Zero Trust

What to watch at RSAC 2026, filtered for practitioners: the agentic AI themes with substance and the ones that are vendor noise.

If your IAM program doesn’t treat non-human identities with the same rigor as human accounts, you have a problem that’s already being exploited.

AI agents are already inside your environment making decisions and calling APIs. The question is whether anyone knows what access they have.

Zero Trust assumes no implicit trust based on network location. What that means in practice and how to build toward it incrementally.