Blog

• Why your AI coding agent should never see your API keys 2026-08-15
• Auditing AI agent activity: structured logs for credential access 2026-08-16
• Building a DLP pattern layer: keyword pre-filter, RE2, and entropy 2026-08-16
• Claude Code secret management: moving from .env to a password store 2026-08-16
• DLP for LLM API traffic: scanning outbound requests for secrets 2026-08-16
• How to keep API keys out of your AI coding agent's context window 2026-08-16
• Killing your .env files: a zero-friction migration path 2026-08-16
• OAuth device flow explained: how CLIs and AI agents approve access 2026-08-16
• OAuth tokens for AI agents: device flow and rotating refresh tokens 2026-08-16
• OpenCode + pass: injecting credentials without exposing them to the agent 2026-08-16
• pass vs Bitwarden for AI agent credentials: which works with agents 2026-08-16
• Prevention fails: making secrets actually disappear from session databases 2026-08-16
• Prompt injection and API key exfiltration: what actually happens 2026-08-16
• SQLite forensics: why deleting rows doesn't erase secrets (FTS, free pages, VACUUM) 2026-08-16
• Using gitleaks rules to detect API keys in your own outbound traffic 2026-08-16
• What is a credential broker for AI agents (and why you need one) 2026-08-16
• Why a zero-dependency Go binary matters for security tools 2026-08-16