BeyondTrust, identity security, has announced the expansion of its Identity Security Insights™ solution. The update introduces Secrets Insights, a new capability designed to detect and secure hidden attack surfaces created by secrets and non-human identities.

The company reported that as Agentic AI systems begin to interact autonomously with infrastructure, make decisions, and provision access, unmanaged secrets and non-human identities pose greater security risks.

The launch follows the completion of the initial class of Identity Security Risk Assessment engagements across various industries. Findings revealed significant security issues:

• Dormant privileged service accounts were found in over 70% of environments.
• Overly permissive Entra Service Principals created pathways to Global Admin privileges, exposing Microsoft 365 environments to potential takeover.
• Reused credentials across service accounts enabled a single compromised password to affect multiple non-human accounts.

Other issues included low-privileged users escalating access across Active Directory, Entra, AWS, Okta, and GitHub due to configuration oversights. AD service accounts also bridged on-premises and cloud environments, creating cross-platform attack vectors. Ineffective GitHub repository management further exposed secrets and sensitive code.

“These identity infrastructure issues aren’t just misconfigurations, they’re invitations,” said Marc Maiffret, CTO at BeyondTrust. He added that many organizations lack complete visibility into their identity attack surface, increasing the risk as Agentic AI adoption grows.

The new Secrets Insights capability extends BeyondTrust’s platform visibility to API keys, service account credentials, tokens, and more across hybrid and multi-cloud environments. It also integrates with BeyondTrust Password Safe for automated remediation.

Key benefits include:

• Discovery of unmanaged secrets across cloud and on-premises environments.
• Identification of users with direct or indirect access to secrets.
• Risk scoring and prioritization based on exposure and privilege level.

Secrets Insights will be available later this year. BeyondTrust continues to offer complimentary Identity Security Risk Assessments, often completed in less than 48 hours, to help organizations address hidden privilege and secrets risks while moving toward Zero Standing Privilege (ZSP) and Just-in-Time (JIT) access.

Related post

View all