OIDC vs SAML for Enterprise Authentication
Security isn't the real issue—architecture and operational fit are.
Marcus Delacroix-Ng
Contributing Analyst, Data & Risk Standards
Marcus Delacroix-Ng
Marcus Delacroix-Ng worked as a risk consultant for financial-sector clients on data classification and vendor due diligence programs for over twelve years before turning to full-time analysis and writing. His work focuses on the structural standards that organizations need to govern data flowing through automated and agent-driven pipelines.
11 stories
Remote vs Local MCP Server Deployment Trade-Offs
Choosing between local and remote servers sets your security posture before code runs.
Marcus Delacroix-Ng
RBAC vs ABAC vs PBAC for MCP Access Control
Enterprises deploying MCP must choose between access control models the protocol never specified.
Marcus Delacroix-Ng
Secrets Management for MCP Server Credentials in CI/CD
How static credentials expose CI/CD pipelines to automated agent attacks.
Marcus Delacroix-Ng
OWASP Top 10 for LLMs Applied to MCP Deployments
Security risks that MCP vendors underestimated are forcing the OWASP Top 10 for LLMs to evolve.
Marcus Delacroix-Ng
MCP Server Identity Spoofing and Impersonation Attacks
MCP servers can be impersonated at runtime because identity gets approved once but never reverified.
Marcus Delacroix-Ng
Stateful vs Stateless MCP Server Design
Choosing stateful or stateless shapes how your MCP server scales and handles concurrent users.
Marcus Delacroix-Ng
MCP Server Versioning and Breaking Change Management
Date-based versioning tracks breaking changes only, while features shift independently underneath.
Marcus Delacroix-Ng
AI Agent Governance Maturity Models for Enterprises
Most enterprises lack the controls to govern AI agents safely in production right now.
Marcus Delacroix-Ng
AI Agent Identity Lifecycle Management
Most enterprises are already running ungoverned AI agents they don't know exist.
Marcus Delacroix-Ng
Why MCP Governance Decisions Made Now Will Be Hard to Undo
Early choices in MCP governance are now too costly to reverse.
Marcus Delacroix-Ng