May 2026 Summaries

Ory, a leading customer identity and access management (CIAM) platform, has appointed Greg Vesper as Chief Product Officer to enhance their delivery of developer-first, open-source identity solutions. With a background in both startups and large enterprises, Vesper aims to address the challenges organizations face with CIAM at a web scale and agent IAM security. His role focuses on integrating identity solutions into the developer tool ecosystem, enabling secure and scalable identity management. CEO Jeff Kukowski highlighted the industry's need for better agent identification and authorization to address security risks. Vesper believes Ory can provide a robust solution by embedding standards-based agent controls into development and runtime environments, which will secure current and future agent deployments. Ory manages over 2.5 billion identities and supports a significant portion of the world's top websites, offering flexible and enterprise-grade security solutions backed by notable investors.

Ory has successfully achieved ISO/IEC 27001:2022 recertification, reinforcing its longstanding commitment to rigorous security controls as an integral part of its identity security framework. This accomplishment reflects Ory's dedication to a security-first culture, which has been maintained since the company first attained ISO 27001 certification three years ago. The recertification, verified through an independent assessment by BARR Certifications, highlights Ory's continuous improvement approach to security, particularly within the evolving landscape of Identity and Access Management (IAM) and the challenges posed by agentic AI. This certification not only strengthens Ory's infrastructure for protecting sensitive data but also offers its customers reduced compliance burdens, verified processes, and proactive risk management. Ory's security framework extends beyond a single certificate, incorporating open-source transparency, continuous monitoring with tools like Vanta, and comprehensive adherence to other frameworks such as SOC 2 Type 2 and PCI DSS, all accessible through the Ory Trust Center.