The 30-day plan to inventory and own every NHI
Four weeks, four outcomes: a complete inventory, a classification, an accountable owner for every production identity and an evidence trail — without boiling the ocean.
Read moreGuides
Practical, checklist-driven playbooks
Step-by-step guides for security and platform teams: inventory, ownership, framework mappings and the evidence each control should be able to produce.
All guides
Latest guides
3 guides, newest first.
Identity ≠ Credential: the model behind NHI security
Why treating a secret as if it were an identity leads to the wrong inventory, the wrong owner and the wrong fix — and the relationship model that works.
Read moreMapping the OWASP Non-Human Identities Top 10 to controls you can evidence
A practical walk through the ten NHI risk categories, the question each one asks, and the evidence a control plane should be able to show for it.
Read moreReference
Keep these open while you work
Definitions, frameworks and scenarios the guides point to.
- GlossaryEvery term the guides use, from access path to workload identityLearn more
- OWASP NHI Top 10The ten categories, each with a question, evidence and a controlLearn more
- NHI Security 101The taxonomy and relationship model the guides assumeLearn more
- Use casesOrphaned identities, exposed credentials, shadow AI and more, scenario by scenarioLearn more
- NHI risk assessmentA structured starting point for discovering your non-human identity riskLearn more
- IntegrationsThe five connectors the guides reference, and what each one readsLearn more