Secure non-human access with scoped, short-lived credentials, rotation, and detection across a consistent cloud environment
Analyze how issuance, storage, reuse, and delegation expand the blast radius of machine and AI-agent identities.
Implement OAuth 2.0 client credentials, API keys, and mTLS client authentication with secure storage, verification, and audit logging.
Implement SPIFFE/SPIRE workload identity and token exchange with audience-scoped tokens whose claims and expiry are verified at the receiving boundary.
Enforce agent tool access with explicit scopes, resource constraints, allowlisted routing, and observable denials.
Build detection rules and containment runbooks for unexpected credential sources, scopes, audiences, lifetimes, and tool-call patterns.
3 sections · 6 lessons
Map the expanding attack surface of non-human identities, then design credential models that support secure storage, verification, key separation, and auditability.
2 lessonsImplement workload identity with short-lived, audience-scoped tokens, then constrain agent tools through explicit scopes, resource limits, and allowlisted routing.
2 lessonsBuild safe rotation for unavoidable long-lived secrets and detect abnormal non-human credential use with actionable signals, rules, and containment steps.
2 lessonsMachine and AI-agent identities expand the attack surface through credential issuance, storage, reuse, and delegation. This course gives security engineers a practical framework for reducing that exposure with auditable credentials, workload identity, least-privilege authorization, controlled rotation, and misuse detection across a cloud environment.
The course covers agent credentials, OAuth 2.0 client credentials, API keys, mTLS client authentication, SPIFFE/SPIRE workload identity, token exchange, and short-lived tokens. It also covers tool authorization, secret rotation, abnormal-use detection, alert rules, and containment runbooks.
From project managers and operators to founders, analysts, and teams adopting AI, Fenzo is for people who want to get better at the work they already do.
Anything from using AI for project planning and analysis to improving workflows, decision-making, communication, and delivery. If you can describe the skill or task, Fenzo can build a course around it.
Yes. Tell Fenzo what you do, what you’re trying to accomplish, and where you’re stuck, and Fenzo will shape the course around your role, your goals, and the work you actually have to do.
No. Fenzo adapts to your starting point, so you can begin with the fundamentals or jump straight into more advanced work.
Yes. Fenzo for Business puts the whole team on one plan — shared seats, courses you can assign, and reporting on who has finished what.
See Fenzo for BusinessYou start by describing your goal or taking a short skill benchmark. Fenzo uses that context to identify gaps and shape the learning experience around them.
Yes, Fenzo works in your mobile browser.
Something to operate in every section.
Three findings from decades of learning research shaped how every Fenzo lesson is built.
Average pass rate · Freeman et al., PNAS 2014
What the science says
Students in lecture-only classes are 1.5× more likely to fail.
How Fenzo does it
Every Fenzo lesson is interactive. No passive reading or watching, ever.
You work through itAI does it for you
Skill retention over time · with vs. without practice
What the science says
Offloading thinking to AI erodes the very skills you’re trying to build.
How Fenzo does it
Fenzo makes you do the thinking — guided, but never done for you.
Retrieval practiceRe-reading
Long-term recall · retrieval vs. re-reading
What the science says
Recalling information beats re-reading it for building durable understanding.
How Fenzo does it
Lessons weave in quizzes and recall prompts, so it sticks.