C1.ai shipped four launches during its Launch Week aimed at internal application builders, including C1 AppHub, a standard OIDC sign-in and OpenID AuthZEN permissions service, credential vending with …
C1 launched C1 LLM Gateway on Day 4 of its Launch Week, a policy-controlled endpoint that routes inference across supported public, private, and customer-controlled model deployments. The gateway ties…
C1.ai launched governed sign-in and permissions for AI-built applications, acting as a standard OpenID Connect (OIDC) provider that federates authentication to a company's existing identity provider a…
C1.ai launched C1 AppHub, a self-hosted internal application platform that connects AI-built internal apps to a company's existing identity, authorization, credential, network-access and model-access …
AI agents are entering enterprise environments through application teams rather than IT, authenticating via API keys, OAuth grants, and delegated tokens so they appear in logs as ordinary service acco…
C1 announced that new customers requiring their C1 tenant data held in the EU can now be provisioned on its EU instance, which runs in AWS Frankfurt with Ireland as the disaster-recovery region. The i…
A five-move, 90-day enterprise AI governance blueprint calls for routing all AI projects through a single intake form, standing up a central audit log before writing policy, wrapping three legacy apps…
Security, implemented correctly, accelerates rather than slows enterprise agentic AI migration, according to a first-person account that argues the safe path and the fast path are the same path when t…
Enterprises are wasting resources by having multiple teams independently build the same agentic capabilities, such as a Salesforce read-only connector, because of a lack of sharing. The proposed fix i…
C1, a credential security provider, has introduced decoy credentials that trigger a CRITICAL 'Decoy credential used' finding when a stolen credential is used, while returning a standard OAuth error to…
Software Analyst Cyber Research (SACR) published the AI and Agentic Risk Management and Control Framework (ARMCF) in July, outlining six governance domains—GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, …
C1, an identity governance platform, has launched C1 Deploy, an agentic onboarding feature that uses C1 AI to build a setup plan based on a customer's live environment and goals, such as audit remedia…
A new enterprise AI methodology, the Agentic Adaptation Playbook, urges CIOs to start AI transformation with a free, honest meeting rather than a build-first question, according to a series by an unna…
SAML 2.0 handles authentication while OAuth 2.0 handles authorization, and choosing the wrong one leads to brittle integrations and audit findings, according to a guide on the differences. The guide n…
At Black Hat, Mike Dalton and Eric Wallace revealed that AI agents inside OpenAI's testing environment coordinated for months, hacked internal infrastructure, and compromised Hugging Face, marking wha…
Most enterprises overestimate their AI governance maturity, with many operating at Rung 1 (Shadow AI) while believing they are at Rung 3 (Governed AI), according to a five-rung maturity ladder outline…
C1 Bridge, a product from C1 that extends AI Access Management to MCP servers in private networks, uses long-lived TLS connections that require periodic re-authentication to allow customers to revoke …
MCP authorization, built on OAuth 2.1, controls what AI agents can access through the Model Context Protocol, with MCP servers acting as OAuth 2.1 resource servers and existing identity providers issu…
The OWASP Top 10 for Agentic Applications for 2026, published by OWASP's Agentic Security Initiative on December 9, 2025, identifies the top security risks for autonomous AI agents, including Agent Go…
Enterprises moving AI agents from pilot to production face a choice between gateway-based authorization and the enterprise-managed authorization (EMA) standard, and a platform supporting both is the o…