Securing AI Agents: How to Stop Credential Leaks and Protect Non‑Human Identities with Idan Gour

Bridging the AI Security Gap—Inside the Rise of Non‑Human IdentitiesIn this episode of Cyber Sentries from CyberProof, host John Richards sits down with Idan Gour, co-founder and president of Astrix Security, to unpack one of today’s fastest-emerging challenges: securing AI agents and non-human identities (NHIs) in the modern enterprise. As companies rush to adopt generative-AI tools and deploy Model Context Protocol (MCP) servers, they’re unlocking incredible automation—and a brand-new attack surface. Together, John and Idan explore how credential leakage, hard-coded secrets, and rapid “shadow-AI” experimentation are exposing organizations to unseen risks, and what leaders can do to stay ahead.From Non‑Human Chaos to Secure‑by‑Design AIIdan shares the origin story of Astrix Security—built to close the identity-security gap left behind by traditional IAM tools. He explains how enterprises can safely navigate their AI journey using the Discover → Secure → Deploy framework for managing non-human access. The conversation moves from early automation risk to today’s complex landscape of MCP deployments, secret-management pitfalls, and just-in-time credentialing. John and Idan also discuss Astrix’s open-source MCP wrapper, designed to prevent hard‑coded credentials from leaking during model integration—a practical step organizations can adopt immediately.Questions We Answer in This EpisodeHow can companies prevent AI‑agent credentials from leaking across cloud and development environments?What’s driving the explosion of non‑human identities—and how can security teams regain control?When should organizations begin securing AI agents in their adoption cycle?What frameworks or first principles best guide safe AI‑agent deployment?Key TakeawaysStart securing AI agents early—waiting until “maturity” means you’re already behind.Visibility is everything: you can’t protect what you don’t know exists.Automate secret management and avoid static credentials through just‑in‑time access.Treat AI agents and NHIs as first‑class citizens in your identity‑security program.As AI adoption accelerates within every department—from R&D to customer operations—Idan emphasizes that non‑human identity management is the new frontier of cybersecurity. Getting that balance right means enterprises can innovate fearlessly while maintaining the integrity of their data, systems, and brand.Links & NotesLearn more about Paladin CloudLearn more about Astrix SecurityOpen Source MCP Secret WrapperIdan Gour on LinkedInGot a question? Ask us here! (00:04) - Welcome to Cyber Sentries (01:21) - Meet Idan Gour (03:36) - As the Vertical Started to Grow (06:37) - The Journey (09:24) - Struggling (13:18) - Risk (16:15) - Targeting (17:54) - Framework (20:18) - Implementing Early (21:52) - Back End Risks (24:04) - Bridging the Gap (26:13) - When to Engage Astrix (29:54) - Wrap Up