How a $300B Business Got Security to Say Yes to Claude (With Demo) Aembit 2026-04-24 | They said "yes" to AI!See how a $300B investment firm went from blocking Claude entirely to rolling it out across analysts and executives by reworking identity and access from the ground up. This walkthrough covers the architecture behind their agentic IAM use case: MCP Authorization Server, MCP Identity Gateway, blended identity, token exchange, and real-time policy enforcement โ plus a live demo showing secure access to enterprise data through Claude.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
OpenAIs Model Escaped Confinement to Cheat on a Test Aembit 2026-08-07 | Aembit Dave breaks down the recent OpenAI and Hugging Face breach: one zero day to escape the sandbox, then a string of familiar gaps (template execution CVEs, missing workload identity, exposed AWS metadata) to pivot and dig in. The reason it targeted Hugging Face in the first place might be the most telling part. #AskTheEngineer #AIsecurity #WorkloadIAM๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
[Demo] Replace Claude API Keys With Workload Identity Federation Aembit 2026-08-05 | See how Aembit uses Claude Workload Identity Federation to replace long-lived API keys with short-lived, just-in-time credentials. This demo covers configuration, token injection, workload attestation and access logging for a Kubernetes workload connecting to the Anthropic API.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Your Kubernetes Secrets Are a Liability Aembit 2026-07-29 | K8s secrets get copied across environments so often that nobody can map what's using what. Aembit Dave explains why the sprawl happens, and the IaC-first approach to cleaning it up.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Borrow This Incident Response Trick for AI Agent Approvals Aembit 2026-07-21 | Human-in-the-loop approvals are supposed to catch bad agent actions, but if the approver has little time and no context, they'll just click 'approve.' But you can do better than a rubber stamp. In this episoide of "As the Engineer," Aembit Dave explains why the fix means borrowing from a tried-and-true practice: incident response, runbooks and knowing who to call.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
[Demo] How Aembit Secures Microsoft Copilot Studio Agent Access Aembit 2026-07-17 | See how Aembit connects Microsoft Copilot Studio agents to MCP servers and downstream services without relying on stored credentials. This demo walks through the Copilot Studio configuration, Okta authentication, token exchange, policy enforcement, user-agent attribution, geolocation controls, and audit logging for GitHub access through the Aembit MCP Identity Gateway.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Stop Asking Why Your AI Agent Did That Aembit 2026-07-14 | Everyone wants to log "agent intent," but here's the uncomfortable truth: Agents don't have intent, they're predictive text engines producing the appearance of reasoning. In this "Ask the Engineer," Aembit Dave breaks down why chasing intent is a dead end, and what you should actually be tracking instead.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
The AI Agent Mess Nobody Wants to Admit They Have | Ask the Engineer Aembit 2026-07-02 | Teams spent months experimenting freely with AI agents, and now service accounts are scattered everywhere with no documentation, some still active. In this episode of Ask the Engineer, Aembit Dave breaks down a practical cleanup path: turning on tools like Cloud Custodian to catalog untagged resources, extending existing tagging practices to cover experimental work, and setting clear expectations up front so sandbox pilots have a built-in expiration date.Got a question about non-human identity, workload identity, or securing AI agents? Drop it in the comments and Dave might answer it in a future episode.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Aembitโs World Cup Hot Takes at Identiverse 2026 Aembit 2026-07-01 | World Cup was our whole theme at the Aembit booth at Identiverse this year โ so we put the team on camera to answer the hard-hitting questions:๐ซธ๐ฅ๐ซท Favorite team not named the U.S.? โฝ Who takes the penalty? ๐งค Who gives goalkeeper energy? ๐คธ๐ผโโ๏ธ And, most importantly, what's the Aembit equivalent of a bicycle kick?The hot takes did not disappoint.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
The Moment Security Debt Starts | Ask the Engineer Aembit 2026-06-24 | Aembit Dave answers this week's question: "At what point does 'we move fast and clean it up later' become 'we have an actual security problem'? I feel like we're somewhere in the middle and I genuinely don't know how to calibrate it. Is there a signal I should be looking for?"In this episode, Dave breaks down the line between useful speed and the kind of unchecked growth that creates real security debt. The tricky part is recognizing the signal before โlaterโ becomes too late.๐ Subscribe to catch new episodes.#AIAgents #NonHumanIdentity #DevSecOps๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
AI Agent Identity: Access, Delegation, and Accountability | Identiverse 2026 Aembit 2026-06-22 | David Goldschlag, Aembit co-founder and CEO, joins identity and security leaders at Identiverse 2026 in Las Vegas to discuss one of the biggest questions in AI security: how do we manage identity, access, delegation, and accountability for AI agents? The panel covers agent identity, MCP and OAuth, policy enforcement, short-lived credentials, token exchange, auditability, and why agents need more than human IAM retrofitted onto non-human systems.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Your AI Agent Doesnt Need All Your Permissions | Ask the Engineer Aembit 2026-06-18 | Aembit Dave answers this week's question: "When an AI agent is doing something on behalf of a user, whose permissions should it actually run with โ the agent's or the user's? We've had three people give three different answers internally and I'm not sure there's a right one."His answer might surprise your security team.#AIAgents #NonHumanIdentity #DevSecOps๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
The Real Reason Developers Hardcode Secrets | Ask the Engineer Aembit 2026-06-11 | Most teams know they shouldn't hardcode credentials. But they keep doing it anyway.In this debut episode of Ask the Engineer, Dave Sudia explains why security policies alone rarely change behavior and how behavioral incentives and better tooling can make the secure path the easy path.๐คโ Got a question for Dave? Leave it in the comments and he'll answer it in a future episode.#AIAgents #identity #DevOps #cybersecurity #platformengineering #AskTheEngineer #secretsmanagement๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
[Demo] How Aembit Works with Azure Databricks Pipelines Aembit 2026-06-02 | โฃThis video demonstrates how Ambit acts as a trust broker for Azure Databricks, eliminating the need to store hard-coded secrets or plain-text credentials in pipeline configurations. By leveraging existing Azure managed identities, pipelines can securely request short-lived, ephemeral tokens to access services like the Azure Graph API and third-party SaaS platforms like Salesforce. The video also covers managing granular access policies via the Ambit console or Terraform, while maintaining a comprehensive audit trail for all workload requests.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Governing the Ghost in the Machine: Identity Security Architectures for Agentic AI | NHIcon 2026 Aembit 2026-06-01 | Learn how Snowflake secures autonomous software. As AI transitions from an advisory role to executing real-world actions like calling APIs and triggering pipelines, the focus shifts from what a model can do to who owns and controls its agency.Gaurav Singodia, senior manager of cloud DevOps at Snowflake, provides a practical deep dive into non-human identity (NHI) challenges. He explores how to prevent "identity drift" in complex autonomous workflows where agent permissions may reflect historical usage rather than current intent.๐๐ฒ๐ ๐ง๐ผ๐ฝ๐ถ๐ฐ๐ ๐๐ผ๐๐ฒ๐ฟ๐ฒ๐ฑAgents vs. Scripts: Understanding how flexible agents use tools to achieve goals, breaking traditional static security assumptions.The Blended Identity Model: Evaluating human, agent, and workload identities together to ensure every action is authorized and attributed.Zero Trust for AI: Moving from broad authorization to a continuous loop that authenticates and authorizes every individual agent action.Real-World Application: A look at how Snowflake uses Aembit for secretless workload identity and just-in-time (JIT) access.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Phil Venables on AI for Security & Security for AI: the Future of Agentic Risk | NHIcon 2026 Aembit 2026-05-29 | This keynote from NHIcon 2026 features Phil Venables, a partner at Ballistic Ventures and former CISO at Google Cloud and Goldman Sachs, exploring the rapidly evolving intersection of artificial intelligence and cybersecurity. The discussion moves beyond the hype to examine how AI is disrupting the attacker-defender balance, lowering the barrier to entry for cybercriminals while simultaneously scaling the capabilities of defenders. Venables outlines the shift from traditional machine learning to generative and agentic AI, emphasizing that while automation is not new, the current scale and speed of adoption are unprecedented.The video provides a strategic framework for the safe deployment of AI, focusing on five critical pillars: software life cycle management, robust data governance, operational risk mitigation, identity and access management for agents, and continuous validation. Venables also addresses complex "second-order risks," such as emergent behaviors in trillions of interacting agents, the potential for "agentic flash crashes," and the challenge of maintaining human expertise in an automated world. The session concludes with a Q&A session covering the future of junior roles, the renaissance of deception technology, and the evolving necessity of "human-in-the-loop" oversight.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
[Demo] Secure Jenkins Pipelines with Aembit Workload IAM Aembit 2026-05-19 | See how the Aembit Workload IAM Platform integrates with Jenkins to securely manage and retrieve credentials for both freestyle projects and pipelines.This demo covers:๓ ฏโข๓ ๓ Token Retrieval: Automating OIDC and OAuth 2.0 token requests for services like Microsoft Graph.๓ ฏโข๓ ๓ Pipeline & Freestyle Configuration: Setting up the Aembit Edge SDK, agent extraction, and credential calls within Jenkins jobs.๓ ฏโข๓ ๓ ๓ ฏIdentity-Based Access: Using AWS trust providers and EC2 instance IDs to validate CI/CD hosts.๓ ฏโข๓ ๓ Policy Enforcement: Implementing time-based access policies and viewing detailed audit logs in the Aembit admin portal.๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
What SPIFFE Gets Right and Where It Falls Short Aembit 2026-05-05 | SPIFFE is quickly becoming a go-to standard for modern workload identity, giving teams a scalable way to authenticate workloads without relying on long-lived secrets. In this video, we cover where it works well and where it runs into friction โ especially across legacy environments, non-Kubernetes setups, and SaaS services you donโt control โ and how Aembit builds on SPIFFE by taking its short-lived identity tokens and turning them into policy-driven access, so you can manage both identity and access in one place.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
How to Enable Aembit MCP with Access Token Credential Provider Aembit 2026-04-24 | Discover step by step how to securely connect Claude to an Aembit MCP server using access tokens, SSO, and policy-based configuration without relying on long-lived credentials, including how to set up the credential provider, configure the MCP server, and validate access by querying audit logs.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
[Demo] Aembit MCP Server with Claude: Query Audit Logs in Seconds Aembit 2026-04-16 | See how to set up the Aembit MCP server and connect it to Claude Desktop in under a minute. Generate a token, add the config, and start querying your audit logs with natural language. Watch Claude securely pull and analyze real data from your environment, including examples like tracking policy changes and authentication activity. This is already available in your tenant, so you can try it right away.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Was That Youโฆ or Your AI Agent | Dan on the Street #RSAC 2026 Edition Aembit 2026-04-13 | Dan on the Street returns to the chaos that is RSA Conference 2026. Dan runs around the show floor saying the quiet part out loud about agents, identity, and access. How will the humans react?๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
[Demo] Aembit IAM for Agentic AI Aembit 2026-03-30 | This demo shows how Aembit secures AI agents using identity, context, and policy instead of static credentials. Youโll see how the Aembit MCP Identity Gateway and MCP Authorization Service work together to verify workload and user identity, evaluate access in real time, and issue short-lived tokens for secure access to tools like Microsoft Teams via Azure MCP servers.The walkthrough covers the full flow โ from user sign-in with Okta, to agent tool access, to policy enforcement and token exchange โ so you can see how access is granted or denied based on blended identity and runtime context.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Secure AI Agents Without Secrets: Runtime Credentials + Guardrails | Aembit x Netskope Demo Aembit 2026-03-19 | This demo shows how an AI agent running in AWS can securely connect to an LLM without storing credentials. Using n8n, Netskope One AI Gateway, and Aembit, requests are inspected, validated, and only allowed through when both identity and policy checks pass. Aembit handles real-time workload validation and injects short-lived credentials at runtime, while Netskope enforces guardrails that can block unsafe prompts. Youโll see both a successful request and a blocked one, along with how authentication, policy enforcement, and logging work together across the stack.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Why Access is Imperative in the Agentic Era | 2026 NHAI Global Summit Aembit 2026-03-02 | AI agents now need access to the same systems, data, and APIs that humans do. The hard question is how to grant that access without giving agents human usernames and passwords.In this session from the NHAI Summit in NYC, Aembit CEO David Goldschlag and veteran CISO Renee Guttmann break down how identity and access change when agentic AI enters production. They cover where existing user auth models hold up, where they fail, and how teams can start putting real controls in place.Topics covered:โข Why AI agent access is now an IAM problem.โข The difference between visibility and control.โข Why human credentials donโt work for agents.โข Applying modern auth principles to AI systems.โข What a realistic starting point looks like๐ Recorded live at the NHAI Summit in New York.About AembitAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
How Snowflake Scales Agentic AI for Customers Without Breaking Identity Aembit 2026-01-26 | Gaurav Singodia, a senior cloud manager at Snowflake, describes how Snowflake supports large-scale data collaboration, AI-driven fraud detection, and real-time analytics across industries. But as AI agents access data across more systems, managing these non-human identities can become a constraint. He explains how Aembit replaces static secrets with short-lived credentials and policy-based access, allowing teams to scale AI workloads without slowing development or increasing operational overhead.
The Identity Problem Behind AI Agents โ and How to Fix It Aembit 2025-12-10 | AI agents are exploding across enterprises, but most of the security stack still treats them like extensions of human users โ or worse, like simple scripts. Speaking at the 2025 SANS Institute Fall Cyber Solutions Fest, Aembitโs Andrew McCormick breaks down why that model is failing and what it takes to give agents real, verifiable identities.He shares:โข Why AI agents expose gaps that human IAM never had to solve.โข How inconsistent credential patterns across workloads create blind spots.โข Where vaults, long-lived secrets, and OAuth flows fall short once agents are autonomous.โข How Aembit issues and attests agent identities, injects credentials, and restores auditability.โข A live demo showing an AI agent updating GitHub using Anthropic without storing any secrets.If your team is adopting agents faster than your access model can support, this walkthrough shows what needs to change and why identity needs to move ahead of credentials.About AembitAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembitSign up for NHIcon 2026: aembit.io/nhicon
How Red Cup IT Uses Aembit IAM to Secure AI Agents in Customer Environments Aembit 2025-11-06 | Red Cup IT is a managed service provider focused on automation, security, and compliance. As customers began exploring agentic AI, the company needed a reliable way to let AI agents operate inside their environments without introducing unnecessary risk. Aembit provides the framework to do that. Each agent is issued a verifiable identity, its actions are recorded, and its access can be withdrawn at any time.By connecting Aembit with tools such as CrowdStrike, Beyond Identity, and Okta, Red Cup IT extends its access controls to AI-driven workloads across cloud and development environments. The result is a practical method for adopting AI safely, allowing Red Cup IT to support its customers with the same precision and accountability that define its broader approach to security.About AembitAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembitSign up for NHIcon 2026: aembit.io/nhicon
Introducing Aembit IAM for Agentic AI Aembit 2025-10-30 | A brief video introducing you to Aembit IAM for Agentic AI, a set of capabilities that help organizations safely provide and enforce access policies for AI agents as they move into production. The release introduces Blended Identity, which defines how AI agents act on behalf of verified users, and the MCP Identity Gateway, which ensures secure access to enterprise resources based on identity, access policy, and runtime attributes.About AembitAembit is the identity and access management platform for agentic AI and workloads. It enforces access based on identity, context, and centrally managed policies, giving organizations a singular place to control access risk from AI agents, automate credential management, and accelerate AI adoption. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembitSign up for NHIcon 2026: aembit.io/nhicon
NHIcon 2026: The Rise of Agentic AI Security | Coming Jan. 27 Aembit 2025-10-23 | The wait is over. NHIcon 2026 is coming Jan. 27. Join builders, defenders, and researchers shaping the future of agentic AI.๐๏ธ Register now: https://aemb.it/NHIcon2026๐ค Apply to speak: https://aemb.it/NHIcon2026-call-for-speakers
Welcome to NHICon 2025! Aembit 2025-09-29 | Aembit Co-Founder & CEO David Goldschlag and moderator Dan Kaplan kick off NHIcon 2025 โ a full day of conversation, collaboration, and ideas on non-human identity and agentic AI security.
Kevin Mandia on the Emerging Threats of Agentic AI, Non-Human Identity, and Beyond | NHIcon 2025 Aembit 2025-09-29 | Drawing on decades of frontline experience and expertise in threat intelligence and incident response, Kevin Mandia spotlights the trends and challenges destined to shape cybersecurity in 2025. As automation, modern software practices, and complex cloud environments accelerate, heโll zero in on two emerging threats: safeguarding AI-driven technologies and managing the escalating risks tied to non-human identities โ machine identities, service accounts, and workload credentials increasingly implicated in breaches. About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
LLMjacking Exposed: How Attackers Hijack Agentic AI Models | NHIcon 2025 Aembit 2025-09-29 | AI misuse ranks high on cybersecurity forecasts for 2025, and for good reason. This session explores LLMjacking, a newly identified threat by the Sysdig Threat Research Team, showcasing how attackers exploit large language models to bolster their malicious activities. After we discuss the details of this real-world threat, attendees will witness a live demonstration of prompt injection, where an LLM is manipulated into executing malicious code.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Enhancing Identity Standards for Non-Human Identities in Modern Systems | NHIcon2025 Aembit 2025-09-29 | Non-human identities (NHIs) โ from APIs to AI agents โ are essential to modern enterprises, yet they do not map well to traditional identity models. Directories and joiner-mover-leaver workflows were never designed for ephemeral, dynamic NHIs, leaving a gap in both scalability and security. In this session, weโll explore why NHIs donโt fit neatly into existing standards and how enhancing frameworks like SPIFFE and WIMSE, as well as new credential standards like SPICE, is crucial for managing their unique demands. Heather Flanagan, executive director and principal editor of IDPro, talks about the risks of token sprawl, the need for dynamic provisioning, and strategies to unify IAM, DevOps, and security teams around NHI challenges.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
CISOs Perspectives on the Business Risk of NHIs Aembit 2025-09-29 | Top security leaders from across industries will discuss the emerging risks associated with non-human identities, including the exposure of credentials and secrets. The conversation will focus on how CISOs can bring NHIs into risk management and compliance frameworks, prioritize them alongside human identities, assign ownership within the business, and address the strategic gaps that can leave organizations vulnerable.
Securing Non-Human Identity: A Personal Journey With Ed Amoroso | NHIcon 2025 Aembit 2025-09-29 | Former AT&T CISO Ed Amoroso leans on decades of experience to share what enterprise CISOs are prioritizing (and what they arenโt) with their identity access infrastructure.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Dr. Seymour Keys Introduces Credentialitis, the Secrets Ailment Plaguing Security and DevOps Aembit 2025-09-11 | Dr. Seymour Keys (not a real doctor) has seen it all โ hard-coded credentials, endless key rotations, and secrets buried in every corner of a pipeline. Doctors of identity security call it Credentialitis.Here he traces the symptoms, the complications, and why untreated cases keep security and DevOps teams up at night. The good news? Like any condition, awareness is the first step toward recovery.Watch him provide an intro into this modern ailment, then decide for yourself whether itโs time to schedule a check-up at https://aemb.it/Credentialitis.About AembitAembit is the non-human identity and access management platform that secures access between workloads and AI agents across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
[Demo] Splunk Direct Integration With Aembit via HTTP Event Collector Aembit 2025-09-08 | In this walkthrough, we show how Aembitโs new Splunk direct integration works using the HTTP Event Collector (HEC).Youโll learn how to:โข Configure Splunk with your Aembit tenant and token.โข Push audit logs and other event types directly into Splunk.โข Build Splunk dashboards to track workloads, connections, and potential account compromises.โข Continue using S3 and Google Cloud bucket options if preferredAembit makes it simple to centralize workload identity and access data in your SIEM or SOAR while still providing a powerful built-in dashboard.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Zero Trust for Non-Human Identities: A Cloud-First Approach | NHIcon 2025 Aembit 2025-09-04 | Cloud-first environments bring speed and scalability โ but they also amplify the risks associated with non-human identities like service accounts, API keys, and workloads. In this keynote, Talha Tariq will demonstrate how applying zero-trust principles can address these challenges head-on. Drawing from HashiCorpโs security strategy, heโll reveal practical approaches to automating secrets management, implementing just-in-time access, and curbing credential sprawl. Attendees will gain a clear roadmap to strengthen their security posture while maintaining the agility needed for modern innovation.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
[Demo] GitLab Credential Lifecycle Management with Aembit Workload IAM Aembit 2025-08-25 | Tired of managing long lived GitLab personal access tokens (PATs) and over privileged service accounts? In this demo, we show how Aembit automates GitLab Credential Lifecycle Management โ replacing static PATs with short lived, policy driven credentials that are injected just in time and rotated automatically.What youโll see in this video:โข The risks of long lived GitLab tokens and manual credential management.โข How Aembit reduces secrets proliferation, enforces least privilege, and eliminates manual rotations.โข A live demo of short lived credentials injected into GitLab workloads without exposing secrets.โข How administrators can configure policies, trust providers, and GitLab service accounts in Aembit.โข End-to-end credential lifecycle management that keeps your pipelines secure and compliant.๐๐๐จ๐ฎ๐ญ ๐๐๐ฆ๐๐ข๐ญAembit is the leading provider of workload identity and access management solutions, designed to secure non-human identities like AI agents, applications, and service accounts across on-premises, SaaS, cloud, and partner environments. Aembitโs no-code platform enables organizations to enforce access policies in real time, ensuring the security and integrity of critical infrastructure.๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Who Owns Non-Human Identity? The Blurred Lines Between Security and DevOps Aembit 2025-06-18 | User identity has a clear owner in most organizations. Non-human identity? Not so much. In this quick breakdown, Aembit CTO Kevin Sapp explains why NHI ownership is still murky and complex โ and why that friction between security and engineering might be the biggest opportunity yet for progress.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Secrets Are Not a Strategy: Why Workload Identity Needs a Better Way | Identiverse 2025 Aembit 2025-06-05 | Secrets managers werenโt built for todayโs scale, and credential rotation isnโt a viable strategy in our modern, multi-cloud infrastructure. In this lightning talk at Identiverse 2025 in Las Vegas, Andrew McCormick (ex-Starbucks, now Aembit) breaks down why itโs time to treat workloads like users, with federated identity and short-lived access โ not thousands of static secrets.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
How Aembit Secures Workload Access Across Microsoft, On-Prem, and Multi-Cloud Environments Aembit 2025-06-02 | This demo breaks down how Aembit delivers secure, credential-free workload access across Windows Server environments โ whether theyโre running on-prem, in Azure, or in another cloud like AWS. Youโll see how the Aembit Edge uses trust signals from Kerberos, Azure Entra, and AWS metadata to validate identity and enforce access policies.Weโll also walk through a real-world scenario where a Windows Server in AWS calls Microsoft Graph using Microsoft WIFF and a short-lived OAuth token with no static secrets or manual provisioning required.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
[Demo] How to Secure Database, CRM, and ETL Workloads Aembit 2025-05-21 | In this Aembit demo, we present a scenario in which a contractor is tasked with building a contact management tool that interacts with Snowflake and Salesforce. The developer operates within a Kubernetes environment but is never granted access to credentials. Instead, Aembit handles authentication and authorization through workload identity and policy-based controls. Every request is evaluated in real time, based on the identity of the Kubernetes pod, its geolocation, and time-of-day constraints.The demo shows how Aembit injects short-lived tokens โ including OAuth 2.0 and JWTs โ without requiring the developer to manage secrets or integrate with vaults. Authorization is enforced through cryptographic workload attestation and conditional access policies, ensuring that only trusted workloads in approved environments can access sensitive resources. This approach decouples security from development and eliminates the risks associated with long-lived secrets and manual credential handling.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
How to Escape the Secrets Nightmare in Multi-Cloud Environments with Identity Federation Aembit 2025-05-20 | Aembit Co-Founder and CTO Kevin Sapp shares a sharp perspective on what it really takes to manage access in todayโs multi-cloud reality โ and why relying on secrets just doesnโt scale.He touches on the growing need for trust relationships between platforms like AWS, Azure, Google Cloud, and major SaaS providers, hinting at a better way forward.๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
API Keys, Service Accounts, and Awkward Silences | Dan on the Street #RSAC 2025 Edition Aembit 2025-05-15 | We took to the floor at #RSAC2025 to talk about non-human identities with the one group who actually have an opinion: humans. And they did. One confused stare at a time. Youโll have to see for yourself.
Why Balancing Security and Developer Agility in the AI Era is So Important Aembit 2025-05-08 | In this short video, Aembit CISO Mario Duarte explores a critical challenge for security teams in the AI-driven world โ securing your organization without becoming a bottleneck for developers and engineers. Discover why the best security solutions, like Workload IAM, improve protection while making life easier for those building and maintaining critical infrastructure. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
How Do You Secure AI Agents With Access to Sensitive Data? Aembit 2025-05-05 | As AI agents take on more responsibilities and serve larger numbers of users, they often need access to sensitive data to function effectively. But how do you give them that access without exposing that data to humans or other systems unnecessarily? This short clip tackles the challenge of securing agentic AI systems at scale โ highlighting the emerging need for identity-aware, policy-driven access that protects sensitive information without slowing down automation.๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
MFA for Machines: How Snowflake Is โDreaming Bigโ With Aembit to Secure Non-Human Identities Aembit 2025-04-01 | What if your non-human identities โ apps, scripts, services โ could authenticate without long-lived secrets?In this 90-second clip, Cameron Tekiyeh, manager of global security analytics at Snowflake, shares how his team uses the Aembit Workload IAM Platform to enforce zero trust, policy-based access between software workloads. Think of it as MFA for machines โ secretless, just-in-time credentials injected at runtime, backed by conditional access policies that use signals from tools like CrowdStrike and Wiz.Hear how Snowflake achieves stronger security and tighter control over non-human access โ and why Cameron is excited about the potential of workload identity.๐ Want the full story? Watch the full webinar to learn about the problem, the setup, the rollout, and the results: https://aemb.it/3RlhBlW๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
Lessons from the Frontlines: The Truth About Identity Security | NHI Global Summit Aembit 2025-03-03 | Mario Duarte, CISO of Aembit and former CISO of Snowflake, shares firsthand experience tackling identity security challenges for both users and nonhumans. He breaks down the move from passwords to biometric authentication, the security and productivity gains that followed, and the gaps that still remained โ especially in workload identity.He explains why security teams end up accountable for breaches without direct control over identity provisioning and why credential management isnโt enough. Instead of chasing leaks, organizations need to enforce policies based on workload identity โ integrating with existing security tools and removing the need for static secrets.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
7 Stages of Non-Human Identity Security Maturity | NHIcon Aembit 2025-02-19 | Victor Ronin, head of software architecture at Ambit and former Okta veteran, takes us through the evolution of non-human identity management from early unauthenticated systems to today's sophisticated IAM solutions. In his talk at NHIcon 2025, Ronin breaks down seven key stages of NHI maturity, revealing how organizations navigate the increasingly complex landscape of machine identities that now vastly outnumber human users.Drawing parallels with the evolution of human IAM, Ronin explains how authentication has progressed from hardcoded credentials to modern identity management, while addressing why different teams within organizations often exist at different maturity levels. The talk provides guidance for security professionals, architects and anyone interested in understanding where their organization stands in the NHI maturity journey and how to move forward in an increasingly cloud-native world.About AembitAembit is the non-human identity and access management platform that secures access between workloads across clouds, SaaS, and data centers. With Aembitโs identity control plane, DevSecOps can fully automate secretless, policy-based, and Zero Trust workload access with MFA-strength capabilities. ๐Get more Aembit!Website: aembit.ioLinkedIn: linkedin.com/company/aembit
