Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The CA/Browser Forum set 47-day certificates as target for 2029. Let’s Encrypt decided to implement it a year earlier. In December 2025, Let’s Encrypt announced their roadmap to cut certificate lifetimes from 90 days to 45 days by February 2028, a full year ahead of the industry mandate. It’s exactly what we’d expect from the CA that made automation mandatory from day one.

Although cloud-native environments drive modern innovation and enable scalability, they also introduce new vulnerabilities that traditional perimeter-based security models cannot address. According to Orca Security’s 2025 State of Cloud Security Report, 95% of organizations have at least one cloud asset that enables lateral movement, making it easier for cybercriminals to navigate cloud environments undetected.

Managed Service Providers (MSPs) are third-party companies that typically handle a portfolio of other organizations’ IT operations or day-to-day activities. This puts MSPs on the front lines of cybersecurity for numerous businesses, often in highly regulated industries, handling some of their most sensitive data. Even the most experienced MSPs struggle to securely manage passwords, credentials, sensitive files and privileged access across dozens of client environments.