August 2025 Summaries

AuthZed is celebrating its 5th anniversary and marking this milestone by launching AuthZed Cloud, a new iteration of its authorization infrastructure. While reflecting on the journey of building a startup that has successfully reached five years, the company emphasizes the importance of making its powerful authorization solutions more accessible. AuthZed Cloud builds on the capabilities of AuthZed Dedicated by offering a self-service product that allows companies to easily register, deploy, and manage their authorization systems without lengthy procurement processes. Key features include self-service registration, granular access controls, and usage-based billing, which make AuthZed's enterprise-grade technology more attainable for a wider range of companies. Despite using a shared control plane, AuthZed Cloud maintains high isolation standards, ensuring scalability and reliability. The early access reception has been positive, with long-time customers transitioning to the new platform due to its affordability and the ease it provides in managing permissions. As AuthZed looks forward, the company remains committed to solving the complex challenges of authorization in modern software development, making it accessible to teams of all sizes.

The text discusses an attempt to predict the upcoming OWASP Top 10 list of the most critical security risks to web applications, using CVE data from 2022 to 2025. The OWASP Top 10, updated periodically, is crucial for organizations prioritizing security. The author, not a data scientist but an enthusiast, used CVE data to map vulnerabilities to OWASP categories. The analysis revealed that "Broken Access Control" and "Injection" had the highest occurrences, suggesting they will likely feature prominently in the new list. The author predicts that the top five categories will include "Software and Data Integrity Failures," "Security Misconfigurations," "Insecure Design," "Injection," and "Broken Access Control," with the latter expected to be particularly significant due to the increasing integration of AI in production systems. However, the author acknowledges that the OWASP methodology also considers factors beyond frequency, such as severity and community input, which were not accounted for in this analysis.

At the Secure Minds Summit in Las Vegas, experts discussed the dual potential and risks of AI in security and application development, particularly focusing on the importance of permissions and access controls. AI agents, if not properly managed, can inadvertently access sensitive data, leading to potential chaos within organizations. The need for robust permissions systems is crucial to ensure AI agents only access data they are authorized to use, aligning with organizational policies. AuthZed has developed an Authorization Infrastructure for AI designed to respect permissions, prevent data leaks, and provide audit trails, powered by the open-source project SpiceDB. This infrastructure supports high-performance demands of AI with billions of access control lists and millions of authorization checks per second, ensuring global replication across data centers. AuthZed's solutions are geared towards maintaining secure, scalable, and efficient AI operations.