Skip to main content

Voices of the Identity Underground | Blog

Share your voice. Shape the conversation.

Insights, perspectives, and real-world lessons from members of The Identity Underground, rising out from the underground to move the discipline of identity security forward.

Featured post
Industry & Innovation

The Signal Fabric: A Reference Architecture for Continuous Authorization

Sahil Mukhija
Staff Security Engineer
CVS Health
Read here
Identity in Depth

The Missing Feedback Loop in AI Agent Authorization

Discover how the OpenID Shared Signals Framework turns runtime anomalies into risk scores that can lock an agent out in real time.
Vatsal Gupta
Senior Security Engineer - Account Security
Apple
Read here
Identity in Depth

AI Agents and the Authorization Gap: Why Static Permissions Don't Work

Static service accounts give AI agents fixed permissions that don't match how they actually behave in production. That's why authorization needs to move to the tool-call level using AuthZEN.
Vatsal Gupta
Senior Security Engineer - Account Security
Apple
Read here
Executive Summary

Detection Now Arrives After the Attack is Over

The latest meetings with The Identity Underground members unpack Mythos and frontier AI models.
The Identity Underground Team
The Identity Underground
Read here
Executive Summary

The Agent You Authorized is Not the Agent Running Today

The latest meetings with The Identity Underground members unpack not what an agent is, but whether anyone can see what it has become.
The Identity Underground Team
The Identity Underground
Read here
Industry & Innovation

Why "Who" Is No Longer Enough: Building a Governance Framework for AI Agents

Traditional IAM answers "who" but AI agents need governance for "why," too, and most frameworks don't yet have an answer.
Angelika Steinacker
Former CTO & IAM Advisor
Hari Hayagreevan
Lead Architect and Technical Leader - AI Security
IBM
Read here
Industry & Innovation

Real-Time Identity Governance: Moving Beyond Periodic Access Reviews

Identity risk changes every day. Most governance still runs on a calendar.
Sunnykumar Kamani
Lead Software Developer
Caterpillar Inc.
Read here
Industry & Innovation

Where Did All the Entitlements Go?

When authorization moves out of applications, governance must follow.
Buzz Woeckener
Former Director Identity Security
Nationwide
Read here
Industry & Innovation

Passkeys in Practice: Synced Convenience vs Hardware-Backed Assurance?

Debayan Basu
Principal Engineer, Authentication Services
Genuine Parts Company
Read here
Industry & Innovation

The Agentic Paradox: Why Your 10-Year-Old Security Stack Is an Open Door

Sushant Chowdhary
Cybersecurity Leader | IAM Expert
Read here
Identity in Depth

You Already Have the Pieces. Now Build It.

Stitching existing standards into end-to-end assurance for agentic identity
Sean (O’Dentity) O'Dell
Distinguished Engineer, Identity and Security
CVS Health
Read here
Executive Summary

When agents start reasoning, enforcement must start running

The Identity Underground Team
The Identity Underground
Read here

The Identity Underground

An exclusive network driving the future of identity security

Join The Network