The Threat Landscape Just Changed. Has Your Identity Program?

By Benny Porat, Co-Founder and CEO

Overview#

Project Glasswing represents a fundamental shift in cybersecurity dynamics. An advanced AI model discovered thousands of zero-day vulnerabilities across major operating systems and browsers-some dormant for decades-in a matter of weeks. This capability demonstrates that offensive AI has reached a threshold requiring an equivalent defensive response.

The Core Problem#

Traditional identity and access management programs operate on human-driven timelines: quarterly reviews, week-long ticket resolution, post-audit remediation. This temporal gap, once merely inefficient, now poses a genuine security risk.

Common failure patterns show that access reviews get completed while risk does not change, and IGA platforms go live while access still drifts. These represent execution gaps rather than tool inadequacies.

Notably, over 99% of the vulnerabilities Glasswing has found remain unpatched because discovery outpaces remediation capacity. The same dynamic threatens identity programs.

The Solution Framework#

Rather than accumulating dashboards and alerts, organizations need AI-driven execution that matches threat velocity. This means automated systems that:

• Resolve orphaned accounts with business input
• Correct access drift autonomously
• Complete review cycles while maintaining human oversight

Twine’s Approach#

The company has developed “Alex,” an AI Digital Employee that learns organizational context, approval workflows, and business policies. Alex then executes identity management tasks-ticket resolution, data cleanup, access reviews-with human-in-the-loop controls.

Deployment typically reaches production within three weeks, with customers reporting accelerated remediation of long-standing issues.