HNHacker News
TopNewBestAskShowJobs

guptadeepak

65 karma · joined August 29, 2014

Serial Entrepreneur/Founder, Building GEO Platform @GrackerAI. Previously CIAM platform to 1B+ users. Writing at guptadeepak.com
submissionscomments
guptadeepak··on Only 11% of domains get cited by both ChatGPT and Perplexity (680M citations)
Author here. I co-founded GrackerAI, which monitors AI citations for B2B companies, so I have a bias worth disclosing upfront.

The core finding that surprised me: we looked at cross-platform citation data and the overlap between engines is tiny. - Only 11% of domains get cited by both ChatGPT and Perplexity. - Less than 1% for specific queries. - Perplexity leans heavily on Reddit (47% of top citations). - ChatGPT favors direct authoritative sources with strong recency signals. - Google AI Overviews has 76% overlap with Google's top 10.

The practical implication for anyone building a B2B product: the AI engine your team uses for research is probably not the same one your enterprise buyer uses during procurement.

Wharton-GBK 2025 data shows ChatGPT at 67% enterprise adoption and Copilot at 58%, while Perplexity sits at roughly 18%.

The conversion data is also worth noting. Across 42 B2B sites studied, ChatGPT referral traffic converted at 15.9% vs 2.8% for traditional organic Google traffic. AI compresses the research phase, so visitors arrive further down the funnel.

Are you seeing similar patterns? And for those building developer tools or B2B products, which AI engines are you actually seeing referral traffic from?

guptadeepak··on The Age Verification Trap: Verifying age undermines everyone's data protection
Age verification is a tough problem.

I ran into this when building a kids' education app a few years ago. We explored a bunch of options, from asking for the last four digits of their parents' SSN (which felt icky, even though it's just a partial number) to knowledge-based authentication (like security questions, but for parents).

Ultimately, we went with a COPPA-compliant verification service, but it added friction to the signup process.

It's a trade-off between security and user experience, and there's no perfect solution, unfortunately.

guptadeepak··on UNIX99, a UNIX-like OS for the TI-99/4A (2025)
Interesting project. IIRC, one of the biggest challenges with the TI-99/4A was its TMS9900 processor. It was a 16-bit CPU, but had a really awkward memory architecture that made it difficult to write efficient code.

The lack of dedicated registers meant a lot of memory access, which slowed things down considerably. This is probably why it never gained the same traction as the 6502-based systems like the Apple II or Atari.

I'm curious to see how this UNIX-like OS addresses those limitations. It's a pretty neat accomplishment if it can provide a usable environment on that hardware.

guptadeepak··on Ask HN: Who is hiring? (February 2026)
GrackerAI | Backend Engineer | REMOTE | https://gracker.ai

We are building the infrastructure for the post-SEO era. As B2B buyers shift from traditional search to AI assistants like Perplexity, ChatGPT, and Gemini, the old playbooks for visibility are breaking. GrackerAI provides the analytics and automation layer for Answer Engine Optimization (AEO) and Generative Engine Optimization (GEO).

We help brands track their real-time AI visibility scores and automate the creation of high-intent content that these engines actually cite. We’re looking for a Senior Backend Engineer to help scale our data ingestion pipelines and LLM-based evaluation systems. You’ll be working on the core engine that benchmarks brand mentions against competitors across various model architectures.

We are a small, results-driven team focused on high-intent lead generation for SaaS. If you're interested in the intersection of search behavior and automated content strategy, we’d love to hear from you. I am the founder and will be personally reviewing and responding to all applications.

Contact: careers@gracker.ai

guptadeepak··on Cybersecurity companies can now track brand visibility in ChatGPT, perplexity
GrackerAI - A Generative Engine Optimization (GEO) platform, addressing a critical gap as businesses discover they’re invisible in AI-powered search engines despite heavy investments in traditional SEO
guptadeepak··on Enterprise Ready SaaS Tools
Great list of SaaS tools that help you get ready to serve enterprise customers
guptadeepak··on Enterprises Can Navigate Geolocation, Storage, and Privacy Compliance
A Comprehensive Technical Guide for CTOs, CISOs, and Identity Architects
guptadeepak··on India has surpassed Japan to become the fourth-largest economy
India overtakes Japan as 4th-largest economy, also California's economy too
guptadeepak··on Top IAM Platforms
Key IAM platforms to use in the modern AI era
guptadeepak··on AI Agents and Vibe Coding: Redefining Digital Identity and Security Models
I’ve been looking into how AI agents and “vibe coding” are changing the way we think about digital identity. The problem is shifting from verifying who someone is to understanding who actually performs an action, especially when both humans and AI share access.

Two trends stand out:

1. Identity systems are starting to use behavioral and contextual signals instead of just passwords or keys.

2. Our current trust models break when adaptive AI systems act independently.

As AI agents become more autonomous, is it time to design identity systems that verify intent, not just identity?

guptadeepak··on Why 99% of Cold Emails to CISOs Fail
I’ve spent years selling and evaluating cybersecurity solutions from both sides of the table. This post dissects why traditional outbound tactics almost never land with CISOs and what actually drives buying behavior.

Two key observations: trust is built through peer networks and practitioner validation, not polished outreach; and most CISO buying decisions emerge from internal problem framing long before vendors contact them. Interestingly, data shows over 80% of deals start from an internal referral or known tech stack gap.

Question to the readers: ow have your enterprise sales or procurement experiences aligned—or conflicted—with this behavior pattern?

guptadeepak··on Building Identity Systems for Autonomous Enterprises
I’ve been exploring how identity systems need to evolve as enterprises become increasingly autonomous — with AI agents and APIs making decisions without human intermediaries. The article argues that static credentials like passwords and API keys can’t scale in these environments. Instead, identity must be dynamic, context-aware, and cryptographically verifiable.

Three key areas stood out: decentralized identity standards, just-in-time credential issuance, and autonomous trust negotiation between agents.

I’m curious — how are others approaching machine identity lifecycle management when both issuance and trust decisions must happen autonomously in real time?

guptadeepak··on The Psychology Behind User Resistance to Stronger Authentication
This piece explores why users perceive secure authentication as friction rather than protection. Three key insights stood out: 1. loss aversion drives users to avoid perceived effort 2. mental models of “security” lag behind actual threat models 3. familiarity bias favors weak but habitual patterns

Empirically, usability testing shows rejection rates rise sharply when authentication adds more than two new steps.

I’d love to hear from others—what design trade-offs have you found most effective in aligning user convenience with real security gains?

guptadeepak··on AI-Driven Top-of-Funnel Growth Strategies for B2B SaaS in 2025
I’ve been exploring how AI is reshaping top-of-funnel growth for B2B SaaS. A few patterns stand out:

1. AI is driving hyper-personalization at scale, especially in outbound messaging where dynamic content adapts in real time to prospect behavior.

2. Predictive intent models are proving more reliable than traditional firmographic filters, helping teams prioritize accounts with higher conversion likelihood.

3. Multi-channel orchestration is shifting from manual sequencing to algorithmic optimization—AI selects touchpoints and cadence based on historical engagement data.

The challenge isn’t lack of tools but integrating these systems without fragmenting data flows. How are you managing the integration between AI-led demand gen systems and legacy CRMs?

guptadeepak··on Managing Tech Debt: Foundations Before Scaling Systems
I wrote this piece to explore how tech debt accumulates and why it often undermines scaling efforts if left unresolved.

Two points stood out during my analysis: first, that debt isn’t inherently bad—it’s a trade-off that enables speed, but compounding interest appears when teams skip foundational fixes. Second, systemic failures emerge when architectural shortcuts stack, making later feature work exponentially harder.

In practice, addressing debt early often means pausing new development to refactor core data models, testing harnesses, or CI/CD pipelines.

For those here who’ve scaled fast-growing systems, how do you balance debt repayment against product velocity?

guptadeepak··on When Technical Products Outgrow Non-Technical Leadership
I’ve been thinking about the paradox where technically strong products succeed early but later stagnate under non-technical leadership. A specific challenge I’ve seen is when executives optimize for speed-to-market while ignoring long-term maintainability, creating technical debt that compounds later.

For those building or leading technical companies, how do you balance short-term execution with leadership that truly understands technical depth?

guptadeepak··on Migrate off of Akamai's Identity Cloud platform
Akamai identity cloud shutting down, migrate to other CIAM identity providers
guptadeepak··on Risks and Challenges of Managing AI Agents with Existing Identity Systems
This article highlights a critical, often-overlooked security gap in how organizations manage AI agents: applying human identity frameworks to digital workers that operate continuously and at a high volume.

The author stresses the need for purpose-built AI agent identity systems featuring automated credential rotation, real-time policy evaluation, and behavioral analytics.

For those working on AI workforce security, what techniques have you found effective for dynamic authorization and auditability?

guptadeepak··on OAuth Device Flow Vulnerabilities: Analysis of 2024-2025 Attack Wave
This analysis dives into the recent surge of OAuth device flow attacks observed in 2024-2025, focusing on key protocol weaknesses and implementation gaps.

The critical issue stems from attacker exploitation of insufficient user code verification and token issuance processes, enabling device flow hijacking and abuse at scale. Notably, the challenge of securely binding device codes to legitimate users remains unresolved, especially in constrained input environments.

How are you addressing the trade-offs between user convenience and security in OAuth device flows?

guptadeepak··on I analyzed 30 authentication providers so you don't have to
Getting tired of biased vendor comparisons and scattered information when evaluating CIAM solutions. Created this comprehensive directory with real analysis of Auth0, Clerk, Keycloak, Firebase Auth, and dozens more. Organized by categories like 'Developer-First', 'Enterprise Leaders', 'Open Source' to match actual decision criteria. Each entry includes honest pros/cons and when to choose each platform.
guptadeepak··on Why AI Agents Are Disrupting Traditional Marketing Teams
I recently explored how AI agents are reshaping the dynamics of marketing vs. growth teams. The core shift isn’t automation for efficiency’s sake, but the structural replacement of human-heavy marketing workflows with agent-managed, always-on experimentation loops. Three key technical points stood out:

1. Agents can autonomously run multivariate campaign tests with real-time feedback loops.

2. API-driven integration across ad networks, CRMs, and analytics makes them execution-first systems.

3. Growth models shift from static funnels toward adaptive, agent-orchestrated experimentation.

I'm curious if others here see technical ceilings in agent coordination—especially around attribution accuracy and bias in optimization loops?

guptadeepak··on AI Memory Architectures: Why MemGPT Outperformed OpenAI's Approaches
I wrote this piece after comparing different approaches to long-term memory in LLMs. Most current systems either rely on external vector databases or attempt to extend context windows, but both approaches hit scalability and efficiency bottlenecks.

MemGPT’s architecture stood out because it treats memory as a hierarchical resource: short-term scratchpad, mid-term recall buffer, and long-term persistent memory. This reduces redundant retrieval calls and improves coherence in multi-session tasks.

That raised a question for me: how do others see the trade-off between embedding-based search vs. structured memory hierarchies for scaling persistent AI agents?

guptadeepak··on Continuous Access Evaluation Protocol for Real-Time Access Control
I've been exploring how CAEP (Continuous Access Evaluation Protocol) enables identity systems to re-evaluate session risk in real time rather than on fixed intervals. The key technical shift is moving from static token lifetimes to event-driven enforcement. Two significant challenges:

1. Federated systems need standardized event schemas to ensure interoperability across IdPs and RPs.

2. Scalability—streaming identity events globally with low latency is non-trivial.

For those building distributed identity platforms, how are you handling real-time access revocation at scale without impacting user experience?

guptadeepak··on Practical Techniques for Enhancing Digital Identity Security During Login
As someone deeply involved in digital identity and cybersecurity, this article underscores the critical importance of securing authentication flows beyond just password strength.

What approaches have you found effective in reducing authentication-related attacks without degrading user experience?

guptadeepak··on Claude and the Paradigm Shift Toward Conversational and AI-Driven Programming
The article highlights how Claude lets developers write, debug, and optimize code interactively through natural language, leveraging AI to reduce cognitive load and iteration time.

How do you see AI-assisted coding impacting collaborative code ownership and software quality assurance workflows?

guptadeepak··on Palo Alto Networks–CyberArk $25B Deal: My Take on Security Stack Integration
As someone who’s spent over a decade building identity systems and watching consolidation in security, this deal signals the start of true vertical integration—network, cloud, and identity in a single platform.

Three points stand out: (1) Palo Alto lacked a native identity pillar; CyberArk brings deep privileged access and machine identity expertise, now critical as organizations face a 40:1 machine-to-human identity ratio. (2) The market is moving away from standalone identity products toward integrated platforms, validated by a 30% YoY jump in security M&A. (3) The real technical test will be merging Palo Alto’s policy engines with CyberArk’s adaptive access and ZSP architectures.

For those at large CISOs or startups: where do you see the next opportunity for innovation with AI agent identity management as the big players focus on integration?

guptadeepak··on Understanding the Complete Identity Management Ecosystem
As someone deeply involved in identity and access management, this article breakdown highlights the ecosystem’s complexity and specialization. Key technical insights include:

1. The necessity of distinct identity solutions for workforce (IAM), customers (CIAM), privileged users (PAM/PIM), and machines, each with tailored security and scalability challenges.

2. Access control’s evolution beyond RBAC to ABAC and PBAC enables more dynamic, attribute-driven authorization—critical for fine-grained enterprise policies.

3. Machine identity management is increasingly vital, given the volume and risk profile of non-human identities, with automation around certificate rotation and service account lifecycle being complex yet essential.

Integration remains a persistent challenge, requiring standards-based approaches and careful planning to avoid security gaps. Looking ahead, how are you balancing emerging trends like AI-driven risk analysis and zero trust in your identity infrastructures without overwhelming operational complexity?

guptadeepak··on Comparative Analysis of CPUs, GPUs, NPUs, and TPUs for Modern AI Workloads
This article systematically breaks down four key processing units shaping today’s computing landscape: CPUs, GPUs, NPUs, and TPUs.

CPUs excel at complex sequential tasks due to few powerful cores with layered cache.

GPUs leverage thousands of simpler cores for massive parallelism, ideal for AI training via optimized throughput.

NPUs specialize in edge AI inference with brain-inspired architectures, trading generality for energy-efficient neural computations on mobile.

TPUs utilize systolic arrays to accelerate large-scale AI workloads in the cloud but remain tied closely to TensorFlow ecosystems.

I appreciate the nuanced emphasis on architectural trade-offs and evolving integration trends. For those deploying heterogeneous systems, what’s your experience with managing software complexity across diverse processing units?

guptadeepak··on Applying the Six Thinking Hats Framework to Personal Data Security Analysis
I explore how systematically applying de Bono’s Six Thinking Hats method offers a balanced, multi-perspective analysis of personal data security.

Key insights: (1) Data breaches are frequent—3,200+ in 2024 alone—so technical controls (encryption, MFA, credential management) are essential but insufficient (2) Emotional and behavioral factors like security fatigue and user frustration undermine even robust technical systems (3) Creative models such as decentralized identity and privacy-preserving analytics (e.g., differential privacy) show promise but face adoption and UX hurdles.

Has anyone here seen effective ways to bridge these human-technical divides in real-world orgs?

guptadeepak··on AI and the Future of Work: Job Transformation and Skill Shifts
In this piece, I examine AI's tangible effects on job functions, workforce adaptation, and inequality risk.

Technically, current generative models are displacing routine tasks (e.g., data processing, content generation) but enabling hybrid roles that blend human judgment with AI augmentation.

The main challenge: building organizational and educational infrastructures to keep workforce skills aligned with rapidly evolving AI capability.

What upskilling approaches have actually worked in your organizations or fields?

Page 1 of 2Next →