#448 - Sponsor Spotlight - Opal Security
Source: YouTube · Identity at the Center · published Sep 17, 2026 · 1:04:02
Opal Security CEO Howard Ting explains how AI and a unified identity governance platform can eliminate the security-vs-usability trade-off, announcing a unified control plane for human, non-human, and agentic identities with AI-driven decisions via the "Paladin" agent 3:06-4:15.
Key Takeaways:
• Opal is a unified control plane for all identities—a modern, developer-friendly IGA platform with Terraform, MCP, REST, and CLI support 3:06-4:15
• Termination is far more complex now: API keys, OAuth grants, service accounts, and agents outlive employees—some need deactivation, others ownership transfer 7:30-11:23
• Fear of breaking workflows historically outweighed security fears for orphaned accounts, but visibility/inventory is the essential first step 11:23-15:53
• Agent intent should be declared and observed; narrow "specialist" agents clarify intent, and an agent's permission ceiling should be a subset of its creator's 18:22-22:12
• Trust in AI is earned via guided mode (explainable recommendations), then autonomous mode on low-blast-radius resources, with tunable risk tolerance and feedback loops 33:35-36:44
• Announcements: unified human + non-human governance, Paladin extended to agent workflows (access decisions could hit million-to-one ratios), and Policy Insights 39:00-44:18
Ting's biggest mindset shift: move identity from episodic, event-driven processes to continuous, always-on risk evaluation 58:02-59:16—AI can deliver both strong security and great UX.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[music] This is Identity at the Center. >> Welcome to the Identity at the Center podcast. I'm Jeff and I'm flying soul today. We've got a sponsor spotlight and this is how we are able to make this podcast happen every week week in week week out throughout the year. So, uh with no further ado, let me go ahead and introduce uh Howard Ting. He's the CEO for Opel Security. You can find out more about them at opal.dev dev op.dev. Welcome to the show, Howard. >> Jeeoff, it's great to be here with you. Thank you for having me. >> Yeah. And thank you so much for your support. You know, it means the world to us here and I'm sure a lot of people are kind of interested in what's going on with what you guys are working on and you've got some announcements that you're making and so we're going to kind …