Zluri Features

Learnings from Identiverse 2025: Shadow AI, NHIs, and Smarter Access

Sethu Meenakshisundaram
Co-Founder, Zluri
June 13, 2025
8 MIn read
About the author

Sethu is the Co-founder of Zluri. He believes SaaS and APIs will help everyone become a builder. He frequently writes on SaaS management and workplace automation. Before Zluri, he was part of the founding team at KNOLSKAPE, one of the leading corporate learning gamification startups that he helped scale across 30 countries. Other than technology, Sethu is passionate about quizzing, board games, and photography. His retirement plan is to operate a board game bistro in one of the touristy spots of Southeast Asia.

From identity startups to Fortune 500 IAM teams, security architects to compliance officers, Identiverse 2025 brought together the identity ecosystem with one dominant conversation: How organizations are moving from identity governance to identity intelligence.

Conversations with CISOs and identity leaders revealed a critical reality: they need solutions that deliver business outcomes, not just comprehensive dashboards. The gap between identity visibility and identity action has never been more apparent. Let’s take a closer look at the theme of conversations and where the Identity space is headed.

The Hidden Majority: Machines, Not People

The dedicated NHI Pavilion signaled a fundamental shift: machine identities have moved from an ad hoc concern to a mainstream priority. Organizations are finally grappling with the uncomfortable truth that their service accounts, API keys, and AI agents vastly outnumber human users, yet receive a fraction of the governance attention they deserve.

Service accounts don't have managers to approve access. The breakthrough insight was that traditional identity frameworks, designed for human users, fundamentally break down when applied to machines. This requires entirely new approaches to identity lifecycle management.

Shadow AI That’s Beyond IT's Reach

Employees are connecting AI tools directly to corporate systems, bypassing traditional authentication flows. This leaves a massive blind spot where unauthorized technologies create ungoverned identity relationships.

The frustration among security leaders was palpable: you can't govern what you can't see, and traditional discovery methods are proving inadequate for today's AI-enhanced landscape.

At Zluri, we've been building precisely that through our Visibility, Intelligence, and Action framework. This comprehensive approach gives organizations complete visibility into their identity landscape, transforms real-time data into actionable intelligence, and enables automated remediation through no-code workflows.

Also, keep an eye out for our upcoming State of AI In the Workplace 2025 Report, where we’ll dive deeper into how enterprises are actually using AI—and the risks IT and security teams need to watch for.

Real-Time Intelligence Meets Automated Policy Enforcement

In many of our conversations, one thing is clear: it’s not enough to spot what’s broken; you need to fix it in real-time. Next-Gen identity governance platforms like Zluri go beyond basic discovery. What sets the platform apart is its ability to understand context in real time across constantly shifting IT environments.

The platform detects when shadow applications enter the ecosystem, when unauthorized users gain write permissions to critical applications, or when changes in employee roles create new access risks.

The breakthrough comes from correlating these contextual changes with organizational policies in real-time. Instead of periodic access reviews that catch problems weeks or months later, Zluri’s intelligent policy engines can trigger automated access controls the moment risky conditions emerge. This transforms compliance from a manual, multi-tool exercise into a streamlined, automated process that reduces both audit time and operational overhead.

Identity: The Nervous System of Modern Security

Perhaps the most significant theme was the recognition that identity can no longer operate as an isolated security function. Modern identity security platforms must integrate seamlessly with zero-trust architectures, cloud-native platforms, and endpoint security tools.

This reflects a fundamental shift: identity is becoming the nervous system connecting all aspects of digital infrastructure. Every API call, microservice interaction, and automated workflow relies on identity decisions. 

Organizations that successfully integrate identity across their entire technology stack report significant improvements in security and operational efficiency. Zluri supports this shift by serving as the central identity repository for organizations, integrating with SaaS applications, IDPs, HRIS, directories, cloud platforms, and more.

Looking Forward

Identiverse 2025 was filled with candid conversations and thoughtful knowledge sharing, focusing on what it truly takes to advance identity security. Practitioners, solution providers, and standards bodies came together for open discussions around implementation challenges, failure modes, and hard-won lessons.

The industry has moved beyond foundational questions to focus on competitive differentiation and operational excellence. The message was clear: we've entered the era of identity as a strategic advantage.

The organizations that will thrive are those combining deep technical expertise with practical implementation experience, understanding that identity is both a security imperative and a business enabler.

Related Blogs

Webinar

Product Spotlight ft. Gen AI Discovery, Proactive Access Governance, and more

Watch Now!
Button Quote
Featured
Zluri Features

Learnings from Identiverse 2025: Shadow AI, NHIs, and Smarter Access

From identity startups to Fortune 500 IAM teams, security architects to compliance officers, Identiverse 2025 brought together the identity ecosystem with one dominant conversation: How organizations are moving from identity governance to identity intelligence.

Conversations with CISOs and identity leaders revealed a critical reality: they need solutions that deliver business outcomes, not just comprehensive dashboards. The gap between identity visibility and identity action has never been more apparent. Let’s take a closer look at the theme of conversations and where the Identity space is headed.

The Hidden Majority: Machines, Not People

The dedicated NHI Pavilion signaled a fundamental shift: machine identities have moved from an ad hoc concern to a mainstream priority. Organizations are finally grappling with the uncomfortable truth that their service accounts, API keys, and AI agents vastly outnumber human users, yet receive a fraction of the governance attention they deserve.

Service accounts don't have managers to approve access. The breakthrough insight was that traditional identity frameworks, designed for human users, fundamentally break down when applied to machines. This requires entirely new approaches to identity lifecycle management.

Shadow AI That’s Beyond IT's Reach

Employees are connecting AI tools directly to corporate systems, bypassing traditional authentication flows. This leaves a massive blind spot where unauthorized technologies create ungoverned identity relationships.

The frustration among security leaders was palpable: you can't govern what you can't see, and traditional discovery methods are proving inadequate for today's AI-enhanced landscape.

At Zluri, we've been building precisely that through our Visibility, Intelligence, and Action framework. This comprehensive approach gives organizations complete visibility into their identity landscape, transforms real-time data into actionable intelligence, and enables automated remediation through no-code workflows.

Also, keep an eye out for our upcoming State of AI In the Workplace 2025 Report, where we’ll dive deeper into how enterprises are actually using AI—and the risks IT and security teams need to watch for.

Real-Time Intelligence Meets Automated Policy Enforcement

In many of our conversations, one thing is clear: it’s not enough to spot what’s broken; you need to fix it in real-time. Next-Gen identity governance platforms like Zluri go beyond basic discovery. What sets the platform apart is its ability to understand context in real time across constantly shifting IT environments.

The platform detects when shadow applications enter the ecosystem, when unauthorized users gain write permissions to critical applications, or when changes in employee roles create new access risks.

The breakthrough comes from correlating these contextual changes with organizational policies in real-time. Instead of periodic access reviews that catch problems weeks or months later, Zluri’s intelligent policy engines can trigger automated access controls the moment risky conditions emerge. This transforms compliance from a manual, multi-tool exercise into a streamlined, automated process that reduces both audit time and operational overhead.

Identity: The Nervous System of Modern Security

Perhaps the most significant theme was the recognition that identity can no longer operate as an isolated security function. Modern identity security platforms must integrate seamlessly with zero-trust architectures, cloud-native platforms, and endpoint security tools.

This reflects a fundamental shift: identity is becoming the nervous system connecting all aspects of digital infrastructure. Every API call, microservice interaction, and automated workflow relies on identity decisions. 

Organizations that successfully integrate identity across their entire technology stack report significant improvements in security and operational efficiency. Zluri supports this shift by serving as the central identity repository for organizations, integrating with SaaS applications, IDPs, HRIS, directories, cloud platforms, and more.

Looking Forward

Identiverse 2025 was filled with candid conversations and thoughtful knowledge sharing, focusing on what it truly takes to advance identity security. Practitioners, solution providers, and standards bodies came together for open discussions around implementation challenges, failure modes, and hard-won lessons.

The industry has moved beyond foundational questions to focus on competitive differentiation and operational excellence. The message was clear: we've entered the era of identity as a strategic advantage.

The organizations that will thrive are those combining deep technical expertise with practical implementation experience, understanding that identity is both a security imperative and a business enabler.

Table of Contents:

Webinar

Product Spotlight ft. Gen AI Discovery, Proactive Access Governance, and more

Watch Now!
Button Quote

Go from SaaS chaos to SaaS governance with Zluri

Tackle all the problems caused by decentralized, ad hoc SaaS adoption and usage on just one platform.