Apr 25, 2025
OWASP NHI5:2025 - Overprivileged NHI In-Depth Analysis and Management
Why service accounts and API keys end up with more privilege than they need, and how A2A and MCP raise the stakes.
Ben Kim
Founder & CEO
Apr 23, 2025
Beyond Lifecycle Management: Why Continuous Secret Detection is Non-Negotiable for NHI Security
Lifecycle management and scheduled rotation leave a window open. What continuous detection covers inside it.
Ben Kim
Founder & CEO
Apr 22, 2025
OWASP NHI4:2025 Insecure Authentication Deep Dive Introduction: The Era of Non-Human Identities Beyond Humans
Research puts NHIs at roughly 46 per person, and 45 times the human count in DevOps. What weak authentication costs at that scale.
Ben Kim
Founder & CEO
Apr 18, 2025
CI/CD Pipeline Secret Detection: Preventing Credential Leaks in Build and Deploy
Where credentials leak in modern CI/CD pipelines, what to scan at each stage (pre-commit, build, deploy), and how to integrate secret detection without slowing delivery.
Ben Kim
Founder & CEO
Apr 16, 2025
MCP and A2A: Why Non-Human Identity Security Matters in the AI Era
Model Context Protocol (MCP) and Agent-to-Agent (A2A) communication are redrawing the NHI security boundary. What changes when AI agents become first-class identities in your infrastructure.
Ben Kim
Founder & CEO
Apr 14, 2025
Stop Secrets Sprawl: Shifting Left for Effective Secret Detection
Moving secret detection left without slowing delivery. What it costs to catch a key before the commit versus after the deploy.
Ben Kim
Founder & CEO
Apr 14, 2025
Hidden Dangers: Why Detecting Secrets in S3 Buckets is Critical
Credentials ride into S3 buckets alongside backups and config files. How they get there, and why they surface late.
Ben Kim
Founder & CEO
Apr 4, 2025
Rising Data Breach Costs: Secret Detection's Role
Breach costs keep climbing. Which part of that number secret detection actually reduces.
Ben Kim
Founder & CEO
Apr 1, 2025
Human vs. Non-Human Identity: The Key Differentiators
Human and machine accounts are issued, owned and revoked differently. Where a single process for both leaves gaps.
Ben Kim
Founder & CEO
Mar 25, 2025
Wake-Up Call: tj-actions/changed-files Compromised NHIs
A GitHub Action used by more than 23,000 repositories was altered and its version tags retagged, leaking CI/CD secrets into build logs. The incident read as an NHI failure.
Ben Kim
Founder & CEO
Mar 18, 2025
Behind the Code: Best Practices for Identifying Hidden Secrets
Secrets enter a codebase through a short list of familiar routes. What to check on each one.
Ben Kim
Founder & CEO
Mar 3, 2025
OWASP NHI1:2025 Improper Offboarding- A Comprehensive Overview
Service accounts and tokens that outlive their purpose are the easiest targets in the estate. What OWASP NHI1:2025 says about offboarding.
Ben Kim
Founder & CEO
Newsletter
Don't miss the next one
Short monthly brief from the Cremit research team.