Identity at the Center #389 - Sponsor Spotlight - Aembit
Dec 3, 2025
David Goldschlag, CEO and co-founder of Aembit, discusses securing non-human access amidst the rise of AI agents. With a rich history that includes contributions to Tor, he highlights the critical flaws in using human credentials for AI, such as increasing theft risks and undermining security. David emphasizes the need for a shift to managing access policies and outlines real-world use cases in finance and retail. He also explores hybrid versus autonomous agents, the importance of audit measures, and offers practical advice for identity practitioners navigating this rapidly evolving landscape.
AI Snips
Chapters
Transcript
Episode notes
Identity Is The Core Perimeter
- Non-human access (software-to-software) is the emerging perimeter distinct from human IAM.
- David Goldschlag argues identity is the core problem for cross-boundary access, not network plumbing.
Cross-Boundary Access Is Underserved
- Ambit focuses on cross-boundary authentication where services live outside cloud provider confines.
- That niche isn't well solved by cloud providers, creating space for specialized IAM solutions.
Manage Access, Not Secrets
- Avoid sharing personal credentials with agents and shut off MFA for them.
- Manage access via policies and short-lived credentials instead of long-lived secrets.