Subscribe Share Full episode and show notes Application security , Identity , Generative AI How AI Is Reshaping Identity Security at the Infrastructure Layer – Ev Kontsevoy, Neha Duggal, Amit Masand – ASW #388 Appsec has seen machine identities from daemons and processes to services, microservices, and cloud accounts. And now we have agents. Ev Kontsevoy talks about what it means to have engineers and agents interacting in an environment, and why a focus on actions can be more effective than roles. One of the biggest challenges in securing agents along with all of the other identities that organizations manage is how fragmented that management has become. But a unified engineering view of identities is just a start. Once you’re able to shift to a practice where access is granted based on attributes and limited durations, then your environment becomes more resilient to mistakes and unexpected actio... June 23, 2026 This episode is sponsored by Full Segment Notes Appsec has seen machine identities from daemons and processes to services, microservices, and cloud accounts. And now we have agents. Ev Kontsevoy talks about what it means to have engineers and agents interacting in an environment, and why a focus on actions can be more effective than roles. One of the biggest challenges in securing agents along with all of the other identities that organizations manage is how fragmented that management has become. But a unified engineering view of identities is just a start. Once you're able to shift to a practice where access is granted based on attributes and limited durations, then your environment becomes more resilient to mistakes and unexpected actions, not to mention the security concerns that come with agents acting on their own. Who Is Responsible for an AI Agent's Actions? As AI agents gain the ability to access systems, invoke tools, and take action on behalf of users, organizations need clear frameworks that define responsibility for machine-driven decisions and outcomes. This segment examines how accountability, delegation, and attribution can be established across users, developers, security teams, and business stakeholders. Neha will explore how governance models support transparent, auditable agent-driven workflows while helping organizations manage risk and maintain trust. This segment is sponsored by P0 Security. Visit https://securityweekly.com/p0idv to learn more about them! The rapid rise of agentic AI and non-human identities is fundamentally reshaping the future of identity security, challenging traditional IAM and PAM models built around predictable human behavior. In this executive interview at Identiverse 2026, Amit Masand discusses how autonomous systems, AI agents, and machine identities are creating new operational and governance challenges for modern enterprises. Drawing from more than two decades of industry experience, the conversation explores the growing complexity of continuous governance in a world where identities increasingly operate at machine speed. Segment Resources: https://www.idmexpress.com/post/preventing-cybersecurity-incidents-through-managed-services https://www.idmexpress.com/post/cyberark-securing-aws https://www.idmexpress.com/post/turning-roadblocks-into-breakthroughs-a-custom-oracle-pam-integration-story Contact IDMEXPRESS! Secure Your Tomorrow, Today: https://securityweekly.com/idmidv Guests Ev Kontsevoy Co-Founder and CEO at Teleport Ev Kontsevoy is Co-Founder and CEO of Teleport. An engineer by training, Kontsevoy launched Teleport in 2015 to provide other engineers solutions that allow them to quickly access and run any computing resource anywhere on the planet without having to worry about security and compliance issues. A serial entrepreneur, Ev was CEO and co-founder of Mailgun, which he successfully sold to Rackspace. Prior to Mailgun, Ev had a variety of engineering roles. He holds a BS degree in Mathematics from Siberian Federal University, and has a passion for trains and vintage-film cameras. Neha Duggal Chief Product Officer at P0 Security Neha serves as Chief Product Officer at P0 Security and has deep expertise in cloud security and SaaS. She brings extensive leadership experience from roles at Obsidian Security, Lacework, and Elastic, where she drove product strategy for complex, data-driven platforms and led high-impact teams across product, design, and go-to-market functions. Neha holds an MS in Information Technology from Rensselaer Polytechnic Institute. Amit Masand Founder & CEO at IDMEXPRESS Amit Masand, Founder and CEO of IDMEXPRESS, a USA-based company delivering AI-enabled identity security solutions and 24×7×365 managed services to organizations worldwide, across industries. With nearly two decades of expertise in Identity & Access Management, Amit has built his career at the forefront of the cybersecurity industry — working alongside some of the most recognized names in the IAM space and developing a strong foundation in both the technical and business dimensions of identity security. That journey eventually led him to take a leap of faith. In 2023, Amit founded IDMEXPRESS with a simple but powerful belief — that every organization, regardless of size, deserves access to world-class identity security without compromise. Since then, he has grown IDMEXPRESS into a trusted partner for enterprises, built on a culture of responsiveness, innovation, and real relationships with clients. For Amit, this isn’t just about business— it’s about the people and services behind it, and making sure they can operate with confidence and security every single day. Host Mike Shema https://dangerouserrors.com Show More Stay in the Know, No Smoke and Mirrors – Join Our Newsletter Get expert insights and technical breakdowns straight to your inbox. Join Now Related Segments Application security AI Code Security: Why AppSec Must Evolve for the Era of AI-Generated Code – WC #1 Application security Why Does It Matter Who or What Created the Code? – Matias Madou – ASW #387 DevSecOps AI-Generated Code Security Risks: Why “Vibe Coding” Can Break Your App – WC #1 Related Content Application security India temporarily blocks Telegram over exam fraud concerns Exposure management Securing the model: Protecting AI systems from compromise Application security Docker security scanner uses AI to help explain, fix vulnerabilities You can skip this ad in 5 seconds