Okta vs. Ping Identity: How I'd Choose
Okta vs. Ping: Okta suits cloud-first orgs that want pure SaaS. Ping suits complex, hybrid or regulated enterprises that need deployment control.
← Topics
Identity Security
Attackers log in more often than they break in. ITDR, MFA, SSO and the non-human identities nobody's watching.
Articles
What Is CIEM? Cloud Entitlement Management Explained
CIEM finds every cloud identity, works out what it can actually do, and trims unused permissions. How it works and how it fits with CNAPP, IGA and PAM.
Zero Standing Privileges: Goal, Myth or Next Year's Project?
Zero standing privileges means no account holds privilege until it's needed. What's realistic, where it breaks, and how to measure progress toward it.
Just-in-Time Access: Do You Really Need It?
Just-in-time access grants privileges only when needed and removes them after. Here's how it works, where it fits, and when you're ready for it.
Certificate Lifecycle Management for 47-Day Certificates
Certificate lifecycle management covers discovery, issuance, deployment, monitoring, renewal and revocation. Here's how to get ready for 47-day TLS certs.
IEC 62443 for Identity People: What It Asks You to Do
IEC 62443 secures industrial control systems. For identity teams, FR1 and FR2 set the bar: unique IDs, MFA by security level, and role-based use control.
IT/OT Convergence: Where Identity Gets Caught in the Middle
IT/OT convergence connects plant systems to business networks and the cloud. Here's what it changes for identity and access, and how to converge safely.
Non-Human Identities: The Accounts Nobody Owns
Non-human identities are the service accounts, API keys, tokens, certificates and AI agents that act without a person. How to get them under control.
ESC1 and ADCS Attack Paths: What to Fix First
ESC1 is an AD CS template misconfiguration that lets any domain user get a certificate as anyone, including a domain admin. Here's how to fix it.
What Is PKI? A Practitioner's Guide to IT and OT PKI
PKI (public key infrastructure) is the CAs, certificates, keys and policies that let machines and people prove identity. Here's how it works in practice.
Purdue Model for Identity: What Breaks Below Level 3
The Purdue model splits OT networks into levels 0–5 plus an IDMZ. Here's what identity and access look like at each level, and why IT patterns break.
What Is Identity Governance and Administration (IGA)?
IGA is how you decide who should have access, grant it, review it and prove it. What it does, how it differs from IAM and PAM, and how programs go wrong.
What Is ITDR? Identity Threat Detection and Response
ITDR (identity threat detection and response) finds and stops attacks that abuse identities and the systems behind them, like AD and your IdP.
What Is OT Security? An Identity-First Primer
OT security protects the systems that run physical processes. What makes it different from IT security, and why identity is the place to start.
Building the Identity Pillar of a Zero Trust Program
Zero Trust identity in practice: the four technology pieces (PAM, access enforcement, IGA, ITDR), how they connect, where to start and how to measure it.
What Is the Dark Web? (And Is Your Info Already on It?)
A plain-English breakdown of the dark web, why your data is almost certainly on it, and the five things that actually make it useless to criminals.
What Is Zero Trust?
Zero Trust in plain English: why "trust but verify" stopped working, the three principles that replaced it, and where to actually start.
What Is an Insider Threat? Types, Signs and Controls
What is an insider threat? The three types, the warning signs to watch for, and the identity controls that limit what any insider can do.
Types of Cyber Threats (and How to Protect Yourself)
The types of cyber threats most people actually face, from phishing and ransomware to SIM swapping, and the simple habits that stop most of them.
What Is IAM? Identity and Access Management Explained
What is IAM? The building blocks of identity and access management, from authentication to provisioning and governance, and why they matter.