BlueFlag Security
CompanyRecent news
99% of repository access tokens never expire, according to a developer risk report
BlueFlag Security's The State of Developer Risk 2026 report found that 99% of repository access tokens never expire. Developers, contractors, service accounts, bots and AI coding agents can therefore keep permissions that outlast their work, unless organisations run regular access reviews.
BlueFlag Security expands controls for AI agents working under developer identities
BlueFlag Security has expanded its AI Agent Governance capability, which maps the access, behaviour and oversight of both approved and shadow AI agents, with options for automated risk remediation. Customers can use it to govern how agents relate to human and machine identities, tools, pipelines and production applications across the software development lifecycle. The release follows BlueFlag's 2026 State of Developer Identity Risk report.