Articles, whitepapers, and videos on putting AI agents to work in the enterprise — safely and at scale.
SACR named ARISE. Every vendor will now claim it. Six capabilities separate genuine ARISE platforms from adjacent tools with a new label - and six evaluation questions that tell you which one you are looking at before you buy.
Chen Pipek
AI agent security doesn't have to be overwhelming. Instead of chasing every new acronym or vendor category, start with three simple questions that cut through the noise. This practical framework helps CISOs prioritize discovery, identity, and runtime governance in the right order, so you can build an AI agent security strategy that actually works.
Chen Pipek
Permissions copied from one employee to the next when someone changed roles. Temporary access granted three years ago and never revoked. Files shared "just for now" that are still accessible today. These are not new problems. They have been accumulating in enterprise environments for years, sitting underneath security programs that were doing their best but were never designed to surface them systematically. AI agents surface them all at once. At machine speed.
Chen Pipek
Showing 1–6 of 34 articles
NHI is evolving. Or is it being replaced? In this fireside chat, SACR analyst Lawrence Pingree and Amir Ofek make the strongest possible case for why extending NHI frameworks to cover AI agents is not the right strategy. The argument: organizations treating enterprise AI agent governance as "NHI with extra steps" are building programs that will fail in production. ARISE - Agentic Runtime Identity Security Enforcement - is not an extension of NHI. It is what comes after it.
Amir Ofek
PDFaizome maps its production architecture against the five agentic identity failure modes identified by NIST NCCoE - credential sharing, static credentials, broadly scoped access, local user account deployment, and over-reliance on human-in-the-loop controls. This technical brief details how aizome's inline MCP identity broker eliminates each failure mode structurally, and maps the implementation against NIST SP 800-63, SPIFFE, OAuth 2.0, Rich Authorization Requests (RFC 9396), and the emerging WIMSE standard. Includes the six-stage SAML impersonation model, full audit trail schema, and compliance framework mapping across NIST AI RMF, SANS Stage 3, OWASP Agentic Top 10, and EU AI Act Article 12.
Download PDF
PDFSACR - one of the leading analyst firms covering identity security - recently named what a wave of enterprise deployments has been pointing toward: ARISE. Agentic Runtime Identity Security Enforcement. ARISE is not NHI security renamed. It is not IAM extended to cover AI agents. It is a new category, built for governance challenges that no existing identity framework was designed to address.
Download PDF
PDFThe AI Agent Cost Nobody Budgeted For explores why enterprise AI spending is rising despite falling token prices. Learn the hidden cost drivers behind autonomous AI agents, the governance gaps creating budget overruns, and the practical framework organizations can use to gain visibility, control costs, and scale AI responsibly.
Download PDFOccasional, substance-first writing on identity, intent, and putting AI agents to work across the enterprise. No noise.
