Resources

Practical thinking on identity, intent and AI agents

Articles, whitepapers, and videos on putting AI agents to work in the enterprise — safely and at scale.

All

Identity & Access

Intent

Discovery

Governance & Compliance

AI Adoption

Blog

· 11 min read
MCP Security: What the Most Popular Enterprise MCP Integrations Actually Mean for Your Governance Program
Every MCP connection establishes a persistent trust relationship between an AI agent and the system it connects to. The agent authenticates to the MCP server once, establishing a session within which multiple tool calls can occur. What happens inside that session - which data is accessed, which actions are taken, which instructions the agent follows - is governed by the MCP server itself. Most enterprise identity governance stacks have no visibility into this layer.
· 9 min read
AI Agents Don't Cheat. They Optimize. That's the Problem.
When your agent succeeds, is it succeeding at what you actually wanted - or at the proxy metric you used to measure it? If you cannot answer that question continuously, in real time, for every agent operating in your environment, you do not have functional continuity governance. You have a specification and a hope.
Amir Ofek
17 Aug 2026
· 7 min read
What Ghostjacking Taught Us About the Limits of Identity Governance
Traditional identity governance asks: is this agent allowed to do this? Ghostjacking demonstrates that the right question is: should this agent be doing this, right now, based on what it has just read? Those are different questions. And only the second one catches this attack.
Amir Ofek
17 Aug 2026

Showing 7–12 of 34 articles

Whitepapers

PDF
Emerging Agentic Identity Access Platforms (AIAP)
SACR names aizome an Emerging Leader in agentic identity and access. The report covers why traditional IAM was not built for agents, and lays out a four-phase model for securing them: discover, authorize, broker, and watch. aizome is one of six vendors profiled, and one that spans all four phases.
7 Sept 2026Download PDF

Videos

AI AdoptionShare
The Future Workforce Will Be Dominated by AI Agents. Long Live ARISE.
NHI is evolving. Or is it being replaced? In this fireside chat, SACR analyst Lawrence Pingree and Amir Ofek make the strongest possible case for why extending NHI frameworks to cover AI agents is not the right strategy. The argument: organizations treating enterprise AI agent governance as "NHI with extra steps" are building programs that will fail in production. ARISE - Agentic Runtime Identity Security Enforcement - is not an extension of NHI. It is what comes after it.
Amir Ofek
18 Aug 2026

Datasheets

Comics

PDF
Identity & Access
Issue One — The Indigo Guardian
In Japan, indigo protected what it touched by becoming part of it, not by standing between. Mamoru, miru, shiru — to protect, to see, to know. The story behind the name, in a single page.
26 Aug 2026Read the comic

Notes on accountable AI

Occasional, substance-first writing on identity, intent, and putting AI agents to work across the enterprise. No noise.