Insights
Research, analysis, and hard-won perspective from the engineers and architects securing federal and enterprise environments.
Non-Human Identity
Attackers don't break in — they log in. Service accounts, OAuth tokens, and API keys are full of credentials that work, with no MFA to bypass and no user to notice. The second in a series on the workforce you never onboarded.
Jim Walker
June 25, 2026
Post-Quantum Cryptography
On June 22, 2026, the White House signed two executive orders on the same day — one to defend against quantum attacks, one to win the quantum race. Read together, the message is hard to miss: the quantum era isn't something we're preparing for. It's here.
Jim Walker
June 24, 2026
Non-Human Identity
For every person on your org chart, somewhere between 45 and 144 non-human identities are already operating inside your environment — unhired, unbadged, and largely unwatched. The first in a series on the workforce you never onboarded.
Jim Walker
June 17, 2026
AI Governance
USB-C ended the drawer of proprietary chargers; the Model Context Protocol is doing the same for AI-agent integration. For Federal Zero Trust environments, MCP is fast becoming the standard for agents that must act, not just chat.
Jim Walker
October 16, 2025
Identity Security
OWASP's Top 10 Non-Human Identity Risks for 2025 is a wake-up call — 46% of organizations suffered an NHI compromise this past year. Why machine-identity governance, not human IAM, is now Zero Trust's hardest problem.
Jim Walker
August 11, 2025
Identity Security
For decades, IAM strategy has centered on SSO and IGA while the enterprise directory was treated as static infrastructure. Why a modern, centralized directory — not an overloaded IGA — is the identity backbone Zero Trust demands.
Christian Barbieri
April 7, 2025
AI Governance
As organizations deploy AI agents to automate critical processes, their integrity depends on robust data management and monitoring. A leader's guide to governance, drift, security, and compliance.
Jim Walker
February 27, 2025
Artificial Intelligence
AI agents are automating tasks, sharpening decisions, and reshaping how enterprises operate. A practical guide to deploying them securely — covering digital identity, governance, PAM/PKI, human feedback loops, and risk mitigation.
Jim Walker
February 10, 2025
AI Governance
AI agents are becoming operational contributors with real access to sensitive systems. Treating them like employees — with identity governance, entitlement management, and privileged access controls — is how leaders integrate them securely.
Jim Walker
January 27, 2025
AI Governance
AI now controls sensitive enterprise operations as a privileged, non-human identity. Strong governance — combining traditional security principles with AI-specific controls — is how organizations harness its potential while managing the risk.
Jim Walker
January 17, 2025
Identity Security
Passwords, API keys, certificates, and tokens are multiplying faster than most organizations can manage them. Here's how PKI, secure vaults, dynamic secrets, and strong governance make secrets management a cornerstone of Zero Trust.
Jim Walker
January 13, 2025
Identity Security
As organizations move to Zero Trust Architecture, Public Key Infrastructure provides the cryptographic foundation for establishing trust and securing communications — from strong authentication to machine identities.
Jim Walker
January 8, 2025
Post-Quantum Cryptography
A holiday spin on the Clement C. Moore classic, recast for the post-quantum era — where keys live in HSMs, St. Nick drives a quantum-safe sleigh, and Kyber and Dilithium dance through the network.
Jim Walker
December 19, 2024
Post-Quantum Cryptography
Quantum computers will break the encryption protecting your data today. Building an encryption inventory now is the practical first step to mapping your vulnerabilities and migrating to quantum-resistant security.
Jim Walker
November 18, 2024
Post-Quantum Cryptography
NIST's draft IR 8547 lays out the roadmap for federal systems to transition to post-quantum cryptography. Here's what teams managing federal PKI need to know — and why the clock is already ticking.
Jim Walker
November 16, 2024
Post-Quantum Cryptography
Quantum computing threatens to render today's encryption obsolete. Crypto agility — the ability to rapidly adapt your cryptographic systems to emerging threats — is no longer a luxury but an essential security strategy.
Jim Walker
November 12, 2024
Post-Quantum Cryptography
Quantum computing promises revolutionary capabilities — but it could break the classical encryption underpinning our digital world. A look at what Post-Quantum Cryptography is, why it matters, and how organizations can prepare.
Jim Walker
November 4, 2024
Talk to the team behind these insights about your identity, PKI, and Zero Trust challenges.