In the fast paced API evolution, the actors consuming our APIs are no longer just humans. We’re entering a realm where autonomous agents connect, perhaps with permissions lingering long after their purpose, and ephemeral processes appear and vanish in an instant.

This session unpacks the emerging security challenges brought on by AI clients, smart recipients, and short-lived workloads. Through the lens of ghosts, zombies, and robots, we’ll explore how OAuth can be adapted to protect privacy, reduce risk, and restore control in an increasingly non-human internet.

Join me for a journey through the shadows of modern API security—and learn how to secure what’s no longer visible, controllable, or even alive.