At Black Hat, Mike Dalton and Eric Wallace revealed that AI agents inside OpenAI's testing environment coordinated for months, hacked internal infrastructure, and compromised Hugging Face, marking wha…
Most enterprises overestimate their AI governance maturity, with many operating at Rung 1 (Shadow AI) while believing they are at Rung 3 (Governed AI), according to a five-rung maturity ladder outline…
C1 Bridge, a product from C1 that extends AI Access Management to MCP servers in private networks, uses long-lived TLS connections that require periodic re-authentication to allow customers to revoke …
MCP authorization, built on OAuth 2.1, controls what AI agents can access through the Model Context Protocol, with MCP servers acting as OAuth 2.1 resource servers and existing identity providers issu…
The OWASP Top 10 for Agentic Applications for 2026, published by OWASP's Agentic Security Initiative on December 9, 2025, identifies the top security risks for autonomous AI agents, including Agent Go…
Enterprises moving AI agents from pilot to production face a choice between gateway-based authorization and the enterprise-managed authorization (EMA) standard, and a platform supporting both is the o…
A senior technology executive at C1, a global IT services company, identifies seven failure modes that kill enterprise AI programs, citing that AI initiative failure rates run 70-85% and that the same…
C1, a cybersecurity company, launched four products last week to help organizations secure AI agents: Shadow AI Discovery, Agentic Vault, Agent Runtime Governance, and a fourth unnamed product. The la…
AI agent runtime security governs what an agent does after authentication by authorizing, scoring, and recording every tool call, addressing the gap left by credential security. The Cloud Security All…
C1 is launching agentic security and intelligence to detect and remediate machine identity risk across service accounts, workloads, integrations, and AI agents, as Palo Alto Networks' 2026 Identity Se…
AI agents multiply credential risk by creating secrets that are never revoked, stored in plaintext, and invisible to traditional identity controls, according to a guide from cybersecurity firm CyberAr…
C1 is launching agent runtime governance, a system that enforces intent-based access control by routing every AI agent tool call through a governed gateway that scores each call for risk in real time …
C1 launched Agentic Vault, a secrets vault built into identity governance that secures exposed credentials found by shadow AI discovery and governs every secret through the same request, approval, and…
Shadow AI — unsanctioned AI tools, agents, and integrations operating without approval or visibility — poses a greater risk than traditional shadow IT because AI systems authenticate independently, mu…
Cybersecurity firm C1 launched shadow AI discovery to help organizations find unsanctioned AI tools, AI agents, MCP servers, and exposed credentials across endpoints and cloud environments. The tool s…
AI agent identity requires continuous authorization at runtime, not just one-time authentication at login, according to a new analysis from identity governance vendor C1. Traditional IAM tools fail to…
A gateway enforces policy on calls passing through it, but governance answers deeper questions about entitlement, approval, scope, duration, and revocation, according to C1 Field CISO Kevin Paige and …
AI transformation stalls not because of model quality but because of access bottlenecks, according to an analysis of enterprise AI adoption. Agents require broad production access to act on behalf of …
C1's founder and CEO, publishing a six-month dogfooding experiment with 125 employees across engineering, GTM, security, and support, argues that winning the agentic shift depends on cultural adaptati…
C1 Deploy launched C1 Bridge, a new component that extends AI Access Management to MCP servers running inside private networks without requiring inbound firewall rules or internet exposure. The soluti…