Apr 25, 2025
OWASP NHI5:2025 - Overprivileged NHI In-Depth Analysis and Management
Why service accounts and API keys end up with more privilege than they need, and how A2A and MCP raise the stakes.
Ben Kim
Founder & CEO
Back to Blog
Category
OWASP Series
OWASP NHI Top 10 series
6 posts
Apr 22, 2025
OWASP NHI4:2025 Insecure Authentication Deep Dive Introduction: The Era of Non-Human Identities Beyond Humans
Research puts NHIs at roughly 46 per person, and 45 times the human count in DevOps. What weak authentication costs at that scale.
Ben Kim
Founder & CEO
Mar 3, 2025
OWASP NHI1:2025 Improper Offboarding- A Comprehensive Overview
Service accounts and tokens that outlive their purpose are the easiest targets in the estate. What OWASP NHI1:2025 says about offboarding.
Ben Kim
Founder & CEO
Feb 18, 2025
OWASP NHI2:2025 Secret Leakage – Understanding and Mitigating the Risks
OWASP NHI2:2025 covers API keys and tokens ending up in stores that were never meant to hold them. Where they leak, and how to stop it.
Ben Kim
Founder & CEO
Feb 4, 2025
OWASP NHI3:2025 - Vulnerable Third-Party NHI
Third-party integrations reach into your resources with credentials you never issued. What OWASP NHI3:2025 covers, and where the exposure sits.
Ben Kim
Founder & CEO
Apr 9, 2024
OWASP NHI Top 10 Explained: 10 Machine-Credential Risks Mapped
OWASP NHI Top 10 names the machine-credential risks most teams still do not track. Here is what each threat means, and how each maps to real controls you can deploy.
Ben Kim
Founder & CEO