Neha Duggal
Latest research and insights
Beyond Humans: Governing Machine Identity Access at Scale
By Neha Duggal
In Part 2 of our Non-Human Identity (NHI) Governance series, Kelsey Brazill explores what happens when machine access goes ungoverned AND how to fix it.
Anthropic’s Claude Enterprise
By Neha Duggal
By shifting toward a model of Zero Standing Privileges and implementing just-enough and Just-in-Time access for AI-driven workflows, security teams can empower their developers without turning their most productive tools into their greatest identity risks.
When your coding agent can commit everything you can commit
By Neha Duggal
Developers must restrict agent access, mandate human code reviews, and sanitize inputs to mitigate unauthorized repo takeovers.
The OpenAI agent did not go rogue. It ran out of authorization boundaries.
By Neha Duggal
If you are running agents in evaluation, production, or anywhere in between, do not only ask whether the model will stay inside its sandbox. Ask whether your identity and authorization controls can stop the model after it finds a way out.
Azure AI Studio and Azure OpenAI
By Neha Duggal
Azure AI Studio and Azure OpenAI offer transformative capabilities, but their integration into the Azure ecosystem brings unique identity security considerations.
Google Vertex AI
By Neha Duggal
Recently, I wrote about the governance challenges and risks associated with Amazon Bedrock and today I’ll explore how the same principles apply to Google Vertex.
Why broken access control still tops the OWASP Top 10 and what it means for identity security in the era of hybrid cloud
By Neha Duggal
Broken access control has topped the OWASP Top 10 again — exposing the limits of traditional IAM. Learn why it persists in hybrid and multi-cloud environments and how continuous authorization governance helps close the gap.
Access in control: AWS Bedrock
By Neha Duggal
Generative AI enablers like Amazon Bedrock unlock the innovation potential of AI across the enterprises, but they also significantly expand the identity attack surface.
Outnumbered and Underprotected: The Hidden Risk of Non-Human Identities
By Neha Duggal
In Part 1 of our Non-Human Identity (NHI) Governance series, Kelsey Brazill exposes the cloud’s most overlooked attack surface - machine identities - and explains why traditional IAM tools can’t keep up.