Resources

AI | Security

EU AI Act Compliance: Mapping Identity Security Controls

The European Union’s AI Act is the world’s first comprehensive legal framework for artificial intelligence. It takes a risk-based approach, applying stricter obligations to AI systems that could significantly affect people’s safety or fundamental rights. The regulation entered into force on August 1, 2024, with requirements phased in over time. High-risk AI requirements were originally […]

AI | Machine IAM

Zero Standing Privileges (ZSP) and Just-in-Time (JIT) Access: The New Security Standard for the AI Era

Zero Standing Privileges (ZSP) and Just-in-Time (JIT) access eliminate persistent credentials by granting access only when needed, for a specific task, and for a limited time.

AI | Machine IAM | Security

The Limits of Vaulting AI Agent Credentials

Quick Answer: Palo Alto Networks Unit 42 showed how a prompt-injected AWS AgentCore agent could steal and replay a credential even though it was securely stored in AgentCore Identity. The research exposes a broader problem with AI agent security: protecting credentials at rest and in transit is not enough if they become readable inside the […]

Webinar

The 47-Day Certificate Era: Are Your Machine Identities Ready?

Automate certificate lifecycles with GlobalSign + Akeyless

AI | Machine IAM | Security

Gartner on Machine IAM: Govern the Identity, Not the Credential

Quick Answer: Machine IAM shifts security from managing credentials as standalone objects to governing the identities of workloads and AI agents directly. That means establishing who or what is requesting access, issuing short-lived authority based on policy, and maintaining ownership and lifecycle context as those identities change. For autonomous agents, that model increasingly extends into runtime, […]

Security

Embracing a Secretless Approach with Akeyless

Key Takeaways Answer Capsule: What Is Secretless Authentication? Secretless authentication is an approach that lets machines, services, and applications authenticate to systems and each other without ever holding a static, storable secret, such as a hardcoded API key or a long-lived certificate. Instead, a workload proves its identity (through a cloud IAM role, a Kubernetes […]

AI | Security

Anthropic’s Latest Threat Report Shows How AI Is Industrializing Secret Theft

Quick Answer: Anthropic’s September 2026 Threat Intelligence Report shows how AI is compressing the path from exposed credential to enterprise compromise. One suspected ShinyHunters affiliate scanned 1.8 million Android apps for hardcoded secrets, while related operators used AI to accelerate reconnaissance, token abuse, data collection, and exfiltration. For defenders, faster secret scanning is only part […]

AI

AI Agent Runtime Identity Security For Dummies®

A practical AI agent security guide for securing identities, replacing static credentials, and controlling what autonomous agents can do at runtime.

AI | InfoSec | Machine IAM

Cursor Secrets Management: How Akeyless Is Revolutionizing Developer Security

Cursor stores API keys in a local database any extension can read. Akeyless detects and secures hardcoded secrets without breaking your workflow.

Akeyless Announces General Availability of Agentic Runtime Authority for Real-Time Intent-Based Access Control of AI Agents

Akeyless SecretlessAI® keeps credentials out of AI agents; Runtime Authority enforces what those agents are authorized to do at the moment of action

Webinar

Control What AI Agents Do at Runtime

See how Enterprise organizations secure AI agent access across MCP and leading AI frameworks with SecretlessAI™ and runtime controls.

AI | Security

Rogue AI Agents Needed Exposed Credentials to Breach Hugging Face

700 rogue AI agents breached Hugging Face through exposed credentials. What the incident reveals about AI agent identity security.