In this video, Kurt Sand, our general manager of DevSecOps, gives his perspective regarding securing application secrets across the enterprise, based on what he's heard in his conversations with security leaders and experts. Listen as he shares best practices, tips, real-life examples from customers and the benefits of a centralized approach when it comes to securing your application secrets and improving the efficiency of your application security.
Recommended for You
Defeating Microsoft EPM in the Race to Admin: a Tale of a LPE vulnerability
Introduction Not too long ago I read an interesting blogpost by SpecterOps about Microsoft EPM that got my attention as I was not aware of this Microsoft product/feature. It was interesting to...
Securing cloud console and CLI access for agile software development
Fast-moving cloud environments demand speed, but without the right access controls they invite risk. Resources such as virtual machines, containers, and services are created, modified, and...
How external attackers and malicious insiders exploit standing privileges in the cloud
For many of us, the term “cloud security breach” conjures meticulous attack plans executed by sophisticated criminal syndicates. But in reality, “attacks” can be far more mundane: maybe some...
Bridging runtime visibility and secrets management in Kubernetes with Sweet Security and CyberArk
Secrets management is a foundational pillar of cloud security. It enables secure storage, rotation, and access control for application secrets. But in Kubernetes environments, secrets don’t just...
Productivity vs. Security: The Double-Edged Sword of GenAI in Coding
Generative AI accelerates development, but it can also slip vulnerabilities into your software supply chain. From exposed secrets to malicious code, the risks are real and evolving fast.
Smarter Application Control for Modern Endpoints
See how CyberArk EPM delivers adaptive, identity-centric application controls to stop ransomware, insider threats, and APTs while boosting efficiency.
4:06How to Hack a Cloud Access Mismanagement
Stop cloud breaches before they start! See how CyberArk Secure Cloud Access prevents access mismanagement with temporary tokens, Zero Standing Privileges, and seamless, secure SSO integration.
3:42How to Hack a Cloud: Insider Threat
Stop insider threats! See how CyberArk Secure Cloud Access enforces Zero Standing Privileges to block malicious AWS activity while enabling secure, seamless access for legitimate tasks.
44:17Bridging the Secrets Management Divide From Traditional IT to Cloud-Native Without Silos
Secrets sprawl is growing fast. Join CyberArk experts to explore a practical, unified approach to securing secrets across modern cloud-native environments.
CyberArk Endpoint Identity Security: a modern take on application control
Datasheet providing an overview of how CyberArk EPM provides a modern take on application control and endpoint protection
Container security at scale: Strengthening software supply chains
Modern applications have undergone a paradigm shift, with containers becoming the default choice for deployment. While their flexibility and scalability are well-recognized, their adoption has...
Modern application control, done right with least privilege
When attackers gain access to a single endpoint—like a developer’s workstation or an HR system—it’s often game over. With some skill and patience, that foothold can escalate into full-blown...
Developers fly the plane: AI guardrails for secure cloud innovation
Developers now chart courses through environments as dynamic and unpredictable as open skies, plotting efficient courses through shifting clouds of technology to reach ambitious goals....
Automate code signing workflows and ensure your keys never leave secure, encrypted storage with CyberArk Code Sign Manager.
Modern Session Management Solution Brief
Solution Brief that discusses CyberArk Modern Session Management Capabilities, focusing on JIT and ZSP access methods.
19:19The Next Frontier in Identity Security: Machines, Secrets and AI
Machine identity sprawl is rising. Hear expert insights from ESG and CISO tips to improve visibility, control, and security.
API Keys and What Makes Them Vulnerable
API keys are essential for securing application access, but when hard coded, reused, or stored insecurely, they become easy targets for attackers.
Your Machines Might Be Your Weakest Link in a Security Audit
Machine identities now outnumber humans and often go unmanaged, creating serious audit and compliance risks. Download the guide to learn how to secure non-human access and improve audit readiness.
Now on AWS Marketplace: CyberArk Enterprise Support for cert-manager
Running Kubernetes on Amazon EKS? You’re likely already using cert-manager—the open source standard for TLS and mTLS certificate automation in Kubernetes clusters. Today, we’re excited to announce...
CyberArk Secure Cloud Access: Purpose-Built To Achieve ZSP
CyberArk Secure Cloud Access combines just-in-time access and zero standing privileges to eliminate always-on access risk without slowing teams down.
