All things IAM
Enterprise security frameworks have long operated on a fundamental assumption: identity is tied to individual people or, at most, service accounts running under human-assigned roles. These models worked because access…
For nearly two decades, identity and access management systems were designed around a single model: human users authenticating to request resources. But the rapid deployment of AI agents into enterprise…
Identity and access management systems have operated under a fundamental assumption for decades: the entities requiring access are human. They log in during working hours, follow organisational hierarchies, and respect…
Microsoft’s Entra Identity Platform represents one of the first significant efforts by a major cloud provider to explicitly extend identity governance infrastructure to accommodate AI agents and non-human identities. The…
Machine identity management—the governance of certificates, keys, and credentials used by non-human systems, services, and AI agents—has emerged as one of the highest-leverage security problems in modern enterprise infrastructure. Yet…
Mergers and acquisitions in the identity and access management (IAM) space have always been indicators of where the security market perceives the highest-value problems. When large enterprises acquire smaller specialist…
The identity access management (IAM) industry has spent two decades optimising for a world where identity requests arrive at human timescales. A user logs in, makes a request, and—hours or…
Mergers and acquisitions in the identity and access management space have long tracked the evolution of security threats and organisational priorities. Over the past decade, M&A activity in IAM has…
Microsoft’s ongoing enhancements to Entra (formerly Azure AD) represent a significant market signal: major platform providers are beginning to treat agentic identity as a first-class governance problem rather than a…
Public Key Infrastructure (PKI) is foundational to cryptographic security — it’s how systems establish trust, authenticate identities, and secure communications. For human users, PKI is primarily invisible: a certificate bundled…
Biometric security research has consistently documented a gap between how human users operate and how AI agents function within enterprise systems. That gap is widening, and it reveals a critical…
Identity and access management (IAM) systems were architected around a fundamental assumption: that principals requesting access are human users operating during business hours, following documented workflows, and maintaining relatively stable…