The vendor who never leaves: time-boxed third-party access
Third parties are involved in 30% of data breaches. The fix is personal identity, project-scoped access and automatic expiration — never shared passwords.
Paulo Brito
Skyller Blog
Identity
Articles on Identity: what changes when AI joins the workday, told by the people who run it.
Articles on Identity
The video call that asked for a wire transfer: the deepfake scam
An Arup employee wired $25 million after a video call with a deepfake CFO. Recognizing a face and a voice is no longer proof of corporate identity.
Rafael Andrade
AI agents need a badge too
An automation acting on someone's behalf needs its own identity, not a coworker's borrowed password. Here's what changes when the agent has a badge.
Rafael Andrade
The Permission Nobody Asks to Lose
People who change roles usually pile up access: they keep the old and gain the new. AI agents inherit the same habit, and the problem compounds fast.
Juliana Martins
Role-based access, not all-access
Connecting an entire system to AI because it was 'the only way' leaves open permissions nobody uses. See what changes when access is granted by function.
Juliana Martins
One Identity for People and Agents
Companies now run 109 machine identities per human. Once AI joins the operation, the corporate directory is what decides what it can see and do.
Rafael Andrade
When an employee leaves, their AI must leave too
Nearly 9 in 10 ex-employees still get into company systems after they go. Here is the mechanism that cuts AI access together with the directory account.
Rafael Andrade
The Same Badge to Log Into Everything — Including AI
International reports show companies full of AI tools that skip single sign-on entirely: their own password, no second factor, no login record.
Paulo Brito