NEWS: Okta just exposed AI's biggest blind spot. Most companies aren't ready. I sat down with @thinkshiv President of @auth0 at @okta, to find out what's being missed. The problem is bigger than you think: → 80% of breaches already involve compromised identity → 91% of organisations are deploying AI agents → Only 10% have a governance strategy for managing them Traditional security was built for deterministic apps. AI agents are anything but. They access sensitive data at machine speed, far faster than any human ever could. 4 things developers need to get right from day one: 1. Authentication ↳ Verify the agent is working on behalf of who it claims 2. Human in the loop ↳ Sensitive transactions need async authorisation 3. Fine-grained permissions ↳ Ephemeral access that expires when the task is done 4. Secure connections ↳ No more static API keys scattered everywhere The future Shiv predicts: Memory will become tied to identity. Right now, your context is locked inside each platform. Eventually, you'll want to take your AI memory with you across tools. My takeaway: AI security is identity security. You can't have one without the other. The AI agent market is projected to hit $250 billion by 2034. The companies racing to deploy without solving identity will learn this the hard way.