KuppingerCole

As organizations expand beyond SAP into hybrid ecosystems of SaaS and LoB applications, governance becomes fragmented and inconsistent. Traditional access control approaches no longer suffice, requiring a shift toward holistic Business Application Risk Management that leverages integrated technologies, automation, and real-time analytics to ensure consistent policy enforcemen...

This was my seventh EIC as a KuppingerCole Analysts employee. And there are people in this community who have been coming for all nineteen years. What brings both groups back, and what draws new people in every year, is the same thing. This conference feels less like an industry event and more like a reunion of people who are genuinely working on the same hard problems.

Enterprise AI has a new dependency problem, and it is arriving through MCP faster than most organizations can inventory it. The Model Context Protocol is becoming the connective tissue between agents, tools, data sources, developer environments, and business applications. That makes it useful. It also makes it dangerous, because the servers carrying that traffic are executabl...

The security industry likes distinct product categories. A new threat or risk appears, analysts name the category, vendors position around it, and buyers build feature shortlists. That model works when the problem has clear boundaries, but AI security does not.

Many vendors (both established players and AI-native startups) claim to provide “AI security” or “AI governan...