Longer-form analysis and opinion on security, risk, AI and product.
Perspective/Security//7 min read
Attackers can steal authenticated sessions without defeating MFA itself. Enterprises need phishing-resistant authentication, token protection and session-aware incident response.
Perspective/Security//8 min read
AI agents act across systems, but conventional IAM controls cannot fully govern their autonomy. Treating them as identities requires scoped access, ownership and traceability.
Perspective/Security//10 min read
Scanners identify weaknesses, but business context determines what to fix first. Effective vulnerability management weighs exposure, exploitability and asset criticality.
