Guilliano Molaire
Founder at Skycloak
Guilliano is the founder of Skycloak and a cloud infrastructure specialist with deep expertise in product development and scaling SaaS products. He discovered Keycloak while consulting on enterprise IAM and built Skycloak to make managed Keycloak accessible to teams of every size.
Articles by Guilliano Molaire
The Vendor Risk Brief Your CTO Needs to See
A one-page identity vendor risk brief: the three risks worth five minutes of a CTO's time, the one question to…
Secure Your App with AI: What AI AppSec Can and Cannot Replace in IAM
AI coding agents find bugs and bad configs. They do not replace token issuance, audience checks, step-up, or revocation. Here…
CVE-2026-17526: Keycloak Impersonation Escalates to Realm Admin
CVE-2026-17526 let a Keycloak impersonation-role holder take over a realm admin. Fixed in 26.7.4 on 16 September 2026, and on…
MFA Fatigue and Keycloak: The Real Risk Is Enrollment Abuse
Keycloak 26.x ships no push authenticator, so MFA fatigue lands differently here. The exposure that matters is authenticator enrollment, and…
Shadow AI Agents: Okta’s Endpoint Scan vs Keycloak Inventory
Okta widened shadow AI agent discovery at Oktane 2026. Keycloak has no endpoint scanner, but it owns the chokepoint where…
The US CLOUD Act and Your Keycloak Data: What It Actually Reaches
The CLOUD Act follows the provider, not the datacentre. What that means for Keycloak in the EU, and the questions…
AgentCore Identity Consent Portal vs Keycloak for AI Agent OAuth
AWS now hosts the OAuth consent portal for Bedrock AgentCore agents. What it removes, what it actually couples, and where…
CVE-2026-59822: LiteLLM’s MCP Auth Bypass, and the Second Bug in the Same Fix
CVE-2026-59822 let any fabricated Bearer token open a LiteLLM MCP session. The two separate bugs one pull request closed, and…
ML-DSA Signature Size and the 4 KB Cookie Limit (Keycloak Prep)
ML-DSA signatures run 2,420 to 4,627 bytes against RS256's 256 bytes. The token size math, the 4 KB cookie wall…
Skycloak Shorter Path: Managed Upstream Keycloak for Azure AD B2C Teams
Managed upstream Keycloak for teams exiting Azure AD B2C: no per-MAU billing, exportable realm config, Azure AD SSO recipe, and…