Jasson Casey

CEO: Beyond Identity. Interested in most things math, science or history. Still don’t know how to twitter.

[Colton Chojnacki @ColtonChojnacki]

Security leaders using Claude Code, how are you actually controlling permissions at org scale?

We just shipped Ceros: identity-scoped rules, continuous device checks, and cryptographic audit trails on top of Anthropic's native system.

The missing layer is here: https://t.co/USNUxnhCmG @beyondidentity @AnthropicAI

[Beyond Identity @beyondidentity]

Every new AI agent your team ships = another API key living somewhere you don't fully control.

Nobody's doing anything wrong. That's just how credential checkout works at scale.

The problem compounds quietly until it doesn't. We wrote about what the architecture looks like when you stop distributing secrets to endpoints entirely, check it out:
https://t.co/z68mi3ihJf

[Colton Chojnacki @ColtonChojnacki]

Agents need API keys to do something useful, but storing the keys anywhere near the agent can be disastrous. Very proud of the work @beyondidentity is doing to make agents more secure and more productive. Great read

[Colton Chojnacki @ColtonChojnacki]

hot take: AI agent security tools that sit at the API gateway aren't agent security. they're API monitoring with better branding.
we asked "what if CrowdStrike but for claude code" and then we built it
lives on the machine. sees the process tree. hashes the binaries. signs every tool call. every packet

2 commands to get started

npm install -g @beyondidentity/ceros-cli
ceros claude
https://t.co/0th0XVzWJM

[Colton Chojnacki @ColtonChojnacki]

https://t.co/HNZNMwqn88

[Colton Chojnacki @ColtonChojnacki]

https://t.co/sOKLKHGmOy

[Jasson Casey @jassoncasey]

@andruyeung Shukette
Hav & Mar

[Jasson Casey @jassoncasey]

@DAlperovitch @RGB_Lights Just make sure they are not sync-able passkeys. Those are guarded by passwords.

[Jasson Casey @jassoncasey]

RT @vxunderground: Skip this post if you don't feel like getting irritated and/or frustrated and/or angry.

July 18th, 2024 Columbus, Ohio…

[Jasson Casey @jassoncasey]

@beyondidentity @okta Indeed, Okta customers are more secure by going Beyond Identity.

[Colton Chojnacki @ColtonChojnacki]

Hi @elonmusk think you should remove the password from Twitter’s auth stack and replace with asymmetric cryptography. I can help let me know

[Colton Chojnacki @ColtonChojnacki]

Had a great time building and launching this thing! Seeing activations the first day feels great!!!

[Jasson Casey @jassoncasey]

@antoniogm https://t.co/vfUXjwGSKb , depends on what you mean by succeeding, but selling for 442M coming out of the 2001 crash was a big deal at the time.

[Beyond Identity @beyondidentity]

MYTH: MFA stops 99% of attacks!



First stated by Microsoft, this common thought pops up across the industry.



Cybersecurity Mythbusters @pmcbrideva1, @jassoncasey, & special guest @rogeragrimes will find out the truth once & for all!

Full video: https://t.co/tdVSftyrPI

[Jasson Casey @jassoncasey]

@AmyBOcean @JoJoFromJerz Rasika is only one missing!

[Jasson Casey @jassoncasey]

@nmelo @goinggodotnet Keep it in an enclave, garuntee it never ends up in memory or the file system and can’t move. All the cloud providers now support something like this, check out AWS Nitro.

[Jasson Casey @jassoncasey]

It definitely makes me slow, but I like the understanding.

[Jasson Casey @jassoncasey]

I can’t seem to study a subject without taking three or more diversions along the way. ML > remind me how probability works > oh, I forgot about why power series > did I ever really understand calculus > for that matter did I ever really understand algebra.

[Jasson Casey @jassoncasey]

For right or wrong, I’m stuck in the mode of, if you can’t explain it to a computer, you don’t really know it. Which I think is a bastard-ization of a Knuth quote.