Agents are redefining sensitive access...P0 is using AI to extend coverage just as fast

James Berthoty

Founder and Analyst at Latio, built the only analyst firm that independently tests products prior to reviews. Leveraging over a decade of security experience, James helps practitioners and security leaders make confident, informed tool-buying decisions by providing clear, accurate, and experience-backed guidance.

Latest research and insights

JIT assign permission diagram

The three types of JIT (And why only one actually kills standing access)

By James Berthoty

"Just in Time (JIT) access" is a simple concept but can be architected in multiple ways with significant tradeoffs. In this blog, we’ll break down the three major ways of achieving JIT, only one of which actually removes longstanding access altogether. These three types are: credential check-in/checkout timed group membership JIT permission assignment All three achieve some version of JIT, but only the latter removes the need for longstanding admin credentials altogether. In assessing these three approaches, the goals of JIT should be to: Reduce the number of users with unused sensitive permissions Reduce the risk of a compromised credential Improve user experience for complicated login flows Most approaches do something to reduce the number of unused permissions, but can lead to a false sense of security, as longstanding permissions switch to a role rather than a user account. Below […]

Read more