Riptides

36 posts

Riptides

@riptidesio

Control what agents can do. Trace everything they did.

San Francisco

Joined March 2025

RepliesReplies RepostsReposts MediaMedia

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone

or

Log in with username or email

Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.

Riptides
@riptidesio
Jul 27
Still fighting your SPIRE rollout? You picked up a reference implementation and expected a complete solution. Managed SPIRE doesn't fix that either, same architecture, someone else babysitting it. Wrote up the other way to get SPIFFE:
riptides.io
Adopting SPIFFE Should Not Require an Engineering Team | Riptides
SPIFFE is the right identity standard, most engineers who've tried to run SPIRE in production will tell you that. The pain is the operational model built to prove it works: a server, a fleet of...
Riptides
@riptidesio
Jul 6
Your CI/CD pipeline is a supply chain attack gold mine. Stop authenticating jobs with secrets. Give every GitHub Actions job a real cryptographic identity instead.
riptides.io
Your GitHub Actions Job Deserves a Real Identity | Riptides
GitHub secrets are shared, static, and opaque. Riptides gives every GitHub Actions job a cryptographic workload identity, then uses it to inject credentials and track every connection it makes, with...
Riptides
@riptidesio
May 18
Unified TUI for inventory, health-check, and track every API key issued across your AI providers.
riptides.io
Introducing KeyLedger: Because You Probably Don't Know How Many AI Keys Your Org Has | Riptides
Most organizations have no idea how many AI API keys they've issued across OpenAI, Anthropic, Google Cloud, and AWS, let alone which ones are stale, orphaned, or exposed. KeyLedger is a new open...
Riptides
@riptidesio
Mar 10
AI agents are becoming incredibly helpful. They also tend to hold credentials that unlock far more than they should. Utility is rising. So is overprivilege.
riptides.io
Our AI Is Helpful. Also Slightly Overprivileged. | Riptides
MCP makes AI assistants genuinely useful by connecting them to real systems. But once agents start acting through MCP servers, a new question appears quietly in the background: who is actually...
Riptides
@riptidesio
Feb 23
Why manage secrets when you can exchange identities? Discover how our open-source tokenex library simplifies secretless Azure access by turning external identity into short-lived, native cloud credentials for a more secure and scalable architecture.
riptides.io
Secretless Azure access with tokenex: Federated Identity via User-Assigned Managed Identity |...
Why manage secrets when you can exchange identities? Discover how the open-source tokenex library simplifies secretless Azure access by turning external identity assertions into short-lived, native...

Advertisement

Advertisement