Engineering is moving fast. Are you keeping up?
For engineering leaders when the job is changing faster than the playbook. You’re expected to deliver results from AI, keep your team from burning out, and close the gap between what leadership expects and what’s actually possible.
And do all of it without a clear engineering leadership playbook.
LeadDev Berlin is where that changes.
Whether you're an Engineering Manager, Tech Lead, Director, VP, or CTO, you'll leave with practical insights and a clearer picture of where the industry is headed.
Find us at Booth #101
The FusionAuth team will be on-site and ready to answer your customer identity and access management (CIAM) questions.
Stop by for a conversation, a demo, or just to say hello.
fusionauth.io/event/meet-fus…
For engineering leaders when the job is changing faster than the playbook. You’re expected to deliver results from AI, keep your team from burning out, and close the gap between what leadership expects and what’s actually possible.
And do all of it without a clear engineering leadership playbook.
LeadDev Berlin is where that changes.
Whether you're an Engineering Manager, Tech Lead, Director, VP, or CTO, you'll leave with practical insights and a clearer picture of where the industry is headed.
Find us at Booth #101
The FusionAuth team will be on-site and ready to answer your customer identity and access management (CIAM) questions.
Stop by for a conversation, a demo, or just to say hello.
fusionauth.io/event/meet-fus…
0
0
0
29
Traditional multi-factor authentication (MFA) can create unnecessary hurdles for legitimate customers. While it effectively protects against attackers, blanket MFA policies often inconvenience users, even in low-risk scenarios.
Our "Smart Guide to Implementing Risk-Based MFA ate)" sheds light on a more nuanced approach.
Discover how risk-based MFA assesses the context of each login, identifies suspicious behavior, and prompts for additional authentication only when necessary.
This comprehensive guide covers the essential aspects of MFA beyond just its mechanics, including policy formulation, deployment strategies, recovery options, security operations, and user adoption.
Download the guide for practical insights on establishing risk-based MFA tailored to your customers and security needs: fusionauth.io/ebooks/risk-ba…
#MFA #Cybersecurity #RiskManagement #Authentication
Our "Smart Guide to Implementing Risk-Based MFA ate)" sheds light on a more nuanced approach.
Discover how risk-based MFA assesses the context of each login, identifies suspicious behavior, and prompts for additional authentication only when necessary.
This comprehensive guide covers the essential aspects of MFA beyond just its mechanics, including policy formulation, deployment strategies, recovery options, security operations, and user adoption.
Download the guide for practical insights on establishing risk-based MFA tailored to your customers and security needs: fusionauth.io/ebooks/risk-ba…
#MFA #Cybersecurity #RiskManagement #Authentication
0
0
0
40
Your customers are starting to act through AI agents, sending invoices, buying tickets, and updating accounts.
If you run an MCP server, that raises two questions: which agents can connect, and what they’re allowed to do.
FusionAuth 1.70 adds CIMD support and OAuth token exchange so you can answer both.
AI apps register under rules you set, and every token exchange is scoped and recorded.
The IT Nerd covered the release: itnerd.blog/2026/10/29/fus…
If you run an MCP server, that raises two questions: which agents can connect, and what they’re allowed to do.
FusionAuth 1.70 adds CIMD support and OAuth token exchange so you can answer both.
AI apps register under rules you set, and every token exchange is scoped and recorded.
The IT Nerd covered the release: itnerd.blog/2026/10/29/fus…
0
0
0
56
Did you know that 67% of users are accessing AI applications through non-corporate accounts?
Additionally, a staggering 88% of organizations report that AI deployment is advancing quicker than their identity controls can keep up with.
The shift from exploitation to rapidly reshaping the CISO mandate, often outpacing security programs' ability to adapt.
The fundamental challenge lies in architecture. Traditional security stacks were designed for human users on managed devices within corporate networks: verify at the edge, grant access, and trust the session. This model falters when the "user" is an AI agent executing API calls across multiple systems, authenticating against the same infrastructure as your customers and wielding permissions not intended for autonomous entities.
This insightful report, produced by TechnologyAdvice and sponsored by FusionAuth, delves into how CISOs are adapting to these changes.
Download the report at fusionauth.io/ebooks/inside-…
#CISO #AI #Cybersecurity #IdentityManagement
Additionally, a staggering 88% of organizations report that AI deployment is advancing quicker than their identity controls can keep up with.
The shift from exploitation to rapidly reshaping the CISO mandate, often outpacing security programs' ability to adapt.
The fundamental challenge lies in architecture. Traditional security stacks were designed for human users on managed devices within corporate networks: verify at the edge, grant access, and trust the session. This model falters when the "user" is an AI agent executing API calls across multiple systems, authenticating against the same infrastructure as your customers and wielding permissions not intended for autonomous entities.
This insightful report, produced by TechnologyAdvice and sponsored by FusionAuth, delves into how CISOs are adapting to these changes.
Download the report at fusionauth.io/ebooks/inside-…
#CISO #AI #Cybersecurity #IdentityManagement
0
0
0
42
Your customers are starting to act through AI agents, sending invoices, buying tickets, and updating accounts.
If you run an MCP server, that raises two questions: which agents can connect, and what they’re allowed to do? FusionAuth 1.70 adds CIMD support and OAuth token wer both.
AI apps register under rules you set, and every token exchange is scoped and recorded.
"I just configured one of our pre-prod instances of our MCP to use this in VSCode and was successful...this is very promising."
- Scott Barnhart, Principal Software Engineer at @siteimprove
Get the full story at Third News: third-news.com/article/2abc42…
If you run an MCP server, that raises two questions: which agents can connect, and what they’re allowed to do? FusionAuth 1.70 adds CIMD support and OAuth token wer both.
AI apps register under rules you set, and every token exchange is scoped and recorded.
"I just configured one of our pre-prod instances of our MCP to use this in VSCode and was successful...this is very promising."
- Scott Barnhart, Principal Software Engineer at @siteimprove
Get the full story at Third News: third-news.com/article/2abc42…
1
0
4
121
FusionAuth 1.70 Lets Companies Securely Open Their Apps to Customers' AI Agents fusionauth.io/blog/fusionaut…
1
0
0
46
FusionAuth 1.70: least privilege for your customers' AI agents fusionauth.io/blog/announcin…
0
0
0
47
Your identity vendor should not tax your Q4 revenue.
Most retail auth looks affordable on day one. Then, you launch a holiday loyalty program, your MAUs spike with casual shoppers, and your step-tier #CIAM bill suddenly looks like a hostage ransom.
#Retail CTOs know the underlying trap.
When you need to route and isolate user data across five different subsidiary brands, generic multi-tenant #SaaS fails.
You need distinct tenant isolation, but legacy identity providers gate that architectural necessity behind massive custom enterprise contracts.
We built a guide with a TCO calculator to expose the exact math for retail environments.
Plug in your peak MAU load and multi-brand tenant requirements. The output shows the hard delta between paying a per-user API tax and owning your infrastructure on a flat license.
Calculate your actual overhead here: fusionauth.io/guides/retail-…
Most retail auth looks affordable on day one. Then, you launch a holiday loyalty program, your MAUs spike with casual shoppers, and your step-tier #CIAM bill suddenly looks like a hostage ransom.
#Retail CTOs know the underlying trap.
When you need to route and isolate user data across five different subsidiary brands, generic multi-tenant #SaaS fails.
You need distinct tenant isolation, but legacy identity providers gate that architectural necessity behind massive custom enterprise contracts.
We built a guide with a TCO calculator to expose the exact math for retail environments.
Plug in your peak MAU load and multi-brand tenant requirements. The output shows the hard delta between paying a per-user API tax and owning your infrastructure on a flat license.
Calculate your actual overhead here: fusionauth.io/guides/retail-…
0
0
0
56
If unmoderated user input can trigger execution before moderation happens, your security boundary does not exist.
Treating "preview" like "approved" is how a calendar plugin pops a root shell on your server. It's the software equivalent of opening an uninspected package inside the server room to read the packing slip.
If that package contains an exploit payload, reading it inside the secure perimeter already compromised the environment.
In an analysis for Cybersecurity Insiders, Dan Moore breaks down where teams go wrong and how to fix the pattern:
- Validate in the execution path, not in a parallel routine next to it.
- Use strict structural allowlists instead of attempting to sanitize bad input.
- Keep preview pipelines completely isolated from privileged backend actions.
Read Dan's full architectural breakdown on Cybersecurity Insiders: cybersecurity-insiders.com/what-wordpress…
Treating "preview" like "approved" is how a calendar plugin pops a root shell on your server. It's the software equivalent of opening an uninspected package inside the server room to read the packing slip.
If that package contains an exploit payload, reading it inside the secure perimeter already compromised the environment.
In an analysis for Cybersecurity Insiders, Dan Moore breaks down where teams go wrong and how to fix the pattern:
- Validate in the execution path, not in a parallel routine next to it.
- Use strict structural allowlists instead of attempting to sanitize bad input.
- Keep preview pipelines completely isolated from privileged backend actions.
Read Dan's full architectural breakdown on Cybersecurity Insiders: cybersecurity-insiders.com/what-wordpress…
0
0
0
43
Consumer retail is unique. It's one of the few industries where infrastructure success is directly penalized by your identity vendor's pricing model.
You run a massive holiday campaign, get a huge spike in active users, and can immediately blow your CIAM budget if it's based on MAUs or SSO thresholds.
It is a success tax.
Beyond the billing model, retail authentication can also become an architectural nightmare.
Today's product requirements involve connecting legacy mainframes, modern frontends, and most likely, an external loyalty database (that has not been updated since 2018).
Trying to bolt a generic multi-tenant SaaS identity provider onto that mess usually results in brittle integrations, weird user loops, and lost checkouts.
If your CIAM platform dictates your schema or forces you into their cloud, you don't really own your customer identity layer.
You're renting it.
We documented the exact architectural requirements retail engineering teams need to handle peak load, maintain deployment control, and bypass the MAU tax entirely.
Get the technical blueprint here: fusionauth.io/ebooks/retail-…
You run a massive holiday campaign, get a huge spike in active users, and can immediately blow your CIAM budget if it's based on MAUs or SSO thresholds.
It is a success tax.
Beyond the billing model, retail authentication can also become an architectural nightmare.
Today's product requirements involve connecting legacy mainframes, modern frontends, and most likely, an external loyalty database (that has not been updated since 2018).
Trying to bolt a generic multi-tenant SaaS identity provider onto that mess usually results in brittle integrations, weird user loops, and lost checkouts.
If your CIAM platform dictates your schema or forces you into their cloud, you don't really own your customer identity layer.
You're renting it.
We documented the exact architectural requirements retail engineering teams need to handle peak load, maintain deployment control, and bypass the MAU tax entirely.
Get the technical blueprint here: fusionauth.io/ebooks/retail-…
0
0
0
50
Ever tried explaining an account takeover to a five-year-old?
Well, we’ve got the perfect solution. Introducing our new coloring book for product & marketing teams, because nothing says “secure your identity architecture” like crayons and creativity.
Picture this: A user logs in from London, decides to reset their password just three minutes later from Seattle. No need for an AI wizard to flag this one; you just need a smart identity provider.
With FusionAuth’s intelligent MFA, we evaluate signals like impossible travel and unrecognized devices in the background. It's like having a digital watchdog that never sleeps!
Ready to get coloring? Download the PDF: fusionauth.io/ebooks/mfa-col…
#CyberSecurity #IdentityManagement #ColoringBookFun #MFA #DigitalSafety
Well, we’ve got the perfect solution. Introducing our new coloring book for product & marketing teams, because nothing says “secure your identity architecture” like crayons and creativity.
Picture this: A user logs in from London, decides to reset their password just three minutes later from Seattle. No need for an AI wizard to flag this one; you just need a smart identity provider.
With FusionAuth’s intelligent MFA, we evaluate signals like impossible travel and unrecognized devices in the background. It's like having a digital watchdog that never sleeps!
Ready to get coloring? Download the PDF: fusionauth.io/ebooks/mfa-col…
#CyberSecurity #IdentityManagement #ColoringBookFun #MFA #DigitalSafety
0
0
0
54
Excited to have our talented engineers at #AGNTCon + #MCPCon in San Jose this week.
If you’re attending, let’s connect and talk about machine identity architecture.
Drop a comment or DM us!
events.linuxfoundation.org/agntcon-mcpcon…
#MachineIdentity #Innovation #Networking
If you’re attending, let’s connect and talk about machine identity architecture.
Drop a comment or DM us!
events.linuxfoundation.org/agntcon-mcpcon…
#MachineIdentity #Innovation #Networking
0
0
0
63
An AI agent didn't go rogue. It was asked to verify a frontend change, couldn't find a sanctioned way to share an image, and dumped internal screenshots into a public GitHub repo to get the job done.
Over 13,000 times.
Glow's recent "PixelLeak" research documented over 13,000 internal screenshots sitting in public repositories across 300+ organizations. We are talking internal hostnames, treasury consoles, customer billing screens, and auth tokens sitting in URL bars.
The agents were trained to persist until the job was done. When GitHub blocked private image hosting via text, the agent found a workaround. In 93% of cases, that workaround meant publishing to the developer's personal account, completely bypassing enterprise audit logs.
Traditional secrets scanners missed every byte because scanners look for regex and text strings, not pixels.
Years ago, security through obscurity might have saved you because no attacker would manually inspect 13,000 unindexed PNGs. As Dave Hayes, our VP of Product, pointed out in the report, that economic defense is dead:
"Not long ago, most of those 13,000 images would have been treated as junk because nobody would go through them manually. But it's much easier to scan and find anything useful with AI."
Multimodal models turn raw visual noise into structured reconnaissance in seconds. An attacker does not need to crack your perimeter when an autonomous agent is armed with personal developer credentials and an LLM to index the output.
If your agents run on ungoverned personal identities without scoped tool boundaries, you haven't automated your engineering workflow. You have automated credential leakage.
Where do your coding agents draw the line between developer credentials and organizational identity?
Over 13,000 times.
Glow's recent "PixelLeak" research documented over 13,000 internal screenshots sitting in public repositories across 300+ organizations. We are talking internal hostnames, treasury consoles, customer billing screens, and auth tokens sitting in URL bars.
The agents were trained to persist until the job was done. When GitHub blocked private image hosting via text, the agent found a workaround. In 93% of cases, that workaround meant publishing to the developer's personal account, completely bypassing enterprise audit logs.
Traditional secrets scanners missed every byte because scanners look for regex and text strings, not pixels.
Years ago, security through obscurity might have saved you because no attacker would manually inspect 13,000 unindexed PNGs. As Dave Hayes, our VP of Product, pointed out in the report, that economic defense is dead:
"Not long ago, most of those 13,000 images would have been treated as junk because nobody would go through them manually. But it's much easier to scan and find anything useful with AI."
Multimodal models turn raw visual noise into structured reconnaissance in seconds. An attacker does not need to crack your perimeter when an autonomous agent is armed with personal developer credentials and an LLM to index the output.
If your agents run on ungoverned personal identities without scoped tool boundaries, you haven't automated your engineering workflow. You have automated credential leakage.
Where do your coding agents draw the line between developer credentials and organizational identity?
1
0
1
100
Where your identity data runs is a product decision.
Editorialge’s guide to authentication platforms for SaaS apps names FusionAuth the best option for self-hosted authentication.
It notes you can run FusionAuth on private infrastructure, in your own cloud account, or on FusionAuth’s managed hosting, and that the migration tools help teams moving off an existing identity database.
editorialge.com/best-authentic…
Editorialge’s guide to authentication platforms for SaaS apps names FusionAuth the best option for self-hosted authentication.
It notes you can run FusionAuth on private infrastructure, in your own cloud account, or on FusionAuth’s managed hosting, and that the migration tools help teams moving off an existing identity database.
editorialge.com/best-authentic…
0
0
0
46
Tomorrow, Dan Moore shows what happens when you put an authorization server between Claude Desktop and your MCP server.
Most MCP tutorials stop after connecting an LLM to a local database. That works for a solo dev on localhost, but breaks completely the second multiple users or sensitive actions are involved.
Dan will walk through enforcing user login and scope-based consent before an AI agent executes actions against your APIs using the Ruby SDK.
Grab a spot (virtual or in-person) before tomorrow: luma.com/7y5n7ubf?tk=nz…
#DeveloperTools #Identity
Most MCP tutorials stop after connecting an LLM to a local database. That works for a solo dev on localhost, but breaks completely the second multiple users or sensitive actions are involved.
Dan will walk through enforcing user login and scope-based consent before an AI agent executes actions against your APIs using the Ruby SDK.
Grab a spot (virtual or in-person) before tomorrow: luma.com/7y5n7ubf?tk=nz…
#DeveloperTools #Identity
5
1
4
204
FusionAuth Establishes UK Team as European Demand for Data Sovereignty Drives 72% Regional Growth fusionauth.io/blog/fusionaut…
0
0
0
44
Monktoberfest: A Conference I Love fusionauth.io/blog/monktober…
0
0
0
57
When AI goes into customer-facing products, buyers start asking where their customers' identity data sits and who controls it.
The AI Journal covers how that question is driving our growth in Europe, where we just opened our first UK sales team, and how football clubs use fan relationship with the club.
Brian Bell, CEO of FusionAuth, shares his perspective in The AI Journal: aijourn.com/as-ai-raises-t…
The AI Journal covers how that question is driving our growth in Europe, where we just opened our first UK sales team, and how football clubs use fan relationship with the club.
Brian Bell, CEO of FusionAuth, shares his perspective in The AI Journal: aijourn.com/as-ai-raises-t…
0
0
0
41