So if we, as you said, if we think of MCP just another tool that gives access to resources, to anything that can be behind such an MCP server, so is it not an MCP vulnerability, in air quotes, but something where we see that it's just the focus point, the crystallization point for security problems that... come from mcp or do not so what is is mcp a new kind of security problem or is it just a new focal point where they happen

well again matthias you are hitting kind of the nail on the head and you are scratching a huge itch i had we discussed it earlier as well like People love inventing new labels for old things because labels sell.

Of course, if you can say, hey, we have just launched an MCP security product, you have to buy to protect yourself from all these fascinating new problems.

Sure, people would fall for it.

But if you are following coping equals year-long kind of advice and say, stop looking at labels, look at functionalities and capabilities behind.

Then yes, MCP is just a new standard, a new protocol, if you will.

But it's essentially a wrapper for existing things.

But what would be something that a developer, an application owner, a system provider, a system owner would have to do? How does that look in practice?

Does that work? Well,

this is absolutely a great idea, and this is absolutely the right kind of thinking, but you have to temper your expectations very strongly.

First of all, just kind of to give you some background, I was born in the country which doesn't exist anymore, the Soviet Union.

So I experienced it firsthand as a child.

What is it? What does it mean to be technologically sovereign to an extreme? We do have other countries having the same struggle in the more recent years.

To put it plainly, it is simply impossible for multiple reasons.

First of all, it takes huge amounts of investments and decades of research, throwing a lot of resources at just getting as good as your competitors.

But what should an organization that is listening right now to you and me, what do they need to do next Monday morning to actually embark on a journey towards sovereignty and resilience? Because the reasons to do that, they are still good ones, right?

Were we right?

Again, there is no simple answer to this question.

We were right, and I guess everybody is right in a way that everybody is now talking about AI as if it's the coolest and the biggest thing in the world, which it probably is for a lot of use cases, but it's definitely not the only thing in the world.

And unfortunately, it's not even the thing which the markets have already solved.

So now that we are looking at the actual findings and can do some calculations and derive some statistics, I can give you some observation.

So absolutely, NHI and AI agentic

identity

right.