AI agents don't need to break in to cause damage. When an agent is handed broad credentials for a narrow task, the identity layer can't tell the difference, and that's a structural problem with how access control was built.
• Fabienne Bühler
Reading time • 9 min
Authentication that starts locally in about a minute, then moves login flows, user schemas, and identity configuration closer to the application workflow, where developers and coding agents can inspect, review, and change them.
• Florian Forster
Reading time • 8 min
Florian outlines Zitadel's 2026 vision: simplifying multi-tenancy, unifying the management hub, and standardizing APIs. Read how your feedback is driving our evolution into a rock-solid, open-source identity standard.
• Florian Forster
Reading time • 3 min
ZITADEL joined HSG and Gobugfree at HackingLab Day 2026 to bridge the gap between academic theory and real-world security. From the ethics of hacking and AI vulnerabilities to high-stakes CTF challenges, we explored the evolving threat landscape. Read our highlights on why transparency, proactive incident response, and creative thinking are the keys to a resilient future.
No more naming inconsistencies. Explore ZITADEL’s comprehensive terminology update designed to reduce cognitive load and streamline your integration process without breaking existing APIs.
AI is commoditizing code and collapsing the open source funnel. Discover how Zitadel uses AGPL 3.0 and "risk transfer" to build a sustainable model for infrastructure software in 2026.
Discover how Zitadel's Go-based architecture and flexible caching (Redis, Postgres, In-Memory) deliver low latency and reliability at scale for B2B SaaS
Why Zitadel is Moving Beyond Pure Event Sourcing. To solve the "Performance Wall" and operational complexity, Zitadel is refactoring its storage layer using the Repository Pattern and PostgreSQL. Learn how writing to relational tables first enables fast indexed queries and atomic API responses without losing time-travel forensics.
ZITADEL is breaking the embedded extension sandbox. Learn about the shift to Actions v2, a cloud-native orchestration of programmable, event-driven webhooks that delivers polyglot support, production-grade reliability, and decoupled scaling for your identity system.
OpenID Connect is supposed to be universal. So why does your auth integration keep crashing? We dive into the annoying reality of spec violations from major providers like Entra ID, Auth0, and Cognito, and how Zitadel solves them.
We are proud to share a big milestone in our mission to provide the most secure and developer-friendly identity infrastructure for modern B2B SaaS companies. Zitadel has officially achieved SOC 2 Type II certification! As an open-source solution built to solve complex multi-tenancy and authentication and authorization challenges, we know that security is the bedrock of your product. This attestation provides independent validation that our internal controls - protecting everything from secure logins to audit trails - are operating effectively.
ZITADEL Cloud, Public Cloud, or Self-Hosted? Discover the right deployment model for your infrastructure and learn why Docker Compose is recommended for development but not production.
ZITADEL's participation in the GitHub Secure Open Source Fund, accelerating security practices and fostering collaboration within the open-source community. Highlights include insights from GitHub's security teams, enhanced tooling, and a proactive security mindset.
