Insights

Field notes on non-human identity security.

Analysis, playbooks, and product deep-dives from the TigerIdentity team.

NHI SecurityBest PracticesAI Agent SecurityTechnical Deep DiveZero TrustIndustry Analysis

01

NHI Security
8 min read

Featured story

Ownership Attribution at Scale: Mapping NHIs to Humans

The most valuable column in your NHI inventory is "owner." Here is how to compute it, keep it fresh, and handle every edge case. Including departed employees.

Read the story
AllNHI SecurityBest PracticesAI Agent SecurityTechnical Deep DiveZero TrustIndustry Analysis
Best Practices02

Migrating from Oasis Security to a Unified NHI Platform

What to expect when you consolidate an Oasis Security deployment onto TigerIdentity. Data migration, policy re-authoring, and running in parallel without breaking coverage.

7 min read
AI Agent Security03

The MCP Gateway Pattern: Governing AI Agents at Runtime

The Model Context Protocol is the fastest-spreading interoperability spec in software. The MCP gateway is the pattern that lets you govern agents without slowing them down.

9 min read
Best Practices04

Building an NHI Inventory: A Step-by-Step Guide

The first thirty days of any NHI security programme are inventory. Here is what to scan, what to store, and how to keep the inventory fresh after week four.

8 min read
Technical Deep Dive05

TIDR vs NHIDR: Behavioral Detection for Non-Human Identities

The naming is confusing, the categories overlap. What matters is how behavioural detection works when the actor is a service account. And where it breaks.

9 min read

More articles

Zero Standing Privilege for Service Accounts
Secrets Sprawl: Why Your Vault Isn't Enough
How to Discover Shadow AI Agents Before They Discover You
A Practical Framework for AI Agent Least Privilege
The Rise of NHI Security: What Oasis, Entro, and Astrix Miss
Beyond CAEP: Building Continuous Access Evaluation That Scales
OAuth Token Sprawl: The Hidden Risk in Every SaaS Stack
ITDR Is the New EDR: Identity Threat Detection in Practice
Just-in-Time Access vs Standing Privileges: A Real-World Comparison
Passkeys in the Enterprise: Lessons from Early Adopters
Agentic AI Needs Identity Governance. Here's Why
Machine Identity Management: The 2026 Playbook
Why Identity Graphs Beat Flat RBAC in 2026
MCP Security Risks Every Enterprise Should Know
Securing OpenClaw: Enterprise Identity Controls for the Most Popular AI Agent
Why Zero Standing Privilege Is the Future of IAM
SGNL Acquired by CrowdStrike: What It Means for Continuous Identity
The CISO's Guide to AI Agent Risk Management
CAEP and Shared Signals: Real-Time Session Management Explained
Non-Human Identities: The Fastest Growing Attack Surface
Building Policies That Actually Work: Lessons from 50 Enterprise Deployments

Subscribe

Get new posts in your inbox.

A short email whenever we publish something worth reading. No sales pitches.

Subscribe

Weekly

Subscribe