Access Granted

In this episode of Access Granted, Nauman sits down with Ken Huang—co-author of the OWASP Top 10 for LLMs, contributor to NIST AI work, and co-chair of CSA’s AI Safety Group—to break down what practical GenAI security looks like.

They cover:

• Why only a small fraction of organizations feel comfortable with their GenAI security posture

• The three big risk buckets: prompt injection, MCP/tooling exposure, and goal manipulation / agent drift

• How “shadow AI” emerges when there’s no dedicated GenAI security program

• A concrete framework stack: NIST AI RMF → Maestro threat modeling → OWASP AI VSS → CSA AICM + red teaming

• The role of cloud provider frameworks (Google SAIF, AWS CAF-E AI, Azure guidance) and how to combine them with community standards

• Why traditional IAM (static SAML/OAuth scopes) doesn’t work for AI agents—and what task-scoped, intent-based, ephemeral access should look like

• How to think about identity lifecycle and governance for AI agents, and why “no 24/7 God mode” should be a non-negotiable anchor for CISOs

If you’re trying to move from GenAI science projects to production systems without sleepwalking into a breach—or letting an agent delete your production database—this conversation will help you define the guardrails, frameworks, and identity controls you actually need.

Identity is no longer an IT admin task; it’s the security control plane.
In this episode of Access Granted, Britive’s Nauman Mustafa sits down with Sriram Santhanam, an experienced identity and security leader, to unpack where identity security is headed and what teams can do now.

What we cover:

• Why static keys, blanket tokens, and over-permissive roles break in cloud + SaaS

• Moving to runtime authorization: per-action access, short TTLs, ZSP by default

• Non-human identities & agentic AI: on-behalf-of boundaries, tool allowlists, guardrails

• Crawl-walk-run vs. run if you can: where to start and how to scale safely

• IGA + PAM together: SailPoint governance with runtime enforcement for day-to-day access

• Practical steps after SaaS/token incidents: review scopes, remove “full,” revoke fast, instrument audit

In this episode of Access Granted, Nauman sits down with Britive’s Product Manager, Matt Wilson, to unpack what many organizations are finally confronting head-on: a growing crisis caused by static credentials in today’s hybrid, multi-cloud, and AI-driven environments. 

With the explosion of non-human identities (NHIs), cloud-native services, and automated pipelines, traditional Privileged Access Management (PAM) practices are no longer enough. The conversation explores the critical evolution toward Zero Standing Privileges (ZSP) and why this modern approach is essential for securing both human and non-human access in today’s dynamic infrastructures. 

Matt breaks down the differences between Just-in-Time access and true ZSP, debunks common misconceptions, and explains why eliminating standing permissions is key to achieving Zero Trust in modern environments. 

Key topics include: 

• Hardcoded keys, long-lived tokens, and static secrets remain prevalent in cloud environments.  

• Just-in-time access doesn’t guarantee ZSP. Many solutions only gate access to static credentials instead of eliminating standing permissions entirely. 

• Dynamic, ephemeral, auto-revoked permissions ensure identities only have access when needed for true ZSP. 

• Vaulting and password rotation no longer meet the demands of cloud-native environments. Agent- and proxy-based models introduce friction and fail to scale. 

• Modern environments require a single platform that can manage and enforce access policies for developers, AI agents, bots, and automated workflows alike. 

• ZSP support, agentless deployment, cloud-native integration, and coverage across all identity types and environments are non-negotiable features of modern access security. 

• The future of identity security lies in unified, dynamic access management, not siloed tools. 

• Done right, security becomes an enabler for innovation, developer productivity, and adoption of cutting-edge technologies. 

• Looking forward at the evolution toward behavior-based authorization and continuous, adaptive access control as AI agents and dynamic workloads scale. 

🍏 Listen on Apple: https://podcasts.apple.com/us/podcast/access-granted/id1770083136   

📺 Watch Access Granted on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA 

Cloud PAM built for all identities across all cloud & hybrid environments: https://www.britive.com/ 

In this episode of Access Granted, Nauman Mustafa sits down with Shahzad Ali, Principal Architect at Britive, to break down the evolving world of privileged access management (PAM) and how modern environments demand a new approach. 

Together, they dive into the shift away from traditional vault-based PAM models to dynamic, just-in-time (JIT) access and Zero Standing Privileges (ZSP). Securing all identities in the cloud, human and non-human, AI-driven workflows across cloud and hybrid environments requires permissioning that can keep up with the needs of the cloud. 

They talk the why behind how identity has become the new security perimeter, and why securing access must extend beyond users to include systems, workloads, infrastructure devices, and agentic AI. 

Key topics include: 

• How the definition of privileged access has changed in cloud-native, distributed environments. 

• Why static credentials and vault-only solutions no longer meet today’s security needs. 

• The role of Zero Standing Privileges (ZSP) in enabling true just-in-time access for all identities. 

• Extending dynamic, ephemeral access controls to routers, switches, firewalls, and IoT devices. 

• Why organizations must rethink infrastructure security alongside cloud IAM modernization. 

• Actionable advice for CISOs and security leaders on building a modern, scalable, and secure access management program. 

🤖 Learn more about how Britive is securing agent-based AI access: https://www.britive.com/use-cases/agentic-ai-security  

🍏 Listen on Apple: https://podcasts.apple.com/us/podcast/access-granted/id1770083136   

📺 Watch Access Granted on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA 

In this episode of Access Granted, we sit down with Palak Chheda, Britive’s Principal Architect to dive deep into practical strategies for securing Non-Human Identities (NHIs) within GitHub workflows. 

As automation and CI/CD pipelines become critical in cloud environments, the need to secure machine identities and ephemeral tokens has never been greater. 

We walk through a live demo showcasing how Britive's Just-In-Time (JIT) privilege management eliminates the risks associated with static credentials and API keys. 

Discover how Workload Federation can authenticate GitHub Actions dynamically, enabling true Zero Standing Privileges (ZSP) for infrastructure components. 

Key Takeaways: 

• The risks of static API keys and long-lived tokens in GitHub workflows. 

• How to use workload identity federation to achieve ZSP. 

• Real-world examples of securing CI/CD processes with Britive. 

• The benefits of ephemeral credentials and dynamic permissions management. 

🎧 Listen now and transform how you manage NHIs in your cloud infrastructure! 

📺 Watch this episode on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA 

Explore Britive’s agent-less, proxy-less, cloud-native PAM:https://www.britive.com/  

In this episode of Access Granted, we dive deep into one of the most urgent cybersecurity challenges today: non-human identities (NHIs). As automation, AI, and cloud services expand, NHIs — like API keys, service accounts, and machine credentials — are growing at an alarming rate. Yet, many organizations fail to track, secure, or even acknowledge their existence, despite their potential impact on identity security. 

Two identity security leaders, Lalit Choda, Founder of the NHI Management Group, and Art Poghosyan, CEO and Co-Founder of Britive, share their insight and expertise on: 

✅ The explosion of NHIs & why they’ve grown to outnumber human identities in the cloud 

✅ How NHIs are exploited in breaches, drawing from big examples  

✅ Why static credentials are a ticking time bomb & how to eliminate them 

✅ Best practices for securing NHIs using Zero Standing Privileges (ZSP) as a guiding principle of identity management 

📺 Watch this episode on YouTube:https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA 

In this episode of Access Granted, John Morton, Field CTO at Britive, dives into the world of Non-Human Identities (NHIs) and their pivotal role in modern cloud security. From understanding what NHIs are to exploring their impact on automation, workflows, and security strategies, John shares insights into why they’ve become a critical focus for organizations today. 

He also discusses best practices for securing NHIs, integrating them into a zero-trust model, and why static access for NHIs is a risk that organizations can no longer afford. 

Key Takeaways: 

Understanding NHIs, the role they play in automation and cloud operations, and why securing them is different from human identities. 

Why NHIs have come under increased scrutiny with increased cloud adoption, automation, and the growing number of API keys, tokens, and service principles. 

How static credentials and unmanaged NHIs can lead to breaches, and why securing them with JIT access is essential. 

Practical steps for securing NHIs, from implementing guidelines to modernizing access management. 

🎧 Listen to Access Granted on Spotify: https://open.spotify.com/show/7ukJOqUhDmTRj2pm3ykibS   

🍏 Listen on Apple: https://podcasts.apple.com/us/podcast/access-granted/id1770083136  

📺 Watch this episode on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA 

In this episode of Access Granted, Nauman Mustafa sits down with Art Poghosyan, co-founder and CEO of Britive, to discuss the evolving landscape of identity and access management (IAM) in the cloud era. 

Drawing on over 20 years of experience, Art shares the journey of building Britive, the challenges of transitioning from traditional IAM solutions to cloud-native approaches, and the critical role of ephemeral access and Zero Standing Privileges (ZSP) in securing multi-cloud environments. The conversation also delves into the growing importance of managing non-human identities (NHIs), the rise of AI-driven innovations in IAM, and how companies can make informed decisions in a crowded and noisy cybersecurity market. 

Key Takeaways: 

🍏 Listen on Apple: https://podcasts.apple.com/us/podcast/access-granted/id1770083136  

📺 Watch this episode on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA 

In this episode of Access Granted, Nauman sits down with big data analytics and machine learning expert Junaid Rao to explore the transformative role of data in innovation, the rise of generative AI, and the critical importance of security in hybrid and multi-cloud environments. 

With over two decades of experience in data management and analytics across EMEA and APAC, Junaid shares his expertise on key trends, challenges, and best practices for building a future-proof data strategy. 

Tune in to the discussion to learn more about how organizations can overcome fragmented data silos, optimize hybrid cloud strategies, and implement more robust security measures such as Zero Trust around their identity and access management processes. 

Key Takeaways: 

📺 Watch this episode on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA 

🍏: https://podcasts.apple.com/us/podcast/access-granted/id1770083136  

In this episode of Access Granted, we sit down with Sameer Hiremath, Co-Founder and Head of Engineering at Britive, to explore the evolution of cloud-native privileged access management (CPAM). Sameer shares his insights on building innovative security solutions for modern enterprises, the challenges of managing static access and over-privileged identities, and how embracing cloud-native architectures can revolutionize your security strategy.

Key Episode Highlights:

📺 Watch this episode on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA 

🌩️ Learn more about Britive's Multi-Cloud PAM platform: https://www.britive.com/