SRE Playbook: A Guide to Discover and Catalog Non-Human Identities (NHI)

SRE Playbook: A Guide to Discover and Catalog Non-Human Identities (NHI)

| | non-human identity
Let's take a closer look at the fragmented NHI inventory from a site reliability engineer's perspective ... Read More
Responding to Exposed Secrets - An SRE's Incident Response Playbook

Responding to Exposed Secrets – An SRE’s Incident Response Playbook

| | Secrets detection
Today, let's take a closer look at incident response playbooks: how to build one, tailor it for secret leaks, take actions, and learn from incidents ... Read More
Mutual TLS (mTLS) Authentication - A Complete Guide

Mutual TLS (mTLS) Authentication – A Complete Guide

| | DevSecOps
mTLS, or mutual Transport Layer Security, is a mechanism that establishes two-way authentication between two parties, ensuring they are who they claim to be ... Read More
A Complete Guide to Transport Layer Security (TLS) Authentication

A Complete Guide to Transport Layer Security (TLS) Authentication

| | DevSecOps
Data security is non-negotiable. Transport Layer Security (TLS) authentication stands as the cornerstone for the protection of data in transit. When it comes to protecting enterprise APIs, systems, and identities, the importance of TLS auth cannot be overstated ... Read More
API Key Security: 7 Enterprise-Proven Methods to Prevent Costly Data Breaches

API Key Security: 7 Enterprise-Proven Methods to Prevent Costly Data Breaches

In this blog, we will navigate through a few enterprise-proven methods to make API key more secure. Read on! ... Read More
Terraform Secrets Management Best Practices: Secret Managers and Ephemeral Resources

Terraform Secrets Management Best Practices: Secret Managers and Ephemeral Resources

| | Secrets Management
👉TL;DR: Use a secrets manager and variables—never hardcode secrets. Mark outputs sensitive and store state remotely with encryption and strict access. Traditional data sources can leak to state; use Terraform 1.10 ephemeral resources to fetch/generate secrets at apply time without persisting them.Terraform Secrets ... Read More
How to Use NHI Governance as Your Central Dashboard to Monitor AWS IAM

How to Use NHI Governance as Your Central Dashboard to Monitor AWS IAM

| | non-human identity
Let's have a look at how to integrate NHI Governance with AWS IAM to get detailed security insights into your dashboard ... Read More
How to Securely Access AWS from your EKS Cluster

How to Securely Access AWS from your EKS Cluster

| | DevSecOps
Discover EKS Pod Identity Association—the modern, secure way to grant AWS permissions without the operational overhead of OIDC providers. No more duplicated IAM roles across clusters, no more trust policy updates every time you scale ... Read More
Authentication and Authorization Best Practices

Authentication and Authorization Best Practices

| | Best Practices
Not only API authentication and authorization are the crucial aspects of API security when crafting secure software, but they also impact scalability and user experience ... Read More
Secrets detection in the CI/CD pipeline | Detecting credentials with GitHub actions & GGShield

How to Handle Secrets in CI/CD Pipelines

| | DevSecOps
Securely managing secrets within the CI/CD environment is super important. Mishandling secrets can expose sensitive information, potentially leading to unauthorized access, data breaches, and compromised systems ... Read More