Segurança de IA, agentes e nuvem — em duas línguas.

There is one question that separates teams running agents securely from teams merely running agents: when the agent is executing nothing, what can its credential still do? In most deployments the answer is “everything”. That is an identity problem the security industry already solved for humans — and is about to have to solve again, from scratch, for software. What PAM taught us Modern privileged access management rests on a simple idea: standing privilege is standing risk. So we built JIT — access granted at the moment of need, scoped, auto-expiring, fully audited. An administrator does not carry admin power all day; they request it, use it, and give it back. Now look at how we typically grant access to an agent. We create a service account. We attach the permissions it might need — and when unsure, a few more. We generate a key. We put the key in an environment variable. And we leave it there. That credential does not expire when the task finishes. It is not reduced while the...