Episode 231: Beyond Zero: Enterprise Security for the AI Era
October 8, 2026 · 1 min read
Google’s ground breaking Beyond Zero architecture could influence the security landscape for the next decade. And it signals a shift from identity to capability based access governance--principle #1 is "Resource and Action-based Security". In this episode of Identerati Office Hours, we’ll discuss how enriched context, risk signals, and real-time challenges could secure both people and AI agents with one of the authors of the Beyond Zero white paper.
#Speakers
- Host: Mike Schwartz, Founder/CEO Gluu
- Guest: Joe Valente, ex-Google, Co-Author of Beyond Zero White Paper and ex-Google Enterprise Security Lead
- Guest: Rohit Khare, ex-Google, Product Manager & Software Architect
#Homework
- Google Blog: Going Beyond Zero: A New Paradigm For Enterprise Security
- ACM Paper: Beyond Zero: Enterprise security for the AI era
#Takeaways
- Beyond Zero "Resource and Action-based security" == capability is the unit of governance.
- One of the hardest challenges of governance is properly balancing security, cost, and productivity.
- Evidence collection needs an explicit architecture. Developers need clear requirements for recording authorization, invocation, and observed outcomes. Governance won't happen by accident.
- It's important to measure the benefits (or "liveness"), otherwise the governors will know the costs only.