Vendors Chase Potential of Non-Human Identity Management

**Executive summary:** The report describes a rising threat vector where compromised non-human identities (NHIs)—API keys, OAuth tokens, service accounts, certificates and secrets—have enabled high-impact incidents such as the Hellcat ransomware theft from Schneider Electric, Snowflake customer compromises, GitHub OAuth-based extortion, and stolen tokens from Hugging Face; it highlights industry survey data showing low visibility and governance for NHIs, growing startup and vendor activity to address NHI security, and expectations of increased M&A and integration with human identity systems.