KuppingerCole Analysts

Build or buy, it sounds like a simple question, but for most organizations, it's one of the most consequential and poorly structured decisions they make. In this episode, Matthias sits down with analyst and advisor Phillip Messerschmidt, who turned his hands-on advisory experience into a structured framework for getting the make-or-buy decision right every time. Key Topics: ✅ Why "we can build it...

Alert overload, 24/7 coverage gaps, and human threat actors who never stop — the SOC has problems that traditional SOAR and rule-based systems simply can't solve. In this sponsored videocast, KuppingerCole analyst Matthew Gardiner and Rick Bosworth, Head of Product Marketing at Torq, dig into the findings of KuppingerCole's Emerging AI SOC Leadership Compass and explore what it actually take...

IGA is often dismissed as a mature, stable market but that couldn't be further from the truth. In this episode, Matthias sits down with Nitish Deshpande, to explore how identity governance and administration is being reshaped by NHIs, AI-driven intelligence, deployment sovereignty, and a wave of challenger vendors. Key Topics: ✅ How IGA has evolved from static, siloed tools to integrated, multi-i...

Four weeks after EIC 2026 in Berlin, Matthias Reinwarth and Phillip Messerschmidt sit down to reflect on what the European Identity and Cloud Conference revealed about the state of identity and access management and what it means for the year ahead. Spoiler: agentic AI dominated, but it wasn't the only story. Key Topics: ✅ Agentic AI as a new class of insider threat — autonomous, non-determ...

Business relationships are complex and traditional IAM wasn't built for them. In this episode, Matthias Reinwarth sits down with Principal analyst John Tolbert, author of KuppingerCole Analysts' first-ever B2B IAM Leadership Compass, to explore why Business-to-Business Identity and Access Management is emerging as its own distinct market and what it takes to get it right. Key Topics: ✅ Why B2B IA...

Speed and security are no longer separate concerns. In this videocast, Osman Celik sits down with Andrey Leskin, CTO of Qrator Labs, to break down what Content Delivery Networks really are in 2026 and why they've become a critical piece of modern security infrastructure, not just a performance tool. Key Topics: ✅ What CDNs are and why they're no longer optional for competitive organizations ✅ Ho...

Privileged Access Management has outgrown the vault. In this episode, Matthias sits down with lead analyst Alejandro Leal, author of KuppingerCole's newly released PAM Leadership Compass, to explore how the definition of privilege itself has changed, what NHIs and agentic AI mean for PAM, and why deployment sovereignty is now a boardroom conversation. Key Topics: ✅ How the definition of "privileg...

Not all cyber threats target your systems, some target your reputation, your customers, and your brand. In this episode, Matthias Reinwarth sits down with research analyst Osman Celik to unpack three closely related but distinct markets: Attack Surface Management (ASM), Digital Risk Protection (DRP), and Brand Protection — and help organizations figure out which one they actually need. Key T...

Shadow IT was manageable. Shadow AI was concerning. Shadow agents? That's a whole different problem. 300 episodes already? Time flies when you're having fun! In this 300th Episode of the KuppingerCole Analyst Chat, Matthias sits down with Distinguished Analyst Martin Kuppinger to unpack one of the most urgent, and underestimated, security challenges facing organizations right now: employees buildi...

AI is reshaping enterprise architectures, but is security keeping pace? In this episode, Martin Kuppinger, Matthias Reinwarth, and Darran Rolls talk about the urgent question of how organizations should structure their defenses for a world of autonomous, agentic AI. The answer: an AI Security Fabric. Key Topics: ✅ Why agentic AI breaks traditional, deterministic access models ✅ The concept of "A...

Security teams have spent decades building deterministic, rule-based defenses. But the threat landscape has changed and AI is no longer just a feature add-on. In this episode of Analyst Chat, Matthias sits down with Matthew Gardiner to unpack his latest advisory note and Leadership Compass on AI SOC, exploring why probabilistic AI is becoming a core pillar of modern cybersecurity. Key topics: ✅ W...

AI agents don't just use identities. they create, delegate, and impersonate them. In this episode of Analyst Chat, Matthias Reinwarth sits down with KuppingerCole's founder Martin Kuppinger to dig into  AIdentity  (the concept at the intersection of AI and identity management) and why the IAM tools we've relied on for decades are no longer enough. Key topics: ✅ What AIdentity means and...

AI agents aren't just software, they're a new class of actor that can impersonate users, bypass security policies, and operate across complex identity meshes. In this episode of Analyst Chat, Matthias Reinwarth sits down with Martin Kuppinger and KuppingerCole's newly appointed AI Security Practice Lead Jonathan Care to unpack the emerging concept of AIdentity and why it's the key to securing agen...

What does an enterprise technology product actually deliver — in hard numbers? In this episode, Matthias Reinwarth sits down with Jonathan Care, KuppingerCole Analysts' newly appointed AI Practice Lead, for a behind-the-scenes look at a brand new research format: the  Product Value Navigator (PVN) . Key Topics: ✅ Why enterprise tech buying is broken — and what's missing from anal...

As OT systems go online, controlling access becomes more critical than enabling it. In this episode of the Analyst Chat, KuppingerCole analysts Matthias Reinwarth and Warwick Ashford dive into one of cybersecurity’s most overlooked domains: OT (Operational Technology) security. As industrial systems become increasingly connected, the traditional boundaries between IT and OT are dissolving, b...

In today's episode of the Analyst Chat, Matthias Reinwarth welcomes John Tolbert to take a deep dive into the rapidly evolving world of Consumer Identity and Access Management (CIAM). As organizations manage millions, or even billions, of identities, CIAM is shifting from a standalone capability to a core component of broader digital ecosystems. Key topics: ✅ Consumer vs. B2B IAM segmentation ✅...

In the age of AI-generated content, the real challenge isn’t just detecting falsehood, it’s knowing what to trust at all. As deepfakes and disinformation scale, perception itself becomes a new attack surface. This week, Matthias Reinwarth and Jonathan Care explore how misinformation and disinformation are reshaping cybersecurity and enterprise risk. They clarify the difference between...

The future SOC won’t replace humans with AI, it will  empower us with AI-driven automation , accelerating detection and response while keeping humans in control of critical decisions. This week Matthias Reinwarth and Matthew Gardiner discuss the evolution of security automation with the introduction of AI SOC (Security Operations Center). They explore the challenges of alert fatigue, th...

AI is everywhere, but are we using it the right way? In this Analyst Chat, Matthias Reinwarth speaks with CTO Alexei Balaganski about responsible AI usage, prompt engineering myths, data risks, and building a sustainable AI culture. From hallucinations to zero trust, this episode is your practical guide to using generative AI safely and effectively in business. Key Topics: ✅ AI is mathematics &md...

Identity is no longer just about provisioning and single sign-on. Today’s organizations face fragmented IAM architectures, API sprawl, non-human identity growth, AI agents, and increasing Zero Trust demands. In this episode, Matthew Gardiner speaks with Binod Singh, Founder and Chairman of Cross Identity, about what the Identity Fabric really means and why it has become essential for mo...

Access recertification is one of the most disliked processes in Identity & Access Management, and for good reason. In this episode, Matthias Reinwarth and Martin Kuppinger challenge the way organizations approach access reviews. Instead of endlessly optimizing broken campaigns, they ask a more fundamental question: What if we eliminated most of recertification altogether? Key topics: ✅ Why tr...

Shadow IT has evolved. Now it’s Shadow SaaS. Shadow AI. And it’s everywhere. In this week's episode of the  KuppingerCole Analyst Chat ,  Matthias  welcomes  Matthew Gardiner  for his first appearance to unpack one of the fastest-growing security domains:  SaaS Security Posture Management (SSPM)  and why that name may already be too narrow. Today&rsqu...

Decentralized identity is moving from concept to reality, driven by the upcoming  EU Digital Identity (EUDI) Wallet ! But can digital identity truly become something we trust? Join us in this Road to EIC episode of the KuppingerCole Analyst Chat where Matthias speaks with Martin Kuppinger about what decentralized identity actually means, how EUDI Wallets work, and why their success depends on...

Authorization is changing, moving from static roles and provisioning to  dynamic, real-time, policy-based decisions . But without standardization, modern authorization quickly becomes fragmented and unmanageable. In this episode of the  Analyst Chat ,  Matthias Reinwarth  is joined by  David Brossard , contributor and co-chair of the  OpenID AuthZEN Working Group , an...

Quantum computing isn’t just a future threat to encryption, it’s a direct risk to identity and authentication. In this week's episode, Matthias is joined by Jonathan Care to explore why identity is the quantum bullseye and what organizations must do now to prepare for a post-quantum world. You’ll learn: ✅ Why authentication protocols depend entirely on cryptography ✅ How &...