Cloud Security Archives

eCBSV: new consent-based SSN verification service

Published May 6, 2022

API Security Cloud Security Legislation Open Banking

Following worldwide trends of governments providing new and better identity and privacy services to consumers and banks, the Social Security Administration (SSA) is implementing a new fee-based Social Security number (SSN) verification service known as Electronic Consent Based Social Security Number Verification (eCBSV). This service follows worldwide privacy directives aligned with Open Banking, requiring data...

Identity Management Day 2022: Are Your Digital Identities Secure?

Published April 12, 2022

API Security Cloud Identity Management Cloud Security IAM Videos

Hosted by the Identity Defined Security Alliance and National Cybersecurity Alliance, Identity Management Day aims to provide education about the dangers of casually or improperly managing and securing digital identities, raising awareness and sharing best practices across the industry. According to Gartner, APIs are expected to be the most frequent attack vector in 2022, and...

Making Dynamic Authorization an Essential Pillar in Federal Government Zero Trust Architecture Strategies

Published March 29, 2022

API Security Cloud Identity Management Cloud Security General News

Author: Brook Lovatt, Chief Product Officer of Cloudentity The government’s focus on Zero Trust has risen in the past year, as shown by the Biden Administration's May 2021 and January 2022 executive orders and the Cybersecurity and Infrastructure Security Agency’s (CISA) Zero Trust Maturity Model. CISA’s Zero Trust Maturity Model is one of many roadmaps...

Aligning Cloudentity Components with XACML Terminology

Published March 17, 2022

API Security Cloud Security DevOps Security General

Cloudentity is frequently asked how our components and features align with those of the legacy XACML (eXtensible Access Control Markup Language), including Policy Administration Points (PAP), Policy Decision Points (PDP), Policy Information Points (PIP), and Policy Enforcement Points (PEP). In this article, we will describe what the Cloudentity components are and how they align with...

The Perimeter has Disappeared: Why Zero Trust and IAM are Essential to Secure the Modern Enterprise

Published March 10, 2022

API Security Cloud Security General IAM

In the conventional, on-premises IT infrastructure, organizations worked within the boundaries of their well-defined enterprise network perimeter. In this setting, on-premises security tools like virtual private networks (VPNs) were mostly sufficient to secure users and devices within the perimeter walls. However, with the increase in remote work and cloud computing, organizations are leveraging various apps...

Identity and Authorization At Cloud Scale

Published December 6, 2021

API Security Breaches Cloud Identity Management Cloud Security Customer Experience DevOps Security General IAM Legislation News Videos

The future has a lot to answer for. For decades we’ve been promised super-cool inventions that we still haven’t received - flying cars, jetpacks and IAM platforms that provide security, scale and manageability- all with wrapped up with 21st century automation. George Jetson’s job had two settings ("Start" & "Stop") and the computer did the...

The Continuous Contextual Customer Experience

Published March 4, 2020

Cloud Security Customer Experience IAM

Companies providing online services have a rather simple equation. Their customers use applications to access services that process sensitive data. At Cloudentity we define that as the customer journey which is composed of a myriad of customer experiences. That journey takes a variety of steps from their first interaction of anonymously visiting the site, to...

Comprehensive Reporting and Insight of your APIs. Powered by Machine Learning.

Published January 28, 2020

API Security Cloud Security

APIs are the lifeblood of modern web applications. They’re crucial elements of any digital transformation as the provide the sinew that allows data to flow freely between internal development teams and external customers with agility and speed. But, their usage comes with a tradeoff, as their complexity can lead to security, risk, and privacy nightmares...