Skip to contentWritten by Harvey Singh
Identity securityITDR vs ISPM vs IGA: How the Three Fit TogetherIGA decides who should have access, ISPM finds the openings, and ITDR catches an account in use by an attacker. Here is how the three connect.
Access and lifecycleEmployee Offboarding Checklist: OAuth Grants, Sessions and API KeysDisabling the directory account is the first step of offboarding. This checklist covers the sessions, OAuth grants and keys that outlive it.
Access and lifecycleUser Access Review Checklist: 12 Steps From Scope to EvidenceA user access review checklist in 12 steps: scope, reviewers, evidence on each row, the no-response rule, removal after the review, and the export.
Identity threat detectionWhat Is ITDR? Identity Threat Detection for SaaS-First TeamsIdentity threat detection and response (ITDR) watches what accounts do after sign-in. Here is what it reads, what it catches and how to judge a tool.
Identity security postureWhat Is Identity Security Posture Management (ISPM)?ISPM finds the identity gaps an attacker could use, such as admins without MFA and apps nobody owns. It ranks each one by what the account can reach.
Shadow IT and SaaS discoveryHow to Audit Third-Party OAuth App PermissionsFind every OAuth grant your people and admins gave to third-party apps, read what each permission reaches, then keep, limit or remove it.
Access and lifecycleSOC 2 User Access Reviews: Cadence, Evidence and What Auditors CheckSOC 2 sets no access review schedule. What CC6.2 and CC6.3 expect, the evidence auditors sample, and the exceptions they write up.
Shadow IT and SaaS discoveryShadow AI Discovery: How to Find the AI Tools Nobody ApprovedShadow AI discovery starts with identity data: sign-in logs, OAuth grants, email metadata and the browser. Find each AI tool, then decide what to do.
GlossaryNon-human identityA non-human identity is an account or credential software uses to authenticate. Examples, why they matter, and how to govern them.
GlossaryOrphaned accountAn orphaned account still works after its owner has gone. How accounts become orphaned, why attackers like them, and how to find them.
GlossaryShadow ITShadow IT is software people use for work without approval. Where it comes from, why it matters for identity security, and how to find it.