Episode
#436 - Sponsor Spotlight - P0 Security
- Podcast
- Identity at the Center
- Published
- Jul 22, 2026
- Duration seconds
- 2760
- Processing state
not_requested
Actions
POST https://stenobird.com/v1/public/podcasts/identity-at-the-center-344918/episodes/436-sponsor-spotlight-p0-security/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/identity-at-the-center-344918/436-sponsor-spotlight-p0-security.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
In this Sponsor Spotlight episode, Jeff Steadman flies solo and welcomes Greg Danyi, co-founder and CTO of P0 Security, to the show. Greg walks through P0's approach to runtime access control, covering how it applies to humans, non-human identities, and AI agents alike. The conversation digs into the difference between authentication and authorization, why zero standing privilege is more achievable now than before agentic adoption took hold, and how dynamic, evidence-based policies can reduce reliance on manual approvals. Greg also shares real examples, including row-level access control for data lakes and a CRM mishap that shows how easily agents can misinterpret intent. The episode closes with a look at where enterprise AI agent governance may be headed over the next few years, plus a lighter conversation about explaining IAM to a 10-year-old. This episode is made possible through the generous support of P0 Security as part of IDAC's nonprofit Sponsor Spotlight series. Learn more at p0.dev/idac. Connect with Greg (Gergely): https://www.linkedin.com/in/gergely-danyi/ Learn more about P0: https://p0.dev/idac/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com 00:00 - Introduction and sponsor acknowledgment 01:13 - Greg Danyi's path into IAM 02:18 - What P0 Security solves for 03:21 - Where P0 fits versus PAM and IGA 04:46 - Agentic identity as a driver of adoption 05:27 - MCP servers and unpredictable agent actions 07:10 - Defining runtime access control 08:50 - How authentication and authorization work together 09:07 - Standing access versus expressed intent 10:16 - Zero standing privilege in practice 12:27 - Agentic identity…