Vendor podcasts vs independent shows: how to tell what you're hearing
Just over half of the identity podcasts we track are made by vendors, and most of the rest have a commercial tie somewhere. That does not make them bad. It does mean you should know who is paying before you take the advice. Five questions to ask of any show, and how we label them.
Eleven of the 21 identity podcasts we track are produced by vendors. Of the four we class as independent, three have a commercial tie worth knowing about. Identity podcasting is mostly paid for by companies that sell identity products, and that is fine, as long as you know it while you listen. A more useful question than "vendor or independent?" is "who benefits if I believe this, and does the show tell me?"
Vendor does not mean bad
One of the strongest episodes we found on recovering identity systems after a breach comes from Semperis, which sells Active Directory recovery. Seven of the 15 episodes on our identity threats path come from vendor shows, because incident response and red teams at companies like CyberArk (now Idira) see breaches that independent hosts only read about. Sectigo's Root Causes is the most dependable way to follow certificate policy, and the hosts' employer is the reason they know it so well.
Vendor experts often know the problem better than anyone. The risk is narrower: the problem gets framed so their product is the answer, and the alternatives go unmentioned.
What our data says
When we built ten learning paths of the best identity episodes we could find, the split was lopsided. Vendor shows make up more than half the directory but supplied 36 of 139 selected episodes, or 26 percent. Independent shows supplied 61, or 44 percent. Vendor shows are also less durable: six of the seven identity podcasts that have gone quiet are vendor productions, including one that went silent a month after its publisher was acquired. The full numbers are in The State of Identity Podcasts 2026.
Five questions to ask of any show
1. Who publishes it? Check the show's website and the publisher field in your podcast app, not the host's introduction. A show called "Identity Matters" or "SaviTalk" tells you little; the feed tells you it is SailPoint or Saviynt.
2. Where do the hosts work? Independent shows are often hosted by people with day jobs at vendors. Entra.Chat is a personal project, and its host works at Microsoft; the show says so in its feed. The Identity Jedi Show is independent, and its host is a vendor's field CTO who also co-hosts that vendor's own show. Neither is hidden, but you have to look.
3. Is this episode paid for? Some independent shows sell episodes. Identity at the Center runs "Sponsor Spotlight" episodes in which a vendor pays to be featured, clearly titled. KuppingerCole's feed mixes the firm's own Analyst Chat with videocasts made with vendors. The title usually tells you; read it before you press play.
4. Who are the guests, and who is missing? A vendor show that only interviews its own staff and customers is a brochure. One that brings on competitors' alumni, standards authors, and analysts is closer to journalism. On any show, notice when a guest names the category leader as "the problem" and their own approach as the fix, without naming alternatives.
5. Does the advice survive without the product? The test that matters most. A good vendor episode leaves you with something you could do on any platform: rotate these credentials, require this standard, check this setting. A pitch leaves you needing the product. The final third of one Active Directory episode we reviewed turns into a walkthrough of the publisher's free tool; the first two thirds are still worth hearing.
How we label shows and episodes
We built the podcast directory on the same terms as the rest of the site: no show pays to be listed or placed, and vendor shows sit beside independent ones, labelled. Concretely:
- Every profile states the publisher type: independent, vendor, analyst, media, nonprofit, or community.
- Vendor ties are disclosed, including on independent shows: paid episodes, the host's employer, and ownership changes such as an acquisition.
- Episodes that promote the publisher's product are flagged on the learning paths. Three carry the flag today: a paid sponsor feature, a vendor co-produced analyst videocast, and an episode that ends in a product walkthrough.
- We say how each episode was checked. Episodes checked against a transcript the show publishes on its own site are marked and linked; the rest are checked against show notes, and the page says so. We link to episodes; we do not copy, host, or transcribe them.
- Status comes from the feed, so a vendor show that stops publishing shows as dormant within weeks, even if the vendor never announces it.
The rule we apply to ourselves is the one we suggest for listeners: the label does not decide whether something is worth hearing. Knowing it lets you weigh what you heard.
A quick checklist
Before you act on advice from an identity podcast, confirm:
- I know who publishes the show and where the host works.
- I know whether this episode was paid for.
- The guest's employer sells something related to the advice, or does not.
- I could follow the advice without buying the guest's product.
- I have checked one independent source, such as the standard itself or a vendor-neutral guide.
If you spot a vendor tie we missed on any show profile, tell us at community@startwithidentity.com and we will add it.
Related on Start with Identity
- Blog1 of 123 AI agent identity drafts at the IETF has been adopted, and 7 of 11 agent problems already have a standard
SWI's Agent Identity Standards Map 2026 dates the status of 70 specifications for AI agent authentication, delegation and authorization. Most of the problem is
- Blog39% of identity CVEs are on CISA KEV, and edge appliances hold 62% of the exploited ones
SWI's Identity Vulnerability Report 2026 checked 137 identity CVEs against CISA's Known Exploited Vulnerabilities catalog and NVD. 53 are exploited, most of the
- Blog44 identity compliance deadlines before 2029, in one calendar you can subscribe to
SWI's Identity Compliance Calendar lists 82 dated regulatory obligations with an identity angle from January 2026 to December 2028, each tied to an official sou
- GuideHow to evaluate a CIAM vendor without falling for the demo
The fastest way to evaluate a [CIAM](/guides/fundamentals/what-is-ciam/) vendor is to ignore the demo and test four things on a trial tenant: what you will pay
- ArticleIAM Vendor Selection Framework: From RFP to Production
A structured framework for IAM vendor selection covering RFP templates, evaluation criteria, proof of concept planning, total cost of ownership analysis, and de
- ExpertIndependent Consultant
Justin Richer is one of the most active OAuth working group contributors. He led the design of GNAP, the IETF effort to design a next-generation authorization p