ERErik Rekolainturva.dev·1d ago · 5 min readI rebuilt turva.dev around the reportI have rewritten turva.dev and rebuilt the pages around the work a buyer receives. The home page now leads into two services and their sample reports. Each report shows how an observation becomes a fi00
ERErik Rekolainturva.dev·3d ago · 6 min readWhat 19 identity vendors publish for agentsI measured 19 companies that build digital identity and trust products, wallets and verifiable credential infrastructure, the parts of the stack meant to let one machine prove something to another mac00
ERErik Rekolainturva.dev·3d ago · 5 min readTwo files called auth.md, and they disagree on the field namesWorkOS shipped Agent Auth for AuthKit on 2 September, a way to give the agents you build into your own product short-lived scoped tokens instead of a long-lived API key. Next to it in the same product00
ERErik Rekolainturva.dev·4d ago · 6 min readThirty days after the brief: 210 sites rescanned, four movedEvery brief I send, a short written reading of one company's website that goes out unasked, carries the same promise. Thirty days later I run the same scanner on the same site again and send back what00
ERErik Rekolainturva.dev·4d ago · 5 min readWhat four AI assistants call an agent readiness auditOn 3 September 2026 fifty buyer questions were put to ChatGPT, Gemini, Perplexity and Google AI Mode from an anonymous browser session, one run per question, 193 answers in all. The questions are the 00