Serval Launches Program to Transform Employees Into Future Founders
Serval start challenges traditional career paths and retention strategies for startups.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,748 matching stories — in Identity & Access Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Our approach to hiring: fewer, better, every time
Hiring is the single highest-leverage thing we do at Serval. Every person we bring on either raises the bar or lowers it, so we treat hiring the way we treat…
Consolidating IAM without disruption
Breaking up with your identity provider(s) doesn't have to be painful.
Your business runs on credentials IT did not provision
Right now, in one of your employee's personal vaults, there's a login for a vendor portal your team has been using for three years. Whoever set it up no longer works at the company. The password has never been rotated. And until today, you didn't know it existed.That credential was created outside your systems, became essential to a business workflow, and went invisible. Every organization has hundreds like it: break-glass accounts copied into multiple vaults as a precaution, contractor logins t
Secure developer secrets with 1Password
No developer wants to be responsible for causing a catastrophic breach. But security best practices are often incompatible with the expectation that developers constantly write and ship code, and that velocity is massively accelerating thanks to AI adoption. Developers trying to work fast need convenience, but the easiest place to put a developer secret can sometimes be the riskiest place to leave it. For many developers, that place is a local .env file: fast, familiar, and supported by the tool
Introducing 1Password Privileged Access: Zero standing privileges for every identity
Here's a moment that comes up in nearly every compliance review: a security engineer pulls a list of IAM roles in the AWS environment. The list is long. Some roles were created for a migration project that closed two quarters ago, a few belong to contractors who haven't worked there in over a year, and others are attached to agentic identities without any way to see which human they were acting on behalf of. There's no ticket to clean them up, no alert when the access outlived its purpose, and n
Runtime Authorization for Agentic AI: Fixing the Three Breakpoints in Legacy IAM
This is a webinar recap featuring Ken Huang, Co-chair, AI Safety Working Group, Cloud Security… The post Runtime Authorization for Agentic AI: Fixing the Three Breakpoints in Legacy IAM appeared first on PlainID.
Introducing the SpiceDB Playground Assistant
We've added an AI assistant to the SpiceDB Playground. It writes and edits your schema, generates relationship data and assertions to test it, runs permission checks, and explains exactly why a check was granted or denied.
Shadow AI: How to Discover and Govern Unsanctioned AI
Shadow AI is any AI tool, agent, or MCP server running without approval or an owner. Learn where it hides, why DLP and EDR miss it, and how to govern it.
How SpiceDB Secures Authorization for AI
AI agents don't make authorization decisions. SpiceDB does. Here's how relationship graphs, consistency guarantees, caveats, and explicit delegation keep every agent action provably scoped.
Introducing shadow AI discovery: find the AI you didn't sanction
C1's shadow AI discovery helps security teams find unsanctioned AI tools, AI agents, MCP servers, and exposed credentials across cloud and endpoints, then assign ownership and govern them.
Our 3 takeaways from the 2026 Gartner® Hype Cycle™ for Digital Identity
The Gartner® 2026 Hype Cycle™ for Digital Identity explains how “The digital identity landscape is being transformed by AI agents, identity visibility and identity threats. Cybersecurity leaders should use this Hype Cycle to foster innovation and investment to securely enable an adaptable digital business.” In our opinion, this year’s report spans the full range—from emerging […]The post Our 3 takeaways from the 2026 Gartner® Hype Cycle™ for Digital Identity appeared first on Silverf
SAP IDM Replacement Is a Governance Decision, Not a Migration
Key Takeaways SAP Identity Management 8.0 mainstream maintenance ends December 31, 2027, and SAP will not release a successor product. Extended maintenance is available until 2030 but is a bridge, not a long-term architecture. A like-for-like SAP IDM replacement replicates the same governance gaps the old platform always had. The migration is an opportunity to close them, not preserve them. SAP Cloud Identity Services covers the SAP ecosystem. Microsoft Entra ID covers enterprise federation. Nei
Infographic: The State of AI Agent Identity Security
AI agents are accessing sensitive systems and data, often through persistent credentials that organizations cannot fully track or control. The post Infographic: The State of AI Agent Identity Security appeared first on Akeyless.
IAM and PAM Integration Strategies
Financial services organizations operate under constant audit scrutiny, regulatory pressure, and the expectation of operational control at scale. Most have invested in both identity and access management (IAM) and privileged access management (PAM). But many still manage these as separate domains. That separation creates gaps. IAM governs who should have access. PAM governs how elevated access is used. When these systems do not connect, policy enforcement becomes inconsistent. Audit eviden
Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach
The post Ungoverned, Unmanaged, Unstoppable AI Agent Causes Data Breach appeared first on RSA.
The EU AI Act Raises Many Questions: What Does It Mean for Your AI Agents?
This deadline debate is consuming boardrooms right now. Legal teams have spent months tracking the EU AI Act’s amendment packages […] The post The EU AI Act Raises Many Questions: What Does It Mean for Your AI Agents? appeared first on JumpCloud.
You have Keycloak. What authorization capabilities do you still need?
Keycloak authentication and Keycloak SSO handle identity well. Authorization at scale is a different problem. Here's where the gap appears and how to fix it.
Why Single-Platform IT Environments Are Scaling AI Faster
Struggling to scale AI? Discover why a single-platform IT environment reduces complexity, boosts governance, and speeds up your AI deployment. The post Why Single-Platform IT Environments Are Scaling AI Faster appeared first on JumpCloud.
The Auto-Delete Problem: Why Email Archiving Needs Clear Rules
Businesses often notice weak email archiving rules only after auto-delete removes the message they need to prove what was agreed. For SME owners, operations managers, finance leads and compliance-conscious decision-makers, that makes missing email records a business problem, not an inbox clean-up task. Auto-delete clears clutter. It can also remove the message trail a business later needs to prove what happened. You need clear rules on what you keep, how long you keep it, who retrieves it and wh
What the Five Eyes AI Cyber Guidance Means for Modern PAM | Saviynt
The Five Eyes AI cyber guidance frames AI-accelerated cyber risk as a reason to strengthen foundational controls. Privileged access deserves close review because standing privileges leave powerful access available before it is needed and after the work is done. Modern PAM helps reduce that risk by removing persistent access, enforcing just-in-time privilege, and governing privileged access across human, non-human, cloud, and AI-connected identities. That requires treating privilege as a spectrum
CCPA Update: Cybersecurity Requirements (Part 2)
Confirmed you're in scope for CCPA? Now comes the cybersecurity audit requirement. In Part 2 of this blog series, we cover what it entails, the phased timeline, and the penalties for non-compliance.
Hugging Face security incident explained: The rise of autonomous AI-powered attacks
This week’s news on the OpenAI/Hugging Face security incident marks a pivotal moment in cybersecurity: it’s the first time that a fully autonomous attack chain—without a human in the loop for command-and-control decision-making—has been observed. We’ve been observing this trend for at least the last year: LLMs are increasingly capable of running advanced attack chains […]The post Hugging Face security incident explained: The rise of autonomous AI-powered attacks appeared first
Teams running Vulnerability Response patch critical CVEs in half the time
We recently measured remediation behavior across anonymized customer fleets. Customer accounts running Vulnerability Response closed more of their critical vulnerabilities, and closed them faster. The pattern held across every customer cohort.
The 10 Most Dangerous SAP Access Conflicts in Manufacturing
Key Takeaways These 10 SAP SoD conflicts in manufacturing represent the highest fraud and compliance risk in any SAP environment. Each allows a single user to initiate and complete a financially or operationally sensitive transaction without independent oversight. Cross-functional combinations — where access spans two separate business processes — are the hardest to detect and the most likely to appear in audit findings. Finding a conflict is only the first step; the control objective is to prev
Passkeys Are Not Completely Secure (After All) Without Dedicated Biometric Hardware
Passkeys have been promoted as the future of authentication because they replace passwords with cryptographic credentials that are resistant to traditional phishing. That is a significant improvement. A properly implemented passkey cannot simply be copied from a fake login page and replayed against the legitimate service. But a new campaign targeting Microsoft Entra users exposes an important limitation. Passkey cryptography may be strong, while the process used to enroll a new passkey can still
Why BSI Approval for Thales Luna 7 HSM Matters Beyond Government
Why BSI Approval for Thales Luna 7 HSM Matters Beyond Government josh.pearson@t… Thu, 07/23/2026 - 17:11 Trust is the foundation of modern cryptography. Every encrypted transaction, digital signature, authentication request, and secure communication depends on one thing: the protection of cryptographic keys. That is why independent validation matters. The Thales Luna 7 Network Hardware Security Module (HSM) has now been approved by Germany's Federal Office for Information Security (BSI) for use
Why AI Agents Require Identity Governance | Saviynt
The ratio of human to non-human identities in modern enterprises has reached a staggering 1:82.1 For every employee, contractor, or partner, there are now dozens (if not hundreds) of machine identities, service accounts, API keys, and autonomous AI agents operating across production environments.
The OpenAI agent did not go rogue. It ran out of authorization boundaries.
If you are running agents in evaluation, production, or anywhere in between, do not only ask whether the model will stay inside its sandbox. Ask whether your identity and authorization controls can stop the model after it finds a way out. The post The OpenAI agent did not go rogue. It ran out of authorization boundaries. appeared first on P0 Security.
Identity Governance in Healthcare: The Clinical Application Blind Spot
The systems most likely to create risk are the ones your identity program cannot see.  Most healthcare identity programs look healthy on the dashboard. Joiner, mover, and leaver events flow through the identity governance platform. Access reviews get scheduled. Certifications close on time. The applications connected to the platform are governed with real discipline.  The
The Most Interesting Part of the CMMC Pause Wasn’t the Announcement
The post The Most Interesting Part of the CMMC Pause Wasn’t the Announcement appeared first on Exostar.
Agentic IAM: Secure Every Identity. Human or Not.
Your identity infrastructure wasn’t built for AI agents. It was designed for people: employees who go through onboarding, get assigned […] The post Agentic IAM: Secure Every Identity. Human or Not. appeared first on JumpCloud.
CISA’s New Zero Trust Guidance Makes One Thing Clear: Identity Must Be Certain
CISA’s new report, The Journey to Zero Trust Using Secure Access Service Edge in a Modern TIC 3.0 Solution, is an important signal for every enterprise security leader. The federal government is moving away from the old perimeter security model. The model where you route every user through a VPN, inspect traffic at a central choke point, and assume that once someone successfully logs in, they can be trusted. That model no longer matches reality.
AI Agent Identity: What Traditional IAM Doesn't Cover
AI agent identity governs autonomous agents as non-human identities with an owner, least-privilege access, and audit. Learn what traditional IAM misses.
Top 5 Ways to Offboard SaaS Apps (And Fix the “Enterprise Tax” Security Gap)
The post Top 5 Ways to Offboard SaaS Apps (And Fix the “Enterprise Tax” Security Gap) appeared first on Unixi.
When Software Acts on Behalf of Users, Who’s Really in Control?
The post When Software Acts on Behalf of Users, Who’s Really in Control? appeared first on PlainID.
Try it before you trust it: Meet the Devolutions on-demand Lab
Meet the Devolutions Lab: a free, self-service, on-demand environment where you can explore Remote Desktop Manager and Privileged Access Management hands-on, right in your browser.
CCPA Update: Who’s In Scope (Part 1)
California updated CCPA... again. Before you do anything else, does it apply to you? In Part 1 of this blog series, we clarify who falls under scope, what data is covered, and how enforcement works.
The EU AI Act: what it is, how to prepare and where to learn more
The EU AI Act's high-risk deadlines just moved. Here's what stayed, what changed and what to do now.
Managed doesn’t mean secure
Discover why "managed" doesn't mean "secure." See where MDM-only environments leave blind spots and how integrating endpoint security closes them.