Email content

Teleport

New in Identity

Teleport — The AI Infrastructure Identity Company

Infrastructure work is no longer paced by how fast a person can type. Agents act across systems, models read an entire codebase in an afternoon, and pipelines deploy on every merge. The controls wrapped around that work still assume a human on the other end, holding a credential and taking their time. This issue covers three places that assumption is coming apart, and what is replacing it.

Identity Everywhere: Bringing Infrastructure Identity to Agentic IT

By Peter Bailey, Cisco; and Ev Kontsevoy, Teleport

Networking succeeded for decades by being identity agnostic. Packets moved because they carried addresses, not because anything verified who or what was behind them. Cisco and Teleport are partnering to close that gap for network and infrastructure administrators, brokering each privileged session with short-lived cryptographic identity instead of a vaulted credential. The starting principle is blunt: no anonymous computing in critical infrastructure.

Read the blog announcement →

Recent press and analyst coverage of the news:

Network World news →

HyperFRAME analyst analysis →

Frank Dickson analyst's take→

We Had 13 Engineers Spend Three Months Finding Vulnerabilities with LLMs

By Rob Picard

Thirteen engineers spent a quarter pointing frontier models at Teleport's codebase and found almost twice as many high severity vulnerabilities as 2024 and 2025 combined. The surprise was what did not work. Elaborate multi-agent harnesses generated enough noise that human triage became the bottleneck, while simple prompts aimed at one component by an experienced researcher outperformed them. The models raise the ceiling for experts rather than replacing them.

Read the full post →

How to Use GitHub Actions to Deploy to Kubernetes Without Shared Secrets

By Noah Stride

A pipeline that deploys to Kubernetes needs to create, read, update, and delete resources, often more privilege than the engineers who wrote the code carry day to day. Hand it a long-lived credential and that privilege now sits in a secrets manager, in CI run logs, and inside every tool the pipeline pulls in. The 2021 CodeCov supply chain attack exfiltrated exactly those pipeline environment variables from thousands of organizations. This walkthrough swaps the shared secret for a short-lived identity issued per run, verified by signature and scoped to a single namespace.