PlainID

PlainID An intuitive, Fine Grained Policy-Based Access Control platform that manages Authorization across all your applications and data.

PlainID's mentioned as a Sample Vendor in Gartner's 2026 Hype Cycle for Digital Identity 🎉This category covers what auth...
20/08/2026

PlainID's mentioned as a Sample Vendor in Gartner's 2026 Hype Cycle for Digital Identity 🎉

This category covers what authentication leaves unsolved. Authentication gets an identity through the door, but what happens after login is where the real risk lives.

Agentic AI made this impossible to ignore. Agents retrieve data and act on a user's behalf, so the amplified risk of unauthorized access is no longer theoretical.

Gartner also points to a few forces behind the market interest:
✔️ The access risk from agentic AI,
✔️ Intensifying regulatory scrutiny in highly regulated sectors, and
✔️ The arrival of open standards like OpenID AuthZEN.

We built our Runtime Authorization Platform for that problem. PlainID governs what every identity, human, non-human, and AI agent, can access, do, and expose.

So enterprises can move to Zero Standing Privileges, evaluate every access request at the exact millisecond it happens, and put a policy change into effect in under 60 seconds.

For the CISO who has to explain agentic AI controls to an audit committee, the category finally has a name. And the enforcement layer behind it already runs in production, across more than 35 million identities.

You can read the full announcement here 👉https://hubs.ly/Q04tJ90d0

A CFO using an HR assistant shouldn't have that assistant pull payroll data through a tool that was never meant to reach...
18/08/2026

A CFO using an HR assistant shouldn't have that assistant pull payroll data through a tool that was never meant to reach it.

✔️ The role check clears the CFO.
✔️ It clears the agent.
❌ Neither one catches what actually matters: what the two of them together are cleared to do in this exact moment.

RBAC was built for people, whose access changes slowly enough that a role assigned in January still fits in June.

ABAC added context on top, location, time of day, resource sensitivity, but it still assumed a small, stable set of identities that behave predictably.

AI agents behave nothing like that.

Here's what replaces both, now that agents are in production across the enterprise 👉 https://hubs.ly/Q04t8Bt-0

CIAM used to describe one thing: a business managing its consumers. B2C. That framing is done 🚨B2C became B2B2C. B2B2C i...
17/08/2026

CIAM used to describe one thing: a business managing its consumers. B2C. That framing is done 🚨

B2C became B2B2C. B2B2C is now B2B2C2AI.

A customer opening a bank account is not a single actor:
✔️ She brings a family.
✔️ She brings a financial advisor from a third-party firm.
✔️ And she brings an AI assistant that will move money on her behalf.

Every one of those relationships needs its own scope of access, its own delegation rules, and its own runtime decision.

Three flavors of delegation now run through one identity: personal (user to user), company (organization to user), and agentic (human to agent, then agent to agent). Agentic is the hardest: an agent doesn't just follow an instruction, it decides which sub-agents and tools to call next.

Traditional CIAM answers "who is the user" well. It struggles with "on whose behalf, with what scope, against which policy, in real time."

Closing the delegation gap requires authorization at the center of the identity stack, evaluated in runtime, portable across channels, and consistent for humans and agents alike.

Thales' Marco Venuti and PlainID's Gal Helemski walked through the full architecture in our joint session 👉 https://hubs.ly/Q04scmSS0

On July 3, Singapore's central bank published a framework that draws a hard line for agentic finance: no agent action sh...
14/08/2026

On July 3, Singapore's central bank published a framework that draws a hard line for agentic finance: no agent action should reach ex*****on until it has been declared, authorized, and assessed.

It's one of the first times a regulator-adjacent body has described governance for autonomous agents in runtime terms, not principles on a slide.

The timing matters. Gartner now counts 82 machine identities for every human one, and names AI agents the top attack surface for the year ahead. Agent adoption has outrun governance, and boards are asking pointed questions before an incident forces the conversation.

The reason most programs struggle is tempo. Traditional AI governance was built to review outputs after the fact. Agents don't wait for review. They act before a person ever sees the transcript, sometimes across a dozen tool calls. Governance has to move at the speed of the agent, which means it lives in the authorization layer, not in a quarterly audit.

In our latest guide, PlainID co-founder and CPO Gal Helemski walks through what actually changes: why accountability stays with the deploying organization no matter which model powers the agent, and why policy-based access with composite identity holds up where static roles fall short.

You can read it here https://hubs.ly/Q04smT_Q0

13/08/2026

At our latest webinar, almost every attendee said they're already running AI agents in production. That's no surprise. What is surprising is that fine-grained authorization for those agents is still the exception, not the rule.

The gap gets risky because of how agents behave once they're working:

✔️ A traditional application does the same thing next week that it does today.
✔️ An agent picks its next move while it runs, finds new tools along the way, and can act well outside what you had in mind when you granted it access.
✔️ Handing an agent everything the human can do only moves the risk downstream. It doesn't hold the agent to what the user actually asked for.

Watch the full recording to hear Omri Gazit and Gal Helemski explain what runtime authorization has to hold onto so an agent keeps serving the user's original ask, action after action 👉 https://hubs.ly/Q04smcRs0

Most enterprises built their authorization around one question: can this human log in?With AI agents onboard, it is time...
12/08/2026

Most enterprises built their authorization around one question: can this human log in?

With AI agents onboard, it is time for a harder one: Can this agent, acting on behalf of this user, access this data, execute this action, and expose this information right now?

Our new guide walks the full evolution of access control, from legacy ACLs and RBAC through ABAC and ReBAC:
❌ RBAC creates role explosion, while ABAC buries rules in complex, developer-heavy code.
❌ ReBAC maps relationships well, yet it struggles to dynamically filter rows or mask sensitive fields at runtime.
✔️ PBAC (Policy-Based Access Control) orchestrates all of them into a single policy fabric. So security and application teams can author intent-aware policies in plain language, govern them centrally, and enforce them at runtime across applications, APIs, data platforms, and AI agents.

One PBAC decision dynamically controls what an identity can access (filtering data by region), do (disabling bulk exports), and expose (masking SSNs in real time). That is the difference between a clean GDPR audit and a slide that says "evaluating vendors".

See the full access model showdown and why PBAC comes out on top in our latest guide 👉 https://hubs.ly/Q04sz1Rm0

06/08/2026

Today's your last chance to meet us at Ai4 and talk runtime authorization for agentic AI!

If you want to see how to control what users and agents can access, retrieve, and execute across the full flow, pop by booth #1045.

See you there!

🤝 Microsoft and PlainID are teaming up to close one of the toughest gaps in agentic AI. Microsoft provides the identity,...
06/08/2026

🤝 Microsoft and PlainID are teaming up to close one of the toughest gaps in agentic AI.

Microsoft provides the identity, security, and native governance foundation for these workflows.

PlainID extends that trusted context into Runtime Authorization decisions near the tools, APIs, and data involved.

Together, we help organizations preserve policy continuity across the tools, APIs, data, and platforms involved in agentic ex*****on.

Read more 👉 https://hubs.ly/Q04s4hf40

We're at Ai4!If you're on the floor at The Venetian, come find the PlainID team. We're talking runtime authorization for...
05/08/2026

We're at Ai4!

If you're on the floor at The Venetian, come find the PlainID team. We're talking runtime authorization for agentic AI, and how to control what users and agents can access, retrieve, and execute across the full flow.

Bring your hardest IAM and authorization questions. We like those 👀

Find us at booth #1045 through Thursday!

We looked at senior identity leaders across the Fortune 500 companies. Their job titles alone show how much the work has...
05/08/2026

We looked at senior identity leaders across the Fortune 500 companies. Their job titles alone show how much the work has changed:

✔️ A decade ago, access administration sat a few layers under the CISO. Now it's an executive function.
✔️ The role has split into several lanes: cloud identity, privileged access, customer identity, governance, each with its own senior owner.
✔️ It also moved inside security operations. Identity leaders now sit within the cybersecurity org, owning threat exposure, not only provisioning and recertification.
✔️ In banking and insurance, it's a whole new bench. Regulated firms staff several senior IAM roles on one team, because access control now carries real compliance weight.

So identity grew up. It climbed the org chart, specialized, and became a security discipline. But the titles map every corner of access except one - none of them yet owns the decision of what an AI agent may do at the moment it acts.

Because an agent logs in with real credentials, looks trusted, then moves. Authentication proves who it is. It doesn't decide what it should be allowed to do.

We wrote up more on this change here 👉 https://hubs.ly/Q04rZ6Nm0

Address

Tel Aviv

Website

Alerts

Be the first to know and let us send you an email when PlainID posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to PlainID:

Shortcuts

Share

Category