Browse the full run of The Perimeter. Each issue: the week's market movers, a practitioner-sourced vendor spotlight, and synthesized community signal.
Two AI-found PHP flaws went from leak to mass exploitation in under a day, and governments switched their own sites off. We read the ECB's July letter against this week (bank action plans are due Oct 31), argue that the scalable response is limiting what a compromised machine can log in to, and compare Oasis, Linx and SailPoint's Agentic Fabric for NHI and agent governance. Plus Workday's acquisition of C1 and who might be next, Gartner's 2027 trend report on AI agent identity and the vendors it names, and a vendor spotlight on Lumos: excellent reviews, a smart pivot to agents, and a likely acquisition target. Buzzword Index (87/100) and Breach Ledger refreshed, now with soundtracks.
The big Navigate 2026 issue. We recap SailPoint's conference — Agentic Fabric expanded, Blue/Red/Green autonomous agents, A-ISPM, Zero Standing Privilege, and the identity graph customers called the real moat (Cantor raised its target to $27). Then the fortnight's news, a strategic read on whether frontier AI can disrupt CrowdStrike (and why it makes the case for CrowdStrike to move toward identity), and a vendor spotlight on CrowdStrike's own identity play: SGNL is strong real-time authorization but not governance, and it only works because something upstream already did the governing. Plus a new Buzzword Index feature — does the word describe the problem? — run on Saviynt's "Intent-Aware Runtime Authorization."
Two weeks distilled: Okta's Oktane "Blueprint for the Secure Agentic Enterprise" and its five-vendor "Blueprint Alliance" — and why we grade alliances on delivery, not press releases. Plus Cyera's third 2026 raise ($400M at a flat $12B) and the operational-efficiency question a data-security cost structure raises; an argument that NHI and agent governance are built on human identity governance (with Hugging Face as the cautionary case); and a vendor spotlight on One Identity, with a prediction that Clearlake flips, merges, or carves it up. Buzzword Index refreshed to 83/100.
We launched a new standing instrument on the site: the Buzzword Confusion Index, a weekly measure of how badly the market's marketing language is fogging the view (this week: 78/100, 91% claim overlap). Plus SailPoint's Q2 earnings ($1.231B ARR, $70M "AI ARR" with a definitional asterisk), Okta's "kill switch" agent blueprint, Proofpoint/Varonis firming up, and a deep dive on the growing pattern of Saviynt's Zuma resembling SailPoint's Agentic Fabric — from the Nasdaq stage to the demo.
CrowdStrike shipped Agentic Identity Provider and most of what we predicted from job postings last issue — full scorecard, including the miss. Plus Proofpoint's ~$5.4B circling of Varonis, a deep dive showing Saviynt's "$255M raise" is a secondary-heavy continuation vehicle at a flat valuation (with a curiously-timed director departure in the UK registry), and a vendor assessment of Omada — the quietly excellent European IGA with a 4.6/5 record and zero bottom ratings.
Okta and CrowdStrike reported within an hour of each other and described two different industries: 11% growth and "very early" versus 26% growth and "the largest market opportunity in our history." Plus a specific, falsifiable prediction about what CrowdStrike announces at Fal.Con, built on hiring signals rather than teasers. Vendor assessment: Idira, formerly CyberArk — reference-grade PAM, an install base built on cyber-insurance pressure, and reported growth of 51% that was closer to 30% once you subtract the acquisitions.
KuppingerCole's 2026 IAG Leadership Compass names SailPoint Overall Leader across all four axes, IBM's breach report hits a record $4.99M average with 97% of AI-incident organizations lacking AI access controls, and attackers reached Abbott through an environment it acquired twelve weeks earlier. Vendor assessment: Veza — a genuinely differentiated Access Graph now inside ServiceNow for $1.2B, weighed against an employee-review record that ranks its go-to-market org in the bottom 4% of all companies RepVue tracks.
Black Hat USA converged on a single problem — Rubrik, Zero Networks, Sweet Security, Cyera and Acalvio all shipping agent-authority controls, with BeyondTrust putting 75% of attacks on identity or privilege. Plus a developing thread on Saviynt release quality, a special research segment arguing AI's real disruption is autonomous authority rather than identity count, and a vendor assessment of C1 (formerly ConductorOne): a genuinely strong product with a strained engine behind it — and CrowdStrike's Falcon Fund already on the cap table.
A double deep dive on a week that reshaped the identity market. First, Cyera's $1B acquisition of Oasis Security — the strategic case, the 50–100x multiple, and the cap-table overlap (Cyberstarts, Sequoia, Accel on both sides) that makes this as much liquidity engineering as strategy, plus who might be next. Second, Saviynt's $300M ARR milestone, the valuation arithmetic against current SaaS multiples, and a line-by-line comparison of the Zuma launch against SailPoint's Agentic Fabric from ten weeks earlier. Vendor assessment: Microsoft Entra.
OpenAI's models breached Hugging Face using a self-discovered zero-day and a static, over-scoped service credential — the AI headline everyone wrote and the identity-governance failure almost nobody named. Plus ShinyHunters breaches Abbott via a compromised Entra SSO account, EY discloses a support-platform breach, and Cl0p turns exposed PTC Windchill servers into a global campaign. Vendor spotlight: Linx Security — a sharp, genuinely well-reviewed non-human-identity challenger backed by Cyberstarts (also behind Cyera and Oasis), young enough that buyers should verify before they trust the pitch.
Oak steps out of stealth with $60M against legacy IAM, AssuranceAmerica loses 6.9M records to stolen credentials, Barracuda buys Evo, and researchers document the first AI-agent ransomware. Vendor spotlight: Okta — category-leading SSO, real neutrality, and recovered financials, weighed against the 2022–23 breach legacy and Auth0's pricing gripes. Trust is the open question.
Sophos puts 71% of enterprises on the identity-breach list, Accenture confirms a 35GB source-code theft, and 37 security deals close in a single month. Vendor spotlight: SailPoint — Agentic Acceleration, Virtual Architect, and Harbor Pilot at 60% adoption have rewritten the deployment story the review sites still tell.
Cyera circles Oasis Security for $1B+, Keyfactor lands a $1B+ raise, Rubrik buys Strata.io. Vendor spotlight: a practitioner-sourced read on Saviynt — broad on paper, but product-stability complaints and an unresolved Delinea IP suit make this a do-your-homework buy.
// One email a week · free · unsubscribe anytime