Who we protect
Govern people and machines without making them share an identity.
Explore this feature →AIdentity / Identity Graph
Understand indirect access and concentration of power
Identity Graph connects identities, memberships, roles, applications and resources so teams can investigate the path behind access.
What this means for your team
- Explore entities, neighborhoods and direct or indirect paths.
- Investigate effective access, exposure of critical resources, the potential reach of a compromise and risky permission combinations.
- Review supported attack-path, delegation, concentration and least-privilege analytics with their evidence context.
- Use explanation and simulation to inform a reviewed change; graph insight does not independently grant authority.
A practical example
A user inherits a role through a nested group; the graph makes that route visible for investigation.
How it works
Select a step to read its explanation
- Choose a person, Agent or other entity as the starting point for an access investigation.
- Follow direct and indirect relationships such as membership, scoped roles and sponsored Agent connections.
- Identify whether those relationships lead toward a sensitive resource or a concentration of authority.
- Inspect the evidence behind the path and the relevant policy context. A graph connection does not independently grant access.
- Use the explanation to propose a reviewed access change; investigate its effect before applying it.
1 / 5
This example illustrates the journey. Select any step to explore it at your own pace.
Explore more AIdentity features
Authentication & MFA
Set the proof each sign-in or sensitive action must provide.
Explore this feature →RBAC, ABAC & ReBAC
Decide access using roles, attributes and relationships together.
Explore this feature →Identity lifecycle
Keep access aligned with joining, changing teams and leaving.
Explore this feature →Federation & applications
Connect applications and identity providers to a governed sign-in experience.
Explore this feature →Privileged roles (PIM)
Activate powerful roles for a bounded task rather than leaving them always on.
Explore this feature →Privileged access (PAM)
Govern access to privileged targets and credentials.
Explore this feature →Governance & approvals
Put reviews and independent decisions around sensitive access changes.
Explore this feature →Built-in agents & automation
Turn continuous identity analysis into evidence-backed recommendations and approved actions.
Explore this feature →Ask AIdentity
Ask questions about identity and access with authorization still enforced.
Explore this feature →Agent & device identity
Give agents and devices their own credentials, ownership and revocation path.
Explore this feature →Audit & privacy
Trace identity decisions while controlling access to sensitive evidence.
Explore this feature →