Research, Playbooks, and Tools
Everything we publish to help you run a serious Non-Human Identity program.
Blast Radius: a field playbook for leaked API keys
Six phases for AWS, GCP and Azure, evidence before revocation, and a version-by-version diff of AWS's compromised-key quarantine policy. No form, no gate.
Free PDF · English & Korean · Published 4 September 2026
Downloads
PDF playbooks and whitepapers you can keep offline.
Monthly NHI research brief
New playbooks, frameworks, and field reports: one email a month.
NHI Security Playbook
Practitioner reference: Kill Chain, six-axis severity index, 30-60-90 plan, ISMS-P crosswalk.
Tools
Interactive assessments you can run in your browser.
Series
Multi-part research we publish over weeks, not one-off posts.
Reports
Industry analysis, frameworks, and field reports from the front line.
Blast Radius: Leaked API Key Playbook
A field playbook for investigating leaked API keys and cloud credentials across AWS, GCP, Azure and the secret stores behind them, and for proving how far they could reach.
RSAC 2026 NHI Field Report
On-the-ground analysis from RSA Conference 2026 with competitor comparisons and buyer signals.
NHI Maturity Model
Five-level maturity model for Non-Human Identity programs, from ad-hoc secrets handling to continuous governance.
When reading is not enough
See how Cremit actually inventories, verifies, and tracks Non-Human Identities to an owner in live environments.