Personal agents are here. Aembit customers are already covered →
Get an Aembit Tenant
TALK TO AN ENGINEER
Dan Kaplan picture

Dan Kaplan

Director of Content Marketing
Linkedin

Expertise

  • Cybersecurity
  • Identity and access management
  • Non-human identity
  • Workload identity and access management
  • AI agent identity and security
  • Cloud security
  • Security operations
  • Threat detection and response
  • Cybersecurity journalism
  • Content strategy
  • Editorial strategy

About Author

Dan Kaplan is the friendly neighborhood content marketing leader at Aembit. Based in New York but operating remotely, he tells stories about agentic identity, workload identity, and cybersecurity that are meant to educate, inspire and, if he’s lucky, even entertain. Before joining Aembit, Dan held a similar role at Google Cloud, following stints at Siemplify and Trustwave, where he led content initiatives. He planted his roots in cybersecurity as a reporter and editor at SC Media. When he’s not conjuring content, he can usually be found watching sports, advocating for farm animals, or listening to paranormal stories as he falls asleep. Don’t ask.

Education

  • Bachelor’s degree in journalism, Syracuse University, S.I. Newhouse School of Public Communications

Articles by Dan Kaplan

Workload IAM vs. Secrets Managers header image with person keeping a secret

Workload IAM vs. Secrets Management: A Practical Decision Guide

Most organizations start their nonhuman identity security program with a secrets manager. It’s a sensible first step. But as workloads multiply across clouds and the credential sprawl grows, the question shifts from “where do we store secrets?” to “do we need secrets at all?”
Dan Kaplan
Dan Kaplan
Mar 2026
|
6 min read
Claude Code external UI.

Anthropic’s AI-Run Attack and What It Means for Agentic Identity

Anthropic’s disclosure of an AI-driven espionage campaign it halted is best understood as a faster, more persistent version of patterns the industry has seen before. What distinguishes this incident is the continuity of activity an autonomous system can sustain once it is given the ability to interpret its surroundings and act on that understanding.
Dan Kaplan
Dan Kaplan
Mar 2026
|
6 min read
Identity and Access Gaps in the Age of Autonomous AI

Introducing the Identity and Access Gaps in the Age of Autonomous AI Survey Report

Based on responses from more than 200 enterprises, the findings show how AI agents are reshaping identity attribution and access control in ways existing models were not designed to handle.
Dan Kaplan
Dan Kaplan
Mar 2026
|
2 min read
Zero Trust 2026

Zero-Trust Architecture: How to Move From Network Security to Identity-First Access

Zero-trust architecture is a security framework built on a simple premise: no user, device or workload should be trusted by default, regardless of where it sits on the network.
Dan Kaplan
Dan Kaplan
Mar 2026
|
5 min read
Agentic AI Needs Guardrails

Agentic AI Guardrails: What They Are and How to Implement Them

Agentic AI guardrails are the technical controls, policy frameworks, and oversight mechanisms that define what an AI agent can do, what it can access and when it needs to stop and ask a human.
Dan Kaplan
Dan Kaplan
Mar 2026
|
6 min read
Secrets management vs. secrets elimination

Secrets Management vs. Secrets Elimination: Where Should You Invest?

Most organizations still treat credentials as something that must be protected, stored, and rotated. But a second model is quietly reshaping how machine authentication works: eliminate static secrets altogether and authenticate workloads using identity and just-in-time access.
Dan Kaplan
Dan Kaplan
Mar 2026
|
6 min read
Secrets figuratively spilling out of LexisNexis.

How a Single Overprivileged Service Turned the LexisNexis Breach Into a Keys-to-the-Kingdom Moment

Details shared by the attacker suggest the intrusion expanded beyond the initial application through permissions that allowed access to dozens of internal credentials.
Dan Kaplan
Dan Kaplan
Mar 2026
|
3 min read
Humans versus AI identity: Why AI agents are breaking identity

Human vs. AI Identity: Why AI Agents Are Breaking Identity

Traditional IAM was built for predictable workloads. Learn why AI agents demand a new approach to identity, access control, and credential management.
Dan Kaplan
Dan Kaplan
Mar 2026
|
4 min read
Real-world agentic AI use cases across enterprise workflows

Agentic AI in the Wild: Real-World Use Cases You Should Know

Discover verifiable agentic AI deployments in software, security, IT Ops, and logistics. Learn the essential security, identity, and governance patterns for safe production use.
Dan Kaplan
Dan Kaplan
Mar 2026
|
5 min read
MCP Servers being used in corporate SOC.

MCP Servers and the Return of the Service Account Problem

As agents scale and operate continuously, MCP servers are becoming long-lived access intermediaries, concentrating privilege in ways security teams have already struggled to contain.
Dan Kaplan
Dan Kaplan
Mar 2026
|
3 min read
AI Agent Security: What It Is and Best Practices, shown over an office scene with employees working at computers and collaborating.

What is AI Agent Security? 4 Best Practices to Start With

Runnable security patterns that examine how agentic behavior expands, drifts, and exceeds intent during everyday use.
Dan Kaplan
Dan Kaplan
Feb 2026
|
12 min read
Man working on laptop with ServiceNow software running.

Agents Aren’t People: What the ServiceNow Vulnerability Reveals About Agentic AI Access Control

A ServiceNow impersonation flaw illustrates how agentic systems turn weak identity assumptions into durable access paths across enterprise environments.
Dan Kaplan
Dan Kaplan
Jan 2026
|
3 min read
Load More