Our founder Simon Moffatt will be attending two sessions at this years Identity Defined Security Alliance Identity Day 2026.
He will present a key note session entitled “Identity Attack Surface Management: Why Now” which uncovers what identity security is really trying to achieve.
As we have more identities, more identities and a broader array of deployment options to contend with, we start to see IAM as the major attack vector for internal and external adversarial activity. This adversarial activity is amplified by IAM infrastructure complexity and multiplied by an ever evolving highly professional black market of automated identity vulnerability identification platforms.
To that end, we need to consider both Identity Data risk as well as Identity Runtime Risk. Both should be utilised to disrupt the the identity attack life cycle – instead of waiting til adversarial activity has completed.
Later in the day, Simon attended a panel entitled “New reality for Identity Security in the AI Era” – discussing concepts such as:
- What is the difference between machine identity, non-human identity an is agentic identity something new entirely?
- Can we take the identity concepts we have developed in the human world to agents?
- What does ownership of agents really mean? What about accountability and responsibility?
- Can existing standards such as OAuth2/2.1 be used for agents?
- What other guardrails and non-identity signals and controls do we need to secure AI?