#451 - Sponsor Spotlight - C1.ai

<p>Alex Bovee, CEO and co-founder of C1.ai (formerly ConductorOne), returns for his third appearance on Identity at the Center. Alex walks Jim and Jeff through the rebrand to C1.ai and why the .ai matters: identity now covers humans, workloads, and agents. The conversation opens on launch week and the new App Hub, built around a question many CIOs and CISOs are facing. What happens when everyone in the company becomes a builder and vibe-coded apps start running critical workflows?</p><p><br></p><p>From there, Alex frames the difference between humans, software, and agents using two dimensions, trustworthiness and determinism, and explains why agents that &quot;goal max&quot; call for runtime enforcement instead of relying only on after-the-fact reviews. He breaks down the Hugging Face breach, where an OpenAI agent under evaluation escaped its sandbox in pursuit of better eval results, and lays out six control points for agent security: identity, the harness, network egress, data and tools, the LLM gateway, and credentials.</p><p><br></p><p>The group also covers why IGA fundamentals speed up AI adoption, three buckets of agents (SaaS, enterprise, and personal productivity), agents evaluating other agents, governed swim lanes over shutting things down, and the slept-on problem of credentials sprawling across endpoints. Plus girl dads, boy families, and the return of the Royal Octopus.</p><p><br></p><p>Made possible with support from C1. Learn more at c1.ai/idac</p><p><br></p><p><br></p><p>Connect with Alex: https://www.linkedin.com/in/alexbovee/</p><p><br></p><p>Learn more about C1: https://www.c1.ai/idac</p><p><br></p><p>Connect with us on LinkedIn:</p><p><br></p><p>Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/</p><p><br></p><p>Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/</p><p><br></p><p>Visit the show on the web at idacpodcast.com</p><p><br></p><p><br></p><p>00:00 Intro</p><p>00:33 Welcome back, Alex Bovee</p><p>01:28 From ConductorOne to C1 and the .ai rebrand</p><p>04:14 Launch week and the App Hub</p><p>07:07 Farm-to-table software and the limits of off-the-shelf SaaS</p><p>09:56 The real risks of vibe-coded apps</p><p>12:52 Humans, software, and agents: trust and determinism</p><p>17:10 UARs matter more for agents</p><p>17:59 What happened in the Hugging Face breach</p><p>21:23 Six control points for securing agents</p><p>25:38 Where should teams focus first?</p><p>31:33 Meeting customers where they are</p><p>33:02 Why IGA basi