Secret Management

Guides and audits covering credential security for AI agents, secrets scanning, and secure access patterns for automated workflows.

4 articles

Authenticating AI Agents: A New IETF Draft on Agent Identity and Authorization

A new IETF draft from authors at OpenAI, Okta, AWS, Ping, and Zscaler argues AI agents should be treated as workloads with short-lived cryptographic identities — not handed your long-lived API keys.

ArticlesJune 18, 20265 min read

GitGuardian for AI Agents: An AX Audit

A four-stage agent experience audit of GitGuardian: testing discoverability, onboarding, integration, and agent tooling, with a competitor comparison.

ArticlesMay 12, 202638 min read

I Tried to Get an AI Agent to Post a Blog Without Leaking My Password

Can an AI agent log into WordPress, write a post, and publish it, without ever seeing your password?

GuidesMarch 31, 202610 min read

AI Agents Still Need Passwords: Three Approaches to Credential Security

AI agent auth assumes OAuth and tokens, but agents still need plain old passwords for databases, APIs, and legacy services. I tested three approaches to credential security for AI coding agents.

GuidesMarch 24, 202612 min read