Defakto

The Non-Human IAM Platform

[Defakto @DefaktoSecurity]

Anthropic now supports Workload Identity Federation. API keys for AI agents are on the way out. Pieter Kasselman explains why the shift matters and where agent authentication goes next.
Read more: https://t.co/rAR8Pd27f1

#NonHumanIdentity #AIsecurity #WorkloadIdentityFederation

[Defakto @DefaktoSecurity]

Defakto recognized with 2 #Globee Cybersecurity Awards!

🏆 Best Cybersecurity Startup
🏆 Best Cybersecurity Brand Development

This is a direct reflection of the Defakto team: the pace, the focus, and the standard they hold for what gets built + shipped

#NHI #IdentitySecurity

[Defakto @DefaktoSecurity]

This recognition belongs to the customers building with us. Defakto has been awarded 3 Gold Cybersecurity Excellence Awards!

🥇 Non-Human IAM
🥇 Machine Identity
🥇 Best Cybersecurity Startup

#Cybersecurity #MachineIdentity #NonHumanIdentity #CyberAwards #SecurityInnovation

[Defakto @DefaktoSecurity]

A single compromised token shouldn’t take down multiple ecosystems. But in the TeamPCP campaign, it did.

Defakto CTO Eli Nesterov breaks down why this became a chain reaction

https://t.co/m2qMq09x3p

#Breach #TeamPCP #Trivy #Secrets

[Defakto @DefaktoSecurity]

AI agents aren’t hidden. They’re ungoverned.

In this post, @PieterKasselman explains why visibility alone won’t secure AI — and what actually will.
🔗 https://t.co/WfwdGXSFCH
#AIGovernance
#AIsecurity
#NonHumanIdentity
#IdentitySecurity

[Defakto @DefaktoSecurity]

AI Attack Automation Is Here. And It’s Coming for Your Credentials!

💭 @PieterKasselman breaks down how eliminating long-lived credentials and issuing identity on demand flips the economics of defense.

🔗 https://t.co/jQWYVWyWCA

[Defakto @DefaktoSecurity]

Breaches in automated systems keep repeating, not because attackers are smarter, but because static secrets and overprivileged access still run the show.

Learn why resilience starts with identity, not detection.

🔗 Read the full post: https://t.co/TFpr0zh4pN

[Defakto @DefaktoSecurity]

🚀 Big News! We’ve raised $30.75M Series B, led by XYZ Venture Capital to accelerate our mission to eliminate static secrets and bring real security and governance to non-human identity.

Read More: https://t.co/8EjSb2ZstO

#SeriesB #Cybersecurity

[Defakto @DefaktoSecurity]

We’re hiring engineers.

If you want to work on identity that powers the next era of automation and AI, check us out.

👉 https://t.co/D00KhozarQ

#Defakto #Hiring #Engineering #NonHumanIdentity #NHI #MachineIdentity

[Defakto @DefaktoSecurity]

Authentication ≠ Authorization.
Confusing the two breaks your security model.
Here’s why the difference matters 👇
https://t.co/O7Qvxp8Hvk

[Defakto @DefaktoSecurity]

The Shai-Hulud worm spread by harvesting static tokens across npm.
Highlighting the ongoing pain of key rotation. Its is a treadmill:
The only way off the treadmill?
Eliminate static secrets entirely.
👉 New blog: https://t.co/qIoJdmypxu

#Secretless #shai-hulud #worm

[Defakto @DefaktoSecurity]

🔑 OAuth tokens.
🔑 API keys.
🔑 Snowflake & AWS creds.

All stolen in the latest Salesloft Drift / Salesforce supply chain breach.

Secrets are toxic data and the model is collapsing.

Blog: https://t.co/14eEVdYSTb
#cloudsecurity #infosec #NHI #breach

[Defakto @DefaktoSecurity]

Scaling AI safely means rethinking identity.
Multi-attestation is the foundation.
“MFA is for humans. Multi-attestation is for AI.” – Pieter Kasselman
👉 https://t.co/3T6lmDStUd

#MultiAttestation
#NonHumanIdentity
#NHI
#AIsecurity
#MachineIdentity

[Defakto @DefaktoSecurity]

Service accounts don’t get offboarded. They accumulate risk and attackers know it.
It’s time to eliminate static identity and go accountless.

SPIRLs Pieter Kasselman's explains how in this latest blog: https://t.co/XOQNEpkdKh

[Defakto @DefaktoSecurity]

Base44 didn’t need a password. Just a public app_id and no identity checks.
Wiz’s latest discovery shows what happens when AI & automation scale without Non-Human Identity
👉 Learn more on what went wrong—and how to fix it https://t.co/4AZrFgsNWH
#Wiz #Base44 #vibecoding #AI #NHI

[Defakto @DefaktoSecurity]

xAI. Last week McHire. Different leaks, same root cause: exposed API keys.

We need to stop relying on secrets and start issuing identity.

Here’s how SPIRL eliminates static keys: https://t.co/VtwD7c8m7O

[Defakto @DefaktoSecurity]

A default password + an open API = 64M McDonald’s records exposed.
No MFA. No identity. No excuse.

We broke down what went wrong — and how NHI could’ve prevented it.
👉 https://t.co/SEsk2Ynma7

#McHire #NHI #NonHumanIdentity #APISecurity

[Defakto @DefaktoSecurity]

Rotating secrets in CI/CD is great.
Not needing them in the first place is even better.
Pieter Kasselman gets into what that actually looks like → https://t.co/VDMQbCN7Kh

#NHI #nonhumanidentity #machineidentity #CICD

[Defakto @DefaktoSecurity]

here’s a troll under your infrastructure. 🧌
Its name is Secret Sprawl — and it’s hungry.

Feeding it more secrets won’t stop it.
Replacing them with identity will.

Read how → https://t.co/UbGj2xlXWT
#CloudSecurity #SecretsManagement #MachineIdentity #NHI

[Defakto @DefaktoSecurity]

What happens when AI has access… and no limits?

It starts answering questions like:
"What's everyone's salary?"

Agentic AI needs identity + access controls.
🛡 Read more → https://t.co/W3QURxxzMD
#AIsecurity #AgenticAI #DataLeak #CISO #NHI #MachineIdentity