The security team said yes: How a $300B investment firm deployed Claude agents across the enterprise →

TRY AEMBIT
TALK TO AN ENGINEER
Blog

Tag: Authentication

Gartner’s Workload IAM Architecture Is a Big Step Forward for AI Agent Security

The global research and advisory firm is pushing the industry toward a more practical model for securing AI agents and non-human access.
Kevin Sapp
May 2026
|
8 min read
Illustration of a computer monitor in an office workspace displaying a ransomware-style warning message tied to the Canvas and Instructure data breach, surrounded by desks, office equipment, and a blurred corporate office environment.

The Canvas Breach Shows What Happens When SaaS Platforms Become Identity Infrastructure

The response to the Canvas breach revealed how much modern institutions still depend on long-lived credentials, shared trust layers, and persistent access between systems.
Dan Kaplan
May 2026
|
6 min read
Workforce Agents vs Customer Agents: A Complete Guide

Workforce Agents vs. Customer Agents: Identity, Access, and Security Explained

Workforce and customer agents may rely on similar identity infrastructure, but the trust models, access patterns, and security risks behind them differ significantly.
Dan Kaplan
May 2026
|
9 min read
Split illustration showing chaotic tangled infrastructure on one side and a clean, structured cloud architecture diagram on the other.

Everyone Wants SPIFFE. Almost No One Can Afford to Build It Right.

What it takes to implement it, and why real-world environments make it hard to finish.
Ashur Kanoon
May 2026
|
16 min read
Access granted.

5 Capabilities of Workload Access Managers – And Why WAM Isn’t WIM

Workload access management isn’t identity management – it enforces access and eliminates credentials. Learn the five core WAM capabilities
Apurva Davé
May 2026
|
10 min read
How to Build an MCP Server — and What to Do Before You Ship It

How To Create an MCP Server To Connect Your App With LLMs

You can stand up an MCP server in minutes, but controlling how it authenticates and what it can access is where the real work begins.
Aembit Engineering
Apr 2026
|
8 min read
encryption keys vs access keys

Managing Encryption Keys vs. Access Keys

Modern infrastructure depends on keys: encryption and access. They’re not the same, and treating them the same quietly introduces risk.
Dan Kaplan
Apr 2026
|
6 min read
Connected workloads

8 Workload Authentication Methods for Nonhuman Identities

Every workload that calls an API has to prove it belongs. How that proof gets exchanged shapes the blast radius of any credential leak.
Victor Ronin
Apr 2026
|
7 min read
API Keys vs. JWTs: Choosing the Right Auth Method for Your API

API Keys vs. JWTs: Choosing the Right Auth Method for Your API

Not all credentials are created equal. Compare API keys and JWTs across security, scalability, and fit for modern workload authentication.
Ashur Kanoon
Apr 2026
|
5 min read
MCP Threat Modeling: Understanding the Attack Surface

MCP Threat Modeling: Understanding the Attack Surface

MCP gives AI agents a common language for action—but also a new attack surface. Here’s how to model threats before they become incidents.
Apurva Davé
Apr 2026
|
6 min read
Load More