Resources

DevOps | Machine IAM | Security

Shai-Hulud Returns: The npm Worm That Only Works Because Your Secrets Are Standing Still

The recent Shai-Hulud supply chain attack demonstrates a fundamental shift in how attackers compromise organizations. Rather than exploiting software vulnerabilities, the malware targets what already exists on developer workstations and CI/CD systems: long-lived credentials. From .env files and cloud credentials to HashiCorp Vault tokens and AI coding assistants, the attack succeeds because secrets remain static, discoverable, and reusable. The lesson is clear: reducing standing privileges, adopting just-in-time credentials, and moving toward secretless authentication dramatically reduces the attacker's blast radius.

Security

From Secrets Sprawl to Secretless Authentication: The Five Phases of Modern Identity Security

Secretless authentication eliminates the permanent credential applications use to access a secrets platform. Explore the journey from centralized secrets and automated rotation to workload identity federation through a live Kubernetes demo.

Webinar

Securing AI Agents in Claude with Akeyless

See how Akeyless Agentic Runtime Authority enables secure AI agent access with just-in-time credentials, runtime policy enforcement, and full auditability.

DevOps | Machine IAM | Security

npm Just Killed the Skeleton Key: What It Means for Every Other Credential You Own

GitHub's new 2FA rules close npm's biggest attack path. Learn what changed, why it happened, and what it means for every credential in your CI pipeline.

AI | Machine IAM | Security

Understanding the AI Agent Security Ecosystem: Roles, Responsibilities, and Where Runtime Authority Fits

As enterprises deploy AI agents, an entirely new security ecosystem is emerging. AI discovery platforms, MCP gateways, workforce AI governance platforms, automation platforms, and runtime authorization solutions all promise to secure AI agents—but they solve fundamentally different problems. Understanding where each category fits is becoming just as important as choosing the right products.

Runtime Security for AI Agents RFP Template

A ready-to-use RFP template for evaluating runtime security solutions that protect autonomous AI agents.

Infographic: The State of AI Agent Identity Security

AI agents are accessing sensitive systems and data, often through persistent credentials that organizations cannot fully track or control.

AI | Machine IAM | Product Updates | Security

Akeyless Integrates With Claude’s Compliance API to Secure AI Agent Access

Learn how the Akeyless integration with Claude’s Compliance API secures AI agent access through just-in-time credentials and runtime policy enforcement.

AI | Security

The Hugging Face Breach Comes Down to a Credential Problem

The Hugging Face breach was AI-driven, but a stolen credential made it possible. See what real AI agent identity security requires to stop it.

AI | Machine IAM | Security

Your AI Agent Just Logged In. Now What?

1Password’s agentic autofill keeps credentials out of an AI agent’s hands. But the bigger security question begins after login: what can the agent do with the session it has been given?

How a Major Global Financial Institution Strengthened Identity Security for the AI Era

How a major global financial institution modernized identity security to support secure AI adoption, resilience, and governance.

Competitor | DevOps | InfoSec

Akeyless vs. HashiCorp Boundary for Enterprise Secure Access

Compare Akeyless Modern PAM vs. HashiCorp Boundary to see how enterprises can simplify secure remote access without managing infrastructure. Akeyless delivers a SaaS-native, Zero-Knowledge alternative that unifies access, secrets, and key management for hybrid and multi-cloud environments.