The security team said yes: How a $300B investment firm deployed Claude agents across the enterprise →

TRY AEMBIT
TALK TO AN ENGINEER
Blog

Category: Best Practices

5 Secrets Manager Alternatives for Securing Non-Human Identities

5 Secrets Manager Alternatives for Securing Non-Human Identities

Secrets managers store credentials but can’t close the access gaps that multicloud workloads and AI agents create. Five alternatives can.
Dan Kaplan
Apr 2026
|
6 min read
MCP Permission Models: Designing Secure Interactions

MCP Permission Models: Designing Secure Interactions

MCP standardizes how AI agents connect to tools, but every agent needs delegated authority and precise permission controls to match.
Apurva Davé
Apr 2026
|
6 min read
Dynamic Authorization vs Static Secrets: Rethinking Cloud Access Controls

Dynamic Authorization vs. Static Secrets: Rethinking Cloud Access Controls

Hardcoded credentials and shared tokens give attackers ongoing access. Dynamic authorization replaces them with real-time decisions.
Dan Kaplan
Apr 2026
|
6 min read
Workload IAM vs. API Security

Workload IAM vs. API Security

Two layers protect cloud-native apps: Workload IAM secures machine identity and API security inspects request traffic. Most teams need both.
Dan Kaplan
Apr 2026
|
5 min read
MCP Security Testing: Tools and Methodologies

MCP Security Testing: Tools and Methodologies

Test your MCP systems for confused deputy attacks, token passthrough risks and the authorization patterns the specification requires.
Apurva Davé
Apr 2026
|
6 min read
encryption keys vs access keys

Managing Encryption Keys vs. Access Keys

Modern infrastructure depends on keys: encryption and access. They’re not the same, and treating them the same quietly introduces risk.
Dan Kaplan
Apr 2026
|
6 min read
Connected workloads

8 Workload Authentication Methods for Nonhuman Identities

Every workload that calls an API has to prove it belongs. How that proof gets exchanged shapes the blast radius of any credential leak.
Victor Ronin
Apr 2026
|
7 min read
API Keys vs. JWTs: Choosing the Right Auth Method for Your API

API Keys vs. JWTs: Choosing the Right Auth Method for Your API

Not all credentials are created equal. Compare API keys and JWTs across security, scalability, and fit for modern workload authentication.
Ashur Kanoon
Apr 2026
|
5 min read
MCP Threat Modeling: Understanding the Attack Surface

MCP Threat Modeling: Understanding the Attack Surface

MCP gives AI agents a common language for action—but also a new attack surface. Here’s how to model threats before they become incidents.
Apurva Davé
Apr 2026
|
6 min read
Hand holding a secure badge

Zero Trust for Nonhuman Workload Access: A Primer

Zero trust has matured for human users, but most workloads are still running on static secrets. This primer covers the principles to fix that.
Apurva Davé
Apr 2026
|
6 min read
Load More