Identity security blog

SHORT ANSWER

Analysis, explainers and buyer checklists written from the standards and vendor material cited across this site. Every post is dated and lists its sources.

Editorial assessment · Desk research from public vendor material · Reviewed 2026-09-29

  • 2026-09-23

    • Buying
    • AI agents

    An AI agent security buyer's checklist: 12 questions to ask before a pilot

    Before piloting an AI agent security product, get written answers to twelve questions about credentials, per-call checks, human approval, discovery, logging and availability. The questions follow the six criteria on our AI agent security page and the rules in the MCP specification.

    4 min read

  • 2026-08-18

    • MCP
    • Buying

    How to run a proof of concept for an MCP gateway

    Run an MCP gateway proof of concept against the MCP specification's own security rules. Pick three real workflows, write the policies first, then try the failures the specification lists and check that each one is stopped and logged.

    4 min read

  • 2026-08-11

    • ITDR
    • Buying

    Active Directory is still the target: questions ITDR buyers should ask in 2026

    Many identity attacks still aim at the directory, because it hands out every other account. When comparing ITDR tools for Active Directory and Entra ID, ask what each one watches, which attacks it names, what it can stop before access is granted, and how you recover if the directory itself is damaged.

    4 min read