Aembit IAM for Agentic AI now supports Microsoft Copilot Studio. Read More →

Get an Aembit Tenant
TALK TO AN ENGINEER

back TO blog

Kevin Sapp

Kevin Sapp

Co-Founder and CTO
Linkedin

About Author

Kevin Sapp is the co-founder and CTO of Aembit and an entrepreneur and technology executive with extensive experience developing and commercializing new products for large, high-growth markets. He previously co-founded New Edge Labs, which was acquired by Netskope in 2019. Throughout his career, Kevin has focused on enterprise security, cloud, and mobile computing. He is also an inventor on several patents in information systems security. Outside of work, he is an avid sailor.

Expertise

  • Enterprise security
  • Identity and access management
  • Non-human identity
  • Workload identity and access management
  • AI agent identity and access
  • Zero trust
  • Cloud computing
  • Mobile computing
  • Security architecture
  • Security product development
  • Authentication and authorization
  • Enterprise software
  • Technology strategy

Education

  • Bachelor’s degree in computer and information science, University of Maryland Global Campus

Certifications

  • AWS Certified Cloud Practitioner
  • International Certificate for Operators of Pleasure Craft, Royal Yachting Association
  • RYA Day Skipper – Sailing, Royal Yachting Association

Selected Patents

  • Policy-Based Network Packet Inspection and Mediation
  • Mid-link Server Having a Plurality of Access Resource Servers for Policy Control
  • Policy-Controlled Authentication for Internet Communication
  • Zero Trust and Zero Knowledge Application Access System
  • Systems and Methods for Providing and Managing Distributed Enclaves

Articles by Kevin Sapp

Software engineer seated at a desk in a modern office, reviewing responses from an AI assistant on a laptop while working across multiple monitors in a natural, candid workplace setting.

AIMS: A Model for AI Agent Identity

An early IETF draft hints at how identity infrastructure may evolve once autonomous software starts acting inside enterprise environments.
Kevin Sapp
Kevin Sapp
May 2026
|
4 min read
Gartner workload IAM architecture for securing AI agents

Gartner’s Workload IAM Architecture Is a Big Step Forward for AI Agent Security

The global research and advisory firm is pushing the industry toward a more practical model for securing AI agents and non-human access.
Kevin Sapp
Kevin Sapp
May 2026
|
8 min read
Securing CI CD Pipelines With Workload Identity Federation

Securing CI/CD Pipelines with Workload Identity Federation

Pipeline breaches keep repeating because static credentials persist. Identity federation replaces stored secrets with runtime tokens.
Kevin Sapp
Kevin Sapp
Apr 2026
|
6 min read
Gartner Pam Nhis

Key Takeaways on Non-Human Identity Security from Gartner’s PAM Report

Gartner’s 2025 PAM Magic Quadrant names machines a core market concern. That shift changes the map for NHI security and workload IAM.
Kevin Sapp
Kevin Sapp
Apr 2026
|
6 min read
MCP OAuth 21 PKCE and the future of AI authorization

MCP, OAuth 2.1, PKCE, and the Future of AI Authorization

The MCP authorization spec sets a new standard for securing non-human AI agents – with lessons for anyone building autonomous, scalable systems.
Kevin Sapp
Kevin Sapp
May 2025
|
7 min read
Human brain and AI brain

Self-Assembling AI and the Security Gaps It Leaves Behind

Instead of running static workflows, agents are building the system for you, deciding how to connect tools and take action on the fly.
Kevin Sapp
Kevin Sapp
May 2025
|
5 min read
Image of major highway artery.

Why Scalability Matters in Non-Human Identity and Access Management

From dynamic workloads to API-driven systems, managing non-human identities requires a new approach to security at scale.
Kevin Sapp
Kevin Sapp
Jan 2025
|
6 min read
header image depicting Aembit QuickStart guide

Secure Workload Access in Minutes with Aembit’s New QuickStart Guide

This step-by-step resource helps you deploy workloads, configure policies, and explore Aembit’s approach to securing non-human identities.
Kevin Sapp
Kevin Sapp
Nov 2024
|
3 min read
malicious hacker carrying anonymous mask looking at servers

How to Defend Non-Human Identities from Infostealers

The identity layer’s most insidious threat is now setting its sights on a different group of targets. Here’s how to be ready.
Kevin Sapp
Kevin Sapp
Nov 2024
|
4 min read
Open Letter to API Vendors

Dear API Vendors: Use Secure Authentication, Ditch API Keys

As the demand for API access continues to grow, so does the urgency of adopting more secure authentication methods.
Kevin Sapp
Kevin Sapp
May 2024
|
3 min read
spiffe-and-spire-your-questions-answered

SPIFFE and SPIRE: Your Questions Answered

Explore how the specifications impact secrets management and workload identity and access management practices across distributed environments.
Kevin Sapp
Kevin Sapp
Oct 2023
|
7 min read
Aembits-SOC-2-Compliance

Aembit Achieves SOC 2 Compliance for Workload IAM Security

This compliance serves as a validation of our operational and security controls, offering you greater confidence in our Workload IAM services.
Kevin Sapp
Kevin Sapp
Sep 2023
|
2 min read
Load More