non-human identity

opal zero ai agent access permissions a turret drum with a low domed roof

Opal Zero: A Smart Fix for Risky AI Agent Access Permissions

Opal Security says Opal Zero reaches general availability at the end of September 2026, built on a three-part definition of least privilege for agents: grants that expire, an owner for every agent, and a decision made at the point of access rather than at provisioning time. Opal Labs reports that more than 96 percent of non-human identities have no recorded purpose and only 10 percent of their access was reviewed in the past year. This article covers the Paladin reasoning model, the Risk Center, how Gateway Sync enforces without adding a proxy, what the design partners at Faire, Databricks, Elastic and Superhuman actually said, the $30,000 launch price and the claims that remain unproven.

Read more
claude and aws integrations opal late september a keystone wedge block set into the top of a low arch

Claude and AWS: Opal’s Powerful Late-September Integration Launch

Opal Security says Opal Zero reaches general availability at the end of September 2026, and the connector list is the story. It ingests agent identities from Anthropic, AWS Bedrock, OpenAI, Cursor, Okta and Entra, hooks the Claude Compliance API, admin controls for Claude Code and Enterprise-Managed Authorization for MCP connectors, then enforces decisions inside AWS Bedrock AgentCore Gateway and Databricks Unity Gateway rather than adding a proxy of its own. This article covers what the integrations actually do, how Gateway Sync differs from the first generation of agent-security tooling, the Opal Labs research behind the launch, the design partners, the $30,000 launch price and the gaps worth watching.

Read more
cymphony sequoia ai agent security funding a turnstile post with three horizontal arms

Sequoia Doubled Down on Cymphony for AI Agent Security. Cymphony’s Own Blog Says “AI Agent” Zero Times

Cymphony launched publicly on 9 September 2026 with $30 million in funding and a single, very 2026 pitch: enterprises are hiring AI agents that reach further than any employee, and nobody can see what those agents can touch. Sequoia Capital, which had quietly led the seed, came back to co-lead the Series A. TechCrunch broke […]

Read more
ai agents need agent identity before gateway a solid wax seal stamp

AI Agents Need Their Own Identity Before They Need a Gateway

A pair of VentureBeat guest essays argue that AI agents need their own identity before they need a gateway: a proxy can only enforce what it can attribute, and most organisations have no agent identity layer to attribute anything to. This piece explains the borrowed-token problem, the six-gate dependency-gated deployment model that puts the gateway fifth, the LiteLLM CVE-2026-42271 warning, the 2026 survey data on the machine-identity gap (109 machine identities per human, 68% unable to tell agents from people), what Okta, Microsoft, Cloudflare, Kong, the IETF and NIST have shipped, and a 30-day plan a UK business can run without buying anything.

Read more
CHAT