[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:identity-governance":3},{"control":4,"products":25,"stories":58,"lessons":102,"related":127,"compare":148},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.","One identity provider for all applications (single sign-on), automated joiner, mover and leaver processes, and periodic access reviews.","Accounts of former staff and contractors, and access that piles up over the years, are a quiet but common way in. Central identity makes offboarding immediate and provable, and turns access reviews from a spreadsheet exercise into a routine.",[11,12,13,14],"Can it remove access in all connected apps automatically when HR marks someone as leaving?","How many of our SaaS apps support single sign-on and automated provisioning with it?","Are access reviews built in, with evidence an auditor can use?","How are contractors and service accounts handled?","Risk: former staff or stale accounts used to access company systems. Control: single sign-on, an automated leaver process and quarterly access reviews. Owner: identity and access lead together with HR. Measure: accounts still active after the leave date.",[17,18,19,20],"NIS2 Art. 21(2)(i): human resources security and access control","DORA Art. 9: management of access rights","CIS Control 5: account management","ISO\u002FIEC 27001:2022 A.5.16 and A.5.18: identity management and access rights",{"name":22,"slug":23},"Access Control","access-control","2026-10-16T12:48:03.898485+00:00",[26,34,42,50],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"total":59,"last_days":60,"recent":61},393,164,[62,67,72,77,82,87,92,97],{"slug":63,"title":64,"published_at":65,"brief":66},"how-one-ai-agent-exposed-five-critical-enterprise-security-gaps-b32ccd","How one AI agent exposed five critical enterprise security gaps","2026-11-13T15:01:11+00:00","AI agent processing invoices exposed five critical enterprise security gaps.",{"slug":68,"title":69,"published_at":70,"brief":71},"suspected-north-korean-it-workers-reached-onboarding-at-companies-with-open-data-71c043","Suspected North Korean IT workers reached onboarding at companies with open data","2026-11-13T06:00:22+00:00","North Korean IT workers infiltrated companies, reaching onboarding with access to sensitive data.",{"slug":73,"title":74,"published_at":75,"brief":76},"critical-red-hat-quay-flaw-lets-attackers-read-and-overwrite-all-private-contain-83f9d1","Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry","2026-11-12T16:27:01+00:00","Critical Red Hat Quay flaw allows attackers to read\u002Foverwrite private container images.",{"slug":78,"title":79,"published_at":80,"brief":81},"who-collects-the-keys-when-an-ai-agent-retires-4045c1","Who collects the keys when an AI agent retires?","2026-11-12T06:00:57+00:00","AI agents require formal offboarding processes similar to human employees to manage access and ongoing tasks.",{"slug":83,"title":84,"published_at":85,"brief":86},"hackers-could-abuse-microsoft-entra-ai-agents-to-hijack-enterprise-accounts-with-5a0001","Hackers Could Abuse Microsoft Entra AI Agents to Hijack Enterprise Accounts Without Stealing Passwords","2026-11-11T17:17:04+00:00","Hackers can hijack enterprise accounts by tricking users into approving fake AI agents.",{"slug":88,"title":89,"published_at":90,"brief":91},"ai-hacking-frameworks-like-artex-pentagi-and-agent-zero-found-running-on-interne-0a53e4","AI Hacking Frameworks Like ARTEX, PentAGI, and Agent Zero Found Running on Internet-Accessible Servers","2026-11-11T17:07:39+00:00","AI hacking frameworks found exposed on internet-accessible servers.",{"slug":93,"title":94,"published_at":95,"brief":96},"japanese-furniture-giant-nitori-says-hackers-stole-37-6m-customer-records-e01c8b","Japanese furniture giant Nitori says hackers stole 37.6M customer records","2026-11-10T20:54:55+00:00","Japanese retailer Nitori reports data breach affecting 37.6M customer records.",{"slug":98,"title":99,"published_at":100,"brief":101},"over-a-dozen-organizations-hit-in-qubole-supply-chain-attack-40742b","Over a Dozen Organizations Hit in Qubole Supply Chain Attack","2026-11-10T13:27:44+00:00","Attackers exploited compromised Qubole IAM credentials to steal data from over a dozen organizations.",[103,107,111,115,119,123],{"slug":104,"title":105,"published_at":106},"unsecured-ai-agent-exposes-enterprise-to-invoice-fraud-via-email-manipulation","Unsecured AI Agent Exposes Enterprise to Invoice Fraud via Email Manipulation","2026-11-13T16:22:22.358+00:00",{"slug":108,"title":109,"published_at":110},"north-korean-fake-it-workers-reached-onboarding-and-accessed-sensitive-employee-data","North Korean Fake IT Workers Reached Onboarding and Accessed Sensitive Employee Data","2026-11-13T08:22:51.018+00:00",{"slug":112,"title":113,"published_at":114},"ai-agent-offboarding-the-credential-and-audit-trail-problem","AI Agent Offboarding: The Credential and Audit Trail Problem","2026-11-12T07:20:37.561+00:00",{"slug":116,"title":117,"published_at":118},"ai-hacking-tools-left-exposed-online-without-authentication","AI Hacking Tools Left Exposed Online Without Authentication","2026-11-11T18:21:01.212+00:00",{"slug":120,"title":121,"published_at":122},"bluephishing-ai-agent-oauth-consent-abuse-bypasses-password-based-defenses","BluePhishing: AI Agent OAuth Consent Abuse Bypasses Password-Based Defenses","2026-11-11T18:20:43.212+00:00",{"slug":124,"title":125,"published_at":126},"376m-nitori-customer-records-stolen-after-weeks-of-undetected-access","37.6M Nitori Customer Records Stolen After Weeks of Undetected Access","2026-11-10T21:20:22.479+00:00",[128,132,136,140,144],{"slug":129,"name":130,"problem":131},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":133,"name":134,"problem":135},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",{"slug":137,"name":138,"problem":139},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":141,"name":142,"problem":143},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",{"slug":145,"name":146,"problem":147},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"okta\u002Fworkforce-identity":149,"microsoft\u002Fentra-id":168,"sailpoint\u002Fhuman-fabric":186,"omada\u002Fomada-identity-cloud":200},{"hq_country":150,"also_provides":151,"reviews":153,"affected":166,"reported":167},"US",[152],{"slug":129,"name":130},[154,157,160,163],{"label":155,"url":156},"TechRadar: Okta review (2023)","https:\u002F\u002Fwww.techradar.com\u002Freviews\u002Fokta-review",{"label":158,"url":159},"Gartner Peer Insights: Okta Workforce Identity user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fokta-workforce-identity",{"label":161,"url":162},"PeerSpot: Okta Platform user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fokta-platform-reviews",{"label":164,"url":165},"CSO Online: Okta bets on identity to control AI agents, but is identity enough? (2026)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F4225230\u002Fokta-bets-on-identity-to-control-ai-agents-but-is-identity-alone-enough.html",5,2,{"hq_country":150,"also_provides":169,"reviews":171,"affected":184,"reported":185},[170],{"slug":129,"name":130},[172,175,178,181],{"label":173,"url":174},"AV-TEST: business results for Microsoft Defender","https:\u002F\u002Fwww.av-test.org\u002Fen\u002Fantivirus\u002Fbusiness-windows-client\u002Fmanufacturer\u002Fmicrosoft\u002F",{"label":176,"url":177},"ITPro: Microsoft Defender for Business review (2024)","https:\u002F\u002Fwww.itpro.com\u002Fcloud\u002Fcloud-security\u002Fmicrosoft-defender-for-business-review-feature-filled-enterprise-security-for-small-businesses",{"label":179,"url":180},"Gartner Peer Insights: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fmicrosoft-defender-for-endpoint",{"label":182,"url":183},"PeerSpot: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmicrosoft-defender-for-endpoint-reviews",311,128,{"hq_country":150,"also_provides":187,"reviews":188,"affected":198,"reported":199},[],[189,192,195],{"label":190,"url":191},"PeerSpot: SailPoint Identity Security Cloud user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fsailpoint-identity-security-cloud-reviews",{"label":193,"url":194},"Gartner Peer Insights: SailPoint Identity Security Cloud user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsailpoint-identity-security-cloud",{"label":196,"url":197},"Common Criteria validation: SailPoint IdentityIQ v8.3p5","https:\u002F\u002Fwww.commoncriteriaportal.org\u002Ffiles\u002Fepfiles\u002Fst_vid11520-vr.pdf",0,1,{"hq_country":201,"also_provides":202,"reviews":203,"affected":198,"reported":198},"DK",[],[204,207],{"label":205,"url":206},"Gartner Peer Insights: Omada Identity Cloud user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fomada-identity-cloud",{"label":208,"url":209},"PeerSpot: Omada Identity user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fomada-identity-reviews"]