs. Agent traffic breaks consent, delegation, sessions, bot defence and audit at once.
On System Administrator Appreciation Day, appreciation for the people who hold the literal keys to the organization, and why identity work matters more, not less, in the AI era.
Identity vendors rarely die of bankruptcy. They die of acquisition, then neglect, then a shutdown email. A complete history of every dead CIAM vendor, the pattern behind the deaths, and the questions that protect you from the next one.
Eleven sub-portals around the apex blog, each addressing a specific buyer-side pain. What each one is, why it exists, and the reader it serves.
A founder's guide to the difference between authentication and authorization in 2026, with passkeys, agent auth, JWT pitfalls, and the mistakes I see at scale.
I spent ten years engineering, scaling, and defending password-based authentication for a CIAM platform that grew to a billion users.
Every headline put the 19 billion figure in 60-point type. Almost none of them mentioned that the unique entry rate is in the single digits.
CIAM is the system that registers, authenticates, and protects your customers. How it differs from IAM, what it includes, and when to buy one.
An employee saw the CFO on video. Heard colleagues speaking. Authorized $25M in transfers. Every person was an AI-generated deepfake.
The decentralized identity market hits $7.4B in 2026. Every EU member state must deploy a digital identity wallet by year-end.
AT&T's $177M settlement covers 73M customers, but the real story is how breach data from 2019 just resurfaced in 2026 with fully decrypted SSNs. Here's why.
Production authentication patterns for OAuth 2.0, OIDC, JWT, SAML, and WebAuthn, including the build-versus-buy maths and the storage and session decisions that are expensive to reverse later.
Clawdbot is the viral AI assistant everyone's installing, but giving AI agents full system access raises critical security questions.
Authentication requirements block 75-80% of enterprise deals, costing B2B SaaS companies millions annually.
A Comprehensive Technical Guide for CTOs, CISOs, and Identity Architects
Master workplace identity security with our comprehensive 2025 IAM buyers' guide. Explore 25 essential strategies from SSO to Zero Trust, with practical
ADManager Plus, ADAudit Plus, SentinelOne, NinjaOne, and free tools from Netwrix and SolarWinds compared for AD admin, auditing, and security.
Ten identity verification platforms compared on liveness, deepfake and injection defense, coverage and published pricing, plus specialist tools and use cases.
Your IAM strategy is obsolete. Organizations now manage 96 machine identities per human, AI agents make autonomous decisions at scale, and 45% of
Ten RSA SecurID alternatives with September 2026 pricing, where RSA ID Plus fits, and how to migrate off Authentication Manager.
Azure AD is now Microsoft Entra ID. Compare Okta, JumpCloud, Ping Identity, Google Cloud Identity, Keycloak and more, with Entra ID P1/P2 pricing verified.
Ten fraud detection platforms compared on chargeback guarantees, identity signals, AI-agent defense and published pricing. Verified September 2026.
Eight tools that stop account takeover, compared on phishing-resistant MFA, session protection, email defense and privileged access.
Ten identity lifecycle platforms compared on HR-driven joiner mover leaver automation, SCIM, non-human identities and pricing. Verified September 2026.
IGA platforms compared on access certifications, separation of duties, role management and AI agent governance, with verified pricing and 2026 market changes.
Which cloud directory should you pick? JumpCloud, Entra ID (formerly Azure AD), Okta, Google Cloud Identity and four more, compared on protocols, devices, and price.
70% of Americans feel overwhelmed by passwords, yet only half choose secure ones despite knowing the risks.
Age assurance vendors compared on independent certification, estimation accuracy and published pricing, plus the laws in force in September 2026.
Best KYB solutions compared: who to pick for US-only or global business onboarding, UBO discovery, and the 2026 FinCEN BOI and EU AMLR changes.
Ten KYC platforms compared on verification, AML screening and verified pricing, plus a vendor-neutral framework for evaluating them.
Protect against identity-based attacks with the top 5 ITDR solutions. From Microsoft Defender to Semperis DSP, discover platforms that detect compromised
Decentralized identity platforms compared on W3C and OpenID standards support, mobile driver's licence work, eIDAS 2 readiness and real pricing.
Authentication migrations fail 40% of the time, costing millions in downtime. Learn the strategies security leaders use to avoid disaster, choose the
Which IAM platform fits your organization? 21 workforce platforms compared with verified 2026 pricing, the year's acquisitions, and newer entrants to watch.
Most companies are creating massive security blind spots by forcing AI agents into human identity systems.
Confused by the growing identity management landscape? This comprehensive guide breaks down every IAM category, from traditional workforce identity to
The identity industry faces its biggest shift yet: machines now outnumber humans 90:1 in digital systems.
IASM discovers every identity in your estate, maps what each can reach, and closes the paths attackers use. How it relates to ITDR, ISPM, CIEM and NHI security.
Learn how verifiable credentials using tamper-proof cryptographic signatures are transforming digital identity - enabling convenient access controls,
In the battle of the old vs. the new, it is evident that traditional identity and access management (IAM) solutions are gradually getting phased out by
To verify the identity of clients, many security-minded organisations use multi-factor authentication.
Identity as a Service is the cloud-delivered form of IAM. What IDaaS includes, why companies pick it, and how to evaluate the major platforms.
Identity Governance and Administration is the policy and audit layer on top of IAM. Why every mid-sized organization now needs it and what to evaluate.
Forward-looking businesses are using artificial intelligence to solve real-world digital identity challenges.
Enterprises need to use methods to maximize the use of digital identities for multiple users.
Introduction This is a monumental reference for the theory and practice of computer security.
An identity provider centralises authentication for every app you run. Here is what it does and why it is one of the highest-ROI infrastructure investments.
The Internet of Things (IoT) is creating an exciting new world of new and improved experiences for all.
Broken authentication is one of the most common and most damaging classes of web vulnerability. Here is how it happens and how to stop it.
IAM is the discipline of giving the right people the right access and proving it after the fact. Concepts, controls, and how to design a modern program.
In the previous article (Guide to Digital Identity-Part 1 [https://medium.com/@dip_ak/guide-to-digital-identity-part-1-4b7c8fe45ee1]), we talked about the
The concept of human identity stretches back thousands of years into unrecorded history.
Social login still has a place, but it is no longer the front door. A practitioner's view on when to use it, how to harden it, and what is replacing it.
