#research
- Analysis · Nov 10, 202644 identity compliance deadlines before 2029, in one calendar you can subscribe to
SWI's Identity Compliance Calendar lists 82 dated regulatory obligations with an identity angle from January 2026 to December 2028, each tied to an official source. 44 were still ahead as of November 5, 2026. The busiest stretches are the turn of 2026 into 2027, with eight events in each quarter, and the last quarter of 2027, when the AI Act's biometric rules, the Cyber Resilience Act and mandatory EU wallet acceptance all land.
- Analysis · Nov 9, 202654% of business SaaS apps support passkeys or security keys. Only 13% let you require them
SWI's Phishing-Resistant MFA Support Matrix checked 95 business SaaS apps against their own documentation. 51 support passkeys or FIDO2 security keys, 12 let admins require them, and 60% of apps with a documented SSO plan charge more for SSO. Here is what the matrix is and how to use it.
- Analysis · Nov 6, 202639% of identity CVEs are on CISA KEV, and edge appliances hold 62% of the exploited ones
SWI's Identity Vulnerability Report 2026 checked 137 identity CVEs against CISA's Known Exploited Vulnerabilities catalog and NVD. 53 are exploited, most of them on VPNs, gateways and remote-access tools rather than identity products, and the median exploited CVE reached KEV 5 days after disclosure.
- Analysis · Nov 5, 2026Half of identity funding rounds pitch AI agents, but agent startups raise no bigger checks
SWI's Identity Funding Report 2026 records 101 identity-security funding rounds from January 2025 to October 2026. 49 of 99 equity rounds targeted AI agents or non-human identities, yet agent-focused seeds and Series A rounds are the same size as everyone else's. What the dataset is and how to use it.
- Analysis · Nov 4, 20261 of 123 AI agent identity drafts at the IETF has been adopted, and 7 of 11 agent problems already have a standard
SWI's Agent Identity Standards Map 2026 dates the status of 70 specifications for AI agent authentication, delegation and authorization. Most of the problem is buildable on published OAuth and workload standards. The parts that make agents different, from delegation chains to an owner registry, are still drafts or nothing at all.
- Analysis · Nov 3, 202646.5% of 2025-2026 identity breaches had no login for MFA to protect
SWI's Identity Breach Report 2026 classified 115 identity breaches from 2021 to October 2026. Where MFA status is known it was bypassed in 25 of 40 cases, and in 2025-2026, 20 of 43 breaches abused a path with no login for MFA to protect at all.
- Analysis · Nov 2, 2026Identity vendors made 18 of 33 identity acquisitions in 2025 and 2026, but paid $0.79 billion of $62.96 billion
SWI's Identity Consolidation Report 2026 reads 63 identity acquisitions against the ownership of 297 tracked vendors. Identity companies make most of the deals; security, IT and data platforms pay almost all of the money. Five AI-agent identity vendors were bought in 87 days, and 67% of the market is still independent.
- Analysis · Oct 31, 2026Only 27% of identity vendors publish a price, and identity governance scores 5 out of 100
SWI's Identity Pricing Transparency Index 2026 classified the pricing of 295 identity vendors on sale on October 30, 2026. 79 publish a price for any paid tier, 158 are quote-only, and the market scores 38 out of 100. Who the vendor sells to predicts transparency better than what it sells.