Identity & Access Management Security Blog

Use Cases

How It Works

Customers

Resources

Company

Request a Demo

Blog

Featured posts

Mar 19, 2026

Shrinjay Muhkerjee

Introducing Paladin: Access Decisions at Machine Speed, With Human Judgment

Featured

PRODUCT

COMPANY

IDENTITY SECURITY

Mar 19, 2026

Shrinjay Muhkerjee

Introducing Paladin: Access Decisions at Machine Speed, With Human Judgment

Featured

PRODUCT

COMPANY

IDENTITY SECURITY

Mar 17, 2026

Anna Hagiwara

Introducing OpalQuery: Ask Your Access Graph Anything

Featured

PRODUCT

Mar 17, 2026

Anna Hagiwara

Introducing OpalQuery: Ask Your Access Graph Anything

Featured

PRODUCT

All Blog Posts

All POSTS

PARTNERSHIPS

IDENTITY SECURITY

RESOURCES

PRODUCT

COMPANY

CASE STUDIES

Mar 19, 2026

Shrinjay Muhkerjee

Introducing Paladin: Access Decisions at Machine Speed, With Human Judgment

Featured

PRODUCT

COMPANY

IDENTITY SECURITY

Mar 19, 2026

Shrinjay Muhkerjee

Introducing Paladin: Access Decisions at Machine Speed, With Human Judgment

Featured

PRODUCT

COMPANY

IDENTITY SECURITY

Mar 17, 2026

Anna Hagiwara

Introducing OpalQuery: Ask Your Access Graph Anything

Featured

PRODUCT

Mar 17, 2026

Anna Hagiwara

Introducing OpalQuery: Ask Your Access Graph Anything

Featured

PRODUCT

Mar 13, 2026

Barrett Woodside

10 Recent Breaches that Could Have been Prevented with Modern IGA

Featured

IDENTITY SECURITY

Mar 13, 2026

Barrett Woodside

10 Recent Breaches that Could Have been Prevented with Modern IGA

Featured

IDENTITY SECURITY

Feb 26, 2026

Wei Liu

From Detection to Resolution: How Opal and Rootly Secure On-Call Access

Featured

PARTNERSHIPS

Feb 26, 2026

Wei Liu

From Detection to Resolution: How Opal and Rootly Secure On-Call Access

Featured

PARTNERSHIPS

Feb 25, 2026

Murad Akhundov

Introducing OpalScript: Fully Customizable Access Logic Without the Ops Overhead

Featured

PRODUCT

COMPANY

Feb 25, 2026

Murad Akhundov

Introducing OpalScript: Fully Customizable Access Logic Without the Ops Overhead

Featured

PRODUCT

COMPANY

Dec 2, 2025

Brian Hanson

Stop Choosing Between Fast Incident Response and Secure Access—Run incident.io and Opal

PARTNERSHIPS

Dec 2, 2025

Brian Hanson

Stop Choosing Between Fast Incident Response and Secure Access—Run incident.io and Opal

PARTNERSHIPS

Mar 19, 2026

Shrinjay Muhkerjee

Introducing Paladin: Access Decisions at Machine Speed, With Human Judgment

Featured

PRODUCT

COMPANY

IDENTITY SECURITY

Mar 17, 2026

Anna Hagiwara

Introducing OpalQuery: Ask Your Access Graph Anything

Featured

PRODUCT

Mar 13, 2026

Barrett Woodside

10 Recent Breaches that Could Have been Prevented with Modern IGA

Featured

IDENTITY SECURITY

Mar 19, 2026

Shrinjay Muhkerjee

Introducing Paladin: Access Decisions at Machine Speed, With Human Judgment

Featured

PRODUCT

COMPANY

IDENTITY SECURITY

Mar 17, 2026

Anna Hagiwara

Introducing OpalQuery: Ask Your Access Graph Anything

Featured

PRODUCT

Mar 13, 2026

Barrett Woodside

10 Recent Breaches that Could Have been Prevented with Modern IGA

Featured

IDENTITY SECURITY

Feb 26, 2026

Wei Liu

From Detection to Resolution: How Opal and Rootly Secure On-Call Access

Featured

PARTNERSHIPS

Feb 25, 2026

Murad Akhundov

Introducing OpalScript: Fully Customizable Access Logic Without the Ops Overhead

Featured

PRODUCT

COMPANY

Dec 2, 2025

Brian Hanson

Stop Choosing Between Fast Incident Response and Secure Access—Run incident.io and Opal

PARTNERSHIPS

Subscribe to our newsletter for the latest security news and posts:

FROM OUR CUSTOMERS:

“As agentic AI progresses further and there is more demand from the business to grant significant autonomy to agents, agents will need to be more and more treated as identities.

It will become important to visualize the data and functions agents handle and to be able to deploy circuit breakers, as well as enforce least agency, identify misalignment and to be able to isolate and handle rogue agents. We’re planning to look at the potential to extend the identity security paradigms we’ve built out in Opal for humans to LLM agents as needs arise here.”

Jason Fernandes

VP of Security & Privacy, Mercari

view customer story

"With Opal, we were able to transition quickly to a self-service access model that supports both JIT and Just-Enough-Access (JEA).

This shift not only streamlined our provisioning workflows but also empowered teams with the right level of access, exactly when needed. Once our access data was centralized in Opal, generating user access reviews became effortless.

Opal has allowed us to scale securely and efficiently — transforming what used to be a time-consuming, error-prone process into an automated, auditable, and compliant system.”

Sharon Aby

Senior Manager of IAM, Databricks

view customer story

"Opal helps Elastic protect more of our attack surface than we could before with a small but mighty team. Whether we're speeding up workflows with Slack, orchestrating authorization directly from Terraform, or using the API, Opal has helped us do more with less. In the near future, we're excited to implement Just-in-Time (JIT) access for all of our employees who use GitHub, as well as begin to secure LLMs, service accounts, and other NHIs with Opal."

Mandy Andress

CISO, Elastic

"Opal's Access Review module allows us to provide internal and external auditors with the evidence required for multiple compliances, and provides our Privileged Access Reviewers with the necessary information to make meaningful access decisions. Opal's ability to self-host their solution also allows us to host in our own FedRAMP High environment, thus allowing us to utilize all of their capabilities to harden our FedRAMP resources."

Jack Zaldivar, Jr.

Staff Systems Engineer, Databricks

view customer story

"At Grammarly, Opal enabled us to migrate all access management for over 150 corporate applications and hundreds of production services across two public clouds to a unified employee experience in just a few weeks."

Suha Can

CISO, Grammarly

view customer story

"Opal has improved everybody’s user experience when it comes to access provisioning and access reviews. Not only has it sped up the process significantly for our end users, but it’s also easier for them to have that catalog of what they can get access to.”

Chris Kennington

Security Architect, Obsidian

view customer story

“Access reviews and access management were a tedious time sink for us at Obsidian before we adopted Opal. But unlike a lot of other security products, Opal is one of those rare products that gives us back time to focus on what matters, which is amazing.”

Alfredo Hickman

CISO, Obsidian

view customer story

"Opal fills the sweet spot of being a developer-friendly tool that we can drive solely through APIs and the Terraform provider, while giving us the features we need."

Guy Davies

Principal Cloud Architect, SOPHOS

view customer story

"Implementing Opal was really straightforward. It tracks access logs in one place automatically, so we have peace of mind we're storing everything we need for upcoming audits."

Jim Walnum

DevOps, Coinlist

view customer story

"As Merge continues to scale, it's important our security scales with it. By partnering with Opal, we don't have to worry about access controls anymore. We can focus on our mission to reshape the way businesses integrate."

Gil Feig

CTO, Merge

view customer story

“As agentic AI progresses further and there is more demand from the business to grant significant autonomy to agents, agents will need to be more and more treated as identities.

It will become important to visualize the data and functions agents handle and to be able to deploy circuit breakers, as well as enforce least agency, identify misalignment and to be able to isolate and handle rogue agents. We’re planning to look at the potential to extend the identity security paradigms we’ve built out in Opal for humans to LLM agents as needs arise here.”

Jason Fernandes

VP of Security & Privacy, Mercari

view customer story

"With Opal, we were able to transition quickly to a self-service access model that supports both JIT and Just-Enough-Access (JEA).

This shift not only streamlined our provisioning workflows but also empowered teams with the right level of access, exactly when needed. Once our access data was centralized in Opal, generating user access reviews became effortless.

Opal has allowed us to scale securely and efficiently — transforming what used to be a time-consuming, error-prone process into an automated, auditable, and compliant system.”

Sharon Aby

Senior Manager of IAM, Databricks

view customer story

"Opal helps Elastic protect more of our attack surface than we could before with a small but mighty team. Whether we're speeding up workflows with Slack, orchestrating authorization directly from Terraform, or using the API, Opal has helped us do more with less. In the near future, we're excited to implement Just-in-Time (JIT) access for all of our employees who use GitHub, as well as begin to secure LLMs, service accounts, and other NHIs with Opal."

Mandy Andress

CISO, Elastic

"Opal's Access Review module allows us to provide internal and external auditors with the evidence required for multiple compliances, and provides our Privileged Access Reviewers with the necessary information to make meaningful access decisions. Opal's ability to self-host their solution also allows us to host in our own FedRAMP High environment, thus allowing us to utilize all of their capabilities to harden our FedRAMP resources."

Jack Zaldivar, Jr.

Staff Systems Engineer, Databricks

view customer story

"At Grammarly, Opal enabled us to migrate all access management for over 150 corporate applications and hundreds of production services across two public clouds to a unified employee experience in just a few weeks."

Suha Can

CISO, Grammarly

view customer story

"Opal has improved everybody’s user experience when it comes to access provisioning and access reviews. Not only has it sped up the process significantly for our end users, but it’s also easier for them to have that catalog of what they can get access to.”

Chris Kennington

Security Architect, Obsidian

view customer story

“Access reviews and access management were a tedious time sink for us at Obsidian before we adopted Opal. But unlike a lot of other security products, Opal is one of those rare products that gives us back time to focus on what matters, which is amazing.”

Alfredo Hickman

CISO, Obsidian

view customer story

"Opal fills the sweet spot of being a developer-friendly tool that we can drive solely through APIs and the Terraform provider, while giving us the features we need."

Guy Davies

Principal Cloud Architect, SOPHOS

view customer story

"Implementing Opal was really straightforward. It tracks access logs in one place automatically, so we have peace of mind we're storing everything we need for upcoming audits."

Jim Walnum

DevOps, Coinlist

view customer story

"As Merge continues to scale, it's important our security scales with it. By partnering with Opal, we don't have to worry about access controls anymore. We can focus on our mission to reshape the way businesses integrate."

Gil Feig

CTO, Merge

view customer story

Find out why the best security teams manage access with Opal

Stop Reviewing.

Start Enforcing.

Use Cases

Just-in-Time Access

AI-Powered Access Reviews

Programmable Governance

Access Intelligence

Security for AI Agents

How it Works

Platform

Integrations

Intelligence

Customers

Blend

Databricks

Mercari

Superhuman

All Case Studies

Resources

Resource Center

Documentation

Features

Blog

Media & Press

Events

Glossary

Brand Resouces

Company

About

Careers

Trust Center

Legal

Stop Reviewing.

Start Enforcing.

Use Cases

Just-in-Time Access

AI-Powered Access Reviews

Programmable Governance

Access Intelligence

Security for AI Agents

How it Works

Platform

Integrations

Intelligence

Customers

Blend

Databricks

Mercari

Superhuman

All Case Studies

Resources

Resource Center

Documentation

Features

Blog

Media & Press

Events

Glossary

Brand Resouces

Company

About

Careers

Trust Center

Legal

Stop Reviewing.

Start Enforcing.

Use Cases

Just-in-Time Access

AI-Powered Access Reviews

Programmable Governance

Access Intelligence

Security for AI Agents

How it Works

Platform

Integrations

Intelligence

Customers

Blend

Databricks

Mercari

Superhuman

All Case Studies

Resources

Resource Center

Documentation

Features

Blog

Media & Press

Events

Glossary

Brand Resouces

Company

About

Careers

Trust Center

Legal

Stop Reviewing.

Start Enforcing.

Use Cases

Just-in-Time Access

AI-Powered Access Reviews

Programmable Governance

Access Intelligence

Security for AI Agents

How it Works

Platform

Integrations

Intelligence

Customers

Blend

Databricks

Mercari

Superhuman

All Case Studies

Resources

Resource Center

Documentation

Features

Blog

Media & Press

Events

Glossary

Brand Resouces

Company

About

Careers

Trust Center

Legal