IDMWORKS Aims to Industrialize Identity Security with New AI Accelerator
- 4-in-1 Consolidation: Identity Matrix combines Access Management, Identity Governance, Privileged Access Management, and Source Code Refactoring into a single engagement.
- Backlog Reduction: Addresses application onboarding backlogs that can stretch for years, with some organizations facing hundreds of unintegrated applications.
- Compliance Alignment: Generates audit-ready Chain of Evidence for frameworks like SOX, NIST, PCI, and HIPAA.
Experts would likely conclude that IDMWORKS' Identity Matrix represents a significant step toward industrializing enterprise identity security, offering a streamlined, AI-driven solution to long-standing inefficiencies in application onboarding and governance.
IDMWORKS Aims to Industrialize Identity Security with New AI Accelerator
LAS VEGAS, NV – June 17, 2026 – For decades, a fundamental process in enterprise security—connecting applications to corporate identity systems—has remained a stubbornly manual, expensive, and fragmented affair. Today, the professional services firm IDMWORKS announced a direct assault on this problem with the launch of Identity Matrix, a proprietary, patent-pending delivery accelerator designed to industrialize what it calls information security's "last unindustrialized layer."
The new service-based offering consolidates what has historically been four separate, costly projects—Access Management, Identity Governance, Privileged Access Management, and Source Code Refactoring—into a single, unified engagement. By doing so, IDMWORKS claims it can drastically reduce the cost and time required to secure enterprise applications, finally making comprehensive identity coverage an attainable goal for large organizations.
The High Cost of a Broken Process
At the heart of the issue is application onboarding. For over thirty years, integrating a single application into a company's identity infrastructure has been a bespoke, handcrafted process. It often requires multiple specialized teams working on separate timelines and budgets, leading to programs that stretch across years and cost tens of millions of dollars. The result, as highlighted by IDMWORKS and confirmed by industry research, is a significant security and compliance gap. Most enterprises have fewer than a third of their applications fully governed, leaving them unable to answer the basic question: "who has access to what?"
This challenge is well-documented. Industry analysts have long pointed to the high failure rate of Identity Governance and Administration (IGA) projects, which are often derailed by underestimated complexity, poor data quality, and the sheer volume of manual work. A common phenomenon known as "reviewer fatigue" sees managers rubber-stamping 75-90% of access requests, rendering security controls ineffective. The bottleneck for onboarding applications can be so severe that some organizations face backlogs of hundreds of applications, with integration timelines stretching out for years, diminishing the value of their expensive identity software investments.
"For thirty years, identity has been enterprise information security's last unindustrialized layer," said Paul Bedi, CEO of IDMWORKS, in a statement. "Deployment industrialized through CI/CD. Infrastructure industrialized through code. Identity didn't... every new application reset the clock on the same hand-built onboarding work. IDMWORKS is revolutionizing that part of history."
An Industrialized Workflow with a Human Touch
Identity Matrix's core innovation is a patent-pending AI workflow that orchestrates the entire onboarding process across multiple domains simultaneously. In a single, coordinated motion, the system is designed to onboard an application to a client's existing Access Management (like Okta or Ping Identity), Identity Governance (SailPoint, Saviynt), and Privileged Access Management (Idira/CyberArk, Delinea) platforms.
Critically, the process includes a fourth component often left to separate, expensive modernization projects: Source Code Refactoring. The accelerator analyzes application code to externalize authentication, remove hardcoded credentials, and enable modern standards like OIDC. This operational innovation tackles the problem at its root, rather than simply wrapping controls around legacy code.
"What makes this hard is not running an automated workflow," explained Bill Willis, the company's CTO. "It is running it across Access Management, Identity Governance, and Privileged Access at the same time, while refactoring application source code, checking that code... and discovering accounts and machine identities the customer did not know they had."
Despite the reliance on AI, the company emphasizes that every stage of the workflow includes human-in-the-loop review and approval. This hybrid model is increasingly seen by experts as a best practice for deploying AI in high-stakes environments, ensuring that the efficiency of automation is balanced with human judgment and accountability. The entire process generates a complete, audit-ready Chain of Evidence, aligning with major compliance frameworks like SOX, NIST, PCI, and HIPAA.
Closing Gaps Beyond Onboarding
The accelerator's capabilities extend beyond simple integration. As part of its single workflow, Identity Matrix performs security checks on application code, scanning for vulnerabilities against the CVE database and other security best practices. This embeds application security vetting directly into the identity lifecycle.
Furthermore, it addresses two of the most significant blind spots in modern enterprise security. First, it discovers privileged accounts that fall outside traditional definitions like 'admin' or 'root'. By identifying any account with access to sensitive data, it closes the long-tail risk gap that standard PAM tools often miss. Second, it discovers and classifies the burgeoning world of non-human and machine identities—service accounts, API credentials, and even AI agents. This is a critical capability in an era where machine identities are projected to vastly outnumber human ones, yet often operate with little to no governance.
A Service Model in a Crowded Market
IDMWORKS is not the first to offer a solution to speed up application onboarding. Competitors, including other service providers and the identity vendors themselves, offer various forms of 'accelerators' that promise to reduce onboarding time and costs. However, IDMWORKS is differentiating itself through its comprehensive scope and its business model.
Identity Matrix is not software that clients buy or license. Instead, it is a tool operated by IDMWORKS consultants as part of a service engagement. The firm, a platform-neutral specialist since 2004, uses the accelerator to deliver outcomes on top of a client's existing, multi-vendor identity ecosystem.
"Customers do not buy Identity Matrix from IDMWORKS," stated Jason Bonds, Chief Revenue Officer. "They engage us, and they get the speed and economics the Matrix makes possible. That is an outcome that our competitors cannot deliver."
By packaging technology into a service that solves a complex operational problem, IDMWORKS is betting that customers are more interested in buying a solution to their coverage gap than another tool. If successful, this industrialized, outcome-based approach could set a new standard for how identity services are delivered, moving the industry away from fragmented, project-based work and toward a model of continuous, comprehensive security.
📝 This article is still being updated
Are you a relevant expert who could contribute your opinion or insights to this article? We'd love to hear from you. We will give you full credit for your contribution.
Contribute Your Expertise →