Business fundamentals still matter, even in the age of AI.

In this episode of the Inverted Podcast, we sit down with Alex Osterwalder, creator of the Business Model Canvas and founder of Strategizer, to explore what has changed, what hasn't, and why the fundamentals of building a business remain timeless.

We discuss how security companies fit into the Business Model Canvas, why founders struggle with prioritization, and how startups should think about security, privacy, trust, and compliance as they grow. Alex Osterwalder shares practical insights on customer discovery, evidence-based experimentation, and the common mistake founders make by building solutions before truly understanding customer problems.

The conversation also dives into the impact of AI on entrepreneurship, why faster product development does not replace customer validation, and how modern companies can build repeatable innovation systems that continuously create new growth opportunities.

Previous Episodes on Business Model Canvas:

➡️The Inverted Podcast #14: The Business Model Canvas for Security - Part 1: https://youtu.be/rCmu6jqEJ44?si=Bs5x2tukpbMuppca

➡️The Inverted Podcast #15: The Business Model Canvas for Security - Part 2: https://youtu.be/ieuHyaGTvss?si=jCNKjgVi2hBz5vvc

Whether you're building a startup, leading product teams, running a security business, or navigating AI-driven change, this episode is packed with practical advice on creating products customers actually want and businesses that can scale.

🎧 Listen, learn, and join the conversation! 🎧

Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions.

Check out our 🌐website: https://invertedpm.com/

✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management!

✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.

Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/

Music by: Bensound

License code: KQNVJHTWQEBEDSEA

#authentication #passkeys #passwordless #cybersecurity #identity #phishing #fido #webauthn #digitalidentity #aiagents #security #podcast #ai #aisecurity #AI #AIAgents #CyberSecurity #IdentityManagement #OpenAI #MCP #OAuth #FIDO #AgenticAI #SoftwareEngineering #InvertedPodcast #ArtificialIntelligence #SecurityEngineering #DeveloperTools #EnterpriseAI #startup #startuptips #aistartup

As AI Agents Rise, Security Must Come First with Nick SteeleIn this episode of the Inverted Podcast, hosts Jeroen Kemperman, Dana Kaufman, and Dario Salice are joined by Nick Steele from OpenAI to explore one of the most important challenges in AI today: identity, permissions, and security for autonomous agents.

The conversation starts with real-world incidents where AI agents caused major operational issues—including deleting critical resources—and expands into a broader discussion about why traditional security models don't fully apply to AI agents. Nick explains how agents differ from conventional software, why permissions should be tied to tasks rather than identities, and how concepts like least privilege, delegation, human-in-the-loop approvals, OAuth, MCP, FIDO, and emerging identity standards can help organizations safely adopt agentic systems.

Whether you're building AI products, managing enterprise security, or preparing your applications for a future filled with autonomous agents, this episode offers practical guidance on what changes, what stays the same, and how to build for an agent-driven world.

Topics covered:

➡️ Why AI agents behave differently from traditional software

➡️ The risks of over-permissioned agents

➡️ Human-in-the-loop security models

➡️ Delegation vs. impersonation

➡️ Agent identity and access management

➡️ MCP, OAuth, and emerging standards

➡️ How companies should prepare their products for agents

➡️ Designing "happy paths" for AI-driven interactions

🎧 Listen, learn, and join the conversation! 🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions.

Check out our 🌐website: https://invertedpm.com/

✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 

🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/

Bensound

License code: KQNVJHTWQEBEDSEA

#authentication #passkeys #passwordless #cybersecurity #identity #phishing #fido #webauthn #digitalidentity #aiagents #security #podcast #ai #aisecurity #AI #AIAgents #CyberSecurity #IdentityManagement #OpenAI #MCP #OAuth #FIDO #AgenticAI #SoftwareEngineering #InvertedPodcast #ArtificialIntelligence #SecurityEngineering #DeveloperTools #EnterpriseAI

How is authentication changing in a world moving beyond passwords?In this episode of the Inverted Podcast, Jeroen Kemperman and Dario Salice are joined by Vincent Delitz, co-founder of Corbado, to explore the rise of passkeys, passwordless authentication, and what it takes for organizations to modernize their login experience. Drawing on real-world deployments, they discuss the challenges of driving passkey adoption, why phishing-resistant authentication is becoming a regulatory priority, and the business benefits of moving away from passwords.The conversation also looks ahead to the future of identity, including digital credentials, AI agents, and how authentication models may need to evolve as autonomous systems begin acting on behalf of users. From banking and e-commerce to enterprise identity and consumer security, this episode offers insights into one of the most important shifts happening in cybersecurity today.### Chapters00:10 Introduction & What Corbado Does02:13 Going Passwordless in Practice04:39 Trends Driving Passkey Adoption08:01 User Adoption & Authentication UX11:45 Enterprise vs Consumer Authentication15:51 Business Benefits Beyond Security18:29 Why Organizations Hesitate24:40 Digital Identity, Credentials & AI26:19 Authentication in the Age of Agents38:12 Key Takeaways & Closing ThoughtsWho should watch:Security professionals, IAM engineers, CISOs, developers, product managers, compliance teams, and anyone interested in digital identity and AI.🔔 Subscribe for more insights on identity, security, and AI 💬 What do you think about AI agents acting on your behalf?Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!🎧 Listen, learn, and join the conversation! 🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions. Check out our 🌐website: https://invertedpm.com/✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/Music by: BensoundLicense code: KQNVJHTWQEBEDSEA#authentication #passkeys #passwordless #cybersecurity #identity #phishing #fido #webauthn #digitalidentity #aiagents #security #podcast

What security advice is actually helping people stay safe, and what has become outdated “hack lore”?

In this episode of the Inverted Podcast, Jeroen Kemperman, Dana Kaufman, and Dario Salice are joined by Bob Lord (former Yahoo CISO, former Twitter security leader, and founder of Hacklore) to debunk some of the most persistent myths in cybersecurity.

The conversation explores why common advice such as avoiding public Wi‑Fi, using a VPN for everyday browsing, constantly changing passwords, clearing cookies, avoiding QR codes, or worrying about "juice jacking" may no longer reflect how modern attacks actually work. Bob explains how security guidance can outlive the threats it was created to address, creating confusion, wasted effort, and a false sense of security.

The group also discusses Secure by Design principles, why security teams need better data to drive decisions, how passkeys are changing authentication, and what new myths may be emerging in the age of AI.

If you build, market, sell, or use security products, this episode is a practical guide to separating real risk from security folklore and focusing on what truly makes people safer.

Learn more about Hacklore: https://hacklore.org

Who should watch:

Security professionals, IAM engineers, CISOs, developers, product managers, compliance teams, and anyone interested in digital identity and AI.

🔔 Subscribe for more insights on identity, security, and AI

💬 What do you think about AI agents acting on your behalf?

Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!

🎧 Listen, learn, and join the conversation!

🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions.

Check out our 🌐website: https://invertedpm.com/

✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 

🔗 Join the conversation in the Inverted Product Management community on LinkedIn.

Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/

Music by: Bensound

License code: KQNVJHTWQEBEDSEA

#Cybersecurity #Hacklore #Security #SecureByDesign #Passkeys #Authentication #AI #InvertedPodcast #BobLord #CISO #TechnologyPodcast

Product Design for Trust & Safety | Inverted Podcast

In this episode of the Inverted Podcast, special guest Elliott Sainsbury joins co-hosts Dario Salice, Dana Kaufman, and Cristina for a deep conversation about the role of product design in privacy, security, and trust & safety.

Design is more than making interfaces look good or writing clear button text. It shapes how people understand what happens to their data, what choices they’re making, and when they should stop and think before taking action. The group explores how product teams can move beyond dense privacy notices and one-time consent screens toward clearer, more contextual experiences that build trust over time.

Elliott shares insights from his work in content design and enterprise software, including how thoughtful messaging, consistent terminology, and intentional friction can help users make better decisions. Dana reflects on how privacy has evolved in product management, from late-stage checkboxes to upfront considerations shaped by regulation, AI, and changing user expectations. Cristina brings a security engineering perspective, connecting these ideas to secure defaults, threat modeling, least privilege, and the importance of helping engineers build safer products without unnecessary friction.

Topics include:

➡️ Why trust and safety should be part of the product experience

➡️ How to make privacy and security choices clearer for users

➡️ The trade-offs between opt-in and opt-out models

➡️ Why “frictionless” isn’t always the right goal

➡️ How AI is making privacy and product development more complex

➡️ The role of designers, product managers, and engineers in building trustworthy systems

➡️ Why trust has to be maintained throughout the user journey, not just at signup

If you work in product, design, security, privacy, or AI, this conversation is a practical look at how teams can build products that respect users, reduce surprises, and make trust a core part of the experience.

Who should watch:

Security professionals, IAM engineers, CISOs, developers, product managers, compliance teams, and anyone interested in digital identity and AI.

🔔 Subscribe for more insights on identity, security, and AI 💬 What do you think about AI agents acting on your behalf?

Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!🎧 Listen, learn, and join the conversation! 🎧

Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions. Check out our 🌐website: https://invertedpm.com/

✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 

🔗 Join the conversation in the Inverted Product Management community on LinkedIn.

Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/

#IdentitySecurity #Cybersecurity #Passkeys #ZeroTrust #IAM #AIAgents #DigitalIdentity #eIDAS #Privacy #InvertedPodcast

Music by: Bensound

License code: KQNVJHTWQEBEDSEA

Identity is Changing Fast: AI Agents, Passkeys & Digital ID Explained | Inverted Podcast

Digital identity is evolving rapidly — from passwords to passkeys, from users to AI agents.

In this episode of the Inverted Podcast, we break down the biggest trends in identity security, authentication, and authorization, including the rise of AI agents, phishing-resistant login methods, and government-backed digital identity systems like the EU Digital Identity Wallet.

We explore how identity is shifting from static accounts to dynamic, real-time access control, why Zero Trust and runtime security are becoming essential, and what organizations must do to keep up with increasing regulatory pressure and cyber threats.

If you're interested in cybersecurity, identity management (IAM), Zero Trust, AI security, or privacy, this episode gives a clear view of where the industry is headed.

Topics covered:

➡️ Identity security trends in 2026

➡️ Passkeys vs passwords (future of authentication)

➡️ AI agents and delegated identity

➡️ Zero Trust and continuous authentication

➡️ Phishing-resistant MFA and account protection

➡️ Runtime vs static identity controls

➡️ EU Digital Identity Wallet (eIDAS) explained

➡️ Regulatory pressure on banks and enterprises

Who should watch: Security professionals, IAM engineers, CISOs, developers, product managers, compliance teams, and anyone interested in digital identity and AI.

🔔 Subscribe for more insights on identity, security, and AI

💬 What do you think about AI agents acting on your behalf?

Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!

🎧 Listen, learn, and join the conversation! 🎧

Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions.

Check out our 🌐website: https://invertedpm.com/

✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management!

✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.

Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/

Chapters:

00:00 Introduction

00:11 The Acceleration of Identity Change

01:13 From Authentication to Authorization

02:22 AI Agents and Identity Challenges

03:33 The “Identity Debt” Problem

04:32 Runtime vs. Static Security Controls

06:00 Continuous Access & Risk Signals

07:30 Government Digital ID (EU Wallet)

09:10 The Future of Identity & AI Agents

#IdentitySecurity #Cybersecurity #Passkeys #ZeroTrust #IAM #AIAgents #DigitalIdentity #eIDAS #Privacy #InvertedPodcast

Music by: Bensound

License code: KQNVJHTWQEBEDSEA

In this episode of the Inverted Podcast, we dive into one of the most overlooked — and risky — aspects of modern digital systems: account recovery.

Joined by security expert Dean H. Saxe, the conversation explores why recovery isn’t just a backup feature, but often the weakest link in your entire authentication system. From real-world examples of compromised accounts to the surprising ways attackers exploit recovery flows, the team breaks down how even the most secure login systems can fail.

You’ll hear insights on:

➡️ Why account recovery should be treated as a first-class security feature, not an afterthought

➡️ How attackers exploit weak recovery processes instead of breaking strong authentication

➡️ The trade-offs between security, privacy, and accessibility when designing recovery systems

➡️ The real business impact of poor recovery experiences — from lost users to increased costs

➡️ Emerging approaches like passkeys, digital credentials, and identity verification

➡️ Practical advice for both product teams and everyday users to stay protected

Beyond the technical details, this episode highlights the human side of recovery — from frustrated users locked out of their accounts to the real-life consequences of losing access to your digital identity.

If you enjoyed this conversation, don’t forget to like, subscribe, and share for more episodes on security, privacy, cyber abuse, spam, and building better “inverted” products.Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!🎧 Listen, learn, and join the conversation! 🎧Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions. Check out our 🌐website: https://invertedpm.com/✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 🔗 Join the conversation in the Inverted Product Management community on LinkedIn.Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/#securitypm #ProductManagement #riskmanagement #risk #Cybersecurity #InvertedPM #TrustAndSafety #security #abuseprevention #userexperience #hacked #AI #AIsecurity #aigovernance #cybersecurity podcast #tech podcast series #cybersecurity podcasts #cybersecurity podcasts for professionals #technology podcasts #technology podcast #productivity podcasts #startup #cloudsecuritypodcast Music by: BensoundLicense code: KQNVJHTWQEBEDSEA

What makes a company truly incorruptible?

In this special episode of the Inverted Podcast, Jeroen, Dana, and Dario sit down with legendary entrepreneur and The Lean Startup author Eric Ries to explore the ideas behind his new book, "Incorruptible: Why Good Companies Go Bad…and How Great Companies Stay Great"

Together, they unpack why some companies stay true to their values while others slowly compromise under pressure from investors, incentives, and short-term thinking. Eric shares powerful stories from companies like Costco, Cloudflare, and Anthropic, explaining how trust, governance, and long-term purpose can become real competitive advantages—not just ideals.

The conversation also dives into why security, privacy, and safety are often the first things sacrificed in profit-driven environments, and why building them into a company’s DNA from the beginning matters more than ever. If you care about building products, companies, or systems that people can truly trust, this episode is for you.

In this episode, we cover:

➡️The deeper meaning behind The Lean Startup

➡️Why speed without long-term thinking can be dangerous

➡️The core ideas in Eric Ries’s new book, Incorruptible

➡️How companies like Costco and Cloudflare turned principles into strength

➡️Why security, privacy, and safety are essential to trustworthy businesses

➡️How founders, employees, and even job candidates can spot incorruptible organizations

You can find Eric's new book "Incorruptible: Why Good Companies Go Bad…and How Great Companies Stay Great" here:

https://www.amazon.com/Incorruptible-Shape-Companies-That-Stand/dp/B0FWZZBPZB

And at the website: https://www.incorruptible.co/If you enjoyed this conversation, don’t forget to like, subscribe, and share for more episodes on security, privacy, cyber abuse, spam, and building better “inverted” products.

Connect with the hosts and guests with comments on the video or on LinkedIn to continue the conversation!

🎧 Listen, learn, and join the conversation! 🎧

Find us on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio or our website, and leave a message with your thoughts or questions.

Check out our 🌐website: https://invertedpm.com/

✅  Like 👍 and Subscribe for more deep dives into the world of inverted product management! ✅ 

🔗 Join the conversation in the Inverted Product Management community on LinkedIn.

Inverted PM LinkedIn Group: https://www.linkedin.com/groups/12902712/#securitypm

#ProductManagement #riskmanagement #risk #Cybersecurity #InvertedPM #TrustAndSafety #security #abuseprevention #userexperience #hacked #AI #AIsecurity #aigovernance #cybersecurity podcast #tech podcast series #cybersecurity podcasts #cybersecurity podcasts for professionals #technology podcasts #technology podcast #productivity podcasts #startup #cloudsecuritypodcast

Spotify: Music by: Bensound

License code: KQNVJHTWQEBEDSEA