Cloud Chronicles

Introducing the Risk Score Engine: identity risk you can quantify

Garrett Stephens — Thu, 09 Jul 2026 12:27:17 GMT

TL;DR

Permiso is launching the Risk Score Engine: a continuous, evidence-backed score from 0 to 100 for every identity in your environment.
Every score breaks down across three dimensions, Behavior, Likelihood, and Impact, so two identities with the same score can still need different responses.
Scores are built on the Universal Identity Graph and cover every identity type, human, non-human, and AI, not just the slice one tool happens to see.
Score velocity tracks how fast a score is moving, because the rate of change is often the earliest sign something’s wrong.
Organization Risk Scores roll everything into one board-ready number, benchmarked against your peers. It’s available now as part of the Permiso platform.

Today, Permiso is launching the Risk Score Engine: a model that assigns every identity in your environment a continuous, evidence-backed score from 0 to 100. It doesn’t just tell you an identity is risky. It tells you why, and what to do about it. Powered by Permiso’s Universal Identity Graph, the engine produces three outputs: Identity Risk Scores, Session Scores, and Organization Risk Scores.

You Can't Manage What You Can't Score: Why Identity Security Needs Real Risk Measurement

Aditya Vats — Thu, 09 Jul 2026 12:26:48 GMT

TL;DR

Security teams can quantify almost every risk they manage except identity risk, which is still assessed through static tiers and alert volume.
Static risk labels and alert-driven triage both fail for the same reason: they ignore what identities are actually doing right now.
A meaningful identity risk score must be continuous, multi-dimensional, and evidence-backed, combining posture with runtime behavior.
Permiso's Risk Score Engine scores every identity, human, non-human, and AI, on a 0 to 100 scale across Behavior, Likelihood, and Impact, and tracks how fast scores change.
Score velocity turns risk scoring from a reporting tool into a control plane: the rate of change is often the earliest signal of compromise.

The Measurement Gap at the Center of Identity Security

Ask a CISO how many critical vulnerabilities their organization carries, and they will pull up a dashboard. Ask about endpoint coverage, patch latency, or phishing failure rates, and they will give you a number.

Mind the Gap: GCP serviceData in Logs Explorer vs. Exported Logs

Art Ukshini — Tue, 16 Jun 2026 12:46:59 GMT

Cloud audit logs are the backbone of detection engineering in cloud environments. They provide the raw telemetry that security teams depend on to identify suspicious behavior, build detection rules and reconstruct attacker activity after an incident. In cloud platforms like GCP, every meaningful administrative action leaves a trace in the form of an audit log entry and the quality of that trace directly affects the reliability of these investigative and detection efforts.

Permiso Wins Best Identity Threat Detection and Response (ITDR) Platform at the 2026 Cybersecurity Stars Awards

Aditya Vats — Thu, 11 Jun 2026 18:15:02 GMT

We are proud to share that Permiso has been named the winner of Best Identity Threat Detection and Response (ITDR) Platform at the 2026 Cybersecurity Stars Awards, presented by The Hacker News.

ChatGPhish: The Page Is the Payload

andi.ahmeti@permiso.io (Andi Ahmeti) — Fri, 29 May 2026 11:51:15 GMT

In our previous research on Copilot prompt injection, we looked at a phishing primitive hiding inside email summaries.

Why We Built Identity Runtime Attribution for AI Agents

Jason Martin — Thu, 14 May 2026 12:30:05 GMT

Today we shipped something we have been building toward for three years. We are calling it AI agent runtime security, and it is now live across the Permiso platform. I want to talk about why we built it, what it actually does, and where I think the rest of the market is headed in the wrong direction.

Permiso Brings Identity Runtime Attribution to AI Agents with Discover, Protect, and Defend

Aditya Vats — Thu, 14 May 2026 12:28:39 GMT

New capabilities deliver agent runtime identity attribution and behavioral anomaly detection across the full agent lifecycle

Today we are announcing AI agent runtime security capabilities across the Permiso platform. These capabilities give security teams continuous visibility into agent runs, events, tool calls, and data access across agents, sub-agents, MCP servers, and the underlying infrastructure those agents operate on.

Introducing SandyClaw - The First Dynamic Sandbox for AI Agent Skills and Prompts

Aditya Vats — Thu, 02 Apr 2026 12:47:41 GMT

TL;DR

AI agent skill marketplaces are the new software supply chain, and attackers are already exploiting them.
The current generation of skill scanners relies on static code checks or LLM-based evaluation. Neither executes the skill, which means neither detects malicious behavior that only reveals itself at runtime.
SandyClaw is the first platform to apply dynamic sandbox detonation to AI agent skills.
It runs the skill in a controlled environment, records every action at the LLM and OS level, and delivers a verdict backed by behavioral evidence rather than inference.
Available now at sandyclaw.permiso.io.

The supply chain nobody is securing

AI agents need skills to do useful work. Skills are downloadable capability packages that teach agents how to interact with tools, APIs, and services. They are distributed through open marketplaces, installed with a single command, and executed with whatever permissions the agent's identity already has.

Permiso Security Wins 2026 SC Award for Best Threat Detection Technology

Aditya Vats — Wed, 25 Mar 2026 13:27:10 GMT

Permiso Security has won the 2026 SC Award for Best Threat Detection Technology, announced on March 24 during
RSAC 2026 in San Francisco.

This marks the second consecutive year Permiso has been recognized at the SC Awards. In 2025, the company won Most Promising Early-Stage Startup. This year, the recognition moved from the company's promise to its product: the identity security platform that detects and responds to threats across human, non-human, and AI identities in cloud, SaaS, CI/CD, and on-premises environments.

CO-PILOT, DISENGAGE AUTOPHISH: The New Phishing Surface Hiding Inside AI Email Summaries

andi.ahmeti@permiso.io (Andi Ahmeti) — Thu, 12 Mar 2026 13:00:33 GMT

AI assistants have genuinely improved day-to-day operations for teams buried in inbox triage, client support, customer success, sales follow-ups, incident response, and everything in between. Microsoft Copilot sits right in the flow: it can summarize emails and meetings, and in some experiences it can also pull context from other Microsoft 365 sources.

Cloud Chronicles

Introducing the Risk Score Engine: identity risk you can quantify

TL;DR

You Can't Manage What You Can't Score: Why Identity Security Needs Real Risk Measurement

TL;DR

The Measurement Gap at the Center of Identity Security

Mind the Gap: GCP serviceData in Logs Explorer vs. Exported Logs

Permiso Wins Best Identity Threat Detection and Response (ITDR) Platform at the 2026 Cybersecurity Stars Awards

ChatGPhish: The Page Is the Payload

Why We Built Identity Runtime Attribution for AI Agents

Permiso Brings Identity Runtime Attribution to AI Agents with Discover, Protect, and Defend

New capabilities deliver agent runtime identity attribution and behavioral anomaly detection across the full agent lifecycle

Introducing SandyClaw - The First Dynamic Sandbox for AI Agent Skills and Prompts

TL;DR

The supply chain nobody is securing

Permiso Security Wins 2026 SC Award for Best Threat Detection Technology

Permiso Security has won the 2026 SC Award for Best Threat Detection Technology, announced on March 24 duringRSAC 2026 in San Francisco.

CO-PILOT, DISENGAGE AUTOPHISH: The New Phishing Surface Hiding Inside AI Email Summaries

Permiso Security has won the 2026 SC Award for Best Threat Detection Technology, announced on March 24 during
RSAC 2026 in San Francisco.