The IT Nerd

FusionAuth today announced the appointment of Jamey Miller to SVP of Engineering and Technology. He will be responsible for scaling engineering to support the company’s accelerated growth and increasing enterprise adoption, maintaining product quality and platform reliability, and positioning engineering for AI.

Miller has more than 25 years of experience scaling global SaaS R&D organizations across product, engineering, security, IT, and support, with deep experience in both cloud and self-hosted/on-premises deployment models. He has a proven track record of leading R&D in PE-backed and high-growth environments, including periods of rapid scaling, M&A integration, and operational transformation.

Most recently, Miller served as Chief Product & Technology Officer at global enterprise SaaS company Confience, where he improved delivery predictability and platform security while integrating the acquisition of Brazilian software firm LabSoft. Earlier, as EVP of R&D and Operations at Convercent, he helped guide the company to its acquisition by OneTrust, then went on to serve as VP of R&D Operations there, driving scale and cost efficiencies across a 400-person R&D organization.

Miller holds an MBA from the University of Portland, a M.S. in Marketing from the University of Colorado and a Bachelor of Science in Business Administration from Colorado State University. 

FusionAuth today announced the release of FusionAuth 1.68, introducing  Intelligent MFA, a risk-based authentication engine that evaluates every login against 10 configurable signals and challenges users only when risk is detected.

The launch comes as FusionAuth enters its new fiscal year with the strongest commercial momentum in company history. In the most recent quarter ending April 30, 2026, FusionAuth saw bookings double quarter over quarter, underscoring growing demand for identity infrastructure that gives organizations greater control over deployment, data, risk, and cost.

Intelligent MFA Without the Black Box

Unlike many risk-based MFA offerings that rely on opaque risk scoring inside a shared multi-tenant cloud infrastructure, FusionAuth Intelligent MFA is deterministic, rules-based, and designed to run inside the deployment model the customer chooses, including customer-hosted environments, dedicated FusionAuth Cloud deployments, on-premises infrastructure, and hybrid architectures. The result is adaptive authentication that doesn’t force organizations to trade away visibility, auditability, or infrastructure control.

FusionAuth Intelligent MFA evaluates login risk using 10 signals, including unrecognized device, untrusted device, blocklisted IP address, dormant account, recent password change, and impossible travel. Each login is assigned a low, medium, or high risk score. High-risk sessions trigger an MFA challenge, while trusted sessions can continue without unnecessary friction.

For security and compliance teams, the key difference is transparency. The signal names are visible, the scoring logic is rules-based, and the composite risk score is logged. That means teams can explain why a login was challenged, document policy enforcement, and reproduce decisions when needed.

Built for Customer-Controlled Identity Infrastructure

FusionAuth’s approach is especially relevant for regulated and security-sensitive organizations that cannot rely on shared-cloud assumptions for critical identity decisions. The company’s 2026 State of AI and Identity Report found that organizations using shared multi-tenant identity infrastructure reported confirmed security incidents at more than twice the rate of organizations using self-hosted or isolated deployments. The report also found that two-thirds of respondents experienced an AI identity-related security incident in the past year.

As AI agents, APIs, machines, partners, employees, and customers all require secure access to digital systems, identity is rapidly becoming the control plane for modern applications.

Commercial Momentum Reflects Market Shift Towards Control

FusionAuth’s momentum reflects that shift, demonstrating increased demand from both new and existing customers.

Intelligent MFA is available today in FusionAuth 1.68. FusionAuth can be deployed in FusionAuth’s cloud, an organization’s own environment, on-premises, or anywhere in between.

FusionAuth today released its 2026 State of AI and Identity Report, detailing how AI is reshaping identity infrastructure, security posture, and enterprise trust. The findings reveal a profound and counterintuitive crisis: the organizations that feel most prepared are getting hit the hardest.

Sixty-five percent of respondents reported a confirmed AI identity-related security incident in the past 12 months, with another 23% reporting a near miss. Only 12% emerged from the past year without an incident or close call. But the headline finding is not the breach rate alone; it is who is getting breached.

Among organizations that rated themselves “extremely confident” in their AI security posture, 84% had already experienced a confirmed incident. That figure drops to 64% among those “very confident,” and to just 17% among those who are “not so confident.” The gradient is near-perfect: confidence and breach rates move together.

Key Findings at a Glance

• 88% say AI deployment is outpacing their identity and security infrastructure
• 65% experienced a confirmed AI identity-related security incident in the past 12 months
• 84% of organizations that are “extremely confident” in their AI security posture also reported a confirmed incident
• 80% report shadow AI (employees connecting AI tools without security or IT review)
• 83% vs 38% confirmed incident rate for multi-tenant SaaS vs. self-hosted identity platforms
• 85% have faced customer, partner, or regulatory demands to prove tenant isolation
• 93% say AI is already a trigger for reevaluating identity infrastructure
• 91% expect identity investment to increase in the next 12–18 months

Confidence is Tracking the Wrong Thing
The report’s most striking finding has significant implications for how the industry benchmarks AI security readiness. Organizations at the top of the confidence scale share a common profile: they are deploying AI broadly, have comprehensive policies, have formalized lifecycle processes, and are investing heavily. They are doing everything a mature organization should, yet they are still being breached at high rates.

The report also notes that organizations with more mature security programs are better at detecting incidents, meaning lower-confidence organizations may not be safer, but simply have less visibility into what is already happening.

Architecture is the New First-Order Security Variable
The deployment model an organization uses for its identity platform correlates strongly with breach outcomes. Organizations using multi-tenant SaaS identity platforms report confirmed incidents at more than twice the rate of those using self-hosted or on-premises deployments: 83% versus 38%.

In a shared SaaS environment, a single compromised token or misconfigured policy does not stay contained. It cascades across every AI workflow connected to the identity layer, model access, data pipelines, automation actions, and downstream services, creating a fundamentally different blast radius than a self-hosted or isolated deployment.

The highest-risk profile in the study is not a low-maturity organization. It is the opposite: companies running AI in production, using AI broadly across the workforce, and operating on multi-tenant SaaS identity infrastructure. In this cohort, 90% reported a confirmed incident and 96% faced shadow AI challenges.

Identity is Now a Commercial Trust Problem
AI identity risk has moved beyond the security team. Eighty-five percent of respondents have faced customer, partner, or regulatory demands to demonstrate tenant isolation at least occasionally, while 56% face it frequently. Tenant isolation has shifted from a backend implementation detail to a commercial requirement that now determines whether enterprise deals close.

Among organizations where AI is the primary driver of identity reevaluation and customers frequently demand proof of isolation, 99% reported a confirmed incident, and 95% are planning significant increases in investment, pointing to a buying motion driven by urgency rather than planning.

Investment is Moving from Incremental to Structural
Ninety-three percent of respondents say AI is already causing or contributing to a reevaluation of identity infrastructure. Sixty-six percent are planning a significant increase in investment, and 91% expect some level of increase in the next 12–18 months. The top evaluation criteria reflect an architectural shift: machine identity at scale (72%), deployment flexibility (57%), fine-grained authorization (54%), and tenant isolation (32%). Total cost of ownership ranked last at 11%.

About the Research
The 2026 State of AI and Identity Report is based on a survey of 312 technology and security leaders, screened for relevance to AI, identity, and security decision-making. Respondents include CTOs, CISOs, VPs and Directors of Product, Engineering, Security, and Platform/Infrastructure across a range of company sizes and industries. The survey was conducted by FusionAuth in early 2026.

FusionAuth today released its 2026 State of AI and Identity Report, detailing how AI is reshaping identity infrastructure, security posture, and enterprise trust. The findings reveal a profound and counterintuitive crisis: the organizations that feel most prepared are getting hit the hardest.

Sixty-five percent of respondents reported a confirmed AI identity-related security incident in the past 12 months, with another 23% reporting a near miss. Only 12% emerged from the past year without an incident or close call. But the headline finding is not the breach rate alone; it is who is getting breached.

Among organizations that rated themselves “extremely confident” in their AI security posture, 84% had already experienced a confirmed incident. That figure drops to 64% among those “very confident,” and to just 17% among those who are “not so confident.” The gradient is near-perfect: confidence and breach rates move together.

Key Findings at a Glance  

• 88% say AI deployment is outpacing their identity and security infrastructure
• 65% experienced a confirmed AI identity-related security incident in the past 12 months
• 84% of organizations that are “extremely confident” in their AI security posture also reported a confirmed incident
• 80% report shadow AI (employees connecting AI tools without security or IT review)
• 83% vs 38% confirmed incident rate for multi-tenant SaaS vs. self-hosted identity platforms
• 85% have faced customer, partner, or regulatory demands to prove tenant isolation
• 93% say AI is already a trigger for reevaluating identity infrastructure
• 91% expect identity investment to increase in the next 12–18 months

Confidence is Tracking the Wrong Thing 

The report’s most striking finding has significant implications for how the industry benchmarks AI security readiness. Organizations at the top of the confidence scale share a common profile: they are deploying AI broadly, have comprehensive policies, have formalized lifecycle processes, and are investing heavily. They are doing everything a mature organization should, yet they are still being breached at high rates.

The report also notes that organizations with more mature security programs are better at detecting incidents, meaning lower-confidence organizations may not be safer, but simply have less visibility into what is already happening.

Architecture is the New First-Order Security Variable 

The deployment model an organization uses for its identity platform correlates strongly with breach outcomes. Organizations using multi-tenant SaaS identity platforms report confirmed incidents at more than twice the rate of those using self-hosted or on-premises deployments: 83% versus 38%.

In a shared SaaS environment, a single compromised token or misconfigured policy does not stay contained. It cascades across every AI workflow connected to the identity layer, model access, data pipelines, automation actions, and downstream services, creating a fundamentally different blast radius than a self-hosted or isolated deployment.

The highest-risk profile in the study is not a low-maturity organization. It is the opposite: companies running AI in production, using AI broadly across the workforce, and operating on multi-tenant SaaS identity infrastructure. In this cohort, 90% reported a confirmed incident and 96% faced shadow AI challenges.

Identity is Now a Commercial Trust Problem  

AI identity risk has moved beyond the security team. Eighty-five percent of respondents have faced customer, partner, or regulatory demands to demonstrate tenant isolation at least occasionally, while 56% face it frequently. Tenant isolation has shifted from a backend implementation detail to a commercial requirement that now determines whether enterprise deals close.

Among organizations where AI is the primary driver of identity reevaluation and customers frequently demand proof of isolation, 99% reported a confirmed incident, and 95% are planning significant increases in investment, pointing to a buying motion driven by urgency rather than planning.

Investment is Moving from Incremental to Structural 

Ninety-three percent of respondents say AI is already causing or contributing to a reevaluation of identity infrastructure. Sixty-six percent are planning a significant increase in investment, and 91% expect some level of increase in the next 12–18 months. The top evaluation criteria reflect an architectural shift: machine identity at scale (72%), deployment flexibility (57%), fine-grained authorization (54%), and tenant isolation (32%). Total cost of ownership ranked last at 11%.

About the Research 

The 2026 State of AI and Identity Report is based on a survey of 312 technology and security leaders, screened for relevance to AI, identity, and security decision-making. Respondents include CTOs, CISOs, VPs and Directors of Product, Engineering, Security, and Platform/Infrastructure across a range of company sizes and industries. The survey was conducted by FusionAuth in early 2026.