Practical guides for Azure secret management, credential rotation, and cloud security.
CA/Browser Forum ballot SC-081 cuts public TLS certificate lifetimes to 200 days in March 2026, 100 days in 2027, and 47 days by 2029. What that does to an Azure estate, and what to fix this quarter.
NIS2 makes policies on cryptography a legal requirement for essential and important entities. What Article 21(2)(h) actually says, what auditors ask for, and how to produce the evidence from an Azure estate.
Azure AD B2C is closed to new tenants and all new development has moved to Entra External ID. Migrations take years, and for most of that time you are running both. CertifyClouds now discovers, rotates, and alerts on App Registration credentials in External ID tenants using the same workflows as B2C, so neither side of the migration goes dark.
Security engineers ask the same questions every week: what's expiring, what breaks if I rotate it, who touched it last. Answering usually means a dashboard, a KQL query, or a message to the platform team. The new MCP Connector lets Claude and ChatGPT answer directly, in natural language, without ever seeing a secret value.
Most organisations run more than one Entra ID tenant. Subsidiaries, acquisitions, and regional tenants each become a blind spot for secret management. The new Corporate Tenant Registry discovers, monitors, and rotates Key Vault and App Registration credentials across every tenant in your organisation from a single deployment.
Azure AD B2C runs your customer login from a separate tenant most teams configure once and never touch again. When a B2C signing certificate or identity-provider secret expires, every customer is locked out at the same moment. Here is what it actually costs, and how to stop it.
We built a free, open command-line scanner that audits your Azure Key Vaults for expiring secrets, certificates, and security misconfigurations. Install with pip or Homebrew and get results in under a minute.
Learn the essential best practices for rotating secrets in Azure Key Vault, including automation strategies, zero-downtime approaches, and how to eliminate manual credential management across your Azure subscriptions.
A practical guide to discovering expiring secrets, keys, and certificates across multiple Azure subscriptions using Azure CLI, PowerShell, Azure Resource Graph, and automated tooling.
How to take control of Azure App Registration secrets and certificates that accumulate across your Azure AD tenant, and strategies for lifecycle management at scale.
A practical comparison of Azure Key Vault access policies and Azure RBAC for secret management. Covers when to use each model, migration steps, and common pitfalls in production environments.
Understand the differences between Azure Managed Identities and Service Principals, when each is the right choice, and how to eliminate credential management overhead wherever possible.
Step-by-step guide to configuring expiry alerts for Azure Key Vault secrets, keys, and certificates using Event Grid, Azure Monitor, and Azure Policy.
What actually happens when an Azure certificate or secret expires in production, how much it costs in real terms, and how to prevent it from happening in your environment.
How to synchronize secrets across Azure Key Vault, AWS Secrets Manager, and GCP Secret Manager for disaster recovery, multi-cloud architectures, and failover scenarios.