KuppingerCole Analysts

In a groundbreaking move, Palo Alto targets a $25 billion acquisition of CyberArk, poised to reshape identity security landscapes. As two cybersecurity giants converge, explore this narrative of strategic synergy versus the challenge of seamless integration. With potential market upheaval at stake, the acquisition promises to redefine the rules of identity security. Read the original blog post here: https://www.kuppingercole.com/blog/leal/palo-alto-cyberark-a-strategic-expansion-into-identity-security-but-with-questions

In this episode of the KuppingerCole Analyst Chat, host Matthias Reinwarth welcomes Martin Kuppinger, Founder and Principal Analyst at KuppingerCole, to discuss the evolution of the Identity Fabric. Originally introduced as a visual tool in 2017–2018, the Identity Fabric has matured into a foundational framework for modern identity and access management. The conversation covers the motivations behind its creation, its flexibility in addressing various identity types, and its role in simplifying complex IAM architectures. Martin also explains the rationale for a leaner version of the model, aimed at executive stakeholders, and offers a glimpse into the forward-looking Identity Fabric for the 2040s. In this episode, you’ll learn:✅Where the Identity Fabric concept began✅Why a leaner version is needed — and who it’s for✅How to pitch Identity Fabric to C-level decision makers✅What the 2040s might look like for IAM✅How organizations and vendors alike are using this model today Whether you're deep in IAM or just starting to align your strategy, this episode breaks down how to communicate complex identity concepts more clearly.

In this episode, Matthias Reinwarth is joined by Alejandro Leal, Senior Analyst at KuppingerCole Analysts, to discuss the strategic shift toward Identity Fabrics in modern IAM. Alejandro outlines the challenges posed by fragmented IAM architectures and the growing diversity of digital identities. The conversation explores how the Identity Fabric model enables organizations to build cohesive, adaptive identity infrastructures that integrate existing tools while providing observability and actionable insights. They also examine the importance of integration, modularity, and policy enforcement across identity silos. The episode concludes with practical steps for building a future-proof IAM strategy. We dive into: Why traditional IAM is failing What Identity Fabric really means (and what it’s not) How it supports every identity type — human or machine The critical role of observability & actionable insights How to balance legacy tools with agile innovation Where to start your implementation — without a big bang Identity is now a strategic business function — and Identity Fabric is how to operationalize it.

In this must-listen episode of the KuppingerCole Analyst Chat, Matthias Reinwarth is joined by Jonathan Care to explore a groundbreaking shift in cybersecurity leadership. Discover how CISOs are transforming from traditional gatekeepers, the infamous "Dr. No", into strategic business enablers through the principles of Servant Leadership. We dive deep into: Why the CISO role is evolving beyond technology and policy The pitfalls of autocratic security leadership and rising burnout How empowering teams builds trust, reduces shadow IT, and accelerates projects Real-world examples from global organizations proving this approach works Practical first steps for CISOs to start leading through influence, not fear Key Takeaway: Security isn’t just about tech, it’s about people and culture. Servant leadership helps build stronger security and stronger businesses.

As non-human identities outpace their human counterparts, the need for effective Non-Human Identity (NHI) management is more crucial than ever. Discover why current systems may leave your organization exposed and how a unified governance approach can safeguard against the risks posed by cloud-native development and Agentic AI. Read original blog post here: https://www.kuppingercole.com/events/ifid2025/blog/non-human-identity-management-mature-or-just-getting-started

In this episode of the KuppingerCole Analyst Chat, Matthias Reinwarth sits down with cybersecurity CTO & analyst Alexei Balaganski to explore the dramatic evolution of API management and security. They unpack: Why APIs are now the backbone of AI agents and how MCP (Model Context Protocol) is driving a new decentralized ecosystem. The explosion of shadow APIs & hidden interfaces from your printer to your coffee machine and why they pose serious risks. How edge computing & WebAssembly are decentralizing everything, making old API gateway models obsolete. The critical need for API posture management, identity & access controls for non-human identities, and full lifecycle security even before you write a line of code. Learn why API security isn’t just a tech problem, it’s the next big business risk, how the market is consolidating, and what’s coming in the new Leadership Compass on API Management & Security.

In this episode of the KuppingerCole Analyst Chat, Matthias Reinwarth is joined by Martin Kuppinger to untangle one of the most complex—and increasingly urgent—topics in digital identity: non-human identities (NHIs). With AI agents, workloads, service accounts, and API keys exploding in number, it’s no longer enough to rely on traditional IAM structures. But what is an NHI, exactly? And how can organizations secure them without collapsing under the weight of siloed systems and unmanaged identities? Martin and Matthias explore: The blurry boundaries between identities, accounts, secrets, and credentials Why "non-human" is a problematic but useful term Agentic AI vs. API keys: where identity management really changes Practical starting points for managing NHIs in real-world environments

In this essential episode of the KuppingerCole Analyst Chat, host Matthias Reinwarth welcomes cybersecurity strategist Jonathan Care to explore one of the most pressing challenges CISOs face in 2025: detecting deception in an age of AI-powered attacks. From deepfakes and behavioral manipulation to vendor impersonation and adversarial AI, attackers are no longer relying on simple phishing emails. They're launching highly personalized, deeply technical, and psychologically crafted deceptions. Jonathan presents a structured four-part taxonomy of deception and offers actionable insights for CISOs—from implementing callback verification protocols to deploying behavioral analytics and deception detection technologies. Topics Covered: AI-powered social engineering Digital identity deception & deepfakes Vendor/supply chain impersonation Technical deception & adversarial machine learning Practical steps CISOs can take this week

Discover how Europe plans to reduce its dependency on imported digital technologies through the EuroStack initiative. Learn about strategic proposals for building a resilient, sovereign digital Europe, and uncover the vital roles collaboration and innovation play in achieving long-term economic, social, and environmental resilience in the digital landscape. Read the original blog post here: https://www.kuppingercole.com/blog/leal/notes-from-cybersec-2025-the-eurostack-vision

Organizational identity is no longer optional In this episode of the KuppingerCole Analyst Chat, host Matthias Reinwarth is joined by cybersecurity research director John Tolbert to talk about the rising threats of organizational fraud, rogue merchants, and the growing need for robust identity verification at the business level. Topics covered: What are rogue merchants, and how do they operate? The staggering fraud numbers behind the Paycheck Protection Program (PPP) The importance of Know Your Business (KYB) vs. Know Your Customer (KYC) Why legacy business verification methods are no longer enough How APIs, LEIs, and verifiable digital identities can help The role of CIEM and B2B CIAM in detecting and preventing organizational fraud Whether you're in cybersecurity, compliance, finance, or e-commerce, this episode unpacks how fraud at the organizational level is growing—and what tools and frameworks can stop it.

Unlock vital strategies on how to defend your organization from costly supply chain attacks by ensuring airtight third-party access management, understanding the latest regulatory demands, and implementing cutting-edge IAM solutions that go beyond perimeter defenses. Read the original blog post here: https://www.kuppingercole.com/blog/ashford/third-party-risk-is-the-new-front-door

In this episode, Matthias Reinwarth welcomes KuppingerCole Membership Product Owner Christie Pugh to share her unique perspective on the European Identity and Cloud Conference (EIC) 2025.

Beware the digital impostors! Deepfakes aren't just sci-fi anymore; they're here, and they're a threat to your bank account, your vote, and your trust. Peek behind the curtain of this digital deceit, where emerging technologies fight to expose forgeries and keep our truth intact. Discover the urgent strategies needed to outpace this digital battleground. Read the original blog post here: https://www.kuppingercole.com/blog/celik/what-to-expect-from-deepfake-threats-and-how-likely-are-we-to-develop-effective-detection-tools

Unveiling its European Digital Commitments, Microsoft moves to empower Europe's digital sovereignty! But is it enough to break free from US influence? Explore the balance between innovative data strategies, European partnerships, and the struggle against extraterritorial laws that challenge cloud independence. A riveting journey into the future of cloud sovereignty awaits. Read the original blog post here: https://www.kuppingercole.com/blog/small/microsofts-cloud-sovereignty-promises-progress-or-patchwork

In this episode, Matthias Reinwarth welcomes KuppingerCole Lead Advisor Patrick Teichmann to share his highlights from attending the European Identity and Cloud Conference (EIC) for the first time.

What were the key takeaways from EIC 2025? This week, Matthias Reinwarth speaks with Dr. Phillip Messerschmidt, IAM expert and advisor at KuppingerCole Analysts, to get a personal review of the European Identity and Cloud Conference 2025 and its highlights.

Get ready for EIC 2025!

One does not simply secure an enterprise without integration. In this episode of the KuppingerCole Analyst Chat, host Matthias Reinwarth sits down with cybersecurity expert Jonathan Care to explore the Cybersecurity Fabric — an emerging architectural concept designed to unify existing security tools, improve visibility, and enable automation and orchestration across your entire IT environment. Discover how this approach complements frameworks like Zero Trust and NIST, what benefits it brings to your organization, and how it can evolve alongside your security maturity.

Apple's defiance against the UK's call for a secretive surveillance backdoor marks a pivotal moment in digital privacy battles. With an open tribunal ruling, the clash between encryption integrity and governmental power unfolds publicly. Plunge into this landmark case influencing global tech policies, setting the stage for enhanced corporate resilience strategies. Read the original blog post here: https://www.kuppingercole.com/blog/care/uk-pushes-for-apple-backdoor

Dive into the complexities of US isolationism and uncover what it means for global cloud sovereignty. Gain insights on data privacy, operational challenges, and how these affect international businesses using US-based cloud services. Read the original blog post here: https://www.kuppingercole.com/blog/small/sovereign-cloud-geopolitical-risks

In this eye-opening episode of the KuppingerCole Analyst Chat, Dr. Kashyap Thimmaraju, postdoc researcher at TU Berlin and founder of FlowGuard Institute, joins Matthias Reinwarth to discuss his groundbreaking research into burnout, well-being, and flow state in Security Operations Centers (SOCs).

Join Matthias Reinwarth in this special episode of the KuppingerCole Analyst Chat as he welcomes not one but two expert guests: Nitish Deshpande, Research Analyst at KuppingerCole, and Martin Kuppinger, Principal Analyst and Co-Founder of KuppingerCole. Together, they explore the evolution of modern authorization, discussing how far the industry has come since the early days of static entitlements and XML-based policies. From early insights shared back in 2009 to today’s dynamic, AI-enhanced, signal-driven authorization models, this episode unpacks the what, why, and how of modern access control systems.

In this videocast, KuppingerCole Analysts' Senior Analyst Warwick Ashford is joined by Prakash Sinha, Senior Director and Technology Evangelist at Radware, to explore how security teams can drive Mean Time To Resolution (MTTR) close to zero. As AI-powered attacks increase in sophistication and frequency, security operations centers (SOCs) must evolve by leveraging automation and AI-driven incident response. Prakash shares insights on how AI can enhance threat detection, automate remediation, and reduce analyst workloads while maintaining governance and accountability. Discover practical steps for implementing AI-assisted security and the key success factors for modernizing SOCs in the face of an ever-changing threat landscape.

In a blockbuster $32 billion deal, Google aims to redefine cloud security with the acquisition of Wiz, propelling the industry into uncharted territory. As the allure of integrated security solutions promises to bridge fragmented environments, the spotlight is on Google's next moves in the battle against cyber threats. Dive into what's next for cloud security! Read the original blog post here: https://www.kuppingercole.com/blog/small/google-acquires-wiz

Step into the realm of modern identity management with federated identities but beware of potential pitfalls. Organizations are welcoming external partners into cloud environments, challenging traditional IAM frameworks. Unravel how your company can embrace this evolution while maintaining security, compliance, and efficiency. Read on to navigate these uncharted waters with confidence and strategic foresight. Read the original blog post here: https://www.kuppingercole.com/events/eic2025/blog/federation-without-frustration-setting-the-right-framework-for-external-identities

In the era of cloud-driven business, non-human identities are more pervasive than ever. They offer immense utility but also risky vulnerabilities. Discover how ITDR solutions are turning the tide in identity threat detection, ensuring that your organization's automated processes remain seamless and secure. The future of identity security starts here. Read the original blog post here: https://www.kuppingercole.com/events/eic2025/blog/rage-against-the-machines-itdr-and-the-rise-of-non-human-identities

In this episode of KuppingerCole Analyst Chat, host Matthias Reinwarth welcomes back Alexei Balaganski, Lead Analyst at KuppingerCole Analysts, to continue their deep dive into quantum computing and its impact on authentication security. They discuss the increasing risks posed by quantum threats, the vulnerabilities of current encryption standards, and the critical role of crypto agility in ensuring long-term security. The conversation explores how organizations can prepare for the post-quantum era, highlighting strategies such as hybrid cryptography, quantum-resistant algorithms, and zero-trust authentication models. Alexei shares insights into the latest advancements in quantum-safe security, regulatory considerations, and practical steps businesses can take to mitigate future risks. The episode wraps up with a look at emerging trends in quantum security and what the future holds for authentication in a rapidly evolving digital landscape.

In this episode of KuppingerCole Analyst Chat, host Matthias Reinwarth is joined by Martin Kuppinger, Principal Analyst at KuppingerCole Analysts, to explore the intersection of Non-Human Identities (NHI) and Identity Threat Detection and Response (ITDR). They discuss the growing importance of securing machine identities, service accounts, APIs, and automation processes, as well as the security risks associated with overprivileged accounts and mismanaged credentials. The conversation highlights how ITDR enhances traditional IAM and PAM solutions by providing real-time monitoring, anomaly detection, and automated threat response. Martin shares insights into AI-driven threat detection, zero-trust principles, and best practices for organizations looking to mitigate identity-based threats. The episode concludes with a look at emerging trends in ITDR and the future of machine identity security.

In an era where privacy is overshadowed by convenience and AI's immense capabilities, critical misconceptions and stark realities loom large. Are companies and individuals ready to protect what little privacy remains, or is it a lost cause in today's digital age? Discover the provocative debates shaping the future of privacy. Read the original blog post here: https://www.kuppingercole.com/blog/balaganski/privacy-and-data-protection-do-they-still-belong-together

The digital security apocalypse is looming, courtesy of quantum computing. Is your organization ready? As passwords cling to life, quantum computers threaten to dismantle existing encryption, rendering current authentication insufficient. Dive in to explore the dawn of post-quantum cryptography and the critical need for crypto-agility to safeguard your digital domain effectively. Read the original blog post here: https://www.kuppingercole.com/events/eic2025/blog/strong-authentication-in-a-post-quantum-world

Step into the future of travel where digital identity technologies are reshaping cross-border experiences. Explore the rise of innovations like automated verification, while uncovering regional success stories like SITA and India's Digi Yatra. Discover how international collaboration could make cumbersome passport checks a thing of the past. Welcome to the next era of seamless and secure global journeys. Read the original blog post here: https://www.kuppingercole.com/events/eic2025/blog/the-future-of-digital-travel-credentials-trust-adoption-and-the-eidas-20-framework

In today's interview, Mirela Ciobanu, Lead Editor at The Paypers, talks with John Erik Setsaas, Director of Innovation at Tietoevry Banking, about the challenges and opportunities in digital identity and fraud prevention at cyberevolution 2024.

In this exclusive interview, Mirela Ciobanu, Lead Editor at The Paypers, sits down with Justin Richer, CTO of UberEther, to explore the latest advancements and challenges in digital identity at cyberevolution 2024.

Stay updated on the future of CIAM: Learn about integrating privacy management, fraud intelligence platforms, and CDPs to enhance security and customer experience. Read the original blog post here: https://www.kuppingercole.com/blog/tolbert/whats-next-in-customer-identity-and-access-management

In this exclusive interview, Mirela Ciobanu, Lead Editor at The Paypers, sits down with Max Imbiel, CISO of BitPanda, to discuss the evolving challenges and opportunities in cybersecurity within the crypto space.

Explore the challenges of EU DORA compliance and why supply chain cybersecurity remains a critical concern. Uncover hidden risks and strategies for building resilience in financial services. Read the original blog post here: https://www.kuppingercole.com/blog/fisher/eu-dora-compliance-day-arrives-but-supply-chain-cybersecurity-remains-a-major-concern

In today's interview, Mirela Ciobanu, Lead Editor at The Paypers, talks with Sergej Epp, CISO at Sysdig, about the ever-evolving world of cybersecurity and its impact on industries worldwide.

Discover how to rethink Identity Governance and Administration (IGA) to meet the demands of a dynamic workforce, rapid application turnover, and evolving compliance needs. Learn key strategies for modernizing IGA with agility, automation, and policy-driven solutions. Read the original blog post here: https://www.kuppingercole.com/blog/kuppinger/rethinking-identity-governance-and-administration-iga-in-the-digital-era

As the world welcomed the New Year, the U.S. Treasury Department was busy investigating a cybersecurity breach. Read the original blog post here: https://www.kuppingercole.com/blog/leal/new-year-same-threats-hacking-the-treasury

In this exclusive interview, Mirela Ciobanu, Lead Editor at The Paypers, sits down with Andrzej Kawalec, Head of Cybersecurity for Vodafone Business, to explore the evolving landscape of cybersecurity and its critical role in driving innovation.

Discover how to turn cyber catastrophes into manageable incidents and fortify your business continuity with state-of-the-art backup and recovery strategies. Read the original blog post here: https://www.kuppingercole.com/blog/balaganski/zero-data-loss-peace-of-mind-in-the-ransomware-era

As we close another year, join us in reflecting on KuppingerCole’s journey from a niche identity management focus to becoming a leader in the intersection of identity and cybersecurity. Discover exciting new initiatives like our Rising Stars Program and explore the challenges and opportunities shaping the future of the industry. Watch now and hear how we’re empowering the community with insights, innovation, and tools to thrive in a rapidly evolving digital landscape. Wishing you a safe and secure holiday season and a successful 2025!

This blog addresses the integration of Identity and Access Management (IAM) with Artificial Intelligence ('AIdentity'). It calls for a shift to dynamic identity management for AI agents to mitigate security risks, highlighting KuppingerCole's Identity Fabric as a solution. Read the original blog post here: https://www.kuppingercole.com/blog/bailey/identity-for-ai-agents

Join us as we explore the major cybersecurity and IAM trends to keep an eye on in 2025. We’ll discuss the emergence of non-human identities, the hurdles of quantum-safe encryption, and the practical applications of AI and decentralized identity. Get ready to learn how these trends will influence the industry and how you can stay ahead of the curve.

We sit today with André from Unit 42 as he covers the rapidly changing landscape of cyber threats and points out some key trends in 2025, from increasing sophistication in cyberattacks to state actors gaining a greater upper hand. He provides insight into how organizations can prepare and defend against emerging risks. In this session, learn about the latest challenges and strategies for building cyber resilience in an increasingly complex global environment.

In this videocast, Tom Bruggeman from DPG Media shares how his team tackled the challenges of user authentication in a fast-changing media landscape. He highlights the role of open standards like OAuth and OIDC and explains how Authlete helped create a seamless and secure user experience. Tom also offers insights into future plans, including efforts to enhance user privacy and explore data wallet solutions.

Trust in data's power as Cohesity and Veritas unite to dominate the world of cyber resilience and data protection. This merger is more than market consolidation; it's the dawn of a new era in safeguarding digital enterprises. Read the original blog post here: https://www.kuppingercole.com/blog/small/the-marriage-of-cohesity-and-veritas