The release of OWASP’s Non-Human Identity (NHI) Top 10 is a major step forward for the industry. For the first time, we have a structured way to evaluate NHI-related threats and measure organizational exposure. That’s no small thing. Risk management starts with understanding, and while the list may not be perfect, it gives us a foundation to have meaningful, constructive conversations about the challenges organizations face when it comes to NHIs.