Practical credential security,
written to be used

Who builds your credential vault, and why it changes what the vault is

Twenty years of enterprise delivery under other people's audits, and the boring decisions it forced.

22 August 2026

ISO 27001 vs SOC 2: what each demands of your credentials

The two standards compared, the credential controls each one checks, and the evidence auditors ask for.

16 August 2026

What is an enterprise password manager? A no-hype definition

A no-hype definition, the capabilities that matter, and when a team vault is all you need.

16 August 2026

Team credential vault: how shared secrets should actually work

Why shared company secrets need different mechanics than personal passwords.

16 August 2026

Password manager with Entra ID SSO

What SSO should control, the zero-knowledge question, and a minutes-long setup.

16 August 2026

A credential breach just hit the news. Your first 24 hours.

The incident playbook to run when a vendor breach or password leak makes the news.

16 August 2026

AI agents need credentials too. Who is holding them?

Machine credentials are the fastest-growing leak surface. The rules for storing them.

16 August 2026

Employee offboarding: revoke credentials cryptographically, not administratively

What a leaver's laptop still remembers, and the 30-minute drill to test your process.

16 August 2026

SSO covers your apps. Who covers everything outside SSO?

Governing the credential long tail that SAML and OIDC cannot reach.

16 August 2026

Stop sharing passwords in chat: the real cost and the one-afternoon fix

The honest cost of passwords in Slack and Teams, and the one-afternoon migration.

16 August 2026

What is zero-knowledge encryption?

The plain-language guide, including the questions that expose a fake claim.