About Us

Welcome to The Cyber Hut – a boutique industry analyst and advisory firm, exclusively focused on the global identity and access management market.

Our mission is to help decipher the complex world of identity and access management technology and standards, by providing expert and impartial advice and research.

We work with a range of global clients, from vendors and industry practitioners through to venture capitalist investors and systems integrators, to help with their knowledge, understanding and due diligence on a range of subjects related to identity.

Why don’t you join us?

Technology Analysis & Testing

Online and Live Training

Market & Design Knowledge for Industry

Expert Opinion & Comment

Introducing FOSA:
Free Open Source Analysis

The Cyber Hut are industry specialists when it comes to identity and access management. We have contributed to industry standards. Worked for the largest vendors. Designed some of the world’s biggest identity platforms.  

We also want to break down the traditional model for understanding the market and technology for identity and access management.  Why don’t you join us?

The IAM Radar

The Identity and Access Management IAM Radar provides continual vendor tracking, with curated headlines and expert analyst comment across a range of both established and emerging vendors. Events as they happen, mapped to human intelligence.

Learn More

The Week in Identity Podcast

The Cyber Hut runs a weekly podcast – aptly named “The Week in Identity” – where we take an industry analyst view of the latest identity and access management events, funding and conference news. A weekly independent briefing to provide buy side insight.

Learn More

IAM 2 Industry Analysis Map

The Cyber Hut tracks a range of vendors in the global identity and access management space – from established platforms, through to emerging startups focused on niche use cases. We call this IAM 2 – the Identity and Access Management Industry Analysis Map.

Learn More

We’ll help you improve your:

Industry Knowledge

Track emerging and established identity and access management vendors and understand their capabilities and strengths.

Security Posture

Leverage an Identity Threat Assessment Framework to help reduce risk, improve security and optimize existing IAM technology.

Maturity Awareness

Leverage independent opinion to compare to existing vendors or industry peers to help road map future IAM design decisions.

Trusted by Global Vendors, Integrators and Industry

The Cyber Hut has supported a range of vendor, buy side, integrator and investment clients to enhance their content, understanding and insight on the emerging identity and access management markets – through training, advisory, content and inquiry.

“The Cyber Hut is a partner in helping us build our strategy. They provide us with unique insights and custom services that help HYPR continue to lead the passwordless MFA market.”

Michael Rothschild

VP Product Marketing, HYPR

“Working with Simon and team on the consumer authentication webinar was great – they provided great inputs based on deep industry knowledge and and domain expertise.”

Gal Steinberg

VP Products, Sift / Keyless

“Simon at TCH is our go to point of contact for understanding the technical and business nuances of the emerging patterns in identity. Always clear, smart and insightful, but most importantly, trusted.”

Emily B.

Investment Analyst

“No faster way of getting into Consumer IAM, than by learning from the master himself. Great overview and best practices from Simon at The Cyber Hut. Recommended”

André Koot

Founder & Principal Consultant, SonicBee

“The Cyber Hut provides insightful guidance on identity security best practices that’s backed by industry experience and in-depth research. TCH has helped us better communicate to a more relevant audience consisting of both business and security-oriented professionals.”

Lani Leuthvilay

Senior Director, Product Marketing, PlainID

Latest Open Source Analysis, Events & Opinion

Our founder Simon Moffatt will be moderating a panel at the Future […]
Our Founder and Research Analyst Simon Moffatt will be in attendance at […]
Next week The Cyber Hut founder and research analyst Simon Moffatt will […]
An opinion piece analysing the potential acquisition of ForgeRock by private equity firm Thoma Bravo.
Last week I had the pleasure of presenting a rapid and remote 10 minute keynote at the southern LATAM IAM Tech Day Event.
Join our founder and industry analyst Simon Moffatt on February 21st, where he will be in conversation with Jonathan Fussner from zero-trust identity and access management startup Cyberelements.
I'm proud to announce today, the latest addition to The Cyber Hut online and in-person identity and access management training courses: Authentication Design & Management.
Today I'm proud to announce the launch of The Cyber Hut's IAM Radar: a subscription based curated vendor intelligence report. Released monthly, the report tracks the top 6 vendors in the global identity and access management space, providing insight, impartial comment and analysis to empower those within industry, consultancy, vendor and investment communities.
Our first webinar of 2023, will take a look at the role of cyber insurance for the modern enterprise - the current growth in cyber insurance demand, how it can help protect an organisation and how it can be optimised - via reduced premiums and improved payouts.
I wanted to wrap up 2022, with an anecdotal look at some of the key facts and figures that made up the bulk of The Cyber Hut's interactions, research and community engagement over the past year. It has been a great year professionally and personally, yet parts of the world are still being ravaged by the pandemic, conflict, economic turmoil and the cost of living crisis. Hopefully 2023 can start to stabilise some of those broader problems we will undoubtedly all feel in the coming months. I want to take a retrospective look back at 2022 in numbers, adding in a few stories and comments as I go. I hope you enjoy it and thank you to all of the global identity and access management community who have engaged with The Cyber Hut over the past 12 months.
The next NIS-D directive is live in a second iteration and regulators of Critical National Infrastructure (CNI) across Europe are working to evaluate and adapt the directive to country specific regulations. Thus, the UK (through the Department of Culture Media & Sport) have issued their consultation outcome for regulation of managed service providers and updates to the NIS regulation.
Zero Trust has been with us for the best part of a decade - since the likes of the Jericho Forum, Google's Beyond Corp and ex-Forrester analyst John Kindervag have all promoted a view of moving the concept of "trust" from a location to a concept based on the identity, device and associated context. Version 2.0 of the US Department of Defence Zero Trust Reference Architecture has been cleared for public release and is a good, detailed read regarding an actual migration and implementation model. The document is available here.
Homegrown access control is limiting business agility - the ability to share data with those who need it, engage in joint ventures and B2B partnerships, protect PII and open up APIs to employees and customers alike. As such the market for authorization has increased substantially in the last 36 months. Funding rounds for the likes of Styra, PlainID and SGNL to name but a few indicate increased venture expectation that access control has a long tale of growth.

Our founder Simon Moffatt will be moderating a panel at the Future Identity Festival in London taking place on November 14-15th.

Authentication is the pinch point for all B2E and B2C application, service and website interactions - allowing organisations to deliver secure experiences. However it has its challenges - requiring broad use coverage and inclusivity, privacy by design, adaptive threat protection and future proofing.

This week saw the FIDO Authenticate conference take place in Seatle. I attended via the virtual remote route, going through the vast majority of the sessions from the comfort of the office. A few items that stood out for me.

Even as many organisations are moving to a "cloud first" strategy for the consumption of new applications and services, the cloud line is blurred. Not all services can be consumed in a pure cloud setting, and not all "clouds" are the same.

Any analysis in the popularity, options or strategy with respect to IAM deployment should be firmly based against a set of basic definitions.

Last week I had the privilege of attending a consumer identity and access management day hosted by specialist CIAM consultancy IdentIT to deliver a key note presentation on the future trends of consumer IAM. Identity specialists, security leaders and enterprise architects gathered at the Circuit Zolder in Belgium for an afternoon of identity discussions, case studies and more importantly track racing on a former F1 circuit!
Security starts when authentication ends. It's a line I have used a few times over the years as it is one I actually quite believe in. In an era where firewalls are derided as being pretty toothless in the fight against omnipresent complex cyber attacks - and the concept of trusted networks quite rightly become obsolete in the world of "zero trust" - it always seemed odd to me, to put such a large emphasis on stringent authentication services. Clearly authentication is hugely important don't misunderstand, but my point really was that authentication (even with a strong MFA component) becomes less relevant if a) it is not continuous and b) not part of a more holistic approach focused on the access control of services, data and APIs.

Join our founder Simon Moffatt on September 15th where he will join PlainID on a discussion around external authorization platforms.

The modern digital native enterprise is facing a number of emerging and incumbent challenges - from increased competition and demand for a more agile service deployment model through to needing the ability to share more data to more people, all under a competing climate of increased security threats coupled with a lower risk appetite.

Trust within the identity world is a huge priority. Trust regarding the on-boarding and registration of external users via proofing (think assurance levels using identity validation and verification techniques) right through to creating trust labels for employees in order to monitor for malicious activity - that is either driven by external threat actors, insider threat or just unintentional bad user behaviour.

Join our founder Simon Moffatt along with Michael Rothschild VP of Product Marketing at HYPR on August 22nd, where they'll be taking a look at authentication within the global financial services industry.

In this industry fireside chat webinar, Simon and Michael will take a look a the current challenges and opportunities that exist within the financial services industry as it pertains to authentication.

When on briefings and inquiry workshops there are often emerging themes that start to spring up repeatedly. Perhaps every few months, perhaps under different projects, using different terms and stories and perhaps from unexpected people or teams.

There has been one theme over the past 12 months or so that is difficult to ignore: not only how identity based security has left-shifted into the thinking of information leaders to being a first-class citizen in the technology arsenal, but how identity is moving into a new territory. The territory of autonomy.

Join our Founder and Analyst Simon Moffatt on July 20th for our latest industry fireside chat, where he will be discussing the emerging area of SIM based authentication, with Paul McGuire, CEO of tru.id.
This week saw the London edition of Infosec Europe - essentially a smaller version of the RSA Conference a few week ago in San Francisco. There were about 15,000 attendees and 300+ solution providers from a range of cyber and information security areas. Of course my primary interest was to get briefings and understand the viewpoint from an identity and access management perspective and see how far the tentacles of identity were now spreading into other orthogonal areas of security. It didn't disappoint and I had some thought provoking conversations...

Signup For New Content Releases