Sachin Desai

Service accounts, automation workflows, bots, workloads, and AI agents operate across enterprise systems with real access, and he frames governing that whole surface — not just human accounts — as one of the biggest challenges in security. His proposed response is a unified lens that treats SaaS and identity together rather than as separate tooling problems, which is the argument he put his name to in a conference talk.

The post introducing the Zluri Identity Security Platform describes the work in three steps — discover identities, govern access, and continuously monitor identity risk — and says the shift is driven by service accounts, automation workflows, and AI agents. Desai's Identica 2025 recap makes the same case in plainer terms: identity is no longer just about people, because bots, service accounts, workloads, and AI systems are exploding in number.

Read original · Original 2 · Original 3

He describes people buried in identity data, exporting to spreadsheets or waiting on external business-intelligence tools, then struggling to fix what they spotted. The answer he promotes is dashboards plus in-platform action, so that the gap between detection and remediation shrinks.

In the IRIS launch post he quotes the customer view directly — buried in data, juggling spreadsheets and BI tools — then lists what the product provides: more than ten prebuilt dashboards covering access requests, certifications, shadow IT and AI, and compliance metrics, plus app-level insights such as orphaned accounts, privilege creep, and external accounts. He states the outcome as closing the gap between finding and fixing a risk from days to minutes, and removing spend on outside BI tools and analyst overhead.

Read original

Visibility comes first, and governance or remediation follows from an accurate inventory. This is the thread that connects his earlier-facing SaaS and app-adoption material to the later identity-governance material, and he describes the company's own evolution in the same terms.

The platform post begins with discovery; the IRIS post tracks access requests, certifications, shadow IT and AI, and compliance metrics; the workplace-AI report post leads with which AI apps are most used and fastest growing. In his career reflection, Desai states plainly that Zluri moved from SaaS Management into Identity and Access Management, which is the clearest public statement of how the subject matter shifted.

Read original · Original 2 · Original 3 · Original 4

His framing is not that AI is inherently bad, but that tools arrive without oversight and become a compliance exposure. That makes AI governance an extension of the identity work rather than a separate topic.

The post promoting The State of AI in the Workplace 2025 report lists its contents: the most-used and fastest-growing AI apps and categories, adoption trends by department, hidden risks from ungoverned AI tools, and 2026 predictions, with AI sprawl described as a potential compliance threat. Shadow IT and AI also appears as one of the tracked dashboard areas in the IRIS post, showing how the concern is wired into the product.

Read original · Original 2

His stated priorities are committing before an outcome is obvious, adapting as markets and customer needs change, and treating milestones as team achievements rather than individual ones. The reflection is also where he connects his own experience to the identity space he now works in.

He writes that he joined UiPath before its Series A and watched it grow into a company that rang the bell at a billion-dollar IPO, then joined Zluri shortly after its Series B and saw it evolve from SaaS Management into Identity and Access Management, followed by Zluri's acquisition by Info-Tech Research Group. He credits Sethu, Ritish, and Chaithanya for bringing him into Zluri and thanks colleagues and customers.

Read original

He announces sessions, recaps what other speakers covered, and credits the organizers and colleagues involved, which suggests a convention of treating conference appearances as community participation rather than solo promotion.

He announced speaking at Identica 2025 in Bengaluru on 6 December 2025, thanked the WHY"NOT"IAM community organizers, and invited attendees to connect. After the event he called it an honor, listed the themes he found strongest — non-human identities, AI governance, identity risk and hygiene, and the future of IAM architectures — and credited Ravi Chhetri for bringing the community together, tagging Zluri colleagues alongside the organizer.

Read original · Original 2

The post names the customer complaint, the tool, and the promised outcome in one place.

Desai introduces IRIS, a dashboard layer for identity governance.

• The post quotes the problem it addresses in customer terms: teams are buried in identity data, exporting to spreadsheets or waiting on external BI tools, and then struggle to act once they spot a risk.
• It lists 10+ prebuilt dashboards covering access requests, certifications, shadow IT/AI, and compliance KPIs, plus 15+ app-level insights for orphaned accounts, privilege creep, and external accounts.
• The stated goal is to close the gap between finding a risk and fixing it inside the same platform.

For brands planning a campaign

For a webinar on identity governance, this is a ready-made segment on moving from detection to remediation. The customer complaints Desai quotes, especially spreadsheet exports and BI-tool dependency, work as poll questions or opening pain-point framing.

Read it second, after IRIS, to see the wider product story.

Desai argues that identity environments now include far more than employees: service accounts, automation workflows, and AI agents operate across enterprise systems with real access.

• The post presents the Zluri Identity Security Platform around three verbs: discover identities, govern access, and continuously monitor identity risk.
• It links to the company site and a press release.

For brands planning a campaign

Direct fit for a webinar covering non-human identities and SaaS integration. This is the post to quote when setting up why NHI governance matters, because it states the expansion of the identity surface plainly and ties it to a platform response.

It is the only supplied post that gives a career arc and a milestone.

Desai describes joining UiPath before its Series A and staying through a billion-dollar IPO, then joining Zluri shortly after its Series B and watching it move from SaaS Management into Identity and Access Management.

• The post marks Zluri's acquisition by Info-Tech Research Group and draws three lessons: bet early, keep evolving, and build together.
• Desai credits Sethu, Ritish, and Chaithanya for bringing them into Zluri and thanks colleagues and customers.

For brands planning a campaign

Useful material for a host introducing Desai: it shows experience spanning two category shifts and a company acquisition, and it gives a human milestone to reference rather than a job-title readout.

Read it to judge public-speaking substance.

Desai recaps speaking at Identica 2025 on the topic of rethinking identity governance through a unified SaaS and identity lens.

• The recap says identity is no longer just about people, because bots, service accounts, workloads, and AI systems are growing in number, and calls governing all of them one of the biggest security challenges.
• Desai also lists other conference themes: non-human identities, AI governance, identity risk and hygiene, and future IAM architectures, and thanks organizer Ravi Chhetri.

For brands planning a campaign

Shows a delivered talk on exactly the proposed webinar subject. A co-host can ask Desai to reprise the unified SaaS-plus-identity framing and the non-human identity growth argument, since both are already in the public recap.

Desai announces a speaking session at Identica 2025 in Bengaluru, hosted by the WHY"NOT"IAM Community, for 6 December 2025 at The Grand Magrath.

• The advertised title is "Rethinking Identity Governance: How Unified SaaS and Identity Management Solve Modern Security Challenges."
• The post invites connection and links to registration.

For brands planning a campaign

Concrete evidence of a public-speaking topic and format. A webinar planner can match the proposed brief against this existing session and avoid repeating it without a fresh angle.

Read it to see how Desai links AI adoption to identity and compliance risk.

Desai promotes a Zluri report on AI in the workplace.

• The post says it covers the most-used and fastest-growing AI apps and categories, adoption trends by department, hidden risks from ungoverned AI tools, and predictions for 2026.
• It frames AI sprawl as a potential compliance threat.

For brands planning a campaign

Source material for a webinar segment on shadow AI. The report's framing of ungoverned AI tools as a compliance risk is the bridge between AI governance and identity governance, and the 2026 predictions give a forward-looking hook.

Service accounts, automation workflows, bots, and AI agents operate inside enterprise systems with real access, and he frames governing all of them — not just people — as one of the biggest current challenges in security. His Identica 2025 session, titled around rethinking identity governance through a unified SaaS and identity lens, makes the same argument at speaking length, and his launch post for Zluri's Identity Security Platform describes the work as discovering identities, governing access, and continuously monitoring identity risk.

Names the categories of non-human identity one by one, then connects them to a single governance problem rather than treating each as a separate tooling issue.

For brands planning a campaign

A vendor pitching a webinar on non-human identity governance can use this as the spine of the session: Desai already has a stated argument and a speaking title to build on, so the webinar can extend his framing instead of introducing the topic from scratch.

Examples: Source 1 · Source 2 · Source 3

His answer is a product that visualizes identity governance metrics — access requests, certifications, shadow IT and AI, compliance KPIs — through pre-built dashboards, surfaces app-level risks such as orphaned accounts, privilege creep, and external accounts, and lets teams act on a risk inside the same platform. He quantifies the promise as closing the gap between finding and fixing a risk from days to minutes and removing spending on external BI tools and analyst overhead.

Opens with the customer complaint in quoted form, names the product, lists capabilities in short labelled blocks, then restates the outcome for the team.

For brands planning a campaign

This is a ready-made webinar structure for an identity-governance vendor: the problem statement, the demo surface, and the outcome claims are already separated, so a session can walk the same sequence with the vendor's own product in place of IRIS.

Examples: Source 1

Desai promotes the State of AI in the Workplace 2025 report, listing what it covers: the most-used and fastest-growing AI apps and categories, adoption trends by department, hidden risks from ungoverned tools, and 2026 predictions. He frames AI sprawl as a compliance threat that teams need to get ahead of, and the same shadow IT and AI exposure appears as a tracked metric in his identity risk dashboards post.

Leads with the scale of the shift, then uses a research report as the evidence layer and points to a download rather than summarizing the findings in the post.

For brands planning a campaign

Supports a data-led webinar format where the vendor co-presents research findings on AI adoption and then moves into governance controls; the shadow-AI angle also gives a non-human-identity vendor a way to reach IT and compliance audiences rather than only security teams.

Examples: Source 1 · Source 2

He announced a speaking slot at Identica 2025 on 6 December 2025 in Bengaluru, thanked the WHY"NOT"IAM community organizers, and invited people attending to connect. After the event he described it as an honor, recapped the themes he found strongest — non-human identities, AI governance, identity risk and hygiene, and the future of IAM architectures — and credited Ravi Chhetri for bringing the community together, tagging a list of Zluri colleagues alongside the organizer.

Uses event posts for both announcement and post-event recap, and consistently credits named organizers and colleagues rather than only promoting a session.

For brands planning a campaign

A vendor planning a webinar in this space can approach it as a community-adjacent event rather than a cold product pitch: Desai's convention is to credit partners and organizers publicly, so a co-hosted session with a community group is closer to his existing behavior than a solo brand broadcast.

Examples: Source 1 · Source 2

He distills three lessons — bet early, keep evolving, build together — and thanks the Zluri founders for bringing him in. He explicitly names the company's shift from SaaS management into identity and access management, which is the clearest statement in the supplied material of how the subject matter has moved over time.

First-person career timeline, compressed into three numbered lessons, then closed with thanks to named colleagues.

For brands planning a campaign

This is executive-level material rather than practitioner teaching: it suits a fireside or leadership segment on building and scaling in security, or an opening credibility segment before a technical webinar, but it will not carry a hands-on identity governance session on its own.

Examples: Source 1

The Zluri Identity Security Platform post and the IRIS post are the clearest examples. A shorter exception exists in the corpus: a one-line post congratulating the team and leadership on momentum, with no product detail, which is team amplification rather than a launch.

Announcement format with market framing, product name, link, and hashtags; separate from the reflective and event formats used elsewhere.

One supplied post is a brief congratulatory note with no product or topic content, so the launch format is dominant but not universal.

For brands planning a campaign

A brand can expect Desai to post an announcement-style item for a launch or report it is involved in, with a link and topical tags, but should not assume long-form explanation inside the post itself; supporting detail needs to live on the destination page.

Examples: Source 1 · Source 2 · Source 3 · Source 4

Early-facing material is about SaaS and AI adoption risk, with a research report on AI apps spreading through workplaces.

• Later material is about identity governance as a discipline — non-human identities, unified SaaS and identity views, risk dashboards, and an identity security platform — and Desai states in his own reflection that Zluri evolved from SaaS Management into Identity and Access Management.
• The through-line is visibility: knowing what identities and applications exist, then acting on that view.

Compares the subject matter of the report-promotion and product posts with the later identity-governance and event posts.

The supplied posts carry no publication dates beyond the Identica event date, so the ordering of the shift is inferred from topic and event references, not from a dated timeline.

For brands planning a campaign

A vendor should pitch the identity-governance story as his current emphasis and treat SaaS management and AI sprawl as adjacent entry points rather than the main subject; the adjacent angles still work as hooks for audiences not yet buying identity governance.

Examples: Source 1 · Source 2 · Source 3 · Source 4

His posts also discuss Zluri’s identity-security platform and IRIS product. The posts establish work at Zluri but do not establish his current role.

View example

View example

He also focuses on non-human and AI-agent identities needing structured governance, which is the case Desai makes in his platform and conference material.

Nadimpalli writes as a builder of tooling for the work: he introduces an AI-assisted development environment for IAM, described as a "Cursor for IAM," covering design, validation, modernization, and reusable identity artifacts across vendors such as SailPoint, Saviynt, Okta, and CyberArk. Desai's posts sit with a single platform's governance and risk-monitoring surface and with community events, rather than with an engineering tool that spans multiple identity stacks.

Read original · Original 2

Both treat governance of machine identities as a current security problem rather than a future one.

Andrade writes controls-focused commentary on the threat landscape — autonomous attacks, least privilege and short-lived credentials, authorization at the moment of a sensitive action, logging every agent action, and separating AI test environments from production, often with a checklist and a linked external source. Desai's posts are framed around his company's platform and its risk dashboards, and around conference sessions.

Read original · Original 2

He also raises the shadow-AI counting problem that appears in Desai's dashboards and report promotion.

Jones works from a security vendor's published blueprint and writes questions aimed at security leaders and boards — “Where are my agents?

• What can they connect to?
• What can they do?” — with a single long-form, research-anchored post style.
• Desai mixes launch announcements, platform capabilities, and community recaps, and points readers to his own product pages and downloads.

Read original · Original 2

His two posts argue that AI is rewriting the cost structure of identity governance at three points: runtime operations, design-time onboarding and lifecycle work, and vendor engineering velocity.

• He is also introducing stimul8.ai, an AI-assisted development environment for IAM described as "a Cursor for IAM" that helps teams design, understand, modernise, validate and evolve identity systems across SailPoint, Saviynt, Okta, Microsoft, BeyondTrust, CyberArk and custom environments, with an early access programme attached.
• For a vendor selling IAM tooling to identity architects, where the promised value is cutting implementation effort, that is a closer match than a governance-operations voice.

The brief asks for two threads and Nadimpalli only reliably covers one.

• Non-human and AI identities appear as supported categories in the stimul8.ai post, not as a developed argument, and there is no SaaS-integration material at all.
• The same posts that make him relevant also show him promoting his own product: stimul8.ai is in early access and tied to Tuebora, so a host vendor may be sharing the stage with a competing or adjacent tool, which needs clearing before booking.
• There is no delivered conference talk or event format in the reviewed material and no audience measurement, so the format evidence is weaker than Sachin Desai's, whose Identica session on unified SaaS and identity management is a delivered talk on the exact webinar topic.

Examples: Source 1 · Source 2

One post frames the threat directly: the risk is not only AI-generated phishing but autonomous or semi-autonomous attacks that do reconnaissance, exploit weaknesses and move through environments faster than humans.

• The same post supplies a usable control list — do not give AI agents unrestricted credentials, use least privilege with short-lived credentials, require authorisation at the moment an agent performs a sensitive action, log every agent action, separate AI development from production, and put data-loss controls around AI applications — and closes on a quotable line: identity tells you who the agent is, authorisation must decide whether this specific action should happen right now.
• The second post extends Zero Trust beyond users, devices and applications to autonomous identities, asking what authority is being given to AI and how that authority is continuously verified.
• That is a strong fit when the host's product is a control such as privileged access, credential management or authorisation, and the audience wants engineering rules, not a programme roadmap.

Two gaps matter for this specific brief.

• First, there is no SaaS-integration thread: SaaS sprawl, certifications, access requests and orphaned accounts — the operational IGA content that anchors the proposed webinar — do not appear.
• Second, the format evidence is thin.
• Both posts are short and framework-shaped, with on-topic hashtags and an outbound link, so there is no demonstration of carrying a 45-minute session and no delivered talk to point to, unlike Desai's announced and recapped Identica 2025 session.
• The tradeoff is a sharper risk-and-controls hook in exchange for less demonstrated depth, no SaaS content and no event track record.

Examples: Source 1 · Source 2

His posts work from Okta's Blueprint for the Secure Agentic Enterprise and lay out the case in three moving parts: shadow AI that most teams cannot count, machine-speed threats where a compromised agent can move across a SaaS stack in seconds, and a "skeleton key" risk from agents still relying on static, long-lived credentials.

• The framing question — where are my agents, what can they connect to, what can they do — is a ready-made webinar hook, and the second post adds the non-human identity lifecycle argument: agents with authority should be first-class identity-bearing entities with automated lifecycles, clear human ownership and a central kill switch.
• If the host sells identity security for agents and wants the non-human identity half of the brief developed at length, this is the closest match.

The material is built on Okta's blueprint and named to Okta throughout, which is a direct conflict if the host vendor competes with Okta or wants an independent voice; that has to be resolved before any approach.

• It is also the inverse of Sachin Desai's balance: strong on agentic and non-human identity, thin on the SaaS-integration thread and on IGA mechanics such as certifications, access requests and orphaned accounts.
• Like the other alternatives, there is no conference talk or event format in the reviewed posts and no audience data, and both posts end by pointing readers to Okta material, so the host would be buying an Okta-aligned argument rather than a neutral one.

Examples: Source 1 · Source 2