Topic starter
22/06/2026 10:21 am
TL;DR: Rising in Cyber 2026, selected by 150 CISOs and senior security executives and backed by more than $6.9 billion in combined fundraising, highlights how AI agents, identity and access management, and application defence are converging in enterprise security, according to Orca Security and Notable Capital. The signal is that identity governance is no longer a narrow IAM issue; it is becoming central to cloud, AI, and operational risk decisions.
Editorial analysis by NHI Mgmt Group, based on content published by Orca Security: “Orca Security Named to Rising in Cyber 2026 for Third Consecutive Year”.
By the numbers:
- The 2026 honorees were selected by 150 active CISOs and senior security executives.
Key questions
Q: What does Rising in Cyber 2026 signal about identity security priorities?
A: It signals that identity security is no longer being treated as a narrow access management problem.
Q: Why do AI agents change the way organisations think about runtime authorisation?
A: Because the decision to act now happens inside the session, not only at provisioning time.
Q: What breaks when access reviews are built around static identity categories?
A: Reviews become blind to overlapping states, temporary affiliations, and delegated access that outlive the reason they were granted.
Practitioner guidance
- Align IAM and AI governance ownership Create one decision map for who owns human access, workload identity, and AI agent authorisation so review, revocation, and escalation paths do not fragment across teams.
- Inventory identities by actor type Separate human accounts, service accounts, tokens, and AI-driven execution identities in your inventory, then define which controls apply to each lifecycle.
- Bound agent authority before production use Require explicit scope limits, tool access boundaries, and approval rules for any autonomous system that can select actions at runtime.
Bottom line: Rising in Cyber 2026 reflects a broader market shift: identity, cloud, and AI security are being evaluated together, not as separate buying categories.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
22/06/2026 11:14 am
Identity governance is becoming the organising layer for cloud and AI security. Rising in Cyber 2026 is another signal that buyers no longer treat IAM as a back-office control. The same entitlement decisions now shape access for people, workloads, and AI systems, which makes lifecycle governance central to enterprise risk management. Practitioners should treat identity as the connective tissue across cloud, security operations, and AI adoption.
A question worth separating out:
Q: How should security teams organise controls across cloud, IAM, and AI security?
A: They should organise controls around actor type and reachable impact, not around team silos. Human accounts, service identities, and AI-driven execution paths need different lifecycle rules, but they should be assessed through one shared view of blast radius, containment, and accountability.
👉 Read our full editorial: Rising in Cyber 2026 signals where identity security is heading