Zsolt Varga

At Riptides, we’re building identity first security for non human workloads, enforced below the application layer. The goal is simple: eliminate implicit trust and make security decisions verifiable in real systems. Most infrastructure security fails quietly, long before an incident ever shows up in a dashboard. I’ve seen identity reduced to shared tokens, internal traffic treated as safe, and enforcement pushed to the edges of systems because it’s easier, not because it’s more effective. I don’t think identity is a static artifact. I see it as a continuously evaluated claim based on runtime context and provenance. Contrary to popular belief, credentials are just evidence, not identity itself. If you’re thinking about non human identity, zero trust beyond the edge, or how these models break down with autonomous systems, I’m always happy to compare notes. Feel free to connect.