SPIFFE (Secure Production Identity Framework for Everyone)

SPIFFE is an open standard for assigning cryptographic identities to workloads in dynamic infrastructure environments.

Each workload, including an AI agent, receives a SPIFFE Verifiable Identity Document (SVID) that proves its identity without relying on network location or static secrets. SPIFFE is the identity layer that underpins SPIRE and is used to establish zero-trust identity for agents in production.

Closely related concepts include Workload Identity, Machine Identity, Non-Human Identity (NHI), Trust Boundary. Each is defined in the Prefactor glossary.