Knowledge is Cakewalk's research record on access management for both human identities and AI agents: how they authenticate, what they are permitted to access and how that access is governed. Each essay reasons from first principles, grounds its claims in cited evidence and marks the questions the field has not yet settled.
MCP revision 2026-07-28 improves two of the three identities behind every agent action: the agent making the call and the account whose permissions it uses. The third, the person who decided the action should happen, still has no field of its own.
Read the essay
AI AgentsAI Gateway Security: The New Attack Surface and the New Control PointDarktrace found a company's AI gateway quietly working for an attacker. What a gateway holds between calls decides how bad a break-in gets.
AI AgentsRuntime Governance: The Missing Layer for Agent AccessFive industry responses are shaping agent identity and authentication. None governs what agents do at runtime. This article maps the gap and the four architectures that could fill it.
AI AgentsThe New Frontier in Identity Security: AI Agent AccessInternational Data Corporation (IDC) projects actively deployed AI agents will exceed one billion worldwide by 2029. That is not a distant forecast. Machine identities already outnumber human identities 82 to 1 across organizations worldwide. Microsoft Copilot Studio and SharePoint users
AI AgentsAI in Cybersecurity, Identity Governance & Access Management in 2026Well, SKYNET isn't quite here yet, but it feels awfully close, doesn't it? We've yet to see a robotic revolution, but it seems like with each passing week a new AI tool is storming the market and simplifying mundane tasks. Companies naturally jump at the chance to streamline tedium and reduce c
Identity GovernanceThe Future of Identity Governance is Employee-Centric. Here's Why.Poor access management practices are one of the most significant security risks facing any IT team. In fact, a recent Verizon report found that 43% of breaches are performed via applications as an entry point—underscoring how traditional access management paradigms are no longer cutting it.