Insights
Research and writing from the team building Mimoto
Everything Mimoto publishes, in one place. Free to read, download, and share. No sign-up form.
Every white paper tells you who it is for and where it fits, with a summary and the full paper to read here or download.
Featured white paper
Defending Against Agentic AI Attacks
AI has crossed from advising attackers to running the attack itself. This paper walks through the mechanics of an agentic attack, the five risks agentic AI puts in front of every security team, and a practical five-step framework you can begin applying now.
Summary
- AI now runs attacks instead of advising them.
- An agentic attack runs in five steps, which means five chances to catch it.
- Agentic AI brings five risks, from impersonation at scale to unmonitored sessions.
- A five-step framework security teams can start applying now.
White papers
-
Mimoto white paper Beyond the Login: Mimoto for Financial Services
A credential is not a person. This paper shows how continuous, passive verification confirms the right person in every session…
Download Beyond the Login: Mimoto for Financial Services (PDF, opens in a new tab)
-
Mimoto white paper Closing the Identity Gap
IAM, SIEM, and behavioral analytics authenticate credentials, not people. This paper explains why identity-based attacks keep succeeding despite billions in…
-
Mimoto white paper Extending Zero Trust Through Continuous Identity Assurance
Most Zero Trust architectures verify the person once, at login, then trust the session token from that point on.
Download Extending Zero Trust Through Continuous Identity Assurance (PDF, opens in a new tab)
From the blog
-
Beyond Zero-Trust in an Agentic World
Chris Roberts, Global Field CTO at WWT and CISO Advisor to Mimoto, on why Zero Trust checks a moment while the actor keeps changing…
-
Is That a Person or an Agent?
A Login Cannot Tell You.Agents now run under people’s credentials, and many never sign in at all. A login proves a credential was valid. It cannot say whether…
-
Agent Governance Is Not Agent Defense
Agent governance manages the agents you chose. Agent defense catches the ones you did not, and the people and sessions they impersonate. You need…
-
SASIG Financial Services
26 November 2026
Schedule to meet with Mimoto CEO Kris Bondi at the SASIG Financial Services event in London.
In the news
Why Modern Cybersecurity Must Focus on People, Not Passwords
Kris Bondi in CIO Influence.
Security in the AI Age Requires Being Just as Innovative as Bad Actors
Kris Bondi in Cyber Technology Insights.
Glossary
Plain definitions of the terms that come up when you verify the person, not the credential.
Frequently asked questions
What Mimoto is, how it works, privacy, deployment, and the threats it catches.
See where the gap sits in your environment
Every paper here comes from the team building Mimoto. Bring your questions, and we will walk through what the papers mean for your environment.

