Identity security has become a fundamental part of enterprise cybersecurity, yet many organizations continue to struggle with implementing the tools they already have. From legacy applications to fragmented processes and a lack of internal coordination, businesses often fail to get the full value of their identity security investments. During a recent appearance on CNBC’s Business Minute, Yossi Barishev, Co-Founder of Way Security, discussed why this gap persists and how his company aims to address it.
“95% plus of all breaches happen because we fail at the basics,” Barishev said during the interview. “It’s not something novel. It’s not something exotic.”
His observation points to a persistent challenge for security teams. While organizations continue investing in advanced cybersecurity technologies, foundational identity controls can remain incomplete. Single sign-on (SSO), multi-factor authentication (MFA), and other identity tools are widely available, but deploying them consistently across an enterprise is often more complicated than purchasing the technology.
The Identity Security Implementation Gap
Founded in 2025, Way Security works with businesses across the United States and Europe, including Fortune 500 companies, healthcare organizations, and financial institutions. Its focus is helping enterprises integrate identity security tools across their applications and ensure existing identity infrastructure is being used to its fullest potential.
As Barishev explained during the CNBC interview, organizations frequently have the necessary identity providers in place but struggle to extend their capabilities across every application and business function.
“There are literally zero enterprises on the planet that have fully utilized their identity provider,” he said.
The reasons vary from one organization to another. Some companies rely on legacy applications that are difficult to retrofit to support modern identity providers. Others encounter internal resistance or a lack of business buy-in when trying to bring additional applications under the security team’s oversight.
These challenges create a gap between what identity platforms are capable of delivering and what organizations actually achieve. Even when the technology is available, the work required to connect applications, coordinate stakeholders, and operationalize security controls can become a lengthy process.
Moving Beyond Tools to Execution
For Way Security, addressing this problem means taking on much of the implementation work that traditionally falls on enterprise security and IT teams.
Rather than simply providing another identity security product, the company wants to help organizations complete the process of implementing and operationalizing the tools they already own. This includes addressing integration challenges, working across business functions, and ensuring identity controls are properly deployed throughout the enterprise.
“The beauty of identity security is everyone needs it. Everyone probably underachieves in it,” Barishev said.
That underachievement is particularly significant for large organizations, where hundreds or thousands of applications may need to be accounted for. Each application introduces potential implementation requirements, dependencies, and coordination challenges. Without a systematic approach, even organizations with substantial security budgets can leave gaps in their identity infrastructure.
Way Security’s approach is built around reducing that operational burden and helping customers reach a more complete identity security deployment.
Building Toward an End-to-End Identity Security Platform
Barishev also outlined a broader ambition for the company: becoming a comprehensive platform that helps enterprises manage the work required to achieve identity security maturity.
“We want to be the world’s first platform in identity security to really help our customers cross the finish line properly,” he said.
He added that Way Security wants to move away from a model in which customers must continually assign personnel to manage implementations and ensure tools are operationalized.
“Instead of dealing with assigning people on the job, making sure they operationalize the tool, we want to become the one-all-end-all solution.”
This ambition reflects a broader opportunity in enterprise cybersecurity. As organizations accumulate more security technologies, the challenge increasingly involves making those investments work together effectively. Identity security is a particularly important example because it touches employees, applications, infrastructure, and business operations.
Barishev reinforced the company’s position that existing identity security solutions have often fallen short, leaving organizations caught in costly and prolonged implementation cycles.
Helping Enterprises Reach the Identity Security Finish Line
The central message behind Way Security’s approach is that buying identity security technology and successfully implementing it are two different things. Enterprises may already have the platforms, licenses, and security teams necessary to establish stronger identity controls, but the complexity of integrating those capabilities across their environments can prevent them from realizing their full potential.
For Barishev, closing that gap represents an opportunity to rethink how identity security is delivered. Instead of leaving organizations to navigate endless implementation projects, Way Security wants to provide a more complete solution that takes responsibility for helping customers achieve their intended outcomes.
As identity continues to underpin access across enterprise environments, the ability to fully implement and operationalize identity controls will remain an important part of reducing exposure to preventable breaches. Way Security is positioning itself around that challenge, with the goal of helping businesses finally cross the identity security finish line.
John Kevin Hao is a news and feature writer covering cybersecurity, technology, and business targeted for professional audiences.