Research and guides on identity security
Blog posts, research, guides and news on AI agent and NHI security.
Featured
BlogSeptember 2, 2026
Your SOC Cannot Close an Identity Alert Without the IAM Team
An identity alert gives an analyst a name and almost nothing else. Every question that decides whether it matters lives in another team's system.
Read more
BlogAugust 13, 2026
Build Your Identity System of Record
Sales has the CRM and finance has the general ledger. Ask an identity team where the identities live and you get a list of systems, with no record underneath.
Read more
Blog
BlogOctober 2, 2026
Whatever You Call an AI Agent, It Runs as an Identity
Every team defines AI agents differently, but every agent runs as an identity with access. That identity can be inventoried, given an owner and governed like any other account.
Read more
BlogSeptember 29, 2026
The MTTR Clock Starts Too Late
In an identity-originated incident the causal event is an authorization change made months before any sensor fires. MTTR starts at detection, so it leaves out the only interval in which the incident was still preventable.
Read more
BlogSeptember 28, 2026
The Missing Context Layer in Identity
Access changes between the systems that approve it and the systems that watch for misuse. An identity system of record that keeps the grant history of every human, non-human and AI agent account is the context layer that fills that middle.
Read more
BlogSeptember 17, 2026
Incident Response Is Paying for Identity Data Now
Identity spend competes with other identity spend and loses. The answers that stall an investigation are identity answers, and IR is measured on them.
Read more
BlogSeptember 14, 2026
Why One Identity Question Takes Two Days to Answer
Identity answers get assembled by hand while the clock runs. Audit preparation stalls on the same three questions, and DORA measures the deadline in hours.
Read more
BlogSeptember 9, 2026
Why Access Reviews at Banks Fail an Audit
Banks have the most mature identity governance deployments of any industry, and their auditors still come back saying the list of accounts is incomplete.
Read more
See Hydden on your own identities
Request a trial, or talk to the team about AI agent and NHI security.