2026 Archives - Version 2 Limited

Mastering SentinelOne Multi-Tenant Deployment for MSPs

Mastering SentinelOne Multi-Tenant Deployment for MSPs: An Intune & RMM Guide

Executive Summary

Site Tokens Are the Linchpin: A unique site token ensures each client’s endpoints register to the correct tenant and inherit the appropriate security policies.
RMMs Excel at Multi-Tenancy: By utilizing client-specific variables, Remote Monitoring and Management (RMM) tools allow a single deployment script to dynamically apply the correct site token across multiple tenants.
Validation is Critical: Always verify correct site registration, cross-reference agent counts with your device inventory, and securely manage uninstallation passphrases to prevent coverage gaps.
Streamlining with Guardz: Platforms like Guardz reduce operational friction by centralizing deployment, policy management, and visibility across all tenants—without seat minimums, offering 24/7 MDR triage, and maintaining full access to the SentinelOne console.

Pushing an Endpoint Detection and Response (EDR) agent to a single machine is simple enough. SentinelOne provides concise install commands and excellent packaging documentation. However, Managed Service Providers (MSPs) face a much steeper climb: deploying agents consistently across dozens of discrete client environments, maintaining version parity, ensuring correct site placement, and managing ongoing policies at scale.

The core challenge is the multi-tenant architecture. It requires mapping every client to a specific site and token, delivering the agent via tools like Microsoft Intune or an RMM (NinjaOne, ConnectWise Automate, etc.), and verifying comprehensive coverage without resorting to manual console checks.

This guide details how to execute a repeatable, multi-tenant SentinelOne rollout using both Intune and RMMs, and addresses the often-overlooked challenge of preventing configuration drift as your client base expands.

The Multi-Tenant Difference: Site Structure and Tokens

Before touching an installer or a deployment script, you must define your SentinelOne site hierarchy. This structure dictates everything that follows.

SentinelOne uses a hierarchy of accounts, sites, and groups. For MSPs, the standard approach is one site per client tenant. Within that site, you create groups to segment policies (e.g., separating workstations from servers). Crucially, each site generates a unique site token. This alphanumeric string is what tells the installing agent exactly which site to report to.

The site token is the absolute center of a multi-tenant deployment. If you deploy an agent with Client A’s token, it lands in Client A’s console and applies Client A’s policies. Using the wrong token results in endpoints registering to the wrong client—creating both a severe security blind spot and a potential data privacy incident.

Because the required token changes per client, you cannot simply reuse a generic installer package across your entire customer base. The deployment methodologies below share a common goal: reliably injecting the correct, client-specific token onto the right machines without manual intervention.

Pre-Deployment Checklist

Ensure the following prerequisites are met before beginning your rollout:

Prerequisite	Description
Permissions	Verify you have the necessary administrative roles to extract site tokens and manage the target client sites.
Site/Group Architecture	Establish one discrete site per client, and configure internal groups to match your policy segmentation strategy.
Token Extraction	Retrieve the unique site token for each client and store them securely where your deployment tools can access them.
Version Standardization	Select a specific agent version to deploy across the board. Mixing versions during the initial rollout guarantees immediate version drift.
OS Mapping	Identify the OS breakdown (Windows, macOS, Linux) across your clients and ensure you have the correct installer for each.
Deployment Strategy	Determine which tool (Intune, RMM, or a hybrid) is best suited to reach each client’s specific endpoints.

Deploying via Microsoft Intune

Intune is ideal for clients already heavily invested in the Microsoft 365 ecosystem. For Windows devices, the agent is deployed as a Win32 application.

1. Package the Installer

Download the latest Windows agent MSI from the SentinelOne console. Use the Microsoft Win32 Content Prep Tool (IntuneWinAppUtil.exe) to convert it into a .intunewin file. Favor the MSI over the EXE, as it provides cleaner silent install/uninstall parameters and a reliable method for passing the site token.

2. Configure Commands and Detection Rules

Configure the install command to pass the site token as an MSI property:

msiexec /i SentinelInstaller.msi /qn SITE_TOKEN=<client-site-token>

Configure the uninstall command similarly, ensuring you account for anti-tamper protections if a passphrase is required.

Crucial Step: The Detection Rule. This is the most common failure point in multi-tenant Intune deployments. Because MSI product codes change with every SentinelOne agent version, relying on a product-code detection rule will break as soon as agents auto-update or if versions drift. Intune will incorrectly assume the agent is missing and attempt to reinstall it. Similarly, hard-coded file paths fail because SentinelOne installs into version-specific folders.

Instead, use a custom detection script that verifies the presence of the SentinelOne service or specific registry keys, and ensures the installed version meets your minimum requirement. Alternatively, use a file rule based on version comparison rather than strict file path existence. Always verify these paths and registry keys against the official deployment guide for your specific agent version.

3. Group Assignment

Create a dedicated Entra ID device group for each client and assign the packaged app to it. Because the site token is hardcoded into the install command, each client requires its own distinct app instance in Intune. While Intune offers clean packaging and dynamic grouping, the operational trade-off is maintaining a separate application package for every single tenant.

4. macOS Deployment Considerations

Deploying to macOS requires a different package and significantly more configuration to bypass user prompts. The agent needs Full Disk Access, Network Extension approvals, and Filter approvals. You must push these as configuration profiles via Intune (or your MDM) prior to installation. The registration token can be delivered via the install script, a token file, or a configuration profile, scoped per client just like the Windows deployment.

Deploying via RMM: The Preferred Multi-Tenant Solution

For most MSPs, Remote Monitoring and Management (RMM) platforms are the superior tool for multi-tenant deployments because they natively understand client separation.

The RMM Advantage

An RMM (like NinjaOne, ConnectWise Automate, or Syncro) allows you to store each client’s unique site token as a variable at the organization level. This means you only need to write one deployment script. When the script runs, it dynamically pulls the correct token variable based on which client environment it is targeting, eliminating the need to maintain dozens of separate installation packages.

Executing the Deployment

Deploy the MSI using your RMM’s scripting engine, calling the variable for the site token:

msiexec /i SentinelInstaller.msi /qn SITE_TOKEN=%SiteToken%

(Replace %SiteToken% with your specific RMM’s variable syntax.) This single script scales instantly across all clients. Use a similar scripted approach pulling the same variable for macOS deployments.

Managing Upgrades and Anti-Tamper Passphrases

Once an agent successfully registers to a site, it inherits that site’s policies. Agent version upgrades should generally be handled centrally via the SentinelOne console’s update policies, keeping that logic out of your RMM.

Reinstallations or migrations are trickier due to SentinelOne’s anti-tamper features. By default, SentinelOne generates a unique uninstall passphrase for every individual endpoint, not a global one per client. Ensure your tooling can programmatically retrieve these unique passphrases, otherwise, you will be forced to manually look them up in the console for every uninstallation.

Verifying the Deployment

A script reporting “Success” does not mean the job is done. You must manually verify the deployment across every tenant:

Verify Site Placement: Ensure agents are appearing in the correct client site. Misrouted agents due to variable errors are a common and dangerous mistake.
Compare Inventories: Check the number of active agents in the SentinelOne console against the device count in your RMM for that client. Discrepancies highlight machines that require manual intervention.
Hunt Down Stragglers: Identify endpoints that failed to check in, went offline immediately after installation, or were powered off during the push.
Audit Secrets: Ensure that site tokens and uninstall passphrases are not exposed in plaintext logs accessible by clients.

Perform this verification on a per-client basis. A high overall deployment percentage can easily mask a severe coverage gap within a single, smaller client.

The Ongoing Battle: Managing Drift

Getting the agents installed is only the beginning. The true operational burden for an MSP is maintaining consistency as the client base grows. You will inevitably battle four types of drift:

Version Drift: Clients end up on different agent versions due to staggered onboarding or inconsistent update policies.
Policy Drift: Baseline security policies are tweaked during specific incidents and never reverted, leading to fragmented security postures.
Coverage Gaps: New devices are added to a client environment but fail to receive the agent, leaving them unprotected.
Token Sprawl: The sheer volume of secrets you must track grows exponentially (one site token per client, plus a unique uninstall passphrase for every single endpoint).

While scripts can handle initial deployments, they struggle to manage this ongoing, multi-tenant orchestration at scale.

Reducing Overhead with Consolidated Platforms

If the ongoing orchestration of site tokens, passphrases, and policy drift is overwhelming your team, consider platforms designed to abstract this complexity. Solutions like Guardz offer SentinelOne Singularity wrapped in an MSP-centric operating model.

The core security technology remains identical—you still get the industry-leading SentinelOne agent and detection engine. What changes is the operational overhead:

No Seat Minimums: Pay only for what you use, allowing you to easily accommodate 15-seat clients without carrying unused licenses.
Unified Billing: Eliminate the need to manage a separate SentinelOne MSSP contract; it is consolidated into your existing stack agreement.
Included 24/7 MDR: The massive alert volume generated by a fleet-wide EDR rollout is triaged around the clock by the Guardz MDR team, preventing ticket fatigue for your technicians.
Centralized Orchestration: Site creation, token injection, policy enforcement, and lifecycle management are handled natively within the platform, while you retain full access to the underlying SentinelOne console for deep investigations.

By shifting to an integrated platform, the grueling multi-tenant plumbing—managing endless tokens, passphrases, and update policies—transforms from a daily operational headache into a streamlined, automated configuration.

About Guardz
Guardz is on a mission to create a safer digital world by empowering Managed Service Providers (MSPs). Their goal is to proactively secure and insure Small and Medium Enterprises (SMEs) against ever-evolving threats while simultaneously creating new revenue streams, all on one unified platform.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

2026 Guardz

The Hidden Dangers of Internet-Connected Cameras

The Hidden Dangers of Internet-Connected Cameras: From Public Streets to Military Supply Chains

A disturbing reality has recently come to light, underscoring how common technology can be weaponized in modern warfare. According to a joint cybersecurity advisory from the Netherlands General Intelligence and Security Service (AIVD) and the Defence Intelligence and Security Service (MIVD), Russian state-sponsored hackers are actively compromising internet-connected IP cameras. Their objective? To conduct systemic digital espionage against Ukraine, NATO, and various EU member states. The practice of hacking surveillance equipment for international espionage is not entirely new, but the latest intelligence reveals that Russia is specifically leveraging these feeds to monitor NATO troop deployments and supply logistics. While we expect adversarial nations to continuously develop novel combat tactics, the ease with which IP cameras are repeatedly exploited remains a glaring security failure.

The Threat Within Civilian Infrastructure

What makes this situation particularly unsettling is the ownership of the compromised devices. Hackers are not breaking into highly classified military cameras; they are infiltrating civilian infrastructure. The data sources fueling these intelligence operations are ordinary security cameras mounted on storefronts, residential homes, and city street corners. For organizations, this highlights a massive blind spot. Many businesses lack comprehensive visibility into their own surveillance networks and the security protocols—or lack thereof—governing them. An unsecured IP camera acts as a double-edged sword: it offers adversaries a literal window into sensitive logistical operations and serves as a highly effective beachhead for launching broader network intrusions.

Understanding the Scope of the Vulnerability

The sheer volume of at-risk devices is daunting. Security firm Censys recently identified roughly 87,000 internet-facing cameras across the EU (including over 4,000 in Ukraine) that are running services tied to known, exploitable vulnerabilities. While the presence of a CVE (Common Vulnerabilities and Exposures) does not guarantee a device is actively being hacked, sophisticated exploits are rarely necessary. Cybercriminals frequently bypass complex hacking methods by simply logging in using default, factory-set credentials, which offer quiet, hard-to-detect network access. Another critical issue omitted from the European advisory involves the hardware supply chain. Certain major IP camera manufacturers have been outright banned by the U.S. government due to espionage concerns and ties to the Chinese state. However, private businesses and citizens across the U.S. and allied nations continue to purchase and deploy these exact brands in massive numbers. When you combine this risky hardware with universally vulnerable protocols like UPnP (Universal Plug and Play), it becomes clear that western nations are currently a goldmine for cyber threat actors.

Closing the Vulnerability Gap: Defense Strategies and runZero

While the exploitation of IP cameras is unlikely to cease, the Dutch intelligence advisory provides actionable, straightforward guidelines to secure these devices. To protect your network, you should:

Audit Internet Exposure: Identify which cameras are accessible from the internet, whether directly or via firewalls, proxies, or vendor clouds.
Lock Down Access: Disable public internet streaming, UPnP, and port forwarding. Route all camera access securely through a VPN.
Enhance Authentication: Immediately change all default passwords and enforce Multi-Factor Authentication (MFA) wherever supported.
Adjust Physical Placement: If possible, aim cameras away from highly sensitive areas like loading docks, logistical hubs, and supply routes.
Maintain Software: Purchase hardware with long-term support and apply firmware patches religiously.

How runZero Can Secure Your Environment

Managing the security risks of IP cameras requires total network awareness. Here is how runZero helps you regain control:

Complete Asset Discovery: You cannot protect what you cannot see. runZero meticulously maps your entire network, identifying every IP camera and determining whether it is dangerously exposed to the public internet.
UPnP Detection: Because UPnP is frequently abused for lateral movement, runZero identifies this protocol across your entire network environment so you can disable it and shut down entry points.
Network Segmentation Validation: IoT devices frequently end up on the wrong networks. runZero provides deep visibility into your network architecture, helping you spot misplaced devices, multi-homed hardware, and broken segmentation before hackers do.

In an era where AI-driven cyber attacks are becoming the norm, hoping your IP cameras are secure is no longer an option. Contact us today or sign up for a free trial to ensure your attack surface is fully protected.

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

runZero 2026

Evaluating Microsoft Entra’s Native Backup

Evaluating Microsoft Entra’s Native Backup: Is It Sufficient for Your Enterprise?

Microsoft has finally delivered a highly anticipated feature: the General Availability of Microsoft Entra Backup and Recovery. Automatically included for tenants equipped with Entra ID P1 or P2 licenses, this new utility acknowledges the critical need for robust, customer-led identity data protection. But is this free, built-in tool enough to secure your entire identity estate?

The Advantages of the Native Entra Solution

For resolving immediate, accidental errors—such as an administrator mistakenly altering a Conditional Access policy earlier in the week—the native tool provides a solid baseline of protection. Its core benefits include:

Automated Daily Snapshots: Captures vital directory objects, including users, groups, and Conditional Access policies.
Immutable Storage: Prevents rogue administrators or threat actors from switching off or deleting backup points.
Difference Reporting: Allows administrators to review exact changes between the backup and the live tenant before committing to a restore.
Cost-Effective: Currently included at no extra charge for premium license holders.

Native vs. Third-Party: Four Critical Limitations

While the native utility is a fantastic starting point for short-term rollbacks, organizations must ask themselves four vital questions before adopting it as their sole safety net. A comparison with dedicated third-party platforms, such as Keepit, highlights significant operational gaps:

Risk Factor	Microsoft Entra Native Backup	Dedicated Platforms (e.g., Keepit)
Detection Window	Limited to a 7-day retention period, failing to cover prolonged or stealthy breaches.	Offers customizable data retention for up to 99 years.
Infrastructure Independence	Hosted on Microsoft’s own cloud, violating the rule of separating production and backup data.	Stored on an independent, vendor-neutral cloud infrastructure.
Restore Flexibility	Supports in-place restoration only, limiting disaster recovery testing.	Allows cross-tenant restores for DR sandboxing and secure verification.
Coverage Scope	Restricted to core Entra objects and policies.	Covers Intune profiles, BitLocker keys, M365, and other SaaS applications under one console.

Building a Resilient Recovery Strategy

Microsoft correctly positions its native tool as just one component of a broader tenant recoverability strategy. However, true disaster recovery requires the separation of duties, extended retention capabilities, and cross-platform management. Relying solely on the native tool leaves your organization exposed to systemic vendor outages and long-term intrusions.

If you are already leveraging an independent backup solution, your current strategy remains sound. If you are exclusively relying on Entra’s native capabilities, it is time to reassess your operational readiness.

How long does your security team typically take to discover and remediate stealthy identity misconfigurations?

About Keepit
At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

2026 Keepit

Navigating Data Privacy Compliance in Retail with Google Workspace

How Retailers Can Master Data Privacy Compliance Using Google Workspace

The Core Challenge: Retailers handle massive volumes of sensitive data. However, the real compliance hurdle isn’t just the sheer amount of data—it’s the chaotic operational environment. High turnover, seasonal hiring, and shared devices create security gaps that platforms like Google Workspace cannot automatically seal on their own.

Modern retail is fundamentally data-driven. A typical mid-sized operation processes thousands of daily transactions, manages vast loyalty programs, and executes regional email marketing campaigns. Every single point of contact with customer data brings strict regulatory obligations. To successfully navigate data privacy in retail, IT teams must first understand where risks hide within a typical Google Workspace setup. By recognizing the practical fallout of unmanaged gaps, organizations can transition from reactive troubleshooting to proactive, policy-driven governance.

The Retail Compliance Battlefield

For retailers operating in the UK and EU, the General Data Protection Regulation (GDPR) dictates the rules, wielding potential fines of up to €20 million or 4% of global annual turnover. In 2023 alone, the Information Commissioner’s Office (ICO) levied over £10 million in penalties, frequently citing failures in data access controls and inadequate data retention. Furthermore, merchants accepting card payments must comply with PCI-DSS, which demands rigorous access management around cardholder data. The primary issue for retail IT directors isn’t ignorance of these laws; it’s the difficulty of executing them at scale. When IT and compliance teams are stretched thin by rapid hiring cycles, new store launches, and holiday rushes, manual compliance processes inevitably break down. Google Workspace is a popular choice for retail IT to manage users, communications, and files. Building a defensible security posture requires a clear understanding of both what the platform can do natively—and where it falls short.

Where Google Workspace Shines Natively

When configured correctly, Google Workspace offers a robust technical baseline for compliance. Key native features include:

Encryption: Data is encrypted both in transit and at rest across Gmail, Drive, and other services, protecting customer records and internal HR files.
Data Loss Prevention (DLP): Configurable rules can detect and prevent the unauthorized outbound sharing of sensitive information, like customer lists or payment details.
Multi-Factor Authentication (MFA): Enforcing MFA significantly reduces the risk of compromised credentials—a critical safeguard in high-turnover sectors where maintaining account hygiene is challenging.

While crucial, these features primarily address the platform’s security layer. They do not govern the messy, day-to-day operational processes that dictate whether compliance is actually maintained. This operational disconnect is where most retail compliance failures take root.

Operational Blind Spots in Retail Workspace Environments

Unlike a static corporate office, a retail environment is highly fluid. The following scenarios highlight real-world compliance risks that Google Workspace’s native tools cannot reliably prevent without additional help.

1. The Seasonal Surge and Sloppy Offboarding

Consider a national chain hiring 300 temporary workers for the holiday season, creating 300 new Workspace accounts. Come January, every single account must be suspended, access revoked, and data transferred or deleted according to retention policies. If even 10% of these offboarding tasks are delayed because they rely on a store manager manually raising an IT ticket, 30 former employees still have live access to customer data. Under GDPR Article 5, this is a clear data minimization failure.

2. The Shared Device Dilemma

Shop floor staff frequently access Google Workspace via shared tablets or point-of-sale systems. When shifts change or a device is handed off, tracking exactly whose credentials are active—and what data they can view—becomes a major compliance headache. Without automated session management and strict role-based permissions, shared devices represent a persistent vulnerability in access control.

3. Scope Creep and Stale Permissions

Retail hierarchies involve regional managers, store managers, and team leads, each requiring specific access levels to HR, scheduling, and customer data. Without regular audits, access permissions inevitably drift. A promoted store manager might retain access to a regional HR folder, or a team lead might still have customer data from an old marketing campaign. GDPR demands that access be limited to what is strictly necessary; manual permission reviews rarely keep up with reality.

4. Hoarding Customer Data

Customer emails from a past holiday campaign, loyalty data from a shuttered location, or old transaction records create massive liability if left lingering in Google Drive or Gmail archives. Without automated data retention and deletion policies, this information silently accumulates, inflating compliance risk and expanding the blast radius of any potential data breach.

The Shift to Automated Governance

The common denominator in these retail risks is the reliance on manual processes. Checklists, ticketing systems, and periodic manual audits simply do not scale to the speed and complexity of retail operations. Human error isn’t an anomaly here; it’s a guaranteed result of asking an overloaded IT team to manually police a highly dynamic workforce. Retail IT teams require policy-driven automation that enforces compliance controls consistently, 365 days a year. Practically, this looks like:

Zero-Touch Offboarding: Workflows that trigger instantly when a contract ends, automatically revoking access, suspending the account, and transferring data ownership without requiring IT to lift a finger.
Automated Data Retention: “Set-and-forget” policies that automatically delete archived data after a predefined period, ensuring GDPR compliance without manual reviews.
Granular Backup and Recovery: Solutions that extend beyond Google’s native capabilities, allowing IT to rapidly restore individual files, user accounts, or specific datasets following an accidental deletion or security incident.

Close the Compliance Gap with CloudM

CloudM is specifically engineered to solve the complex data privacy challenges inherent to retail businesses by replacing manual interventions with automated governance policies. For retail IT, CloudM provides onboarding and offboarding workflows featuring over 30 configurable, automated steps—including instant access revocation and data transfer. CloudM’s Smart Teams feature allows IT to dynamically group users by store location, department, or seniority level, far exceeding Google’s standard Organizational Units. This ensures permissions and policies are applied consistently across complex, multi-site operations. Furthermore, backup policies are automatically assigned to new users from day one. For Data Protection Officers (DPOs) and compliance managers, CloudM delivers the essential “set-and-forget” archiving and retention tools required by modern regulations. Data is held for the requisite period and then automatically purged. Comprehensive audit trails are maintained, streamlining regulatory reporting and subject access requests. Crucially, CloudM empowers retailers to host backups on their own infrastructure, rather than routing data through third-party servers, ensuring the data sovereignty increasingly mandated by privacy laws. If your retail organization is still relying on manual processes to manage Google Workspace compliance, a breach or violation is merely a matter of time. Discover how CloudM can build a resilient compliance posture that withstands the pressures of retail operations. Get started with CloudM today.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About CloudM
CloudM is an award-winning SaaS company whose humble beginnings in Manchester have grown into a global business in just a few short years.

Our team of tech-driven innovators have designed a SaaS data management platform for you to get the most from your digital workspace. Whether it’s Microsoft 365, Google Workspace or other SaaS applications, CloudM drives your business through a simple, easy-to-use interface, helping you to work smarter, not harder.

By automating time-consuming tasks like IT admin, onboarding & offboarding, archiving and migrations, the CloudM platform takes care of the day-to-day, allowing you to focus on the big picture.

With over 35,000 customers including the likes of Spotify, Netflix and Uber, our all-in-one platform is putting office life on auto-pilot, saving you time, stress and money.

2026 CloudM

Rethinking Zero Trust: The Case for AI Birth Certificates

Rethinking Zero Trust: Why AI Agents Require a “Digital Birth Certificate”

The Bottom Line: The traditional zero-trust model is cracking under the weight of autonomous AI. As organizations grant sweeping permissions to AI agents, the US Intelligence Community warns that we must establish a foundational identity system—a “digital birth certificate”—to govern these non-human entities before they become massive security blind spots.

For decades, the zero-trust security paradigm has been anchored by a simple rule: verify every user and device, and enforce the principle of least privilege. This framework is highly effective when managing human logins or standard corporate endpoints. However, it quickly deteriorates when introduced to agentic AI—autonomous programs designed to operate independently, at machine speed, across a web of interconnected systems simultaneously.

This escalating friction was recently thrust into the spotlight. At the Defense Intelligence Agency’s DoDIIS conference, Douglas Cossa, CIO of the Intelligence Community, openly addressed the elephant in the room. As reported by Breaking Defense, Cossa admitted that agentic AI has “completely spun zero trust on its head.” Rather than defaulting to restricted access, enterprises are outfitting AI agents with broad capabilities to fulfill their autonomous tasks. To bridge these two conflicting security postures, Cossa proposed a definitive solution: a unified identity framework.

His proposed fix is as memorable as it is necessary: a digital birth certificate. This concept must extend beyond human users and hardware to encompass every AI agent capable of requesting, storing, or manipulating data.

A Structural Enterprise Crisis, Not Just a Government Problem

It would be a critical mistake for private enterprises to dismiss this as merely an isolated public-sector dilemma. Cossa’s observations highlight a structural vulnerability that every corporate security team is currently facing.

Traditional zero-trust architectures were engineered for static populations—employees, contractors, servers, and laptops. These entities undergo predictable lifecycles of provisioning, auditing, and offboarding. AI agents, conversely, defy these rules. They are generated dynamically (sometimes autonomously by other agents) to execute hyper-specific tasks, and then they vanish. There is no standard HR onboarding process for a bot spun up via a developer’s script an hour ago, leaving it entirely absent from conventional active directories.

This is the exact vulnerability Cossa is highlighting. If an organization cannot clearly define what an agent is, who deployed it, and what its operational boundaries are, traditional defenses like network segmentation become obsolete. The agent remains a ghost, effectively invisible to the governance systems designed to police it.

Identity Must Precede Access Control

Security teams frequently attempt to solve the access problem first by simply trying to restrict what a bot can do. However, assigning permissions is futile without a persistent, verifiable identity to anchor them to. You cannot effectively enforce least privilege on an entity you cannot consistently recognize.

This is precisely why Cossa framed the solution as an identity system rather than a standard access-control policy. An AI agent’s “birth certificate” must establish several core attributes before any access is granted:

Origin: Who or what system created the agent?
Authorization Scope: What specific tasks and systems is it permitted to interact with?
Time-to-Live (TTL): How long is this agent authorized to exist before it expires?
Accountability: How can its actions be definitively traced back to a human operator or system of record?

The broader cybersecurity market is already voting with its wallet on this issue. Non-Human Identity (NHI) management has surged as one of the fastest-growing sectors for venture funding and acquisitions. Billion-dollar deals underscore how urgently the private sector is scrambling to secure machine and agent identities. Government framing and market spending are rapidly converging on the exact same conclusion.

The Necessity of Real-Time Enforcement

Establishing an identity is only half the battle. An AI’s birth certificate is useless unless systems can continuously verify it the exact moment the agent attempts to interact with a network, endpoint, or dataset. Issuing an identity and enforcing its boundaries are two very different operational challenges.

This is where network-based access controls must seamlessly integrate with Identity and Access Management (IAM) and Privileged Access Management (PAM) platforms. While IAM and PAM define the entity and its entitlements, the actual enforcement—the split-second decision to permit or deny access—must occur continuously at the network layer. Agentic AI operates far too rapidly to be governed by static, quarterly access reviews.

The Road Ahead

Ultimately, every AI agent is an identity, demanding the exact same rigorous governance historically applied to humans and hardware. The US Intelligence Community’s stance confirms that securing non-human identities is no longer a theoretical exercise—it is a mandatory evolution of the zero-trust model.

The defining question is no longer whether AI agents need identities, but how rapidly organizations can deploy the infrastructure needed to issue, verify, and enforce them before these invisible gaps are actively exploited by threat actors.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

2026 Portnox

Shadow AI Detection Strategies

Mastering Shadow AI Detection: Essential Strategies

Executive Summary: Identifying “Shadow AI” requires moving beyond simple blocklists. Effective detection hinges on scrutinizing anomalous accounts, credential usage, code commits, access patterns, and hidden SaaS integrations.

As the adoption of artificial intelligence explodes within the modern workplace, detecting Shadow AI has become a critical mandate for security teams. Employees are increasingly weaving AI tools into their daily routines. However, when corporate-approved options fall short, workers frequently turn to unsanctioned, external platforms.

The numbers highlight the urgency: A recent IBM-backed study revealed that 80% of American office workers utilize AI in their jobs, yet a mere 22% stick exclusively to company-sanctioned tools. This trend is starkest among Gen Z professionals, where 35% prefer utilizing only personal AI tools, significantly outpacing the 14% average across other age brackets. These statistics underscore the rapid proliferation of shadow AI and the critical need for robust detection mechanisms.

Defining Shadow AI

Much like its predecessor, Shadow IT (the unauthorized use of SaaS apps and hardware), Shadow AI refers to the deployment of artificial intelligence technologies without the IT department’s explicit approval or oversight. When employees find corporate AI offerings to be inadequate, restrictive, or simply non-existent, they instinctively seek out personal or unvetted AI services to bridge the gap.

The Mechanics of Shadow AI: How It Spreads

AI delivers undeniable productivity boosts, driving rapid, grassroots adoption. The same IBM survey noted that 75% of US office workers experience moderate to substantial productivity gains using AI, with nearly a third saving up to six hours a week.

Consequently, shadow AI usually takes root in mundane, everyday tasks. One worker might use a personal ChatGPT account to draft emails; another might feed sensitive financial data into Claude for rapid summarization. Because these tools are highly accessible, often free, and increasingly baked directly into web browsers and existing software, they proliferate effortlessly.

The critical danger lies in the bypass of standard procurement, security, and compliance vetting, instantly creating massive visibility blind spots for the enterprise.

Real-World Scenarios: Shadow AI in the Office

Shadow AI often masquerades as harmless efficiency. Here are common examples you are likely encountering right now:

The Sales Pitch: A sales manager inputs pricing tiers, discount margins, and historical client notes into a personal AI account to polish a proposal. The company loses all visibility over where this proprietary data is stored or how the AI model uses it.
HR Feedback: An HR professional uses a public chatbot to summarize candidate interviews, feeding it real names and internal assessments. The data circumvents all approved internal HR systems.
Financial Summaries: A finance team member pastes raw, unreleased quarterly figures into an AI tool to generate executive commentary, exposing highly confidential data to an ungoverned external channel.
Rogue Development: Developers integrate a generative AI API into an internal support tool to automate responses. Because it requires no heavy infrastructure changes, it bypasses formal security reviews.
SaaS Feature Toggles: A marketing team flips a switch to enable an AI writing assistant within their project management software. Client names and project strategies are suddenly being processed by an unvetted third-party language model.

These actions are driven by a desire to be productive, which is precisely why shadow AI is so insidious: it feels benign to the user while silently generating severe governance, visibility, and data security crises.

The Detection Challenge: Why is it so hard?

Detecting unauthorized AI is notoriously difficult because the activity perfectly mimics legitimate daily work. As AI becomes natively embedded into SaaS platforms, APIs, and browser extensions, what looks like a standard API call or app interaction might actually be an unauthorized AI model processing corporate data in the background.

Traditional security tools fall short here. Legacy Data Loss Prevention (DLP) solutions are excellent at catching bulk file transfers or massive database downloads. However, they struggle to detect a user pasting a few lines of proprietary source code or a confidential financial summary into a chatbot prompt. The volume of data is too small to trigger conventional DLP thresholds, but the risk remains catastrophic.

Static rules and simple “allow/block” lists lack the necessary contextual and behavioral intelligence. To combat deeply woven AI usage, organizations require dynamic, behavioral-based detection strategies that monitor activity across users, infrastructure, and integrated services.

The Cascading Risks of Shadow AI

Failing to detect shadow AI introduces severe, multifaceted risks to the organization:

Data Leakage: Employees inadvertently feed confidential IP into AI models, ignorant of how that data is stored, utilized for future model training, or shared.
Rogue Autonomous Actions: Shadow AI agents pose a unique threat. These agents often possess permissions to modify, send, or delete data across connected apps. An unvetted agent might autonomously forward sensitive documents or alter records without human oversight.
Regulatory Violations: Processing PII, financial, or healthcare data through unauthorized AI tools virtually guarantees violations of frameworks like GDPR or HIPAA, inviting massive fines.
Expanded Attack Surfaces: Unsanctioned tools bypass internal security standards, creating hidden vulnerabilities and backdoor pathways for threat actors.
Reputational & Financial Damage: A single data exposure incident caused by shadow AI can erode customer trust and result in direct financial losses.
Operational Unreliability: When teams rely on disparate, unvetted AI tools, the accuracy of their output varies wildly, leading to business decisions based on “hallucinated” or inaccurate data.

5 Strategies for Detecting Shadow AI

Effective detection requires looking beyond simple URL blocking. The true indicators of shadow AI lie within identity behaviors, integrations, and code environments.

1. Scrutinize Identity Patterns

Begin by auditing non-human identities. Security teams must investigate newly introduced identities, their inherited privileges, and whether they bypassed formal access reviews. Red flags include the sudden creation of service accounts, OAuth apps requesting excessive permissions, orphaned programmatic identities, or unusual spikes in API activity. Shadow AI is frequently unmasked by strange identity behavior rather than a visible application icon.

2. Map Credential and Secrets Activity

AI tools rely heavily on credentials to interface with APIs and models. Monitor for newly generated API keys, credentials hardcoded into CI/CD pipelines, long-lived tokens being recycled across different environments, or anomalous vault access tied to automation. Any AI workload running in your environment must have its supporting credentials clearly linked to a verified owner and a legitimate business purpose.

3. Audit Development Artifacts

Shadow AI often infiltrates an organization long before it hits production. It sneaks in through code repositories and developer workflows. By proactively inspecting build pipelines and packaged dependencies, security teams can spot external model SDKs, unapproved embedding libraries, or direct AI API integrations before they become entrenched in internal software.

4. Analyze Authorization Behavior

Do not just look for the existence of an AI identity; analyze its actions. Shadow AI frequently exhibits bizarre authorization patterns, such as rapid privilege escalation, automated identities altering directory controls, or complex chained actions across multiple systems (e.g., a workflow jumping from an IT ticketing system directly into a cloud API). These behavioral anomalies can expose hidden AI processes.

5. Audit SaaS and Third-Party Integrations

Shadow AI thrives within existing SaaS ecosystems. AI capabilities are frequently toggled on within trusted applications via delegated access. Organizations must continuously inventory third-party integrations, hunt for persistent offline access, and flag connections lacking clear ownership. Because these AI features piggyback on pre-approved SaaS permissions, they easily bypass traditional IT provisioning protocols.

About Nord Security
The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

NordLayer 2026 Nord Security

Discord Password Management Guide

Mastering Your Discord Password: How to Change, Reset, and Secure It

Discord has evolved into the ultimate hub for gamers and online communities. Whether you’re streaming, utilizing VoIP, or hanging out in private servers, it is the premier platform for staying connected. However, this popularity makes Discord accounts a prime target for scammers and malicious bots eager to hijack user credentials. To maintain your account’s integrity, this guide covers everything you need to know about changing, resetting, and fortifying your Discord password, including transitioning to passwordless authentication.

Why Update Your Discord Password?

Generally, you’ll need to update your password for one of two reasons: a lapse in memory or a security breach. If you’ve simply forgotten your login, a quick reset via your associated email or phone number will get you back in.

Conversely, if your password has been compromised, immediate action is required. Changing your password forces a logout across all devices, instantly locking out unauthorized users. Furthermore, if you reuse that compromised password elsewhere, you must update it across those platforms immediately to prevent a domino effect of breached accounts.

Not sure if your data is safe? Tools like Password Health checkers can scan for exposed credentials, allowing you to proactively secure your accounts.

How to Change Your Discord Password

Updating your password is a simple process whether you are on a computer or a smartphone. You will find the necessary tools tucked away in the “Account” section of your settings.

On Desktop and Web Browser

Launch the Discord application or navigate to discord.com/app.
Locate the cogwheel icon (User Settings) in the bottom-left corner, next to your username.
Under the “Password and security” heading, find the “Password” section and click “Edit.”
Input your current password, followed by your new password (entered twice for confirmation).
Click “Done.”

Note: You will be logged out everywhere and receive a confirmation email. If you receive this email but didn’t initiate a change, contact Discord Support immediately.

On the Mobile App

Open the Discord app.
Tap your profile avatar in the bottom-left corner.
Tap “Settings” via the bottom-right navigation menu.
Select “Account.”
Under “How you sign in to your account,” tap “Password.”
Type in your current password and your desired new password.
Tap “Change password.”

Security Tip: Your new password should be at least 15 characters long, mixing uppercase, lowercase, numbers, and symbols. Using a password manager like NordPass makes generating and storing these complex passwords effortless.

What to Do If You Forget Your Password

Discord does not allow password retrieval. If you forget it, you must initiate a complete reset using your linked email or phone number.

Resetting via Desktop and Web

Open the app or visit discord.com/login.
Enter your email or phone number, then click “Forgot your password?”
Check your email or SMS for a message from Discord.
Click the “Reset your password here” link within the message.
Create and confirm your new password.

Resetting via the Mobile App

Open Discord.
Enter your email address and tap “Forgot your password?”
Open the recovery email and tap the reset link.
Enter your new password.
Tap “Change password.”

How to Find a Saved Password (Without Resetting)

Before initiating a reset, check if your browser or device saved your credentials during your initial login.

Google Chrome: Click the three-dot menu (top-right) > “Passwords and autofill” > “Google Password Manager” > Search for “Discord.”
Android: Go to Settings > “Google services” > “All services” > “Autofill with Google” > “Google Password Manager” > Search for “Discord.”
iOS: Go to Settings > “Apps” > “Passwords” > “Open passwords” > Authenticate > Search for “Discord.”

Level Up Your Security: Try Passkeys

Discord now supports passkeys—a passwordless authentication method utilizing your device’s biometrics (fingerprint/Face ID) or PIN. It’s faster and significantly more secure than traditional passwords.

While passkeys are found under the Multi-Factor Authentication (MFA) tab, they are distinct from traditional app-based MFA (which you can and should also enable).

Setting Up Passkeys on Mobile

Go to Settings > Account.
Tap “Get started” in the passkey suggestion box (or tap “Security keys” > “Add”).
Choose how to generate the passkey (e.g., “Create a passkey with your password manager”).
Verify your current password.
Follow your device/password manager’s prompt to create the key.
Name the security key and tap “Finish.”
Crucial Step: Screenshot or save your backup codes in a secure location.

Setting Up Passkeys on Desktop/Web

Go to User Settings (cogwheel icon).
Under “Password and security,” click “Multi-factor authentication.”
Select “Add security key.”
Verify your password.
Click “Let’s go” and follow your browser/password manager prompts to create and name the key.
Click “Finish” and securely store your downloaded backup codes.

Troubleshooting: Missing Password Reset Emails

If the reset email isn’t arriving, try these steps:

Check Spam: Your filter might have flagged it.
Verify Spelling: A simple typo sends the email into the void.
Try Alternate Emails: You might have registered with a different address.
Use SMS: Request a reset via your linked phone number instead.
Check for Account Hijacking: Search your inbox for “Discord email address changed.” If someone altered your account details, contact Discord Support immediately.

Beware of Phishing: Always verify the timestamp of a reset email. If it doesn’t match the exact moment you requested it, it’s likely a scam.

The Discord Account Recovery Window

If an account is scheduled for deletion (by you or a hacker), Discord provides a 15-day grace period to restore it. Simply log in with your credentials and click “Restore account.” Once 15 days pass, the data is permanently erased. Note: Accounts banned by Discord Trust & Safety cannot be restored via this method; you must submit a formal appeal.

How to Change Your Linked Email Address

Need to update your contact info? Here is how to swap your email:

On Desktop/Web

Go to User Settings (cogwheel).
Under “Account info,” click “Edit” next to your email.
Click “Send verification code” and retrieve it from your current email.
Paste the code, click “Next,” and select your reason for changing.
Input your new email and your Discord password, then click “Done.”
Verify the change via the email sent to your new address.

On Mobile

Go to Settings > Account > Email.
Tap “Send verification code” and retrieve it from your current inbox.
Paste the code and tap “Next.”
Enter your new email, tap “Change email,” provide your password, and tap “Done.”
Verify the link sent to your new email address.

Automate Your Security with a Password Manager

Losing access to Discord means losing your communities, chat history, and connections. The best way to prevent this is by securing your credentials with a dedicated password manager.

Tools like NordPass centralize your passwords, passkeys, and sensitive data under robust XChaCha20 encryption. It generates unbreakable passwords, auto-fills your logins, syncs across all devices, and even scans the dark web for data breaches. Simplify your digital security and never lose a password again.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Nord Security NordPass 2026

How ID-Pal Reclaimed 40 Hours a Month on Security Administration Using NordLayer

Executive Summary: “We have the capability to build anything within our AWS environment, but managing VPNs isn’t our core business. NordLayer’s streamlined approach aligned perfectly with our operational goals—far better than native AWS tools.”

ID-Pal is an industry-leading, AI-driven identity verification platform utilized by regulated individuals and businesses in over 190 countries. Delivering comprehensive anti-money laundering (AML) screening, the 80-person enterprise embraces a hybrid and remote work model, with hubs in Dublin, London, New York, Columbus, and Lisbon.

Security is the foundation of ID-Pal’s operations and a primary driver behind their partnership with NordLayer. Achieving ISO 27001 certification was an early milestone for the company, supporting their unique competitive advantage: they are the only identity verification provider that maintains zero access to customer data.

Seeking to protect its global, distributed workforce without getting bogged down by tedious manual administration, ID-Pal transitioned to NordLayer. We sat down with Robert O’Farrell, ID-Pal’s CTO and co-founder, to discuss the operational hurdles NordLayer eliminated and the transformative results they achieved.

The Challenge: High DevOps Overhead and Manual Security Roadblocks

Prior to adopting NordLayer, ID-Pal managed access to its AWS infrastructure through highly manual processes. The DevOps team was tasked with maintaining allowlists containing over 50 distinct IP addresses scattered across dozens of infrastructure components.

Because every environment required separate management, a simple change—like an IP address update or a staff onboarding/offboarding—meant duplicating access rules across multiple systems. Eventually, ID-Pal hit the AWS security group limit, forcing them to spin up additional groups and maintain even more lists.

This decentralized, fragmented approach became a massive time sink for the DevOps team. It also elevated the risk of inconsistent access rules, overlooked updates, and active access lingering after an employee’s departure.

As O’Farrell points out, this manual strategy was never intended to be permanent. It was initially deployed as a stopgap to thwart automated cyberattacks targeting their non-production environments.

“Threat actors were actively probing for vulnerabilities that might exist in our production or non-production environments. We spotted the activity and locked it down the same day, but managing it manually became a massive operational bottleneck.”

ID-Pal quickly realized they needed a purpose-built security solution to centralize access, eliminate repetitive IP updates, and unburden their DevOps engineers. NordLayer proved to be the perfect fit.

The Solution: Why ID-Pal Chose NordLayer

While O’Farrell was personally familiar with Nord Security through his long-term use of NordVPN, he ensured his team conducted an objective evaluation of various B2B security vendors.

“We evaluated AWS’s native VPN solution as well. But when it came down to ease of deployment and ongoing maintenance, NordLayer was the obvious winner. It was clear it would save us a tremendous amount of time.”

Rigorous security due diligence was another non-negotiable factor. Because of their ISO 27001 status, ID-Pal adheres to strict vendor assessments. NordLayer passed with flying colors:

“NordLayer excelled during our due diligence. It demanded very little manual configuration, integrated seamlessly with our existing infrastructure, and was incredibly easy to roll out to the staff. Today, our entire technology department relies on it.”

The Impact: Transformative Benefits for ID-Pal

Benefit 1: Saving 40 Hours a Month Through Centralized IP Management

As a heavy AWS user, ID-Pal’s DevOps team previously juggled over 50 individual IPs across the AWS Web Application Firewall (WAF) and various security groups—accommodating both internal staff and integrated third-party platforms.

Maintaining duplicated rules across multiple environments was costing the company 40 hours of IT administration per month—roughly 25% of a full-time DevOps engineer’s capacity. By implementing NordLayer’s virtual private gateways and dedicated IP addresses, ID-Pal retired their manual IP tracking, slashed their administrative workload, and drastically minimized the risk of human error during provisioning.

Benefit 2: Intuitive Functionality and Consolidated Security

While their previous manual controls were secure, they were incredibly tedious to maintain. NordLayer’s centralized Control Panel changed the game, giving the DevOps team a single pane of glass to monitor user access across the organization.

“NordLayer’s configuration is beautifully intuitive. I don’t need to be an expert on the underlying mechanics. If I need two IP addresses for redundancy, I just specify that—and it’s done. With other platforms, you have to navigate dozens of convoluted settings, making it easy to miss critical security configurations.”

Benefit 3: Lightning-Fast Deployment and User Onboarding

ID-Pal kicked off with a 12-user pilot program involving QA developers, DevOps engineers, and the CTO. Following a flawless trial, they scaled the deployment to 36 active users across the entire technology team.

The rollout was incredibly swift. O’Farrell noted that the DevOps team configured AWS access within a week, and the complete rollout across all pre-production and non-production environments was finished in under two weeks—the exact length of a single agile sprint.

By the Numbers: ID-Pal’s Results

~40 hours saved per month: Reclaimed a quarter of a full-time DevOps engineer’s workload by automating IP updates.
Streamlined Infrastructure: Consolidated 50+ scattered IPs into just 2 virtual private gateways using 4 dedicated IPs.
Rapid Deployment: Achieved a complete NordLayer rollout in under two weeks.
Frictionless Provisioning: Enabled instant onboarding and offboarding for staff.
Smooth Scaling: Effortlessly expanded from 12 to 36 users within the tech department while reducing human error.

Pro Tips: Cybersecurity Advice from ID-Pal’s CTO

Robert O’Farrell offers actionable advice for leaders looking to fortify their business security:

Start now, perfect later: “Implement your baseline controls immediately and iterate over time. You won’t anticipate every edge case, so don’t leave your business vulnerable while waiting for an illusion of perfection.”
Adapt security to your workflow: “We operate on a collaborative model where everyone contributes to our management system. Instead of blindly enforcing rigid policies, we consult our team and mold security controls to fit their actual daily workflows.”
Democratize the security process: “Rules dictated from an isolated IT silo are rarely followed. You can’t expect 100 employees to read a dense policy document and seamlessly apply it to their roles. You must involve them in the creation process.”

Conclusion

In less than two weeks, ID-Pal transformed a fragile, manual IP management process into a streamlined, highly secure infrastructure using NordLayer’s dedicated IPs. This transition allowed them to reclaim 40 hours of valuable engineering time every month, eliminate human error, and stay entirely focused on their mission: delivering top-tier identity verification with zero data access.

If managing VPNs and tracking IP addresses is distracting your team from driving your business forward, it’s time to upgrade. NordLayer is designed to remove that burden entirely.

About Nord Security
The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About NordLayer
NordLayer is an adaptive network access security solution for modern businesses – from the world’s most trusted cybersecurity brand, Nord Security.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

About Version 2 Limited
Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Nord Security NordLayer 2026

A Complete Guide to Managing Your Saved Passwords in Google Chrome

Commanding over 65% of the global market share, Google Chrome is undeniably the world’s go-to web browser. Part of its appeal lies in its seamless integration of various Google tools—from Gemini and Google Lens to Google Translate and, notably, Google Password Manager. Keeping your credentials stored directly within your daily browser offers undeniable convenience. Let’s break down exactly how you can access, edit, and organize your saved passwords in Chrome, and explore whether relying on a browser-based tool is the best strategy for your digital security.

Locating Your Saved Passwords

On Desktop Computers

Finding your stored credentials on the desktop version of Chrome takes just a few clicks:

Open the Google Chrome browser.
Click on the three-dot menu (kebab menu) located in the upper-right corner.
Hover your cursor over “Passwords and autofill” and click on “Google Password Manager.”
You can now scroll through or search for your saved login details.

On Android Devices

If you’re browsing on an Android phone or tablet, follow these steps:

Open the Chrome app.
Tap the three-dot menu in the top-right corner of your screen.
Select “Settings.”
Under the “Passwords and autofill” section, tap “Google Password Manager” to view your credentials.

On iOS Devices (iPhone/iPad)

For Apple users, the layout is slightly different:

Launch the Chrome app.
Tap the three-dot menu (meatballs menu) situated in the bottom-right corner.
Select the key icon labeled “Password Manager.”
Your saved passwords will now be visible.

Organizing and Managing Your Credentials

Chrome makes it relatively simple to maintain your digital vault, whether you need to update an old password, bring in external credentials, or clean house.

Editing Passwords

Need to update a changed password or add a username note? Here is how:

Inside Google Password Manager, click on the specific account you wish to alter.
Authenticate your identity by entering your device PIN or password.
Click “Edit.”
Update the password field or add contextual notes as needed.
Click “Save” to lock in the changes.

Importing Passwords

Transitioning from another browser or a different password manager is a straightforward process:

Navigate to “Settings” within the Google Password Manager sidebar.
Find the “Import passwords” option and click “Select file.”
Upload your CSV file, and Google will automatically populate your vault.

Exporting Passwords

If you are switching tools or just want an offline backup, you can download a CSV file of your data (available on both desktop and mobile):

Go to the Google Password Manager sidebar and click “Settings.”
Find “Export passwords” and click “Download file.”
Complete the security prompt (PIN or device password).
Choose a secure save destination on your device and click “Save.”

Deleting Passwords

To remove a single outdated account:

Click on the specific entry in your Password Manager.
Pass the security verification prompt.
Click “Delete.” Note: A “Password deleted” banner will appear at the bottom of the screen. You have exactly five seconds to click “Undo.” After that, it is gone forever.

To wipe your vault entirely (Warning: This is permanent and deletes all passwords and passkeys):

Go to “Settings” in the sidebar.
Look for “Delete all Google Password Manager data” and click “Delete data.”
Confirm by clicking “Delete.”

Managing the “Never Save” List

When you log into a new site, Chrome asks if you want to save the password. If you click “Never,” Chrome remembers this preference. To reverse this decision:

Open the Google Password Manager “Settings” via the sidebar.
Scroll down to “Declined sites and apps.”
Find the website you want Chrome to prompt you for again, and click the “X” next to it to remove the block.

Pro Tips for Robust Password Security

Managing credentials can be stressful, but employing a few best practices will drastically improve your online safety:

Never reuse passwords: Every account should have a unique password. If one site suffers a breach, reused passwords give hackers a skeleton key to your other accounts. Prioritize updating critical accounts first (email, banking, medical portals).
Prioritize length and complexity: Aim for at least 15 characters, blending letters, numbers, and symbols. Alternatively, use a passphrase—a string of random words that is easy for you to picture but mathematically impossible for software to guess.
Rely on a password manager: Memorizing complex credentials is a losing game. Let a built-in tool or a dedicated app remember them for you.
Enable Multi-Factor Authentication (MFA): MFA ensures that even if a cybercriminal guesses your password, they still cannot access your account without your secondary device. Authenticator apps (like NordPass Authenticator) are highly recommended for generating one-time login codes.
Embrace Passkeys: For a frictionless, password-free experience, set up passkeys. They use device-level biometric data (Face ID, fingerprints) combined with advanced cryptography to grant access instantly and securely.

Is Chrome’s Built-In Manager Safe Enough?

For casual use, Google Password Manager is undeniably convenient. However, many users lean on it purely for ease of use, sacrificing higher-tier security in the process. When stacked against dedicated, purpose-built password managers, browser-based tools reveal some significant blind spots.

For instance, while Google requires authentication to view your passwords, that verification remains active for as long as your browser is open. Furthermore, Google is not fully transparent about the specific encryption protocols used to guard your data.

In contrast, dedicated platforms like NordPass utilize state-of-the-art XChaCha20 encryption. They also feature customizable auto-lock timers, forcing re-authentication after a set period of inactivity. By upgrading to a solution like NordPass Premium, you gain access to proactive security tools—such as the Data Breach Scanner, Password Health evaluations, and Email Masking—right inside your preferred browser. Ultimately, you shouldn’t have to trade robust security for daily convenience; with a dedicated manager, you get the best of both worlds.