Skip to contentAgentic IAM Day 2026 (opens in a new tab)
PlainID

Authorization, written down.

Field notes, best practices and market reading from the team building identity-first authorization for the enterprise.

Nov 3, 2026

The CSBS AI Supervisory Framework: Turning AI Governance Into Controls Examiners Can Test

On September 16, 2026, the Conference of State Bank Supervisors released its Artificial Intelligence Supervisory Framework. While discretionary, it establishes a standardized baseline for how examiners evaluate AI deployment, assess risk and escalate edge cases for deeper scrutiny.

Michael Anastasio

Oct 20, 2026

XACML, OPA, and PBAC: How to Modernize Legacy Authorization Without Rebuilding Everything

A regional bank gets a request from its regulator during a routine examination. The examiner wants every customer account a specific relationship manager could view during March, across both the loan origination system and the new mobile banking API. The loan system makes its access decisions through a XACML policy decision point the bank deployed in 2014. The mobile API runs on Kubernetes, and the platform team protects it with Open Policy Agent sidecars running Rego policies they wrote two years ago.

Kobi Gol

Oct 20, 2026

AI Agent Identity Governance: How to Control Agents Before They Touch Sensitive Data

A procurement team at a mid-sized insurer builds a contract assistant during a two-day hackathon. The engineer registers it in Entra ID as an app registration and grants it read access across the company’s SharePoint sites so it can find vendor agreements. He lists himself as the owner. The assistant works well enough that buyers start using it every day. Four months later, a junior buyer asks it to summarize recent agreements with a logistics vendor. The response includes terms from a draft acquisition agreement stored on the corporate development team’s site. Nobody in corporate development knew the assistant existed. The engineer who built it had moved to the data platform team in month two. The quarterly access review certified the app registration twice, because the reviewer saw a familiar app name and a valid owner field and clicked approve.

Hila Shitrit Nissim

Updates

Sign up for updates

Get the latest news on identity, access management, and policy enforcement directly to your inbox.

Oct 15, 2026

Non-Human Identities Are Multiplying. How Do You Keep Machine Access Under Control?

At 6:40 on a Friday evening, your secret scanner flags an API key committed to a public GitHub repository. The key belongs to inventory-sync, a service that reconciles stock levels between your warehouse system and your e-commerce platform. Rotating the key takes your on-call engineer four minutes. Answering the next question takes the rest of the weekend: what could someone holding that key have reached during the nine hours it sat in public? The service account behind it turns out to carry read-write access to four production databases, plus a grant to the payments API that a contractor added during an integration project two years ago. The contractor is gone. The engineer who built the service moved to another team. Nobody can say which of those permissions inventory-sync still uses.

Greg Berg

Oct 15, 2026

How to Build an AI Agent Permission Control Framework Security Teams Can Actually Audit

Your internal audit team sends a request on a Tuesday morning. They want a list of every customer record the claims-processing agent read last quarter, which adjuster the agent was working for on each read, and the policy that allowed it. You have the agent’s logs from the LLM gateway, request logs from the API gateway, and query logs from the claims database, and none of them share an identifier. The agent ran under a service account called svc-claims-ai, so the database shows one identity making forty thousand queries. Nothing in any of the three systems records why a given query was permitted. Three engineers spend two weeks rebuilding a partial answer, and the auditor marks the control as ineffective anyway.

Rakesh Chowtee

Oct 9, 2026

Operationalizing Zero Trust: How Runtime Authorization Fulfills NIST SP 800-207 & SP 800-207A

NIST SP 800-207 defines Zero Trust Architecture as a shift away from implicit trust based on network perimeters toward explicit, dynamic access decisions for every enterprise resource. While authentication establishes what identity is at the front door, authorization determines what that identity is permitted to access, do, and expose at the moment execution occurs.

Gal Helemski

Oct 6, 2026

Best AI Authorization Tools and Software in 2026: A Buyer's Guide

Your team already runs an identity provider. It checks who logs in. But once an AI agent acts on a prompt, retrieves data, calls tools, and returns an answer on a user's behalf, "who are you" is no longer the hard question. The hard question becomes what that agent can do right now, in this exact context.

Tal Agam

Oct 6, 2026

PlainID and the OWASP Top 10 for Agentic Applications (2026)

The OWASP Top 10 for Agentic Applications is OWASP's risk list for AI agents that take action. It covers software that plans toward a goal, holds memory across steps, calls tools and APIs, coordinates with other agents, and acts with delegated authority. It extends the LLM Top 10 rather than replacing it, because most agent systems are also LLM applications and inherit those model-layer risks. For CISOs, identity architects, and the AI platform owners now running agents in production, the list is a practical map of where autonomous access can go wrong.

Gal Helemski

Oct 6, 2026

How PlainID Tackles the OWASP Top 10 Vulnerabilities for LLM Applications

The OWASP Top 10 for LLM Applications is the reference list security teams use to reason about how AI applications fail. It names the risks that surface when an enterprise puts a large language model in front of sensitive data and business systems.

Gal Helemski

Oct 6, 2026

Why "Best Authorization Software" Shortlists Keep Missing Runtime Authorization

Search "best authorization software" and you'll get a list of ten logos, and eight of them are identity providers, governance platforms, or privileged access tools that don't do authorization the way the term is actually used in a security architecture diagram. Okta shows up. SailPoint shows up. CyberArk shows up. All three are excellent at what they do. None of them decide, at the moment an application receives a request, whether that specific identity should be allowed to take that specific action on that specific piece of data right now. That decision is what runtime authorization software actually does, and most buyer's guides don't seem to know it exists as its own category, let alone that PlainID has spent over a decade building specifically for it.

Hila Shitrit Nissim

Oct 6, 2026

Why Centralized Policy Management Breaks at Data-Layer Scale

Learn why centralized policy management can break at data-layer scale and how distributed enforcement helps maintain performance, consistency, and control.

Hila Shitrit Nissim

Oct 5, 2026

Access Control for AI: How to Stop Agents From Over-Permissioning Themselves

Learn how access control for AI helps prevent over-permissioned agents with runtime authorization, composite identities, and zero standing privileges.

Hila Shitrit Nissim

Secure Every Identity.
Go Beyond Who Gets In.

Centralize your policy governance while distributing runtime enforcement across applications, APIs, data platforms, and agentic AI workflows.

Get a demo