The Non-Human & AI Identity Podcast
- Episodes
- 101
- Released
- daily
- Latest episode
- Nov 13, 2026
About the podcast
By Humans for Humans, No AI Generated Content Mr. NHI hosts and shares the voices shaping the future of Non-Human & Agentic AI Identity. SME discussions, webinars, keynotes and panel sessions from conferences, summits and workshops and much more.
Episodes 101
Keep Your Friends Close & Your NHIs Closer - Agentic IAM Day 2026
Can you still trust your non-human identities (NHIs) once AI agents start making their own decisions? We used to trust service accounts and workloads because they behaved predictably. Autonomous agents don’t …
Show notes
Can you still trust your non-human identities (NHIs) once AI agents start making their own decisions? We used to trust service accounts and workloads because they behaved predictably. Autonomous agents don’t, and that changes how identity security, least privilege and authorization need to work.
At Agentic IAM Day 2026, hosted by PlainID, Lalit Choda (Founder & CEO of NHI Mgmt Group, known as Mr. NHI) put two very different viewpoints in the same room. Steven Rennick (Senior Leader, Identity Strategy & Architecture, Ciena) speaks as the enterprise architect who has to make agent trust work in practice. Dror Zelber (VP, AI Product Marketing, Radware) has watched agents go off-script in the wild and argues we should treat them like humans. Together they ask whether our NHI “friends” are turning into insider threats, and why every agent should start with zero privilege.
What you’ll learn:
- Why trust based only on identity and permissions breaks down for AI agents, and what continuous, runtime trust looks like
- Two real ways agents become insider threats: indirect prompt injection, and forgotten or wider-than-expected permissions
- How least privilege has to change for autonomous agents: start with zero standing access and grant it just in time for each action
- Why monitoring agent behaviour against its stated goals and intent matters
- Whether an AI agent is “just another NHI” or should be governed more like a human
- Why “machine-speed judgment” matters more than machine-speed authorization
Chapters:
(00:00) Introduction – Agentic IAM Day 2026
(00:31) Friends or enemies? Rethinking trust in NHIs
(01:30) Trust models for autonomous machine actors
(02:48) When do NHIs become insider threats?
(05:15) Least privilege for AI agents
(07:28) Real-time authorization & behavioural monitoring
(09:52) Is an AI agent just another NHI?
(11:44) Treating every identity as a “digital actor”
(13:23) Speed vs. judgment in agent authorization
(15:15) Closing advice for your agentic AI journeyNHI Foundation Training: the only accredited NHI training programme in the industry. Learn how to manage and secure NHIs, including AI agents.
Enrol here: https://training.nhimg.org/Learn more about NHI and AI agent security: https://nhimg.org
Follow us:
LinkedIn: https://www.linkedin.com/company/non-human-identity-management-group
TikTok: https://www.tiktok.com/@mr_non_human_identitySameer Mehta is Mr NHI's Human Identity In The Hot Seat
AI Agents Have No Conscience — So Treat Them Like a Rogue EmployeeSameer Mehta, Chief Product Officer at Opal Security, answers 10 machine-speed questions on identity security, agentic AI, and how to secure a …
Show notes
AI Agents Have No Conscience — So Treat Them Like a Rogue EmployeeSameer Mehta, Chief Product Officer at Opal Security, answers 10 machine-speed questions on identity security, agentic AI, and how to secure a workforce that is no longer only human.🔑 Key Takeaways:We haven’t built identity security for a world that no longer exists — the problems are the same, but the scale and attack surface have changedCISOs are ready for the challenge, but perimeter, endpoint and cloud controls must be re-engineered for the agent eraIAM for AI and AI for IAM go hand in hand — at machine speed, you need agents reviewing agent accessAI agents are already in production without proper guardrails — standing access granted on “vibes” is going uncheckedAgentic AI security and NHI security aren’t the same thing — they share ownership challenges, but agents are purpose-driven in a way service accounts aren’tAgents behave more like software than employees — mission-driven, with no conscienceAgents should be allowed to create and provision other identities, as long as guardrails are enforced behind the scenesAgents will need background checks over time — maybe ID.me extends to agentsThe AI digital workforce won’t cause mass unemployment — humans will redefine their roles, and GDP will growWould Sameer trust an AI agent to make a decision affecting his own security? Yes — trust but verify.Sameer Mehta, Chief Product Officer at Opal Security and former product leader at Veza, faces Mr. NHI’s Human Identity in the Hot Seat — 10 machine-speed questions on IAM, agentic AI security, non-human identity, and the future of the digital workforce.From The Non-Human & AI Identity Podcast 🎙️⏱ Chapters:00:00 Introduction00:18 Have We Built Identity Security for a World That No Longer Exists?01:23 Are CISOs Ready for the Fleet of Autonomous Digital Employees?02:53 Is IAM for AI More Important Than AI for IAM?04:41 Are AI Agents Being Deployed Into Production Without Security Guardrails?06:09 Does Agentic AI Security Equal NHI Security?07:47 Do AI Agents Behave More Like Employees or Software?09:50 Should AI Agents Be Allowed to Create and Provision Other Identities?11:21 Do Agents Need Background Checks Like Humans?12:53 Will the AI Agent Digital Workforce Lead to Mass Unemployment?14:32 Would You Trust an AI Agent to Make a Decision Impacting Your Own Security?#CyberSecurity #NonHumanIdentity #IAM #AIAgents #IdentitySecurity #AgenticAI #ZeroTrust #DigitalIdentity #NHI #MachineIdentity #IdentityGovernance #CISO #LeastPrivilege #StandingAccess #AgenticSecurity #ServiceAccounts #PolicyAsCode #AccessManagement #OpalSecurity #MrNHI
Ep # 16 - Policy Enforcement for AI Agents
Policy Enforcement for AI Agents: Why Human Approvals Can’t Keep UpAI agents are requesting access at machine speed, chaining MCP tool calls across ten or more applications and spawning sub-agents. Access …
Show notes
Policy Enforcement for AI Agents: Why Human Approvals Can’t Keep UpAI agents are requesting access at machine speed, chaining MCP tool calls across ten or more applications and spawning sub-agents. Access policies built for humans waiting on approval tickets can’t keep pace.Sameer Mehta, Chief Product Officer at Opal Security and former product leader at Veza, joins Lalit Choda (Mr. NHI) on the Non-Human and AI Identity Podcast. He explains why policy enforcement for AI agents needs a new model. That model treats agents as mission-driven software with no conscience, combines fixed rules with AI-driven decisions, and stops granting standing access based on “vibes.”The conversation covers why agents are already reaching production without proper security guardrails, and how to keep policy as code predictable when the agents it governs are non-deterministic. It also covers how agent manifests expose off-purpose agents, and why access decisions only scale when an AI agent approves, denies or escalates them.What you’ll learn:Why identity security doesn’t need to be thrown away for agentic AI: the problems are the same, but the scale and attack surface have changedHow standing access piles up in production through judgment-call approvals, and why it goes unnoticedWhy AI agent security and NHI security share ownership challenges but are not the same thingWhy one-size-fits-all access policy breaks for agents, and how to set policy by identity type, resource sensitivity and agent lifespanHow to combine fixed rules and custom instructions with AI-driven access decisions so outcomes stay predictableHow agent manifests reveal off-purpose agents that stray beyond their declared MCP tool call chainHow to evolve policy from access-decision data: move routine requests to birthright access or auto-approval, and keep humans in the loop for privileged resources and break-glass accountsKey Moments:Introduction & Meet Sameer [00:00–03:15]Mr. NHI’s Human Identity in the Hot Seat [03:15–19:36]What Security Teams Are Asking About AI Agents [19:36–24:16]Is Agent Risk Exposing the Wider NHI Problem? [24:16–25:52]Why Human-Era Access Policy Breaks for Agents [25:52–28:44]Building a Policy Model for Agents: Paladin & Policy as Code [28:44–32:32]Policy as Code vs Non-Deterministic Agents [32:32–36:43]Real-World Example: Custom Instructions & Human-in-the-Loop [36:43–40:00]From Humans to Agents: How Paladin & Opal 0 Evolved [40:00–45:01]Agent Manifests & Detecting Off-Purpose Agents [45:01–47:12]Upfront Policy vs Learned Policy [47:12–50:30]Advice for Security Leaders: Start, Measure, Iterate [50:30–51:50]Learn More About Opal & Closing [51:50–53:31]📚 NHI Knowledge Centre: nhimg.org🔗 Opal Security: opal.dev#NHI #NonHumanIdentity #AIAgents #AgenticAI #IdentitySecurity #MrNHI #DigitalIdentity #IAM #PolicyAsCode #PolicyEnforcement #AccessControl #IdentityGovernance #IGA #LeastPrivilege #JustInTimeAccess #MCP #AgenticSecurity #Cybersecurity #MachineIdentity #CISO #AccessManagement #PAM #ServiceAccounts #AgentSecurity #ArtificialIntelligence
Alex Bovee is Mr NHI's Human Identity In The Hot Seat
AI Agents Are Non-Deterministic, Non-Trustable — and Already in Your Production EnvironmentAlex Bovee, CEO and Co-Founder of C1.ai and former security product leader at Okta, faces Mr. NHI's Human Identity in …
Show notes
AI Agents Are Non-Deterministic, Non-Trustable — and Already in Your Production Environment
Alex Bovee, CEO and Co-Founder of C1.ai and former security product leader at Okta, faces Mr. NHI's Human Identity in the Hot Seat — 10 machine-speed questions on IAM, agentic AI security, non-human identity, and the future of the digital workforce.
─────────────────────────────────────
KEY TAKEAWAYS
- Identity security was built for humans using SaaS apps — that world no longer exists
- The surface area of the enterprise has fundamentally exploded with agentic AI
- Everyone is a builder now — and the world is very, very messy
- IAM for AI is the bigger imperative over AI for IAM
- AI agents are being deployed into production without security guardrails — 100%
- Agentic AI security and NHI security aren't the same thing
- Agents are non-deterministic and non-trustable — unlike humans and unlike software
- AI agents already create and provision other identities — and that's not necessarily bad, but it needs control points
- The insider threat has been amplified by agentic AI — UEBA is making a comeback
- Would Alex trust an AI agent to make a decision impacting his own security? No.
─────────────────────────────────────
CHAPTERS
- Introduction [00:00]
- Have We Built Identity Security for a World That No Longer Exists? [00:18]
- Are CISOs Ready for the Fleet of Autonomous Digital Employees? [01:25]
- Is IAM for AI More Important Than AI for IAM? [02:47]
- Are AI Agents Being Deployed Into Production Without Security Guardrails? [04:08]
- Does Agentic AI Security Equal NHI Security? [04:16]
- Do AI Agents Behave More Like Employees or Software? [05:40]
- Do Agents Need Background Checks Like Humans? [08:21]
- Should AI Agents Be Allowed to Create and Provision Other Identities? [08:51]
- Will the AI Agent Digital Workforce Lead to Mass Unemployment? [09:24]
- Would You Trust an AI Agent to Make a Decision Impacting Your Own Security? [10:52]
─────────────────────────────────────
RESOURCES
NHI Knowledge Centre: nhimg.org
C1: c1.ai─────────────────────────────────────
From The Non-Human & AI Identity Podcast
#CyberSecurity #NonHumanIdentity #IAM #AIAgents #IdentitySecurity #AgenticAI #ZeroTrust #DigitalIdentity #NHI #MachineIdentity #IdentityGovernance #CISO #RuntimeAuthorization #AgenticSecurity #ServiceAccounts #APIKeySecurity #InsiderThreat #AccessManagement #C1AI #MrNHI
Ep # 15 - Identity is the 3rd Generation of Security
Identity is the 3rd Generation of SecurityIdentity security, IAM, and agentic AI are colliding — and the old world of network perimeters and endpoint controls can no longer keep up.Alex Bovee, CEO and …
Show notes
Identity is the 3rd Generation of Security
Identity security, IAM, and agentic AI are colliding — and the old world of network perimeters and endpoint controls can no longer keep up.
Alex Bovee, CEO and Co-Founder of C1.ai and former security product leader at Okta, joins Lalit Choda (Mr. NHI) on the Non-Human and AI Identity Podcast to map out how we got here — from network-centric perimeters to endpoint security controls to identity as the new security control plane — and what the third generation of cybersecurity actually has to look like when AI agents are non-deterministic, goal-maxing, and completely without a moral compass.
The conversation covers why visibility alone won't save you, why AI agents are already creating their own credentials and API keys without security guardrails, and why the only way to truly operate at machine speed is to let agents evaluate other agents — a mindset shift most CISOs and security leaders aren't ready for.
─────────────────────────────────────
WHAT YOU'LL LEARN
- Why the first two generations of security — network security and endpoint security — have reached their limits
- Why identity security is the only control plane that works across human identities, non-human identities (NHIs), and AI agents
- Why AI agents are non-deterministic and non-trustable — and what that means for IAM and access control
- Why runtime authorization must replace orchestration-based identity governance and access management
- Why visibility into your NHI and machine identity estate is not enough without full lifecycle management
- Why agents evaluating other agents is an inevitable part of agentic AI security at machine speed
- How to think about the four control points for agentic workloads: harness, data and context, LLM inference endpoints, and credentials
─────────────────────────────────────
KEY MOMENTS
- Introduction & Meet Alex [00:00–01:10]
- Mr. NHI's Human Identity in the Hot Seat [01:10–12:14]
- The 3 Generations of Security: Network, Endpoint, Identity [12:25–17:20]
- Why Identity is the New Cybersecurity Control Plane [17:20–20:20]
- From Orchestration to Runtime: The Shift That Changes Everything [20:20–23:05]
- NHI Technical Debt & Credential Lifecycle Management [23:05–30:25]
- Agents Evaluating Agents: The Machine-Speed Imperative [30:25–34:45]
- C1's Architecture: 4 Control Points for the Agentic Enterprise [34:45–40:10]
- Enabling AI Builders Without Compromising Zero Trust Security [40:10–43:05]
- C1 Transform — October 6th, San Francisco [43:05–46:30]
- Closing Thoughts for CISOs and Security Leaders [46:30–47:28]
─────────────────────────────────────
RESOURCES
NHI Knowledge Centre: nhimg.org
C1: c1.ai
C1 Transform: c1.ai/transform─────────────────────────────────────
#NHI #NonHumanIdentity #AIAgents #AgenticAI #IdentitySecurity #MrNHI #DigitalIdentity #IAM #ZeroTrust #RuntimeAuthorization #IdentityManagement #AgenticSecurity #Cybersecurity #MachineIdentity #CISO #CredentialSecurity #AccessManagement #IdentityGovernance #PAM #ServiceAccounts #APIKeySecurity #ArtificialIntelligence #AgentSecurity
Henrique Teixeira is Mr NHI's Human Identity In The Hot Seat
Identity security was built for a human world — but AI agents are changing the rules.Henrique Teixeira, SVP of Strategy at Saviynt, answers 9 machine-speed questions on AI agents, NHI security, identity …
Show notes
Identity security was built for a human world — but AI agents are changing the rules.
Henrique Teixeira, SVP of Strategy at Saviynt, answers 9 machine-speed questions on AI agents, NHI security, identity governance, the future of work, and the growing attack surface created by autonomous agents.
─────────────────────────────────────
KEY TAKEAWAYS
- Identity security was built primarily around humans — and the world has changed
- Agentic AI security and NHI security aren't the same thing
- AI agents may behave more like employees than software
- AI agents could create and provision other identities as part of their productivity
- Organisations are deploying AI faster than they can govern it
- Generating AI content is cheap — validating it isn't
- The attack surface created by thousands of agents is being underestimated
─────────────────────────────────────
CHAPTERS
- Introduction [00:00]
- Have We Built Identity Security for a World That No Longer Exists? [00:15]
- Does Agentic AI Security Equal NHI Security? [00:29]
- Do AI Agents Behave More Like Employees or Software? [01:14]
- Should AI Agents Be Allowed to Create Other Identities? [01:28]
- Will AI Agents Eventually Need to Be Fired? [01:49]
- Is IAM for AI More Important Than AI for IAM? [02:12]
- Are Organisations Deploying AI Faster Than They Can Govern It? [02:36]
- Will the AI Agent Digital Workforce Lead to Mass Unemployment? [02:44]
- Are We Underestimating the Attack Surface Created by Thousands of Agents? [05:47]
─────────────────────────────────────
RESOURCES
NHI Knowledge Centre: nhimg.org
─────────────────────────────────────
From The Non-Human & AI Identity Podcast
#CyberSecurity #NonHumanIdentity #IAM #AIAgents #IdentitySecurity #AgenticAI #ZeroTrust #DigitalIdentity #NHI #MachineIdentity #IdentityGovernance #CISO
Ep # 14 - Turning an AI Breach into a Case Study
Identity security was built for a human world — but that world is changing fast.Henrique Teixeira, SVP of Strategy at Saviynt and former Gartner analyst, joins Mr. NHI to discuss what the last decade of …
Show notes
Identity security was built for a human world — but that world is changing fast.
Henrique Teixeira, SVP of Strategy at Saviynt and former Gartner analyst, joins Mr. NHI to discuss what the last decade of breaches has taught us, why identity remains the common denominator in the attack chain, and why organisations need to rethink how they approach NHI and AI identity.
The conversation also explores the growing technical debt around API keys, service accounts and OAuth tokens, why AI security has become an undefined "goo" of overlapping categories, and why organisations should build a broader identity programme covering humans, NHIs and AI agents.
─────────────────────────────────────
WHAT YOU'LL LEARN
- Why traditional identity security was built primarily around humans
- Why agentic AI security and NHI security aren't necessarily the same thing
- Why AI agents may behave more like employees than software
- Why organisations need to assume breach and focus on detection and recovery
- How decades of NHI technical debt are creating new attack opportunities
- Why identity remains a common denominator throughout the attack chain
- Why organisations should build one identity programme covering humans, NHIs and AI agents
- Why clear taxonomy matters in the increasingly confusing AI security market
- How runtime access control and intent-aware authorization could change AI security
- What the Hugging Face incident teaches us about NHI risk
─────────────────────────────────────
KEY MOMENTS
- Introduction & Meet Henrique [00:00–03:11]
- Mr. NHI's Human Identity in the Hot Seat [03:11–09:42]
- Turning a Breach into a Case Study [09:42–14:35]
- Why Identity Is the Common Denominator in Every Attack [14:35–16:15]
- Why AI Security Has Become "Goo" [16:15–19:40]
- The NHI Technical Debt Problem [20:06–25:20]
- Building an Identity Programme for Humans, NHIs & AI [23:31–29:36]
- Saviynt's Zuma: Insights, Access & Governance [29:36–32:09]
- Runtime Authorization & Intent-Aware Access [32:10–34:23]
- The Hugging Face Lesson & Closing Advice [34:23–38:07]
─────────────────────────────────────
RESOURCES
NHI Knowledge Centre: nhimg.org
Saviynt: saviynt.com─────────────────────────────────────
#cybersecurity #nonhumanidentity #iam #aiagents #agenticsecurity #agenticai #identitysecurity #zerotrust #digitalidentity #nhi #artificialintelligence #ai #ciso #machineidentity #Saviynt
NHI & AI Identity Summit : The Next 24 Months
What will the NHI and agentic AI security landscape look like over the next 24 months?In the final panel from the NHI & AI Identity Summit at Identiverse 2026 (IDV 2026), industry leaders make predictions about …
Show notes
What will the NHI and agentic AI security landscape look like over the next 24 months?In the final panel from the NHI & AI Identity Summit at Identiverse 2026 (IDV 2026), industry leaders make predictions about where Non-Human Identity and agentic AI security are heading — and which identity and security controls may struggle as autonomous systems scale.The discussion explores autonomous agents, delegation chains, ephemeral identities, emerging attack paths, regulation, governance, shared signals and the growing need for visibility across agentic environments.Speakers:Lalit Choda — CEO & Founder, NHI Mgmt GroupAmir Ofek — Co-Founder & CEO, AizomeEve Maler — Founder, Venn FactoryJohn Yeoh — Chief Security Officer, CSAWhat You’ll Learn:• Where NHI and agentic AI security could go over the next 24 months• Which identity and security controls may break first as agents scale• How autonomous and ephemeral agents change identity lifecycle management• Why delegation chains and agent-to-agent interactions create new risks• How regulation and liability may evolve around AI systems• Why visibility and inventory are foundational to governing agentic environmentsChapters:00:00–03:58 — The Next 24 Months: What Comes Next?03:58–08:24 — How Agentic AI Changes the Security Landscape08:24–11:26 — New Attack Paths & Unpredictable Agent Behaviour11:26–14:26 — Which Identity Controls Break First?14:26–17:26 — Ephemeral Agents, Lifecycle & Delegation17:26–20:24 — The Key Controls for an Agentic World20:24–23:22 — Governance, Shared Signals & Visibility23:22–25:58 — The Road Ahead for NHI & Agentic AI SecurityThe NHI & AI Identity Summit at IDV 2026 brings together identity, IAM, cybersecurity and AI security leaders to explore how Non-Human Identities and agentic AI are reshaping enterprise security.Subscribe for more sessions from the NHI & AI Identity Summit at IDV 2026.#NHI #NonHumanIdentity #AgenticAI #AIIdentity #IdentitySecurity #IAM #Cybersecurity #IDV2026
NHI & AI Identity Summit : The Buyer’s Dilemma
The NHI and agentic AI security market is growing quickly — but for security leaders, the question is no longer simply what products exist. It is how to evaluate them, implement them and prove their value.In …
Show notes
The NHI and agentic AI security market is growing quickly — but for security leaders, the question is no longer simply what products exist. It is how to evaluate them, implement them and prove their value.In this session from the NHI & AI Identity Summit at Identiverse 2026 (IDV 2026), security leaders discuss the buyer’s perspective on evaluating NHI and agentic AI security solutions across discovery, enforcement, monitoring, governance, implementation and business value.The conversation explores how organizations can cut through market fragmentation, define their requirements, evaluate vendors and avoid buying technology that is difficult to implement or fails to address the problems that matter most.Speakers:Amit Masand — Founder & CEO, IDM ExpressMurad Dikeidek — Head of Cybersecurity, UI HealthSteven Rennick — Senior IT Architect, CienaWhat You’ll Learn:• What security buyers should evaluate before choosing an NHI or agentic AI security solution• Why discovery, enforcement and monitoring all matter• How to evaluate products against real business and security requirements• Why implementation and adoption can matter as much as product capabilities• How governance, accountability and cross-functional ownership affect buying decisions• What buyers should look for in emerging AI identity security platformsChapters:00:00–02:57 — The Buyer’s Dilemma02:57–06:01 — How Security Buyers Evaluate the Market06:01–09:57 — Measuring Product Value & Business Outcomes09:57–12:51 — Discovery, Enforcement & Monitoring12:51–15:57 — Governance, Committees & Implementation15:57–18:57 — Evaluating AI Identity Security Capabilities18:57–20:02 — Buying NHI & Agentic AI Security in the EnterpriseThe NHI & AI Identity Summit at IDV 2026 brings together identity, IAM, cybersecurity and AI security leaders to explore how Non-Human Identities and agentic AI are reshaping enterprise security.Subscribe for more sessions from the NHI & AI Identity Summit at IDV 2026.#NHI #NonHumanIdentity #AgenticAI #AIIdentity #IdentitySecurity #IAM #Cybersecurity #IDV2026
NHI & AI Identity Summit : Governing AI
AI agents need identity, access and authorization — but the standards and frameworks used to govern them are still evolving.In this session from the NHI & AI Identity Summit at Identiverse 2026 (IDV 2026) …
Show notes
AI agents need identity, access and authorization — but the standards and frameworks used to govern them are still evolving.In this session from the NHI & AI Identity Summit at Identiverse 2026 (IDV 2026), identity and security experts examine the standards, protocols and frameworks emerging around agentic AI, including agent identity, OAuth, MCP, delegation, authorization, context and auditability.The discussion focuses on a practical challenge for enterprises: how to combine existing identity standards with emerging agentic protocols to control what AI agents are allowed to do and maintain visibility over their actions.Speakers:Dr Rogério Rondini — Senior Manager, PwCRahul Godha — Software Engineer, LinkedInNiv Goldenberg — Co-Founder & CPO, Linx SecurityDavid Goldschlag — Co-Founder & CEO, AembitWhat You’ll Learn:• How identity standards are evolving for AI agents• How to model agent identity, access and authorization• The role of OAuth, MCP, delegation tokens and transaction context• How multi-hop delegation changes authorization and auditability• Why centralized agent registration and discovery matter• How to scope, monitor and audit what agents and sub-agents are allowed to doChapters:00:00–03:58 — Governing AI: The Identity Standards Challenge03:58–08:58 — Modeling Agent Identity, Access & Authorization08:58–12:56 — MCP, OAuth & Emerging Agent Standards12:56–17:20 — Tool Calls, Policy Enforcement & Authorization17:20–21:04 — Agent Architecture, Gateways & Data Handling21:04–25:31 — Agent Registries, Context & Delegation25:31–30:42 — Multi-Hop Delegation & Permission Scoping30:42–35:24 — Transaction Integrity, Intent & Traceability35:24–41:22 — What Standards Can and Cannot SolveThe NHI & AI Identity Summit at IDV 2026 brings together identity, IAM, cybersecurity and AI security leaders to explore how Non-Human Identities and agentic AI are reshaping enterprise security.Subscribe for more sessions from the NHI & AI Identity Summit at IDV 2026.#NHI #NonHumanIdentity #AgenticAI #AIIdentity #IdentitySecurity #IAM #Cybersecurity #IDV2026
NHI & AI Identity Summit : Secure by Design
AI agents are moving from experimentation into real enterprise environments. As they reason, act, delegate and interact with systems at machine speed, identity and security controls need to be built into the …
Show notes
AI agents are moving from experimentation into real enterprise environments. As they reason, act, delegate and interact with systems at machine speed, identity and security controls need to be built into the development lifecycle — not added after deployment.In this session from the NHI & AI Identity Summit at Identiverse 2026 (IDV 2026), identity and cybersecurity leaders explore how to secure AI agents by design, from development and deployment through discovery, authorization, monitoring and ongoing governance.The discussion looks at rogue agent incidents, delegation chains, agent discovery, external AI agents, policy controls and the growing convergence between workforce, customer and Non-Human Identities.Speakers:Jesse Minor — Identity Security Expert, KPMGDavid Chan — Director of IAM, USCHenrique Teixeira — SVP of Strategy, SaviyntShashwat Sehgal — Founder & CEO, PO SecurityWhat You’ll Learn:• Why identity and security controls need to be built into the AI agent development lifecycle• How agent autonomy and delegation change traditional identity risk• Why agent discovery and inventory are foundational controls• How to manage internal, external and third-party AI agents• How policy, authorization, monitoring and managed environments can reduce agent risk• Why organizations need to prepare for the convergence of workforce, customer and agentic identitiesChapters:00:00–05:27 — Secure by Design: Why AI Agent Security Starts Early05:27–11:23 — Responding to Rogue AI Agent Incidents11:23–16:42 — Delegation, Agent Identity & New Attack Paths16:42–21:57 — Building Identity Controls into Agent Deployment21:57–24:58 — Discovery: Finding the Agents in Your Environment24:58–30:52 — Governing External & Third-Party AI Agents30:52–33:49 — High-Risk Use Cases & Impersonation33:49–38:06 — The Convergence of Workforce, Customer & Agentic IdentityThe NHI & AI Identity Summit at IDV 2026 brings together identity, IAM, cybersecurity and AI security leaders to explore how Non-Human Identities and agentic AI are reshaping enterprise security.Subscribe for more sessions from the NHI & AI Identity Summit at IDV 2026.#NHI #NonHumanIdentity #AgenticAI #AIIdentity #IdentitySecurity #IAM #Cybersecurity #IDV2026
NHI & AI Identity Summit : The CISO Imperative
The CISO Imperative: Quantifying NHI & Agentic AI Risk for the Board | NHI & AI Identity Summit | IDV 2026Non-Human Identity (NHI) and agentic AI are creating a new identity and cybersecurity risk landscape — …
Show notes
The CISO Imperative: Quantifying NHI & Agentic AI Risk for the Board | NHI & AI Identity Summit | IDV 2026Non-Human Identity (NHI) and agentic AI are creating a new identity and cybersecurity risk landscape — but how do CISOs explain that risk to the board, quantify the exposure, and secure the investment needed to act?In this session from the NHI & AI Identity Summit at Identiverse 2026 (IDV 2026), experienced security leaders explore how organizations can translate NHI and agentic AI risk into board-level business conversations around risk, accountability, investment and governance.The discussion covers how CISOs can quantify NHI risk, communicate with boards and executives, build an identity strategy for agentic AI, establish governance and accountability, and move from simply discussing the problem to taking practical action.Speakers:Ross Sherman — Sr. Director Agentic AI, SailPointRenee Guttmann — Founder, CISOHiveTroy Wilkinson — Founder, Kyber TechnologyWhat You’ll Learn:• How to explain NHI and agentic AI risk to the board• How to quantify identity risk and translate it into business impact• Why visibility into AI agents and Non-Human Identities is becoming critical• How CISOs can build the business case for investment• Why organizations need to act before agentic AI becomes deeply embedded• How identity teams can establish governance, accountability and guardrails• Why discovery and inventory of AI agents and NHIs are now essential• How to build an identity control plane for an increasingly autonomous environment• Who should own AI governance across the organizationChapters:00:00–01:45 — The CISO Imperative01:45–04:10 — Meet the Panel04:10–07:40 — Why NHI & Agentic AI Risk Is Hard to Explain07:40–10:47 — Quantifying NHI Risk for the Board10:47–14:07 — Making the Business Case for AI Identity Security14:07–18:41 — Why Waiting Costs More Than Acting18:41–21:45 — Getting Identity Teams Started21:45–25:55 — Building the Identity Foundation25:55–28:12 — Who Owns AI?28:12–30:40 — AI Governance as a Shared Responsibility30:40–31:13 — Stop Admiring the ProblemThe NHI & AI Identity Summit at IDV 2026 brings together identity, IAM, cybersecurity and AI security leaders to examine how Non-Human Identities and agentic AI are reshaping enterprise security.If you work in IAM, identity security, identity governance, NHI management, machine identity, AI security, cybersecurity, risk management or CISO leadership, this session provides a practical perspective on preparing the board and the organization for the next phase of identity risk.Subscribe for more sessions from the NHI & AI Identity Summit at IDV 2026.#NHI #NonHumanIdentity #AgenticAI #AIIdentity #IdentitySecurity #IAM #Cybersecurity #AIsecurity #IDV2026 #Identiverse2026
NHI & AI Identity Summit : Where Traditional IAM Breaks
Where Traditional IAM Breaks: Rethinking Trust for Autonomous Identities | NHI & AI Identity Summit | IDV 2026Traditional IAM was built around identities that could be defined, governed and reviewed. But what …
Show notes
Where Traditional IAM Breaks: Rethinking Trust for Autonomous Identities | NHI & AI Identity Summit | IDV 2026Traditional IAM was built around identities that could be defined, governed and reviewed. But what happens when AI agents become autonomous, unpredictable and capable of acting at machine speed?In this session from the NHI & AI Identity Summit at Identiverse 2026 (IDV 2026), identity and cybersecurity leaders explore where traditional Identity and Access Management (IAM) breaks down and how organizations need to rethink trust, access governance and identity security for autonomous AI agents.The panel explores the shift from static access and periodic reviews toward intent-driven access, dynamic governance, continuous authorization, least privilege, Zero Trust and identity posture management.Speakers:Elisa Abedrapo — Identity Services SM, EpsilonHomayun Yaqub — Advisory Services, Digital HandsItamar Apelblat — Co-Founder & CEO, Token SecurityAlexis Moyse — Co-Founder & CEO, Clarity SecurityWhat You’ll Learn:• Why traditional IAM struggles with autonomous AI agents• How AI agents create a fundamentally different identity class• Why access governance needs to move from permissions to intent• How dynamic governance and continuous authorization could reshape IAM• Whether least privilege, Zero Trust and just-in-time access still work at machine speed• Why identity posture, context and exposure are becoming critical• How organizations can prepare for autonomous and agentic AIChapters:00:00–01:53 — Where Traditional IAM Breaks01:53–03:12 — Meet the Panel03:12–05:34 — Why Traditional IAM Has Never Really Kept Up05:34–06:59 — AI Agents as a New Identity Class06:59–08:13 — From Access Governance to Intent08:13–10:15 — Intent-Driven Access & Dynamic Governance10:15–11:42 — The End of Periodic Access Reviews?11:42–14:25 — Least Privilege, JIT & Zero Standing Privilege14:25–15:55 — Making Identity Governance Dynamic15:55–18:52 — What Is the New Unit of Trust?18:52–20:19 — Protecting What AI Does20:19–23:38 — Is IAM Failing or Is Trust Changing?23:38–25:17 — Rethinking Static IAM for the AI Age25:17–27:42 — The Future of Identity Posture & Exposure27:42–28:50 — Practical Steps for AI Agent Security28:50–30:19 — Closing Thoughts: The New NHI RealityThe NHI & AI Identity Summit at IDV 2026 brings together identity, IAM, cybersecurity and AI security leaders to explore how Non-Human Identities and agentic AI are changing enterprise identity and security.If you're working in IAM, identity security, identity governance, NHI management, machine identity, AI security, Zero Trust or cybersecurity, this session offers an important look at how trust and access need to evolve for autonomous systems.Subscribe for more sessions from the NHI & AI Identity Summit at IDV 2026.#NHI #NonHumanIdentity #AgenticAI #IdentitySecurity #IAM
NHI & AI Identity Summit : The New NHI Risk Reality
The New NHI Risk Reality: When AI Agents Start Making Decisions | NHI & AI Identity Summit | IDV 2026AI agents are fundamentally changing the Non-Human Identity (NHI) risk landscape. As agents begin making …
Show notes
The New NHI Risk Reality: When AI Agents Start Making Decisions | NHI & AI Identity Summit | IDV 2026AI agents are fundamentally changing the Non-Human Identity (NHI) risk landscape. As agents begin making decisions, accessing systems, invoking tools and acting on behalf of humans, traditional identity security and governance models are being challenged.In this session from the NHI & AI Identity Summit at Identiverse 2026 (IDV 2026), identity and cybersecurity leaders explore the emerging risks around AI agents, NHI management, identity governance, authorization, accountability and autonomous decision-making.🎤 SpeakersShriram Santhanan — Chief Cyber Officer, Human ManagedAndrej Safundzic — Co-Founder & CEO, LumosDon D’Souza — Director of Cybersecurity, Fannie MaeAshay Raut — Principal Engineer, Amazon🔐 What You’ll Learn• How AI agents are changing the NHI risk landscape• Why traditional identity governance and least privilege may not be enough• The challenges of AI agent identity, ownership and accountability• How to manage agent-to-agent identity, delegation and authorization• Why logging, guardrails and context-aware authorization are critical• The role of emerging standards in securing AI agents• How identity teams can prepare for autonomous and agentic AI⏱️ Chapters00:00–01:54 — The New NHI Risk Reality01:54–03:42 — Meet the Panel03:42–05:30 — Is Agentic AI a New NHI Risk?05:30–06:39 — The Three Types of AI Agents06:39–08:15 — The NHI Visibility Gap08:15–09:15 — Where Identity Standards Fall Short09:15–10:48 — Least Agency & Bounded Context10:48–12:45 — Accountability for AI Agent Decisions12:45–16:18 — Are AI Agents Creating Overprivileged NHIs?16:18–18:51 — Ownership, Logging & Chain of Custody18:51–21:24 — The “Crunchy Shell, Soft Center” Problem21:24–22:06 — Identity in Regulated Environments22:06–24:00 — Trusting AI Agents With Access Decisions24:00–25:45 — Should AI Agent Autonomy Be Earned?25:45–27:36 — Identity for Autonomous & Spawning Agents27:36–29:03 — Pre-Tool & Post-Tool Authorization29:03–30:00 — AI Agent Identity Standards to Watch30:00–32:12 — Context Management & AI-Powered Access Reviews32:12–34:00 — What Identity Teams Need to Do NowThe NHI & AI Identity Summit at IDV 2026 brings together leaders across identity, cybersecurity, IAM and AI security to explore how Non-Human Identities and agentic AI are reshaping enterprise security.Subscribe for more sessions from the NHI & AI Identity Summit at IDV 2026.#NHI #NonHumanIdentity #AgenticAI #IdentitySecurity #IDV2026
Mr NHI Drops a Rap at Identiverse 2026 🎤 | Non-Human & Agentic AI Identity Summit
Lalit Choda — known across the identity security industry as Mr NHI — closes his opening remarks at the Non-Human & Agentic AI Identity Summit at Identiverse 2026 with a rap about the very thing the summit …
Show notes
Lalit Choda — known across the identity security industry as Mr NHI — closes his opening remarks at the Non-Human & Agentic AI Identity Summit at Identiverse 2026 with a rap about the very thing the summit exists to solve: securing non-human identities and agentic AI before organisations get caught out.It's not what you'd expect at a cybersecurity conference. That's the point.Lalit is the Founder & CEO of the Non-Human Identity Management Group and has spent 25 years running IAM, PAM, and NHI programs at global investment banks. He knows the space better than most — and he also knows that the industry needs to pay attention to NHI in a way it hasn't been.The Non-Human & Agentic AI Identity Summit at Identiverse 2026 brought together over 20 practitioners, CISOs, founders, and researchers to tackle the hardest questions in NHI and agentic AI security. This is how it opened.🌐 nhimg.org | nhi-training.org🔔 Subscribe for full panel sessions, expert interviews, and the latest in NHI and agentic AI security#NHI #NonHumanIdentity #AgenticAI #Identiverse2026 #Identiverse #IdentitySecurity #MrNHI #LalitChoda #CyberSecurity #IAM #PAM #AIAgents #AIIdentity #AISecurity #NHIManagementGroup #MachineIdentity #ServiceAccounts #SecretsManagement #ZeroTrust #CISO
Opening Remarks | Non-Human & Agentic AI Identity Summit @ Identiverse 2026
Lalit Choda — Founder & CEO of the Non-Human Identity Management Group and the leading NHI voice in the industry, known globally as Mr NHI — opens the Non-Human & Agentic AI Identity Summit at Identiverse 2026 …
Show notes
Lalit Choda — Founder & CEO of the Non-Human Identity Management Group and the leading NHI voice in the industry, known globally as Mr NHI — opens the Non-Human & Agentic AI Identity Summit at Identiverse 2026 with a session that sets the tone for the entire day.With 25 years of hands-on practitioner experience running global IAM, PAM, and NHI programs at major investment banks, Lalit founded the NHI Management Group in 2024 to educate and evangelise about the risks and challenges of non-human identities — including agentic AI agents. In this opening, he makes the case for why 2026 is a defining year for the space, how dramatically the NHI and agentic AI landscape has already shifted, and what security teams, CISOs, and practitioners need to be thinking about right now.What's covered in this video:- Why the NHI and agentic AI threat landscape has changed faster than most organisations have been able to respond- A full walkthrough of the summit agenda and what each panel session will explore- And yes — Mr NHI closes it out with a rapSummit Panel Sessions:01 — The AI Era: A Dramatic Shift for the NHI Landscape02 — The New NHI Risk Reality: When AI Agents Start Making Decisions03 — Where Traditional IAM Breaks: Rethinking Trust for Autonomous Identities04 — The CISO Imperative: Quantifying NHI & Agentic AI Risk for the Board05 — Secure by Design: Baking Identity Controls into the AI Agent Development Lifecycle06 — Governing AI: Identity Standards & Frameworks for Agentic AI07 — The Buyer's Dilemma: Evaluating the NHI & Agentic AI Security Market08 — The Next 24 Months: Predictions on Where NHI & Agentic AI Security Goes NextThe Non-Human Identity Management Group is the premier authority in NHI education, training, research, and advisory — home to the most comprehensive NHI knowledge center in the world.🌐 nhimg.org | nhi-training.org🔔 Subscribe for full panel sessions, expert interviews, and the latest in NHI and agentic AI security#NHI #NonHumanIdentity #AgenticAI #Identiverse2026 #Identiverse #IdentitySecurity #MrNHI #LalitChoda #CyberSecurity #IAM #PAM #AIAgents #AIIdentity #AISecurity #NHIManagementGroup #MachineIdentity #ServiceAccounts #SecretsManagement #ZeroTrust #CISO
Diana Jovin is Mr NHI's Human Identity In The Hot Seat
As autonomous agents flood enterprise environments, most security teams are being caught off guard — and Diana Jovin, CMO of Teleport, wants to change the question security leaders are even asking.Recorded live …
Show notes
As autonomous agents flood enterprise environments, most security teams are being caught off guard — and Diana Jovin, CMO of Teleport, wants to change the question security leaders are even asking.
Recorded live at Black Hat, Diana takes on 10 rapid-fire questions on the identity and access challenges that agentic AI is forcing onto security teams. Rather than treat this as an IAM problem, she reframes it as an infrastructure one: a single identity layer where agents, humans, machines, and workloads can all interact securely.
Are CISOs ready for a fleet of autonomous agents? Do AI agents behave like employees, like software, or like something else entirely? And will static, long-lived credentials survive the next five years?
Diana's answers push back on the framing as often as they answer it — and she's clear about what has to disappear from your environment first.
🔑 Key Takeaways:
Agent security is an infrastructure question, not an IAM one — the aim is a unified layer where agents, humans, machines, and workloads interact securely
AI agents are neither employees nor software — they act fast and autonomously, so controls must map to how they actually behave, not to old categories
Static credentials and standing privileges have to go — agents can discover and exploit them, so a zero-trust foundation comes first
Background checks don't disappear, they get inherited — every agent needs a delegated, cryptographically-backed identity with attestation back to its origin
NHI is a subset, not a synonym — vocabulary matters, and "non-human identity" means different things to different people
#CyberSecurity #Teleport #NonHumanIdentity #AgenticAI #IdentitySecurity #IAM #ZeroTrust #NHI #AIAgents #MachineIdentity
Howard Ting is Mr NHI's Human Identity In The Hot Seat
As autonomous agents flood enterprise environments, most security teams are being caught off guard — and Howard Ting, CEO of Opal Security, is not mincing words about it.Recorded live at Black Hat, Howard takes …
Show notes
As autonomous agents flood enterprise environments, most security teams are being caught off guard — and Howard Ting, CEO of Opal Security, is not mincing words about it.Recorded live at Black Hat, Howard takes on 10 rapid-fire questions on the identity and access management challenges that agentic AI is forcing onto security leaders. From the death of static credentials to the convergence of PAM and IGA, this conversation cuts straight to what organisations need to rethink — fast.Are CISOs truly ready for a fleet of autonomous agents? Should AI agents behave under the same trust frameworks as humans? And will long-lived credentials survive the next five years?Howard's answers are direct, confident, and in some cases — definitive.🔑 Key Takeaways:IAM for AI and AI for IAM are inseparable — you cannot have one without the otherStatic, long-lived credentials have no place in an agentic world — least privilege at the task level is the only acceptable standardPAM and IGA are converging, and organisations still treating them as separate categories are already behindAI agents are ephemeral by nature — traditional trust and background check models simply don't apply#CyberSecurity #OpalSecurity #NonHumanIdentity #AgenticAI #IdentitySecurity #IAM #PAM #ZeroTrust #NHI #AIAgents
Human & Now Agents: The NHI Internal Threat Amplified
Non-human identity security has become one of the most urgent challenges in modern cybersecurity — and with the rise of agentic AI, the risk is only growing.In this Identiverse 2026 keynote, Lalit Choda — …
Show notes
Non-human identity security has become one of the most urgent challenges in modern cybersecurity — and with the rise of agentic AI, the risk is only growing.
In this Identiverse 2026 keynote, Lalit Choda — founder of the Non-Human Identity Management Group (NHIMG) — explains why non-human identities (NHIs) and autonomous AI agents have become the most dangerous insider threat in cybersecurity today.
Drawing on 30 years running IAM, PAM and NHI programmes in global banking, Lalit shares three real incidents where the intent was harmless, but the damage was huge:
🔹 One misused database credential that spiralled into a 100,000-credential clean-up
🔹 An AI coding assistant that wiped 60% of his data from a single line of SQL
🔹 An AI agent that deleted an entire company's database — and its backups — in secondsHis message is blunt: as agentic AI spreads, agents reach systems you never intended and inherit the full blast radius of whatever credential they run under. System prompts were never security controls. Traditional insider threat models are now obsolete — and every agent is a non-human identity that must be governed, monitored and audited.
If you work in identity security, IAM or agentic AI, this one's essential viewing.
⏱️ Key Moments
0:00 – Humans, agents, and the amplified internal threat
0:48 – Why the internal threat beats the external one
2:39 – Story 1: one misused NHI takes down production
6:57 – Hard-coded, shared and never-cycled credentials
8:24 – Enter agentic AI: the blast radius explodes
9:36 – Story 2: one line of SQL wipes 60% of the data
12:54 – Story 3: an AI agent deletes a database in seconds
15:54 – It always comes back to identity and access
18:24 – Why system prompts are not security controls
19:27 – Closing: insider threat models are obsolete — code red🔗 Learn more
🌐 Website: https://nhimg.org/
🎓 NHI Foundation Training: https://training.nhimg.org/
👤 Lalit Choda on LinkedIn: https://www.linkedin.com/in/lalit-choda-5b924120/
🏢 NHIMG on LinkedIn: https://www.linkedin.com/company/non-human-identity-management-group/👉 Subscribe for weekly breakdowns on non-human identity, agentic AI security and identity management — and tell us what to cover next in the comments.
#NonHumanIdentity #NHI #AgenticAI #IdentitySecurity #Identiverse2026 #IAM #Cybersecurity #AIAgents #InsiderThreat #ZeroTrust
Eve Maler is Mr NHI's Human Identity In The Hot Seat
Non-human identity governance is failing — and the agentic AI wave is about to make it catastrophic. Static credentials are still everywhere. OAuth permissions are ungoverned. Service accounts nobody owns are …
Show notes
Non-human identity governance is failing — and the agentic AI wave is about to make it catastrophic.
Static credentials are still everywhere. OAuth permissions are ungoverned. Service accounts nobody owns are sitting wide open. And now autonomous AI agents are being deployed into that same environment, with no accountability framework, no revocation policy, and no one asking whether they have the authority to act. This is what NHI risk looks like before it becomes a breach.
🔑 Key Takeaways:
-Static long-lived credentials aren't dying on their own — someone has to decide to kill them
- The line between agentic AI identity and legacy NHI security isn't as clean as the market wants it to be
- Regulators are not moving fast enough — the accountability gap will be exploited before it's closed
Eve Maler, President and Founder of Venn Factory and author of Mastering Digital Identity: From Risk to Revenue, answers 10 unfiltered questions on NHI risk, agentic AI governance, and whether the identity industry is drawing the right lines.
From The Non-Human & AI Identity Podcast 🎙️
⏱ Chapters:
00:00 Introduction00:28 Are You a Fan of Vibe Coding?
01:07 Will Static Long-Lived Credentials Still Exist in 5 Years?
02:16 Are Organisations Taking NHI Risks Seriously Enough?
03:15 Is IAM for AI More Important Than AI for IAM?
03:35 Will the AI Agent Digital Workforce Cause Mass Unemployment?
03:58 Are AI Agents Being Deployed Without Security Guardrails Right Now?
04:26 Will Hackers Be the Biggest Winners From AI?
04:58 Do Agents Behave More Like Employees or Software?
05:50 Do Agentic AI Identities Need to Be Treated Separately From Legacy NHIs?
07:07 Are Regulators Moving Fast Enough to Keep Up With Agentic AI?
#CyberSecurity #NonHumanIdentity #IAM #AIAgents #IdentitySecurity #AgenticAI #ZeroTrust #DigitalIdentity #NHI #MachineIdentity #SecretsManagement #PrivilegedAccess #CISO #IdentityGovernance #shorts
Ep # 13 - Agent NHI
Identity security is broken — and AI agents are exposing exactly why. Most organisations still treat identity as an IT control function. That framing is costing them. In the agentic era, non-human identity …
Show notes
Identity security is broken — and AI agents are exposing exactly why. Most organisations still treat identity as an IT control function. That framing is costing them. In the agentic era, non-human identity (NHI) determines whether you can trust every agent action, every automated transaction, and every API call running through your infrastructure. But NHI authentication only solves half the problem: it can verify the agent, not whether that agent has authority to act. That gap is unsolved — and almost no one is talking about it.
Eve Maler, President and Founder of Venn Factory and author of Mastering Digital Identity: From Risk to Revenue, joins Mr. NHI to explain why identity must become a board-level strategic function, not a cybersecurity afterthought — and what that demands in an agentic AI world.
What you'll learn:
- The "identity homelessness" problem — why no one owns identity governance in most enterprises
- The Four Ps framework (Protection, Personalisation, Payment, People) and why Productivity as the hidden fifth P explains every bad identity decision
- The agent authority gap: how NHI authenticates agents but can't yet verify their right to bind your organisation
- The "ultimate bot owner" concept and what financial services accountability models can teach agentic AI security
- Why agent actions must be classified as revocable or compensatable — and why self-assertion isn't enough
- How to build on OAuth, OpenID Connect, and existing identity standards rather than starting from scratch.
Essential for CISOs, identity architects, IAM leaders, and business executives who need to understand why identity is now a revenue and risk issue — not just an IT control.
Key Moments:
Introduction & Meet Eve Maler [00:00–02:07]
Mr NHI's Human Identity in the Hot Seat [02:07–09:55]
Mastering Digital Identity: From Risk to Revenue [09:55–15:20]
Executive Misconceptions About Modern Identity Risk [15:20–17:36]
Secure by Design: Will AI Tooling Break the Cycle? [17:36–19:15]
The Agentic Standards Landscape: Chaos, Competition & the Road Ahead [19:15–24:07]
The Four P's Framework: Protection, Personalisation, Payment & People [24:07–27:25]
Identity Homelessness: Who Actually Owns Identity in Your Organisation? [27:25–29:45]
The Four P's in the Agentic World: Payment, Delegation & Binding [29:45–31:37]
Agent Accountability, Transaction Tokens & the Ultimate Bot Owner [31:37–36:30]
What Happens When an Agent Goes Wrong? Accountability in Practice [36:30–42:40]
Closing Advice for CISOs: Identity as a Product, Accept No Compromises [42:40–51:06]
Identiverse, Book Resources & Final Thoughts [51:06–53:17]
📚 NHI Knowledge Centre: nhimg.org
🔗 Venn Factory: vennfactory.com
🎟️ Non-Human & AI Identity Summit at Identiverse — 15 June
Subscribe & follow:
LinkedIn — https://www.linkedin.com/company/non-human-identity-management-group
TikTok — https://www.tiktok.com/@mr_non_human_identity
#cybersecurity #nonhumanidentity #iam #aiagents #agenticsecurity #agenticai #identitysecurity #zerotrust #digitalidentity #nhi #artificialintelligence #ai #ciso #machineidentity #privilegedaccess
Alexis Moyse is Mr NHI's Human Identity In The Hot Seat
Assuming NHI risk is under control while AI agents are already in production isn't a security strategy — it's a liability waiting to surface.Alexis Moyse, from Clarity Security, faces 10 rapid-fire questions on …
Show notes
Assuming NHI risk is under control while AI agents are already in production isn't a security strategy — it's a liability waiting to surface.
Alexis Moyse, from Clarity Security, faces 10 rapid-fire questions on whether organisations are taking non-human identity risk seriously enough, whether the identity market consolidation is actually improving security outcomes, and whether traditional IGA platforms have any chance of keeping up with autonomous agents operating at scale.
Can agentic AI truly be governed — or is control an illusion we're comfortable believing? Will AI agents eventually need to be fired? And is the industry drawing a sharp enough line between agentic AI security and NHI security, or collapsing two distinct problems into one?
From market dynamics to vibe coding, this clip covers the ground most security conversations are still circling.
🔑 Key Takeaways:
- NHI risk isn't being taken seriously — organisations are accepting breaches and moving on rather than making changes
- Traditional IGA is compliance-first, not security-first — it won't adapt effectively to a world of autonomous agents
- CISOs are aware the threat is coming but we've never handled service accounts, OAuth, or permissions at scale — what makes anyone think agents will be different
In this clip, Alexis Moyse, from Clarity Security, delivers sharp, unfiltered answers on NHI governance, identity market consolidation, and why the assumption that CISOs are ready for autonomous agent fleets deserves serious scrutiny.
From The Non-Human & AI Identity Podcast 🎙️
00:00 Introduction
00:16 Are Organizations Taking NHI Risk Seriously Enough?01:16 Identity Market Consolidation & New Vendors
02:41 IAM for AI vs AI for IAM03:41 Can Agentic AI Really Be Governed?
05:01 Will AI Agents Need to Be Fired?06:31 Can Traditional IGA Adapt to AI Agents?
08:11 Is Agentic AI Security the Same as NHI Security?
09:36 Will Agentic AI Cause Mass Unemployment?
11:21 Are Agents Being Deployed Without Security Guardrails?
12:26 Are CISOs Ready for Autonomous Agents?
13:51 Vibe Coding: Opportunity or Risk?
#CyberSecurity #NonHumanIdentity #IAM #AIAgents #IdentitySecurity #IGA #AgenticAI #shorts
Ep # 12 - When AI Agents Inherit Risk: The NHI Problem Expands
Most security teams are still retrofitting human identity frameworks onto AI agents. It won't hold. Agents that spawn sub-agents, inherit domain admin permissions through accidental OAuth consent, and operate …
Show notes
Most security teams are still retrofitting human identity frameworks onto AI agents. It won't hold. Agents that spawn sub-agents, inherit domain admin permissions through accidental OAuth consent, and operate non-deterministically aren't just a new identity type — they're a governance collapse waiting to happen, and the misconfiguration that triggers it is probably already in your environment.
In this episode, Alexis Moyes, CEO of @ClaritySecurity, breaks down why static entitlements and upfront permission grants can't govern autonomous agent behaviour — and what real-time, intent-based authorisation actually requires in practice.
What's covered:
- Why organisations are repeating every mistake they made with machine identities — only faster and at scale
- How agents inherit super-privileged access through a single accidental admin OAuth consent
- The shift from posture management to real-time risk: why governance needs to operate alongside data flows, not after the fact
- Agent lifecycle management: why "firing" an agent is a real security requirement and almost no one is doing it
- Why IAM for AI is more urgent than AI for IAM — and what that distinction means for your security architecture
- What Clarity Aperture 2.0 does differently: non-deterministic misconfiguration detection, attack path visibility, and one-click remediation.
Essential listening for CISOs, IAM architects, and anyone building or governing agentic AI in production.
Key MomentsIntroduction & Meet Alexis Moyse [00:00–01:00]
Mr NHI's Human Identity in the Hot Seat [01:00–16:35]
How AI Agents Inherit and Amplify Existing NHI Risks [16:35–20:20]
Securing Autonomous Agents: Least Privilege, Segregation of Duties & Just-in-Time Access [20:20–25:35]
The Future of Agent Identity: Real-Time Authorisation and Intent-Based Security [25:35–30:10]
Governing AI Agents: Practical Strategies Organisations Can Implement Today [30:10–34:15]
Clarity Security's Vision for Continuous Identity Governance [34:15–37:20]
Risk Assessment, Attack Paths & Securing Humans, NHIs and Agents [37:20–39:50]
Advice for CISOs: Preparing for Agentic AI and NHI Security Challenges [39:50–42:50]
Identiverse, Industry Trends & Final Thoughts [42:50–45:25]
📚 NHI Knowledge Centre: nhimg.org
🔗 Learn more about Clarity Security: claritysecurity.com
📧 Contact: [email protected]
🎟️ Non-Human & AI Identity Summit at Identiverse — June 15
Subscribe below and Follow Us On :
LinkedIn – https://www.linkedin.com/company/non-human-identity-management-group
TikTok – https://www.tiktok.com/@mr_non_human_identity
#cybersecurity #ai #artificialintelligence #nonhumanidentity #iam #aiagents #zerotrust #airisks #agenticsecurity #claritysecurity
Neil McGlennon is Mr NHI's Human Identity In The Hot Seat
AI agents are evolving into powerful enterprise identities — yet most organisations still lack the governance frameworks needed to control them securely.Neil McGlennon, Global Field CTO at SailPoint, responds …
Show notes
AI agents are evolving into powerful enterprise identities — yet most organisations still lack the governance frameworks needed to control them securely.Neil McGlennon, Global Field CTO at SailPoint, responds to 10 rapid-fire questions focused on AI identity governance, non-human identities, and the growing security risks tied to autonomous systems.As AI agents gain access to sensitive environments, the questions become harder to ignore: should they be governed like human employees or managed like software? Are businesses prioritising innovation speed over identity controls? And when an AI identity is breached, who is accountable for the consequences?🔑 Key Takeaways:• AI agents are creating a new class of identities that challenge traditional governance models• The way organisations classify AI agents impacts access control, auditing, and lifecycle governance• Many enterprises are accelerating AI adoption without fully addressing identity security risksIn this clip, Neil McGlennon explores the intersection of AI, identity governance, and enterprise security — and why organisations need to rethink how trust is established in the era of autonomous systems.#CyberSecurity #SailPoint #IdentityGovernance #AIAgents #ZeroTrust #IAM #NonHumanIdentity #IdentitySecurity
Michael Trites is Mr NHI's Human Identity In The Hot Seat
Enterprises are deploying AI agents at machine speed — but governance and identity security aren’t keeping pace.Michael Trites, Senior VP of Global Sales at Aembit, tackles 10 fast-paced questions on the rise …
Show notes
Enterprises are deploying AI agents at machine speed — but governance and identity security aren’t keeping pace.Michael Trites, Senior VP of Global Sales at Aembit, tackles 10 fast-paced questions on the rise of AI-driven identities, the expanding NHI threat landscape, and why organisations are repeating familiar security mistakes as autonomous systems scale.Should AI agents be governed like employees with assigned accountability, or treated purely as software identities? Are security teams giving AI systems privileged access too quickly? And when an AI agent is compromised, does anyone truly own the incident response?🔑 Key Takeaways:• AI agents are becoming highly privileged non-human identities with limited oversight• Existing IAM and PAM frameworks were not designed for autonomous AI access patterns• The rush to operationalise AI is creating governance gaps that attackers are beginning to exploitIn this short-form discussion, Michael Trites shares perspectives on identity-first security, machine access governance, and why AI agents are rapidly becoming one of the biggest emerging challenges in cybersecurity.#CyberSecurity #Aembit #IdentitySecurity #NHI #AIAgents #MachineIdentity #ZeroTrust #IAM
Stanislas Crépin is Mr NHI's Human Identity In The Hot Seat
AI agents are quickly becoming one of the largest unmanaged attack surfaces in enterprise environments — and most organisations still lack the controls to secure them effectively.Stanislas Crepin, Senior Global …
Show notes
AI agents are quickly becoming one of the largest unmanaged attack surfaces in enterprise environments — and most organisations still lack the controls to secure them effectively.Stanislas Crepin, Senior Global Director Sales Engineering at GitGuardian, answers 10 rapid-fire questions on the growing identity and secrets management risks surrounding AI agents and NHIs. From access governance to accountability, this discussion highlights where organisations are falling behind as agentic AI adoption accelerates.Do AI agents require the same trust validation as employees? Are companies unknowingly exposing sensitive systems in the rush to innovate? And as machine identities multiply, are security teams losing visibility over who — or what — has privileged access?🔑 Key Takeaways:• AI agents are introducing a new wave of non-human identities that traditional security models struggle to manage• Treating AI identities like software alone creates dangerous governance blind spots• Speed-to-deployment pressures are weakening security processes across agentic AI initiativesIn this clip, Stanislas Crepin breaks down the growing overlap between AI governance, identity security, and secrets exposure — and why organisations must rethink how they secure autonomous systems.#CyberSecurity #GitGuardian #NonHumanIdentity #SecretsManagement #AIAgents #IdentitySecurity #ZeroTrust #IAM
David Lee is Mr NHI's Human Identity In The Hot Seat
AI agents are scaling inside organisations faster than security teams can properly govern them — and attackers are already taking advantage of the gap.David Lee, Field CTO at Saviynt, takes on 10 rapid-fire …
Show notes
AI agents are scaling inside organisations faster than security teams can properly govern them — and attackers are already taking advantage of the gap.David Lee, Field CTO at Saviynt, takes on 10 rapid-fire questions around the identity risks enterprises can no longer ignore. From the growing exposure created by unmanaged NHIs to the debate over whether AI agents should be treated more like employees or software, this conversation goes straight to the governance failures security leaders are now facing.Should AI agents undergo the same scrutiny as human users before receiving access? Are organisations sacrificing security controls in the race to deploy agentic AI? And when an AI-driven identity is compromised, who actually owns the fallout?🔑 Key Takeaways:• AI agents are rapidly becoming unmanaged identities that existing IAM and PAM strategies weren’t built to secure• How organisations classify AI agents directly impacts governance, lifecycle management, auditing, and access revocation• Pressure to accelerate AI deployment is causing security oversight to slip — increasing enterprise risk exposureIn this short clip, David Lee shares sharp insights on non-human identities, AI governance, and why enterprises are repeating many of the same mistakes previously seen with machine identity sprawl.#CyberSecurity #IAM #AIAgents #ZeroTrust #IdentitySecurity #NonHumanIdentity #PrivilegedAccess #AI
Oded Hareven is Mr NHI's Human Identity In The Hot Seat
Treating AI agent identities the same as standard non-human identities isn't just lazy thinking — it may be the most dangerous assumption in security right now.Oded Hareven, Co-Founder and CEO of Akeyless …
Show notes
Treating AI agent identities the same as standard non-human identities isn't just lazy thinking — it may be the most dangerous assumption in security right now.Oded Hareven, Co-Founder and CEO of Akeyless, faces 10 rapid-fire questions on whether the industry is sleepwalking into the same governance failures it made with NHIs, only this time with autonomous agents operating at scale. Are CISOs truly ready to manage fleets of autonomous digital employees? Can zero trust even work for agents that make decisions independently? And if agentic AI identities need to be governed separately, is anyone actually building for that yet?From background checks for AI agents, to whether PAM needs a fundamental rebuild, to the question no one wants to answer — can you truly govern and control agentic AI at all — this clip covers the ground most security conversations are still avoiding.🔑 Key Takeaways:Agentic AI identities operate with a different threat profile to standard NHIs — conflating them is a governance blind spot most organisations haven't caught yetZero trust principles face a genuine stress test with autonomous agents that act, authenticate, and escalate privileges without human approval loopsThe industry is repeating the same under-governance mistakes made with machine identities — but the blast radius this time is significantly largerIn this clip, Oded Hareven, Co-Founder and CEO at Akeyless, delivers machine-speed answers on agentic identity governance, secrets management, and why the window to get this right is closing faster than most CISOs realise.From The Non-Human & AI Identity Podcast 🎙️#CyberSecurity #NonHumanIdentity #IAM #ZeroTrust #AIAgents #SecretsManagement #IdentitySecurity #shorts
Heiko Karl is Mr NHI's Human Identity In The Hot Seat
Most organisations are deploying AI agents faster than they can govern them — and the identity security gap that creates is already being exploited.Heiko Karl, CEO of Nexis, faces 10 rapid-fire questions on the …
Show notes
Most organisations are deploying AI agents faster than they can govern them — and the identity security gap that creates is already being exploited.Heiko Karl, CEO of Nexis, faces 10 rapid-fire questions on the blind spots organisations can no longer afford to ignore. From whether NHI threats are being systematically underestimated, to whether IAM for AI is now more critical than AI for IAM itself — this clip cuts straight to where security strategy is falling short.Do AI agents behave more like employees or software? Should they require background checks before deployment? Is time-to-market pressure quietly stripping security controls from agentic rollouts? And when a machine identity is breached — who in your organisation actually owns that problem?🔑 Key Takeaways:AI agents are proliferating as ungoverned identities — most PAM and IAM frameworks have no answer for them yetThe employee-vs-software question for agents isn't philosophical — it determines how you govern, audit, and revoke accessOrganisations are consistently prioritising speed to market over security controls for agentic deployments, and the blast radius is growingIn this clip, Heiko Karl, CEO at Nexis, delivers machine-speed answers on NHI security, agentic AI governance, and why the same mistakes made with machine identities are being repeated with AI agents right now.#CyberSecurity #NonHumanIdentity #IAM #ZeroTrust #AIAgents #PrivilegedAccess #IdentitySecurity #shorts
Eleanor Meritt is Mr NHI's Human Identity In The Hot Seat
Most organisations are still treating machine identities like a footnote in their security strategy — and AI agents are about to make that a catastrophic mistake.Eleanor Merrit, President of Arcon, faces 10 …
Show notes
Most organisations are still treating machine identities like a footnote in their security strategy — and AI agents are about to make that a catastrophic mistake.Eleanor Merrit, President of Arcon, faces 10 rapid-fire questions on the blind spots organisations can no longer afford to ignore. From whether NHI threats are being systematically underestimated, to whether IAM for AI is now more critical than AI for IAM itself — this clip covers the questions most security leaders are still avoiding.Are AI agents more like employees or software? Do they need background checks? Is time-to-market pressure quietly gutting security controls for agentic deployments? And when a machine identity is breached — who actually owns it?🔑 Key Takeaways:Most IAM frameworks were never designed for non-human identities — AI agents are exposing that gap in real timePAM is facing a fundamental rethink as autonomous agents operate with privileged access outside traditional governance modelsOwnership of breached machine identities remains undefined in most organisations, creating accountability voids that attackers are already exploitingIn this clip, Eleanor Merrit, President at Arcon, delivers machine-speed answers on NHI security, agentic AI governance, and why the window to get this right is closing fast.#CyberSecurity #NonHumanIdentity #IAM #ZeroTrust #AIAgents #PrivilegedAccess #IdentitySecurity #shorts
These are the latest 40 of 101 episodes. You’ll find older episodes in the podcast’s feed.
Similar podcasts
More Technology podcasts
Is this your podcast?
Confirm it with an entry in your feed: you get a code here, add it as podcast:txt to the channel of your feed, and we check it. Your podcast is then shown as “verified” on SoundNode.