Blog

Best Practices

MCP Threat Modeling: Understanding the Attack Surface

AI agents are no longer just chatbots. They’re executing multistep workflows across tools and data sources, and the Model Context Protocol (MCP) standardizes these interactions.

Best Practices

Zero Trust for Nonhuman Workload Access: A Primer

Zero trust has reshaped how organizations secure user access. Multifactor authentication, single sign-on and continuous posture checks are now standard for human identities. But the same rigor rarely extends to the nonhuman side of the house.

Best Practices

Moving Beyond Static Credentials in Cloud-Native Environments

Static credentials, like hardcoded API keys and embedded passwords, have long been a fixture of how workloads authenticate. But in distributed, cloud-native environments where services constantly spin up and down, these long-lived secrets have become a growing source of risk, operational friction and compliance failure.

Ashur Kanoon

Industry Insights

Secrets Management vs. Access Management: What You Need to Know

When your team stores API keys in a vault and rotates them on a schedule, it feels like the access problem is handled.

Best Practices

Workload Identity vs. Workload Access Management: Securing Cloud-Native Workloads in a Dynamic Environment

Workload identity proves who a workload is. Workload access management controls what it can do. Learn why separating them is critical for zero trust.

Dan Kaplan

Best Practices

How to Distinguish Between Human and Nonhuman Identities

Two in five SaaS platforms fail to distinguish human from nonhuman identities. Learn why the distinction matters and how to manage both securely.

Dan Kaplan

Industry Insights

Attestation-Based Identity: How It Works and Why It Matters

Attestation-based identity verifies workloads using cryptographic environment evidence rather than stored secrets. Learn how it works across hardware and cloud.

Ashur Kanoon

8 min read

Industry Insights

AI Agent Identity: The Multi-Protocol Authentication Gap

AI agent identity breaks down when agents authenticate across OAuth, API keys and managed identities simultaneously. Learn why single-protocol solutions fail.

Industry Insights

What Identity Federation Means for Workloads in Cloud-Native Environments

Instead of duplicating accounts or sharing credentials, one identity system can validate identities issued by another and grant access based on that trust.

Dan Kaplan

Mar 2026