KuppingerCole Analysts

In this episode, Matthias Reinwarth is joined by Alejandro Leal, Senior Analyst at KuppingerCole Analysts, to discuss the strategic shift toward Identity Fabrics in modern IAM. Alejandro outlines the challenges posed by fragmented IAM architectures and the growing diversity of digital identities.

The conversation explores how the Identity Fabric model enables organizations to build cohesive, adaptive identity infrastructures that integrate existing tools while providing observability and actionable insights. They also examine the importance of integration, modularity, and policy enforcement across identity silos. The episode concludes with practical steps for building a future-proof IAM strategy.

We dive into:

• Why traditional IAM is failing
• What Identity Fabric really means (and what it’s not)
• How it supports every identity type — human or machine
• The critical role of observability & actionable insights
• How to balance legacy tools with agile innovation
• Where to start your implementation — without a big bang

Identity is now a strategic business function — and Identity Fabric is how to operationalize it.

In this must-listen episode of the KuppingerCole Analyst Chat, Matthias Reinwarth is joined by Jonathan Care to explore a groundbreaking shift in cybersecurity leadership. Discover how CISOs are transforming from traditional gatekeepers, the infamous "Dr. No", into strategic business enablers through the principles of Servant Leadership.

We dive deep into:

• Why the CISO role is evolving beyond technology and policy
• The pitfalls of autocratic security leadership and rising burnout
• How empowering teams builds trust, reduces shadow IT, and accelerates projects
• Real-world examples from global organizations proving this approach works
• Practical first steps for CISOs to start leading through influence, not fear

Key Takeaway: Security isn’t just about tech, it’s about people and culture. Servant leadership helps build stronger security and stronger businesses.

As non-human identities outpace their human counterparts, the need for effective Non-Human Identity (NHI) management is more crucial than ever. Discover why current systems may leave your organization exposed and how a unified governance approach can safeguard against the risks posed by cloud-native development and Agentic AI.

Read original blog post here: https://www.kuppingercole.com/events/ifid2025/blog/non-human-identity-management-mature-or-just-getting-started

In this episode of the KuppingerCole Analyst Chat, Matthias Reinwarth sits down with cybersecurity CTO & analyst Alexei Balaganski to explore the dramatic evolution of API management and security.

They unpack:

1. Why APIs are now the backbone of AI agents and how MCP (Model Context Protocol) is driving a new decentralized ecosystem.

2. The explosion of shadow APIs & hidden interfaces from your printer to your coffee machine and why they pose serious risks.

3. How edge computing & WebAssembly are decentralizing everything, making old API gateway models obsolete.

4. The critical need for API posture management, identity & access controls for non-human identities, and full lifecycle security even before you write a line of code.

Learn why API security isn’t just a tech problem, it’s the next big business risk, how the market is consolidating, and what’s coming in the new Leadership Compass on API Management & Security.

In this episode of the KuppingerCole Analyst Chat, Matthias Reinwarth is joined by Martin Kuppinger to untangle one of the most complex—and increasingly urgent—topics in digital identity: non-human identities (NHIs).

With AI agents, workloads, service accounts, and API keys exploding in number, it’s no longer enough to rely on traditional IAM structures. But what is an NHI, exactly? And how can organizations secure them without collapsing under the weight of siloed systems and unmanaged identities?

Martin and Matthias explore:

• The blurry boundaries between identities, accounts, secrets, and credentials
• Why "non-human" is a problematic but useful term
• Agentic AI vs. API keys: where identity management really changes
• Practical starting points for managing NHIs in real-world environments

πŸ’‘ Whether you're a CISO, architect, or IAM practitioner, this episode gives you a pragmatic foundation for approaching NHI—without getting lost in terminology wars.

In this essential episode of the KuppingerCole Analyst Chat, host Matthias Reinwarth welcomes cybersecurity strategist Jonathan Care to explore one of the most pressing challenges CISOs face in 2025: detecting deception in an age of AI-powered attacks.

From deepfakes and behavioral manipulation to vendor impersonation and adversarial AI, attackers are no longer relying on simple phishing emails. They're launching highly personalized, deeply technical, and psychologically crafted deceptions.

Jonathan presents a structured four-part taxonomy of deception and offers actionable insights for CISOs—from implementing callback verification protocols to deploying behavioral analytics and deception detection technologies.

Topics Covered:

1. AI-powered social engineering
2. Digital identity deception & deepfakes
3. Vendor/supply chain impersonation
4. Technical deception & adversarial machine learning
5. Practical steps CISOs can take this week

Discover how Europe plans to reduce its dependency on imported digital technologies through the EuroStack initiative. Learn about strategic proposals for building a resilient, sovereign digital Europe, and uncover the vital roles collaboration and innovation play in achieving long-term economic, social, and environmental resilience in the digital landscape.

Read the original blog post here: https://www.kuppingercole.com/blog/leal/notes-from-cybersec-2025-the-eurostack-vision

Organizational identity is no longer optional

In this episode of the KuppingerCole Analyst Chat, host Matthias Reinwarth is joined by cybersecurity research director John Tolbert to talk about the rising threats of organizational fraud, rogue merchants, and the growing need for robust identity verification at the business level.

Topics covered:

1. What are rogue merchants, and how do they operate?
2. The staggering fraud numbers behind the Paycheck Protection Program (PPP)
3. The importance of Know Your Business (KYB) vs. Know Your Customer (KYC)
4. Why legacy business verification methods are no longer enough
5. How APIs, LEIs, and verifiable digital identities can help
6. The role of CIEM and B2B CIAM in detecting and preventing organizational fraud

Whether you're in cybersecurity, compliance, finance, or e-commerce, this episode unpacks how fraud at the organizational level is growing—and what tools and frameworks can stop it.

Unlock vital strategies on how to defend your organization from costly supply chain attacks by ensuring airtight third-party access management, understanding the latest regulatory demands, and implementing cutting-edge IAM solutions that go beyond perimeter defenses.

Read the original blog post here: https://www.kuppingercole.com/blog/ashford/third-party-risk-is-the-new-front-door

In this episode, Matthias Reinwarth welcomes KuppingerCole Membership Product Owner Christie Pugh to share her unique perspective on the European Identity and Cloud Conference (EIC) 2025.

🎯 As a first-time attendee coming from an operational background, Christie highlights how EIC goes beyond the event itself—and how the KuppingerCole Membership can provide continuous value all year long.

πŸš€ Key Topics Covered:

βœ… Making IAM research actionable through KuppingerCole’s AI-powered chatbot
βœ… The value of year-round access to analyst insights via membership
βœ… Highlights from the sovereign cloud & geopolitical risk roundtable with Mike Small
βœ… Why identity needs to serve the underserved—reflections on inclusion, ethics & equality
βœ… Behind-the-scenes moments from Berlin, awards night, and networking

Tune in for a different angle on what makes EIC such a powerful experience—and how to keep that momentum going.