entro labs white

The NHI & Secrets Risk Report

H1 2025

 

Share     Download the Report

Key stat

Rise of the Machine Risks

43%

Of exposed secrets are found outside of code
 

144:1

Non-Human Identities now outnumber humans 144:1  (compared to 92:1 H1 2024)

1 in 20

AWS machine identities carry full admin privileges making them critical multipliers

Key Trends Shaping NHI Security

1. Agentic AI Inflation – Surge of LLM agents and automation bots

2. Secrets Without Sightlines – Why vaulting isn’t enough anymore

3. Real-Time or Bust – From posture to detection-driven defense

144 to 1
report1

Send. Share. Expose.

Collaboration platforms and messaging apps are essential to fast-paced, SaaS-first organizations, but in 2025 they have quietly become hotspots for end-user secret exposure with about 14% of the secrets exposure share

More to Learn

The SharePoint Problem

"The secret is in a local file I saved on my laptop, what harm could it do?"

NHIs Built to Last, Forgotten Fast

NHIs are outliving their intended use and owner - remaining active without rotation,  visibility, or ownership.

25 Most Exposed SaaS Secrets

If your SaaS tools issue an API key, chances are it’s been exposed somewhere

The NHIDR™ Risk Radar

The top five most common risks flagged by Entro's NHIDR™ across our customer base.

Download the Report

entro labs white