Articles, whitepapers, and videos on putting AI agents to work in the enterprise - safely and at scale.
Showing 40 - 40 of 40 articles
PDFA routine billing complaint. Four lines of routing text. One AI agent with access to your CRM. That was all it took. aizome researchers documented a complete indirect prompt injection attack chain using only a public Salesforce Web-to-Case support form - no credentials, no exploit, no Salesforce bug. One support ticket caused a privileged AI agent workflow to export customer records and deliver them to an external mailbox. The attacker’s only contribution was text in a support form.
Download PDF
PDFNew research from SACR defining the control layer that decides whether a live AI agent action should complete, not whether the agent had access an hour ago. Covers the three-layer architecture, the Agentic Control Depth model that sets ACD 4 as the production bar for agents touching sensitive data, and a vendor landscape of more than thirty providers. aizome is named a pure-play ARISE vendor.
Download PDF
PDFSACR names aizome an Emerging Leader in agentic identity and access. The report covers why traditional IAM was not built for agents, and lays out a four-phase model for securing them: discover, authorize, broker, and watch. aizome is one of six vendors profiled, and one that spans all four phases.
Download PDFSee aizome in action. Your employees are already building AI agents - connected to your most sensitive systems, operating under inherited identities, with no one watching what they’re actually doing. This video shows what changes when aizome is in your environment. Every agent discovered. Every identity governed. Every action validated before it executes. Every outcome accountable. Watch to see what’s already running in your environment - and what it looks like when it’s governed.
Your AI agents don’t sleep. They don’t take breaks. And if nobody is watching their intent - not just their access - they will reach further than they should. In this episode, aizome CEO Amir Ofek joins Hacker Valley Media to talk about the autonomous workforce already running inside enterprise environments - ungoverned, unmonitored, and unknown. A conversation about why knowing what an agent is permitted to do is not the same as knowing what it is actually doing right now. Listen here - https://hackervalley.com/e/do-you-know-what-your-agent-is-doing-at-3am-with-amir-ofek
NHI is evolving. Or is it being replaced? In this fireside chat, SACR analyst Lawrence Pingree and Amir Ofek make the strongest possible case for why extending NHI frameworks to cover AI agents is not the right strategy. The argument: organizations treating enterprise AI agent governance as “NHI with extra steps” are building programs that will fail in production. ARISE - Agentic Runtime Identity Security Enforcement - is not an extension of NHI. It is what comes after it.
Amir Ofek
Showing 1 - 3 of 4 videos
PDFaizome maps its production architecture against the five agentic identity failure modes identified by NIST NCCoE - credential sharing, static credentials, broadly scoped access, local user account deployment, and over-reliance on human-in-the-loop controls. This technical brief details how aizome’s inline MCP identity broker eliminates each failure mode structurally, and maps the implementation against NIST SP 800-63, SPIFFE, OAuth 2.0, Rich Authorization Requests (RFC 9396), and the emerging WIMSE standard. Includes the six-stage SAML impersonation model, full audit trail schema, and compliance framework mapping across NIST AI RMF, SANS Stage 3, OWASP Agentic Top 10, and EU AI Act Article 12.
Download PDF
PDFSACR - one of the leading analyst firms covering identity security - recently named what a wave of enterprise deployments has been pointing toward: ARISE. Agentic Runtime Identity Security Enforcement. ARISE is not NHI security renamed. It is not IAM extended to cover AI agents. It is a new category, built for governance challenges that no existing identity framework was designed to address.
Download PDF
PDFThe AI Agent Cost Nobody Budgeted For explores why enterprise AI spending is rising despite falling token prices. Learn the hidden cost drivers behind autonomous AI agents, the governance gaps creating budget overruns, and the practical framework organizations can use to gain visibility, control costs, and scale AI responsibly.
Download PDFShowing 4 - 6 of 9 datasheets
PDFIn a world of ten thousand faces, not every identity is what it seems. In this chapter of The Indigo Guardian, Ito confronts the dangers of false identities, wandering agents, and invisible threats. But true protection isn’t about stopping everything - it’s about knowing what belongs, recognizing what doesn’t, and establishing boundaries that preserve trust. Through Japanese-inspired storytelling, aizome explores a fundamental principle of agentic AI security: You cannot protect what you cannot see, and you cannot govern what you cannot identify. The first battle isn’t access. It’s identity.
Read the comic
PDFFour samurai. One clan. One crosses a boundary he was never meant to cross. In this chapter of The Indigo Guardian, discover how even the most trusted agents can drift beyond their intended purpose - and why identity, visibility, and governance are essential in the age of agentic AI. Through the art of Japanese-inspired storytelling, aizome explores a critical security challenge: How do you protect what you cannot see? Every agent needs an identity. Every identity needs a guardian.
Read the comic
PDFIn Japan, indigo protected what it touched by becoming part of it, not by standing between. Mamoru, miru, shiru - to protect, to see, to know. The story behind the name, in a single page.
Read the comicOccasional, substance-first writing on identity, intent, and putting AI agents to work across the enterprise. No noise.
