Dan Kaplan

Director of Content Marketing

Expertise

  • Cybersecurity
  • Identity and access management
  • Non-human identity
  • Workload identity and access management
  • AI agent identity and security
  • Cloud security
  • Security operations
  • Threat detection and response
  • Cybersecurity journalism
  • Content strategy
  • Editorial strategy

About Author

Dan Kaplan is the friendly neighborhood content marketing leader at Aembit. Based in New York but operating remotely, he tells stories about agentic identity, workload identity, and cybersecurity that are meant to educate, inspire and, if he’s lucky, even entertain. Before joining Aembit, Dan held a similar role at Google Cloud, following stints at Siemplify and Trustwave, where he led content initiatives. He planted his roots in cybersecurity as a reporter and editor at SC Media. When he’s not conjuring content, he can usually be found watching sports, advocating for farm animals, or listening to paranormal stories as he falls asleep. Don’t ask.

Education

  • Bachelor’s degree in journalism, Syracuse University, S.I. Newhouse School of Public Communications

Articles by Dan Kaplan

The vulnerability shows how modern application development is accelerating without bringing access controls along for the ride.
After locking down workforce identity, Snowflake’s security team took on the harder problem – controlling non-human access at scale without slowing teams down.
Protect GitHub Actions environment variables with secretless authentication. Avoid static secrets and secure your CI/CD pipelines the modern way.
As machine-to-machine communication eclipses human access, Aembit’s secretless approach to non-human identity is gaining industry recognition.
Non-human identity security isn’t one-size-fits-all. Where does your organization stand on the path to eliminating secrets and securing workload access?
Starting March 31, new payment security rules tighten controls on non-human identities – pushing organizations beyond IGA to real enforcement.
When a single API key compromise spiraled into a broader attack, it exposed how overlooked non-human identities can become gateways for escalating threats.