SPIFFE, mTLS and the end of the API key

I come to bury API keys, not to praise them. Awkwardly, they refuse to die.

In 2025, 28.65 million hardcoded secrets reached public GitHub, up 34% year on year. Workload identity is real, and it is being outrun. Bring your own architecture: in sixty minutes you will map your own machine-to-machine traffic across five segments, from intra-cluster to agent-to-tool, and find out which of them your organization has actually solved. You will leave with a completed canvas, a number you did not have this morning, and rather less confidence than you arrived with.

Feel free to bring your laptops, tablets or some writing paper along for this workshop!