Identity Security in the AI Era: Governing Human, Non-Human, and AI Agent Identities
- Speaker
Role
Moderator
Event
VULNCON 2026 | CXO Panel Moderator
Audience
Cybersecurity Leaders, CXOs, Practitioners
Focus
Identity Security, AI, Governance & Risk
At VULNCON 2026, I moderated a CXO panel on a topic that is redefining the identity security landscape.
As organizations embrace AI, cloud-native architectures, automation, and autonomous agents, identities now extend far beyond employees and customers to include service accounts, APIs, workloads, bots, and AI agents.
The discussion brought together diverse perspectives from enterprise leadership, security architecture, and identity governance, with a shared recognition that identity is no longer just about people — it is a critical business and risk agenda.
- The changing identity landscape with AI, automation and cloud-native architectures
- Non-human identities as a growing and unmanaged attack surface
- Challenges in governing service accounts, APIs, workloads, bots and machine identities
- Evolving from Identity Governance to Identity Intelligence
- Continuous visibility, contextual risk assessment and behavioural analytics for identity security
- Governance challenges for increasingly autonomous AI agents
- Identity security as a boardroom issue — business resilience, operational risk and AI governance
Non-human identities are a massive attack surface.
Service accounts, APIs, workloads, bots, and machine identities now outnumber human identities in many organizations, while governance and security controls have not evolved at the same pace.
Identity Governance must evolve into Identity Intelligence.
Provisioning users and meeting compliance requirements are no longer enough. Organizations need continuous visibility, contextual risk assessment, behavioural analytics, and real-time response capabilities to manage identity-driven threats.
AI agents introduce a new governance challenge.
As AI systems gain autonomy and act on behalf of organizations, we must rethink accountability, lifecycle management, access controls, and oversight for identities that are neither fully human nor fully machine.
Identity is now a boardroom issue.
Identity security is no longer just a cybersecurity concern. It is increasingly a business resilience, operational risk, and AI governance imperative.
My sincere thanks to my fellow panelists Abhinav Chourasia, Sai Lakshmi Sathyanarayana, and Sowmya N Swamy for sharing their perspectives and making the discussion engaging, insightful, and thought-provoking.
I also thank the VULNCON team for creating a platform where important conversations around the future of cybersecurity can take place.