Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI agents are about to cross a threshold. For infrastructure and security leaders, agentic AI is no longer an innovation topic but a production readiness problem. What started as sandboxed applications and tech demos at trade shows (bet you’ve seen a few of those) has morphed into long-running autonomous actors operating directly in production cloud and on-prem infrastructure. They read data, write code, deploy services, access databases, and make decisions continuously across environments.

The CA/Browser Forum set 47-day certificates as target for 2029. Let’s Encrypt decided to implement it a year earlier. In December 2025, Let’s Encrypt announced their roadmap to cut certificate lifetimes from 90 days to 45 days by February 2028, a full year ahead of the industry mandate. It’s exactly what we’d expect from the CA that made automation mandatory from day one.

When you’re managing a handful of certificates, one big list works fine. Add a few dozen more and things get messy. Add multiple teams or projects and you’ve got a problem. Who should have access to the production certificates? What about staging? Does the contractor working on the marketing site really need to see your internal infrastructure? CertKit now supports multiple applications from our roadmap to help you sort this out.

Your CNAPP dashboard shows 10,000 critical findings from last night’s scan. Your CSPM flags misconfigurations every hour. Yet when the SOC asks what actually happened during last week’s incident, you’re still stitching together logs from five different tools to build a timeline that makes sense. Sound familiar? We recently spoke with a platform security lead at a fintech company running 400+ microservices on Kubernetes. Their CNAPP generated 47,000 findings in Q3.