Practitioner thinking, from the people doing the work.

Abstract In regulated environments, identity systems must meet strict audit, compliance, and governance requirements. Default operational models are often insufficient, particularly when configuration changes are not traceable or reproducible. In Keycloak deployments, achieving compliance requires shifting from manual administration to an API-driven, pipeline-controlled model. This article explores how configuration management, audit pipelines, and access controls can be desi

Anthropic just released ten finance agent templates. They cover the most expensive and most regulated parts of bank operations: KYC screening, month-end close, general ledger reconciliation, statement audit, valuation review, earnings review, and model building. The published benchmark score is 64.37 percent on Vals AI's Finance Agent benchmark. Anthropic is clear that this is industry-leading. It is also the best on offer. Roughly one in three finance tasks still fails. Read

Primary Audience: Platform Engineers building identity infrastructure, Security architects designing authentication systems, Teams operating large-scale SaaS or financial systems. CNCF Alignment: Kubernetes, HA, Multi-RegionAbstract At scale, identity systems are defined by how sessions are managed, tokens are designed, and validation is performed. In large Keycloak deployments, these decisions directly impact performance, availability, and security. This article explores pra

I have spent the last few months on the road with Icebreaker, our agentic AI governance product, in customer and partner conversations across this category. One challenge keeps coming back. "Doesn't your approach do the same thing as everyone else's." Every time we look closely, the answer is no, and for a reason worth naming. The products being compared fall into one of two camps. The first helps the organisation identify mistakes after the agent has already made them, hop

Primary Audience: Platform Engineers CNCF Alignment: Kubernetes, HA, Multi-Region Abstract In regulated financial environments, identity systems must meet stringent availability and resilience requirements. While Keycloak offers flexibility and extensibility, it does not abstract the complexity of distributed system design. This article presents production-proven patterns for building highly available Keycloak deployments on Kubernetes, focusing on cache topology, multi-regio

The reaction to Mythos is understandable. There however appears to be a lot of misunderstanding (at least from my conversations). Mythos is a frontier AI model that can identify software vulnerabilities at a level previously reserved for highly skilled human operators changes the economics of cyber risk (think about a seriously good hacker on steroids!). It fundamentally changes the economics of cyber risk. It compresses the time between vulnerability discovery and exploitati