The OWASP Top 10 Non-Human Identity (NHI) Risks for 2025 highlights significant security challenges associated with machine identities. These include improper offboarding, secret leakage, vulnerable third-party NHIs, insecure authentication methods, and overprivileged NHIs, among others. The document underscores the importance of automated lifecycle management, centralized NHI management, and continuous monitoring. It emphasizes the need for clear governance policies and better security practices to mitigate the risks posed by the growing number of machine identities in enterprise environments.
Table of contents
Non-Human Identities Are a Growing Attack SurfaceA Closer Look at the Top 10 Non-Human Identities Risks for 2025Strategic Recommendations for Mitigating NHI RisksA New Year For NHI SecuritySort: