KuppingerCole's analysts, talking through their own research.
KuppingerCole Analysts gives the firm's analysts a colleague to talk to, mostly in the numbered Analyst Chat episodes hosted by Matthias. Recent talks cover customer identity platforms, remote access for operational technology, deepfake-driven disinformation and sensible rules for using generative AI at work.
PRESS PLAY
KuppingerCole Analysts gives the firm's researchers a microphone and a colleague to talk to. Most episodes in the recent run carry the Analyst Chat label and a number, with Matthias as host. His guests are fellow KuppingerCole analysts, so the talks sound like colleagues comparing notes on their own research. The subjects are identity, security and AI, and the lines between them often blur. John Torbert has published a Leadership Compass on customer identity and access management, and he explains how that market is moving. He points to built-in privacy management features and to third-party integrations for organizations that deal with many jurisdictions, and passkeys come up among his findings. Matthias adds that anyone who logs in to a retailer or a streaming service uses these systems and is often one of their harshest critics. Warwick Ashford, a senior analyst in the UK, joins Matthias on secure remote access for operational technology. Least privilege and zero trust shape that conversation. Warwick notes that identity and security used to be easier to separate and are now intertwined. The AI conversations get specific. Alexey Balagansky, the firm's CTO and a cybersecurity lead analyst, is blunt about experimental AI agents: never use them with company data, and anyone testing one at home should use a separate machine on a separate network. Jonathan Kerr takes on deepfakes and disinformation. He calls it a 'fire hose of falsehood' that buries people in contradictory claims until they give up trying to find the truth. His mock list of cures, from chocolate milkshakes to colloidal silver, makes the point with a grin. Kerr is also the guest for something Matthias says the podcast had never covered before: a behind-the-scenes look at a KuppingerCole product. In 'Analyst Chat #295: Independent ROI - A New Model for Cybersecurity Investment', the method is laid out step by step, from the firm's existing research base to structured interviews with real customers and a financial model built to be reviewed independently. A videocast sits outside the numbered series. In 'Identity Fabric Explained: From Legacy IAM to Zero Trust with Cross Identity', analyst Matthew Gardner talks with Vinod Singh of Cross Identity about the identity fabric as an architecture and operating model. There, slow convergence and standardization run up against organizations that need solutions now. The EIC event comes up in conversation, and Matthias invites questions in the comments. A newcomer can simply start with the most pressing problem: AI at work, consumer login, industrial access or disinformation.
Made for: Suits a listener who deals with identity, access or security decisions and would rather hear analysts reason through markets and risks in conversation than read the report.
What sets it apart: The guests are mostly the firm's own analysts discussing work they produced, down to a behind-the-scenes look at how a KuppingerCole ROI model is built, which gives an inside view of how analyst research gets made.
KuppingerCole Analysts AG is an international, independent analyst organization offering technology research, neutral advice and events in Identity Management, Cybersecurity and Artificial Intelligence.
The access review on your calendar raises a better question: why hasn't that permission expired?
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A concise case for secure remote access as an identity-led control layer in OT security.
Secure remote access takes a focused role in this Kuppinger-Kohl Analyst Chat, with the discussion centered on OT security, industrial control systems, and what proper protection looks like in those environments.
A sharp, practical look at how disinformation can turn uncertainty into a security risk.
Trust turns into a security problem when falsehood is built to wear down judgment instead of simply winning belief. Matthias Reinwald and Jonathan Kerr move from a hypothetical romance-scam video call into a "fire hose of falsehood" around contradictory claims about supposed…
Keep experimental AI agents away from company data until the guardrails are ready.
Generative AI loses its shine in this single-episode review of a conversation focused on the work that comes before any sophisticated use case: basic hygiene.
A practical look at identity fabric ambitions, APIs, and the messy reality of legacy systems.
Identity fabric gets a grounded treatment as Matthew Gardner of Hoopinger & Kohl and Vinod Singh of Cross Identity frame it less as a product than as an architecture, operating model, or framework.
A practical look at easing access-review fatigue through cleaner data, stronger processes, and time-limited permissions.
Access recertification gets a practical, process-minded treatment as Matthias Reinwald and Martin Kuppinger look at why recurring access reviews remain so hard to fix.
Technology's mechanisms, power's consequences.
Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.
Host Matthias Rheinloth interviews Jonathan Kerr about the development of KuppingerCole's new Product Value Navigator, offering a behind-the-scenes look at how the analyst firm creates products and services.
KuppingerCole Analysts' Analyst Chat #294 focuses on secure remote access as the control layer for OT security, with Matthias Reinert and Warwick Ashford arguing that industrial access now needs session control, auditability, and identity-aware policy.
On KuppingerCole Analysts' CIAM episode, John Torbert says the market now separates consumer identity from B2B IAM.
KuppingerCole Analysts' Analyst Chat #292: The Collapse of Trust - Deepfakes, Disinformation & Enterprise Security connects AI-generated false content to enterprise security risk, not just politics or social media.
Matthew Gardiner tells Matthias Reinwart that AI SOC is an incremental evolution of SOAR, not a full architectural shift, and calls himself 'cautiously optimistic'.
Alexey Balagansky tells Matthias Reinbart that "AI is not a thing" but a spectrum, and he frames generative AI as "sophisticated mathematics" rather than an artificial person.
KuppingerCole Analysts’ Matthew Gardner and Vinod Singh of Cross Identity frame identity fabric as an architecture, operating model, and framework rather than a single product.
Matthias Reinwald interviews Martin Kuppinger about the KuppingerCole Analysts blog post “Recertification from 100 to Zero in a Day.” Kuppinger argues that complex access models, role explosion, and manual review create rubber-stamping, including cases involving 70-page entitlement documents.
Matthias Reinwald and Matthew Gardner examine how cloud SaaS and AI have expanded shadow IT into services employees can adopt without security-team visibility.
Dmitry Loshakov from Qrator Labs discusses how AI has made web scraping easier for cybercriminals and why traditional defenses like CAPTCHAs are becoming less effective.
An analyst discusses the importance of measuring IAM effectiveness using KPIs and KRIs.
Analysts discuss the new IVIP (Identity, Visibility, and Intelligence Platforms) concept in identity and access management.
A discussion on DDoS attack trends and mitigation strategies with Qrator Labs, covering network layers and defense approaches.