Alex Bovee
CEO, C1
Alex Bovee is co-founder and CEO of C1. Prior to C1, Alex was a product leader at Okta, where he led Zero Trust and security products and oversaw the launch of several new products. He's energized by beautiful, effortless product experiences, making customers smile, and playing guitar and backup vocals in his family band.
LinkedIn38 articles by Alex Bovee
BlogThe OpenAI–Hugging Face Attack and the Third Generation of Authorization
AI agents broke the unwritten assumption behind zero trust: that a human with judgment sits behind every credential. Why authorization has to move to the moment of action.
BlogC1 Launches Enterprise-Managed Authorization for MCP
C1 now supports enterprise-managed authorization, the open MCP standard for governing how AI agents access enterprise tools.
BlogWhy C1 Added Usage-Based Pricing
C1 offers predictable Platform pricing and usage-based Flex through one product system. Here is why both buying models matter when people and agents share enterprise systems.
BlogC1: The Headless Identity Infrastructure
Announcing the C1 Headless Identity Infrastructure — one identity graph, API-first everything, inline authorization, continuous governance, and an open connector fabric. Built for the era of agents.
BlogWe Are C1
Today, ConductorOne becomes C1. A new name for a new era of identity — one where AI agents outnumber humans and the identity platform must govern both.
- Blog
The Fastest Path to AI Is Now the Safest Path: Introducing AI Access Management by C1
Today, we're announcing AI Access Management: a unified control plane for managing access to AI tools and data used by employees, in personal assistants, and enterprise agents.
- Blog
Why IAM, IGA, and PAM Break in the Agentic Enterprise
Identity built for humans can’t govern autonomous AI. Learn why IAM, IGA, and PAM break in the agentic enterprise and what a modern identity control plane must look like.
- Blog
Defining the Agentic Enterprise
The agentic enterprise is reshaping how work gets done. C1 CEO Alex Bovee explains why humans are becoming managers of AI agents, why identity becomes the control plane, and what organizations must rethink to scale automation without losing security or governance.
- Blog
C1, the Identity Security Platform of the AI Era, Raises $79M Series B
C1 has raised $79M to lead the next era of identity security—replacing legacy identity tools with an AI-native platform that secures every human, machine, and AI identity at enterprise scale. Learn how we unify access, automate governance, and deliver real security outcomes for the modern enterprise.
- Blog
Is Enterprise SaaS Dying?
AI won’t kill enterprise SaaS—but it will force it to evolve. Learn why the real value in SaaS lies beyond code, and how platformization, expertise, and agentic AI will separate the winners from the rest.
- Blog
The Growing Threat of AI-Driven Social Engineering
Social engineering is a broad term used to characterize a set of tactics and techniques used to manipulate individuals into divulging confidential information or performing sensitive actions. These attacks have been around for years, but with the emergence of AI, the sophistication and volume of these attacks has only increased. Dive into how generative AI is going to increase the threat of social engineering, and how organizations can protect themselves against it.
- Blog
NYDFS 23 NYCRR 500 and Least Privilege Access
Earlier this year, amendments were made to the NYDFS 23 and NYCRR 500. Both changes reflecting a response to the significant growth in cybersecurity threats. Learn more about the these amendments, how they're related to the principle of least privilege, and how organizations can ensure compliance with them.
- Blog
Five Takeaways from the Snowflake Attack
Breaches are far from uncommon in the cybersecurity landscape, however, each incident can serve as a learning experience. The recent Snowflake attack serves as a similar scenario. Dive into C1 CEO Alex Bovee's thoughts on how this breach came to happen, what we can learn from it, and the best steps companies can take moving forward to prevent reoccurrences.
BlogC1 Named a Fortune Cyber 60 Company
We’re honored to announce that C1 has been named a Fortune Cyber 60 company! This recognition underscores the dedication of our team, our traction in the market, and the strong, enduring relationships we’ve built with customers. Everyone at C1 is grateful to Fortune and Lightspeed for this prestigious accolade!
- Blog
Introducing the First AI Assistant for Identity Governance: C1 Copilot
Announcing C1’s Access Copilot, an AI assistant that changes the game for traditional identity governance. Copilot provides recommendations and automation that streamline your business and keep you more secure.
- Blog
Traditional PAM is Dead, Long Live Just in Time Access
For the modern, cloud-forward company, strategies for securing infrastructure and identity are changing at a breakneck pace. MFA and trditional PAM are not sufficient for securing access in the cloud. Dive into the future of PAM through least privilege and JIT access in this blog.
- Blog
Announcing Our Felicis Led Series A Expansion to $27M
We are thrilled to share that C1 has expanded our Series A funding to 27M, led by venture capital firm, Felicis. Learn about all of the amazing people who helped us get here and our plans for future growth.
- Blog
Announcing Cloud Privileged Access Management
Introducing Cloud PAM: our developer-first solution for security engineering teams to manage privileged access and grant temporary elevated access while securing the most sensitive resources and mitigating privilege abuse, as-code, from a unified access control plane. Learn all about CPAM and why we built it here.
- Blog
C1 … 2.0: An update to our values.
With great thought and consideration, we have debated, collaborated, and eventually refined our company values and are excited to share our updated version!
BlogReimagining Identity Governance
Alex Bovee had the opportunity to speak with Lisa Cook from ISACA to discuss all things identity. Hear the full recording and learn more about their views on modern businesses and bridging the gap between compliance measures and security outcomes.
- Blog
How to Roll Out Passkeys and Block Phishing Attacks
Moving to phishing and social engineering proof authenticators is a must. One of the most effective ways to implement this is through physical passkeys. In this practical guide, learn more about the key steps to roll out physical passkeys for your company.
- Blog
Making Sense of the Users, Accounts, and Access in your SaaS and IaaS Apps with a Unified Directory
We have taken identity a step further with our new feature - unified directories! Learn more about how this new feature provides a single, consolidated source of truth for all humans that interact with your organization.
- Blog
When Attacks Go … Well? Key Takeaways From the Reddit Hack
Phishing has become increasingly prevalent, as seen in Reddit's account compromise last week, and standing privileges and sensitive access pose significant risks. We need to shift to zero standing privileges to secure our access and infrastructure.
- Blog
SOC2 and Least Privilege Access Control
Least privilege access control has become the guiding principle for granting ass for SOC 2 compliance, but it can seem daunting to tackle this challenge with so much gray area. Learn how can you practically implement least privilege access controls.
- Blog
ChatGPT and How AI will Impact Security
Thoughts on ChatGPT, AI, and the long ranging security impacts - especially to phishing and social engineering based attacks.
BlogBaton and the Journey to Identity Security and Unified Access Control
To realize our vision of securing workforce identity, we needed to be able to connect to any technology, anywhere – and this required a new approach. Baton is our answer.
- Blog
Birthright Access is Broken
Birthright access is an anti-pattern for secure, least privilege access control.
- Blog
Automating Compliance Controls to Achieve Least Privilege Access
Modern security teams are automating traditional compliance controls to reduce the risk posture for an organization – what we're calling security-led governance.
- Blog
Implementing Least Privilege Access: Tailscale + C1
C1 gives you the power to automate Tailscale access requests, build custom automated access review workflows, and pull audit reports in a few clicks.
- Blog
Buckle Up! C1 Raises $15M In Series A Funding to Solve Identity Security Challenges
We are thrilled to share that C1 has raised our Series A.
- Blog
Announcing our SOC2 Type 2 Certification
We are proud to announce that C1 has received SOC2 Type 2 certification.
- Blog
Least Privilege Access: What You Need to Know
As one of the core tenants of zero trust, least privilege access is probably the least understood and the hardest to reach today. At the highest level, think of least privilege access as providing people – or identities more generally – the access they need to do a job, and for no longer than they need it.
- Blog
Access Control: Taming Group Sprawl
IT, Security, and GRC teams have long held a love-hate relationship with directory groups. Groups enabled companies to scale permissions for a time, but the proliferation of directory groups is now causing major headaches for security.
- Blog
4 Tips for Crafting Your Startup’s Values
Company values are critical to early-stage startups. Here are four tips that helped guide C1.
- Blog
What’s Next for Zero Trust?
Zero Trust is accepted as a superior technical security architecture for the world outside of the corporate network. So what comes next?
- Blog
Announcing C1’s $5M Seed Funding
Today we’re announcing that C1 has secured $5M in seed funding, in a round led by Accel, and joined by Fuel Capital, Active Capital, and Fathom Capital.
- Blog
The Company We’re Building at C1
At C1, we've wanted to be intentional from day one, especially about our company values.
- Blog
Hi, We're C1
<p>We’re excited to tell you about our new company: C1. We’re on a mission to unify permission management for the web and modern infrastructure. </p>