Resources

Practical thinking on identity, intent and AI agents

Articles, whitepapers, and videos on putting AI agents to work in the enterprise — safely and at scale.

All

Identity & Access

Intent

Discovery

Governance & Compliance

AI Adoption

Blog

· 10 min read
How Sales, Marketing, and Operations Teams Are Using Local AI Tools to Get Work Done And What Makes It Safe to Scale
Between purpose-built agents and shadow AI tools is a third category that most enterprises have not yet built governance infrastructure to support. Local AI tools. Claude Cowork. Claude Desktop. Tools that connect to the systems an employee already uses, respond to natural language instructions, and produce work that previously required hours of manual effort. The tool is legitimate, the user is known, but the data access pattern is new, the workflows are ungoverned, and the boundary between "this employee's work" and "this AI tool's access" is not clearly defined in any existing identity framework.
· 11 min read
MCP Security: What the Most Popular Enterprise MCP Integrations Actually Mean for Your Governance Program
Every MCP connection establishes a persistent trust relationship between an AI agent and the system it connects to. The agent authenticates to the MCP server once, establishing a session within which multiple tool calls can occur. What happens inside that session - which data is accessed, which actions are taken, which instructions the agent follows - is governed by the MCP server itself. Most enterprise identity governance stacks have no visibility into this layer.
· 9 min read
AI Agents Don't Cheat. They Optimize. That's the Problem.
When your agent succeeds, is it succeeding at what you actually wanted - or at the proxy metric you used to measure it? If you cannot answer that question continuously, in real time, for every agent operating in your environment, you do not have functional continuity governance. You have a specification and a hope.
Amir Ofek
17 Aug 2026

Showing 1–6 of 29 articles

Videos

AI AdoptionShare
The Future Workforce Will Be Dominated by AI Agents. Long Live ARISE.
NHI is evolving. Or is it being replaced? In this fireside chat, SACR analyst Lawrence Pingree and Amir Ofek make the strongest possible case for why extending NHI frameworks to cover AI agents is not the right strategy. The argument: organizations treating enterprise AI agent governance as "NHI with extra steps" are building programs that will fail in production. ARISE - Agentic Runtime Identity Security Enforcement - is not an extension of NHI. It is what comes after it.
Amir Ofek
18 Aug 2026