All Posts

As much as everyone loves to authenticate over and over again when trying to do work online, there are times when you just want to say "enough is enough - I've authenticated multiple times and I'm not going to authenticate anymore!" and it's my professional opinion that this is a reasonable position to take. After all, what good is it to have a strong security posture on your platform if nobody wants to use it because you've made it too secure? And what better way to drive aw

"AI agents should be governed as identities" This has been the refrain from IAM vendors in recent months, and on the surface it makes complete sense. We need to treat AI agents as first-class identities with a clear understanding of what they are capable of doing and in which of our systems they are operating, while maintaining a clear audit trail of not only what they are doing but also who they are doing it for. But how do we do that? Is there a set of tools we can use to a