Agents make it faster to build your own auth, but they don't make it safer. Someone still has to secure, audit, and maintain code no one on the team actually wrote.
• Fabienne Bühler
Reading time • 7 min
We’re building the next iteration of Zitadel in the open. Explore our community roadmap and see how we’re rethinking identity—from getting started in under a minute to enterprise scale and AI-native identity.
AI agents don't need to break in to cause damage. When an agent is handed broad credentials for a narrow task, the identity layer can't tell the difference, and that's a structural problem with how access control was built.
Authentication that starts locally in about a minute, then moves login flows, user schemas, and identity configuration closer to the application workflow, where developers and coding agents can inspect, review, and change them.
ZITADEL joined HSG and Gobugfree at HackingLab Day 2026 to bridge the gap between academic theory and real-world security. From the ethics of hacking and AI vulnerabilities to high-stakes CTF challenges, we explored the evolving threat landscape. Read our highlights on why transparency, proactive incident response, and creative thinking are the keys to a resilient future.
No more naming inconsistencies. Explore ZITADEL’s comprehensive terminology update designed to reduce cognitive load and streamline your integration process without breaking existing APIs.
AI is commoditizing code and collapsing the open source funnel. Discover how Zitadel uses AGPL 3.0 and "risk transfer" to build a sustainable model for infrastructure software in 2026.
Discover how Zitadel's Go-based architecture and flexible caching (Redis, Postgres, In-Memory) deliver low latency and reliability at scale for B2B SaaS
Why Zitadel is Moving Beyond Pure Event Sourcing. To solve the "Performance Wall" and operational complexity, Zitadel is refactoring its storage layer using the Repository Pattern and PostgreSQL. Learn how writing to relational tables first enables fast indexed queries and atomic API responses without losing time-travel forensics.
ZITADEL is breaking the embedded extension sandbox. Learn about the shift to Actions v2, a cloud-native orchestration of programmable, event-driven webhooks that delivers polyglot support, production-grade reliability, and decoupled scaling for your identity system.
