security

Earlier today, Okta CEO Todd McKinnon sent the following email to Okta employees.  Hi everyone, Last month Okta celebrated its 15th birthday. After reflecting on this milestone, I’m incredibly proud of the progress we’ve made together and the strides we’ve taken to establish Okta as an iconic company. We power every identity use case, we support…

Organisations of all sizes are adopting more SaaS applications than ever. According to Okta’s Businesses at Work Report 2023, the average Okta customer uses 89 different applications. Driving a least privileged access approach for each of these applications becomes even more complex when teams have to take into account each application’s unique…

  Update, 8 Feb., 2024: I’m pleased to announce that Okta has completed the acquisition of Spera Security,  an identity security platform, to expand our identity threat detection and security posture management capabilities. We aim to make the product generally available in spring 2024. We welcome Spera Security to Okta! We're excited to see what…

Security. It’s a hard business. I’m not just talking about the endless patching, monitoring, and training. The constant sprint to remediate when a new CVE (Common Vulnerability and Exposures) notification drops, or the lingering fears that you’ll be called back to the office on your downtime to deal with a crisis.  No, it’s hard because it’s not a…

One risk IAM administrators are very familiar with is having a lack of control over credentials. Once credentials that grant privileged operations are lost or shared without permissions, they can be used to give unauthorised people elevated access to resources. A reasonable prevention strategy is to use a Just-in-Time (JIT) access model to make…

The password has been much maligned since its creation, and deservedly so. Even Fernando Corbató, the MIT computer scientist who created the password, said it had become “kind of a nightmare.” However, Corbató could not have conceived of the hundreds of passwords we now use and the proliferation of complex rules to overcome the weakness of the…

In today's dynamic digital landscape, Zero Trust architecture has emerged as a critical paradigm shift. With the constant evolution of threats and the increasing complexity of digital environments, organisations must adopt a comprehensive security approach that challenges implicit trust. Zero Trust enables effective protection against advanced…

“Hello, give me your name, address, shoe size, motorcycle and boots.” Now, we can all agree that approaching a first date like you’re the Terminator is not going to go very well. No one likes to be bombarded with personal questions as soon as they sit down — let alone by a stranger they’ve just met. Yet this is how most brands approach those first…

The internet has never faced so much existential risk from people who want to harm companies and their users. While many organisations understand that there’s a link between identity and security, few fully grasp how foundational identity is to a modern security strategy. Organizations with gaps in their identity security are significantly more at…

In the aftermath of the pandemic, the world’s dependency on digital identity has grown exponentially. With identity as the foundation for all things security, it is important to understand what digital identity means. Digital identity is composed of two entities: users and their devices. Digital transformation and the rapid adoption of smartphones…