Tagged:

2 posts

• AI Secrets Management: Protecting API Keys, System Prompts, and Model Credentials in Production

  API keys for model providers have a blast radius unlike traditional credentials. System prompts encode proprietary business logic that teams rarely treat as secrets. This is a practical guide to treating AI credentials as the first-class secrets they are — with concrete patterns for storage, rotation, agent scoping, and incident response.

  Jul 13, 2026 defense-patterns credential-management secrets-management least-privilege agent-security monitoring incident-response api-security system-prompt cicd

• Non-Human Identity Security for AI Agents: Credential Scoping, Token Lifecycle, and Agent Impersonation

  AI agents are becoming major credential holders and API consumers. Non-human identity (NHI) security treats agent tokens with the same rigor as human credentials — and getting this wrong creates exploitable privilege escalation paths that traditional IAM never anticipated.

  Jul 9, 2026 agent-security credential-management least-privilege iam identity threat-modeling multi-agent zero-trust