Book a demo
PLATFORM
Platform overviewGuardrailsInvestigationUSE CASES
Coding agentsMCP serversOAuth appsService accountsRESOURCES
ResearchAttack paths guideGlossaryAboutBook a demoAI agent and non-human identity security glossary.
Short, precise definitions of the terms we use for AI agent access: attack paths, reach, breakpoints and the identities behind them.
Agent data reachAgent data reach is the set of sensitive data an AI agent can eventually access through the identities, credentials and permissions available to it.Read definition →Attack pathAn attack path is a chain of access steps an attacker can take from an entry point to a valuable target, such as production systems or sensitive data.Read definition →Blast radiusBlast radius is the set of systems and data affected if a single identity, credential or component is compromised or misused.Read definition →
BreakpointA breakpoint is the single permission change that closes an attack path, ideally the change that removes the most risk with the least disruption.Read definition →Distance to productionDistance to production is the number of access steps between an identity, such as an AI agent or CI token, and a destructive or data-exposing action in production.Read definition →Least agencyLeast agency is the principle of giving an AI agent only the autonomy, tools and access it needs for its task, extending least privilege from permissions to actions.Read definition →
MCP serverAn MCP server exposes tools and data to AI agents through the Model Context Protocol, and calls other systems using its own credentials.Read definition →Non-human identity (NHI)A non-human identity is a digital identity assigned to software or services rather than a person, such as a service account, API key, OAuth app, certificate or AI agent.Read definition →OAuth grantAn OAuth grant is the permission a user or administrator gives a third-party application to act on their behalf within defined scopes, without sharing a password.Read definition →
FAQ
Questions, answered.
The basics, in two answers.
What is AI agent security?
AI agent security is the practice of controlling what AI agents can access and do: which identities and credentials they use, what data they can reach and which actions they may take on their own.
What is the difference between NHI security and AI agent security?
Non-human identity security covers all machine identities such as service accounts, keys and OAuth apps. AI agent security focuses on agents, which are NHIs that also decide their own actions.
See what your agents can reach. Before someone else does.
Book a demo and we walk through the access paths in an environment like yours.
Book a demoRead the attack path guide