Academy
What is credential rotation?
Glossary · AI agent and machine identity security
Short answer
Credential rotation is replacing a secret with a new one on a schedule or after an incident, so an old copy stops working.
Why it matters
Rotation limits how long a leaked secret is useful. It only works when you know every place the secret is used.
What it looks like
Replacing an API key and updating the three services that used it.
In nerl0
nerl0 shows where a credential reaches, which helps you find what a rotation will touch. It connects read-only and does not rotate anything. See Security Graph.