Fast Company names Aembit a Best Workplace for Innovators. Learn More →

TRY AEMBIT

Blog

Resources

We’ve Identified a New IT Ailment. It’s Called Credentialitis – And It’s Spreading Fast

Dan Kaplan Sep 2025 | 2 min read
Are you suffering from credentialitis with doctor asking.

2 min readCredentialitis isn’t just a clever name. It’s a real condition plaguing modern IT teams. Dr. Seymour Keys is here to walk you through the symptoms, the screening, and the treatment.

Dig in
Best Practices

The Story Behind Snowflake’s Push to Rein in Non-Human Identities

Dan Kaplan Jul 2025 | 4 min read
Industry Insights

Replacing a GitHub Personal Access Token With a GitHub Application

Jason Kwon Jun 2025 | 5 min read
Best Practices

MCP, OAuth 2.1, PKCE, and the Future of AI Authorization

Kevin Sapp May 2025 | 7 min read

Discover More of What Matters to You

Recent Stories

Cloud Posture Tools Miss This Critical IAM Risk (Attackers Don't)

Cloud Posture Tools Don’t Catch This IAM Risk (But Attackers Will)

CSPM platforms excel at configuration analysis but miss dynamic credential lifecycle risks in workload identities. Learn how attackers exploit this blind spot.
Ashur Kanoon
Sep 2025
|
4 min read
Securing AI Agents and LLM Workflows Without Secrets

Securing AI Agents and LLM Workflows Without Secrets

Learn why static API keys put AI agents at risk and how workload identity and dynamic credentialing eliminate secrets, stop prompt injection attacks, and future-proof LLM security.
Ashur Kanoon
Sep 2025
|
10 min read
Announcing Aembit's integration with Splunk.

Enhancing Splunk Support for Workloads

Say goodbye to long-lived personal access tokens as you replace them with ephemeral, policy-driven credentials and automated service account management.
Ashur Kanoon
Sep 2025
|
2 min read
Businessperson interacting with CRM data.

When Salesforce Becomes a De Facto Credential Repository: Lessons from the Drift OAuth Breach

Recent flaws in Conjur and Vault highlight the risks of concentrating trust in a single repository – and why workload IAM may offer a more resilient path forward.
Dan Kaplan
Aug 2025
|
3 min read
a-new-class-of-identity-risk

How AI Agents Are Creating a New Class of Identity Risk

AI agents require broad API access across multiple domains simultaneously—LLM providers, enterprise APIs, cloud services, and data stores—creating identity management complexity that traditional workload security never anticipated.
Apurva Davé
Aug 2025
|
5 min read
Announcing GitLab CLM.

Aembit Introduces GitLab Credential Lifecycle Management and GitLab Component

Say goodbye to long-lived personal access tokens as you replace them with ephemeral, policy-driven credentials and automated service account management.
Ashur Kanoon
Aug 2025
|
7 min read
Workload identity vs. workload access management

Workload Identity vs. Workload Access Management: Securing Cloud-Native Workloads in a Dynamic Environment

Understanding the distinction is essential for implementing Zero Trust.
Dan Kaplan
Aug 2025
|
5 min read
Dynamic Authorization vs. Static Secrets

Dynamic Authorization vs. Static Secrets: Rethinking Cloud Access Controls

Learn why static secrets fail in modern environments and how to implement dynamic authorization.
Dan Kaplan
Aug 2025
|
6 min read
Vault with a warning sign superimposed.

Vault Fault: Secrets Managers and the Limits of Centralized Trust

Recent flaws in Conjur and Vault highlight the risks of concentrating trust in a single repository – and why workload IAM may offer a more resilient path forward.
Dan Kaplan
Aug 2025
|
3 min read
What Identity Federation Means for Workloads

What Identity Federation Means for Workloads in Cloud-Native Environments

Learn how federation works for non-human identities, where legacy models fall short, and how to implement a secure, scalable solution.
Dan Kaplan
Aug 2025
|
7 min read
A person vibe codes

When Identifiers Aren’t Identities: Security Lessons from the Base44 AI Vibe Coding Flaw

The vulnerability shows how modern application development is accelerating without bringing access controls along for the ride.
Dan Kaplan
Aug 2025
|
3 min read
Developer interfacing with ChatGPT LLM.

I Spent One Day Building AI Agents. Here’s What Actually Happened

In a single day, a developer sets out to build working AI agents – and uncovers the friction, fragility, and surprising overhead behind the automation dream.
Victor Ronin
Jul 2025
|
12 min read
Load More

Ready to Try Workload IAM?

Get started in minutes, with no sales calls required. Our free- forever tier is just a click away.

Request a Demo