Tagged:

2 posts

• AI Secrets Management: Protecting API Keys, System Prompts, and Model Credentials in Production

  API keys for model providers have a blast radius unlike traditional credentials. System prompts encode proprietary business logic that teams rarely treat as secrets. This is a practical guide to treating AI credentials as the first-class secrets they are — with concrete patterns for storage, rotation, agent scoping, and incident response.

  Jul 13, 2026 defense-patterns credential-management secrets-management least-privilege agent-security monitoring incident-response api-security system-prompt cicd

• Side-Channel Attacks on LLM APIs: What Response Timing and Token Counts Reveal

  How LLM API metadata — token counts, timing, and streaming patterns — leaks system prompt structure and model configuration to adversaries.

  Jul 3, 2026 side-channel llm-security api-security token-inference timing-attacks threat-modeling