Dan Kaplan

Director of Content Marketing

Expertise

  • Cybersecurity
  • Identity and access management
  • Non-human identity
  • Workload identity and access management
  • AI agent identity and security
  • Cloud security
  • Security operations
  • Threat detection and response
  • Cybersecurity journalism
  • Content strategy
  • Editorial strategy

About Author

Dan Kaplan is the friendly neighborhood content marketing leader at Aembit. Based in New York but operating remotely, he tells stories about agentic identity, workload identity, and cybersecurity that are meant to educate, inspire and, if he’s lucky, even entertain. Before joining Aembit, Dan held a similar role at Google Cloud, following stints at Siemplify and Trustwave, where he led content initiatives. He planted his roots in cybersecurity as a reporter and editor at SC Media. When he’s not conjuring content, he can usually be found watching sports, advocating for farm animals, or listening to paranormal stories as he falls asleep. Don’t ask.

Education

  • Bachelor’s degree in journalism, Syracuse University, S.I. Newhouse School of Public Communications

Articles by Dan Kaplan

Workforce and customer agents may rely on similar identity infrastructure, but the trust models, access patterns, and security risks behind them differ significantly.
Static access rules fail in dynamic MCP environments. Context-based access control evaluates identity, context and resources in real time.
Secrets managers store credentials but can’t close the access gaps that multicloud workloads and AI agents create. Five alternatives can.
Non-human identities outnumber human users 144 to 1, yet most security programs overlook them. The OWASP NHI Top 10 maps the risks.
Hardcoded credentials and shared tokens give attackers ongoing access. Dynamic authorization replaces them with real-time decisions.
Two layers protect cloud-native apps: Workload IAM secures machine identity and API security inspects request traffic. Most teams need both.
An agent behaved like a true insider threat. Unmanaged API keys made those mistakes devastatingly consequential. Both can be true at the same time.
Modern infrastructure depends on keys: encryption and access. They’re not the same, and treating them the same quietly introduces risk.
The 2025 Verizon DBIR confirmed what security teams already suspect: credential theft is outpacing the defenses most organizations have in place.
Workload identity proves who a workload is. Workload access management controls what it can do. Learn why separating them is critical for zero trust.
Two in five SaaS platforms fail to distinguish human from nonhuman identities. Learn why the distinction matters and how to manage both securely.
For every human identity your IAM program governs, there are roughly 82 machine identities operating outside it. Most of them authenticate with static credentials that were provisioned once and never reviewed.