KuppingerCole Analysts

KuppingerCole Analysts

KuppingerCole Analysts AG is an international, independent analyst organization offering technology research, neutral advice and events in Identity Management, Cybersecurity and Artificial Intelligence.

  1. vor 1 Tag

    Analyst Chat #305: IGA in 2026 - NHIs, Sovereignty & the Platform Shift

    IGA is often dismissed as a mature, stable market but that couldn't be further from the truth. In this episode, Matthias sits down with Nitish Deshpande, to explore how identity governance and administration is being reshaped by NHIs, AI-driven intelligence, deployment sovereignty, and a wave of challenger vendors. Key Topics: ✅ How IGA has evolved from static, siloed tools to integrated, multi-identity platforms ✅ Non-human identities: IGA vendors are now covering NHI governance — and customers are demanding it ✅ Where IGA still falls short: role mining, anomaly detection, policy simulation, and workflow automation ✅ The deployment model debate: SaaS vs. on-premise vs. hybrid — and the feature parity problem ✅ EU sovereignty as a competitive differentiator for European IGA vendors ✅ What's coming next: real-time governance, access intelligence, and a new IGA report category 44 vendors evaluated, a surge of newcomers, and a market quietly reinventing itself — the KuppingerCole IGA Leadership Compass is out now and covers everything discussed in this episode.

    20 Min.

  2. 22. Juni

    Analyst Chat #304: Agents, Fabric, and the Unfinished Business of IAM, A Look Back at EIC 2026

    Four weeks after EIC 2026 in Berlin, Matthias Reinwarth and Phillip Messerschmidt sit down to reflect on what the European Identity and Cloud Conference revealed about the state of identity and access management and what it means for the year ahead. Spoiler: agentic AI dominated, but it wasn't the only story. Key Topics: ✅ Agentic AI as a new class of insider threat — autonomous, non-deterministic, and without ethics ✅ Data-centric defense vs. agent discovery: protect the vault, not the crowd ✅ Why dynamic authorization and behavior analytics are the IAM industry's urgent next step ✅ Data sovereignty and geopolitics: eroding trust in non-European SaaS vendors ✅ AuthZEN wins the EIC Award — a standard built before anyone knew the problem it would solve ✅ Martin Kuppinger's closing keynote: "Everything we failed to solve in the past decades bites back now" "An agent behaves like a human insider threat — but without any sense of right or wrong." If your IAM program isn't ready for that, this episode is required listening.

    35 Min.

  3. 15. Juni

    Analyst Chat #303: B2B Identity & Access Management - A New Market Unpacked

    Business relationships are complex and traditional IAM wasn't built for them. In this episode, Matthias Reinwarth sits down with Principal analyst John Tolbert, author of KuppingerCole Analysts' first-ever B2B IAM Leadership Compass, to explore why Business-to-Business Identity and Access Management is emerging as its own distinct market and what it takes to get it right. Key Topics: ✅ Why B2B IAM sits between workforce IAM and CIAM — and why neither alone is sufficient ✅ Delegated administration: handing identity governance to partner and supplier organizations ✅ Federation, lifecycle management, and the risks of trusting external HR processes ✅ "Know Your Business" — vetting organizations, sanctions screening, and org-level trust ✅ Fine-grained authorization: why RBAC falls short and ABAC/RBAC are taking over ✅ Agentic AI in B2B IAM: agents acting on behalf of external organizations Supply chains with thousands of partner organizations, freelancers with hour-long access windows, and AI agents acting on behalf of external companies B2B IAM has to handle all of it. KuppingerCole Analysts' first B2B IAM Leadership Compass is out now read it alongside this episode to get the full picture of an emerging market you can't afford to ignore.

    30 Min.

  4. 12. Juni

    Is Your CDN Secure? CDN vs. DDoS Mitigation Unpacked with Qrator Labs

    Speed and security are no longer separate concerns. In this videocast, Osman Celik sits down with Andrey Leskin, CTO of Qrator Labs, to break down what Content Delivery Networks really are in 2026 and why they've become a critical piece of modern security infrastructure, not just a performance tool. Key Topics: ✅ What CDNs are and why they're no longer optional for competitive organizations ✅ How CDN and DDoS mitigation differ — and where they overlap ✅ Cache busting, HTTP floods, Slowloris and other real-world attack vectors ✅ Why "security-first CDN" is fundamentally different from "CDN with security bolted on" ✅ What CISOs and infrastructure leaders should look for when evaluating CDN solutions ✅ How to measure CDN value from day one: round trip time and time to render A CDN without security is just a bigger target — find out why building security in from the ground up changes everything.

    17 Min.

  5. 8. Juni

    Analyst Chat #302: PAM Is No Longer a Vault - The New Identity Security Layer

    Privileged Access Management has outgrown the vault. In this episode, Matthias sits down with lead analyst Alejandro Leal, author of KuppingerCole's newly released PAM Leadership Compass, to explore how the definition of privilege itself has changed, what NHIs and agentic AI mean for PAM, and why deployment sovereignty is now a boardroom conversation. Key Topics: ✅ How the definition of "privilege" has shifted from admin accounts to dynamic runtime identity capabilities ✅ PAM convergence with IGA, CIEM, ITDR, SIEM, and SOAR — the end of the standalone PAM product ✅ Non-Human Identities (NHIs) and agentic AI: the silent accumulation of machine privilege ✅ Just-in-time access: the gap between concept and operational reality ✅ Deployment sovereignty: who controls the keys to the kingdom — SaaS, on-prem, or hybrid? ✅ AI and ML in PAM: separating genuine innovation from marketing inflation "Most enterprises can tell you the number of employees they have — very few can tell you the number of machine identities." If that sounds familiar, this episode is for you.

    35 Min.

  6. 1. Juni

    Analyst Chat #301: Know Your Attack Surface - ASM, DRP & Brand Protection

    Not all cyber threats target your systems, some target your reputation, your customers, and your brand. In this episode, Matthias Reinwarth sits down with research analyst Osman Celik to unpack three closely related but distinct markets: Attack Surface Management (ASM), Digital Risk Protection (DRP), and Brand Protection — and help organizations figure out which one they actually need. Key Topics: ✅ What Attack Surface Management is and its four subcategories (CAASM, EASM, TPRM, DRP) ✅ How Digital Risk Protection monitors dark web, social media, and hacker forums ✅ What Brand Protection adds on top of DRP — from takedown services to counterfeit detection ✅ DRP vs. Brand Protection: lightweight vs. full-spectrum — and when you need which ✅ Why brand reach matters more than company size when assessing risk ✅ What KuppingerCole research is available now — and what's coming in August Someone may be selling counterfeit versions of your product right now — or impersonating your brand online. DRP and Brand Protection tools exist to catch exactly that. Check out KuppingerCole's Brand Protection Buyer's Compass here.

    27 Min.

  7. 26. Mai

    Analyst Chat #300: Shadow Agents and the Next Identity Crisis

    Shadow IT was manageable. Shadow AI was concerning. Shadow agents? That's a whole different problem. 300 episodes already? Time flies when you're having fun! In this 300th Episode of the KuppingerCole Analyst Chat, Matthias sits down with Distinguished Analyst Martin Kuppinger to unpack one of the most urgent, and underestimated, security challenges facing organizations right now: employees building and deploying their own AI agents, with no governance, no oversight, and no accountability. Key topics: ✅ What "shadow agents" are and why they're fundamentally different from shadow IT or shadow AI ✅ Why vibe coding means anyone, not just developers, can now deploy autonomous agents inside your systems ✅ How AI agents massively expand the attack surface through prompt injection, data exfiltration, and uncontrolled access ✅ Why discovery and resource-side controls must happen in parallel and why neither alone is enough ✅ What organizations can actually do to gain control without just shutting everything down The bottom line: there's a thin line between agents that help your business and agents that harm it. Right now, most organizations can't tell the difference.

    15 Min.

  8. 11. Mai

    Analyst Chat #299: AI Security Fabric - Identity, Governance & Authorization for Autonomous Agents

    AI is reshaping enterprise architectures, but is security keeping pace? In this episode, Martin Kuppinger, Matthias Reinwarth, and Darran Rolls talk about the urgent question of how organizations should structure their defenses for a world of autonomous, agentic AI. The answer: an AI Security Fabric. Key Topics: ✅ Why agentic AI breaks traditional, deterministic access models ✅ The concept of "AIdentity" — what makes AI agent identity fundamentally different ✅ Can the Identity Fabric scale to meet AI security demands? ✅ Discovery, authorization, and governance as the pillars of an AI Security Fabric ✅ The geopolitical divide: US "move fast" vs. EU "govern first" ✅ Token delegation as the hardest unsolved problem in AI security today "We didn't build IAM for a world where the actor, the path, and the destination are all unknown until the moment of access" so what do we build instead? Find out in this episode. 🎙️ Catch Martin, Matthias, and Darran at the European Identity & Cloud Conference (EIC) in Berlin this May and get a head start on the conversation right here.

    56 Min.
Alle anzeigen (404)

Info

KuppingerCole Analysts AG is an international, independent analyst organization offering technology research, neutral advice and events in Identity Management, Cybersecurity and Artificial Intelligence.

Informationen

  • Erstellt von
    KuppingerCole Analysts
  • Jahre aktiv
    2020 - 2026
  • Folgen
    404
  • Bewertung
    Unbedenklich
  • Sendungswebsite
    KuppingerCole Analysts

Das gefällt dir vielleicht auch