What Good Identity Hardening Looks Like
Huntress, Tuesday, August 25th, 2026
Huntress argues MFA is only the starting line and describes what mature identity hardening involves.
Huntress argues that multi-factor authentication is the starting line for identity security rather than the finish. Attackers can steal credentials and session tokens, abuse trusted devices, or slip through forgotten MFA exceptions that were granted for a legacy application and never revisited.
The post describes what mature identity hardening actually looks like, from systematically closing those MFA exceptions to catching configuration drift before an attacker finds it.
The emphasis is on continuous verification of identity posture rather than treating an MFA rollout as a completed project.