VanishID launches external identity protection at Black Hat

VanishID launched External Identity Protection at Black Hat USA 2026, calling it a continuous control for exposed personal data that attackers use to target executives, employees with privileged access and their families. The company says the tool fills a gap left by traditional identity, endpoint and awareness controls as AI-driven attacks make personal exposure easier to exploit.

Why it matters: - VanishID is pitching External Identity Protection as a new security layer for the personal data attackers use before a breach, not after one. - The company says the product helps reduce risk for executives, board members, high-access employees and families who are exposed outside corporate systems. - VanishID says the control addresses a gap that identity management, endpoint protection and awareness training do not cover.

What happened: - VanishID launched External Identity Protection on Aug. 3, 2026, and plans to show it publicly for the first time this week at Black Hat USA 2026 in Las Vegas. - The platform is described as a continuous security control that finds exposed personal data, removes what it can and neutralizes remaining risk. - VanishID says the launch includes a new External Identity Dashboard.

The details: - External Identity Protection uses four classes of AI agents to detect, analyze, remove and neutralize exposed identity data. - The agents search data brokers, people-search sites, social media, breach and credential dumps, the dark web and public records. - Detection agents use real browsers with vision and page understanding when sites block conventional crawlers. - Analyst agents correlate exposure into a single picture and score who is at risk, why and how urgently. - Remediation agents run opt-out and takedown steps across brokers, people-search sites and social footprints, then verify results and repeat when data returns. - Residual-risk agents monitor exposure that cannot be removed, including breach dumps and public records, and alert the SOC to re-exposure over time. - VanishID says the platform never trains on personal data and is SOC 2 Type II certified. - The system uses domain allow-lists, hard step ceilings and full decision trails, with edge cases routed to a human analyst. - PII stays out of logs and telemetry. - Onboarding requires only a name and a corporate email. - VanishID says the platform runs with no employee effort and no added security headcount. - Customers typically see an 85% reduction in attacker-reachable personal data within 90 days. - VanishID says that includes a 93% drop in data broker profiles. - The company says its agents have removed more than 10 million exposed records for customers. - VanishID says external identity protection complements identity management, identity threat detection and response, endpoint security, email security and security awareness training. - The company says it will continue rolling out the product to existing customers through the year. - Black Hat attendees can see the product at VanishID Booth #5813 from Aug. 4-6 and request a free exposure assessment on one executive. - VanishID says the product is available now. - The company points readers to more information.

Between the lines: - VanishID is framing exposed personal data as attack fuel, arguing that defenders need to reduce that fuel rather than only react to phishing, credential theft and impersonation. - The company is also arguing that internal security tools miss the outside-the-perimeter exposure that attackers use to pick targets and build convincing social engineering campaigns. - The pitch reflects a broader shift toward using agentic AI for security operations, with automation aimed at a problem that changes faster than manual removal workflows can keep up. - VanishID cites Verizon’s 2026 Data Breach Investigations Report, which finds 65% of AI-assisted attacks target people and 35% of breaches start with people through phishing, credential abuse and pretexting. - The company also cites research across 10,000 U.S. executives showing broad exposure, including cleartext passwords on the dark web, deep breach histories and home addresses that are easy to find. - VanishID says attackers can build an entire campaign from that data without touching company infrastructure, which means internal alerts may never fire. - Jim Routh, a six-time former CISO, said converged security should extend to humans through identity security and that agentic deployment enables next-level identity security.

What's next: - VanishID will demo External Identity Protection publicly at Black Hat USA 2026. - The company expects existing customers to receive the rollout throughout the year. - Security teams can request an exposure assessment to see what an attacker can already learn about a target.

The bottom line: - VanishID is betting that the next frontier in enterprise security is not just defending systems, but continuously shrinking the public data that makes people easier to attack.