Skip to contentAgentic IAM Day 2026 | Oct 28 | Virtual (opens in a new tab)
PlainID

Authorization, written down.

Field notes, best practices and market reading from the team building identity-first authorization for the enterprise.

Oct 9, 2026

Operationalizing Zero Trust: How Runtime Authorization Fulfills NIST SP 800-207 & SP 800-207A

NIST SP 800-207 defines Zero Trust Architecture as a shift away from implicit trust based on network perimeters toward explicit, dynamic access decisions for every enterprise resource. While authentication establishes what identity is at the front door, authorization determines what that identity is permitted to access, do, and expose at the moment execution occurs.

Gal Helemski

Oct 6, 2026

Best AI Authorization Tools and Software in 2026: A Buyer's Guide

Your team already runs an identity provider. It checks who logs in. But once an AI agent acts on a prompt, retrieves data, calls tools, and returns an answer on a user's behalf, "who are you" is no longer the hard question. The hard question becomes what that agent can do right now, in this exact context.

Tal Agam

Oct 6, 2026

PlainID and the OWASP Top 10 for Agentic Applications (2026)

The OWASP Top 10 for Agentic Applications is OWASP's risk list for AI agents that take action. It covers software that plans toward a goal, holds memory across steps, calls tools and APIs, coordinates with other agents, and acts with delegated authority. It extends the LLM Top 10 rather than replacing it, because most agent systems are also LLM applications and inherit those model-layer risks. For CISOs, identity architects, and the AI platform owners now running agents in production, the list is a practical map of where autonomous access can go wrong.

Gal Helemski

Updates

Sign up for updates

Get the latest news on identity, access management, and policy enforcement directly to your inbox.

Oct 6, 2026

How PlainID Tackles the OWASP Top 10 Vulnerabilities for LLM Applications

The OWASP Top 10 for LLM Applications is the reference list security teams use to reason about how AI applications fail. It names the risks that surface when an enterprise puts a large language model in front of sensitive data and business systems.

Gal Helemski

Oct 6, 2026

Why "Best Authorization Software" Shortlists Keep Missing Runtime Authorization

Search "best authorization software" and you'll get a list of ten logos, and eight of them are identity providers, governance platforms, or privileged access tools that don't do authorization the way the term is actually used in a security architecture diagram. Okta shows up. SailPoint shows up. CyberArk shows up. All three are excellent at what they do. None of them decide, at the moment an application receives a request, whether that specific identity should be allowed to take that specific action on that specific piece of data right now. That decision is what runtime authorization software actually does, and most buyer's guides don't seem to know it exists as its own category, let alone that PlainID has spent over a decade building specifically for it.

Hila Shitrit Nissim

Oct 6, 2026

Why Centralized Policy Management Breaks at Data-Layer Scale

Learn why centralized policy management can break at data-layer scale and how distributed enforcement helps maintain performance, consistency, and control.

Hila Shitrit Nissim

Oct 5, 2026

Access Control for AI: How to Stop Agents From Over-Permissioning Themselves

Learn how access control for AI helps prevent over-permissioned agents with runtime authorization, composite identities, and zero standing privileges.

Hila Shitrit Nissim

Oct 5, 2026

Go Beyond Who Gets In: PlainID Launches a New Brand for the AI Era

PlainID unveils a new brand identity and positioning built around one idea: Go Beyond Who Gets In. Here is why runtime authorization is now the enterprise security control plane for the AI era.

Hila Shitrit Nissim

Sep 23, 2026

How runtime authorization helps turn EU AI Act requirements into enforceable controls

The EU AI Act is here. It entered into force in August 2024 and became generally applicable on 2 August 2026. For any organization deploying AI in a regulated market, it now sits inside the operating environment, or at least it should.

Rakesh Chowtee

Sep 2, 2026

Governing AI Agents: The 5-Layer Blueprint for Agentic IAM

Every industrial revolution has forced organizations to master a new control discipline—and the scaling of agentic AI is no exception. As enterprises deploy autonomous software that interprets goals and makes dynamic decisions, legacy static permissions are no longer enough. On the front lines of enterprise security, iC Consult—the leader in implementing complex IAM solutions - is seeing first-hand in the market how fast these unmanaged AI workloads are expanding. iC Consult, the premier global IT security provider that implements enterprise IAM on the front lines and sees the market shift first-hand, has partnered with PlainID, the leader in Agentic AI Access Management for Fortune 500 enterprises. Together, we are bridging the critical gap between passive "AI safety" content filters and true execution control by uniting identity and security under a single operational model: Agentic IAM.

Gal Helemski

Aug 31, 2026

How to Get Started with Authorization Strategy

Most enterprises already feel the pressure to upgrade their authorization systems to meet the requirements: fragmented policies, inconsistent enforcement, limited visibility, and growing gaps as new technologies, especially APIs, data platforms, and AI systems, are introduced. The challenge that comes with them is executing that change without disrupting the business.

Gal Helemski

Aug 25, 2026

From Security Control to Strategic Enabler: The Business Drivers Behind Modern Authorization

Authorization has traditionally been positioned as a technical control; a necessary component of security architecture, but rarely a strategic priority. It was something implemented within applications, managed by engineering teams, and revisited only when something broke or a compliance requirement demanded it. That perspective is rapidly becoming obsolete.

Gal Helemski

Secure Every Identity.
Go Beyond Who Gets In.

Centralize your policy governance while distributing runtime enforcement across applications, APIs, data platforms, and agentic AI workflows.

Get a demo