Agent identity & access
Astrix discovers AI agents, MCP servers, service accounts, OAuth apps, API keys and other non-human identities across cloud, SaaS, CI/CD and vaults, maps each to a human owner in an identity graph, and applies agent policies plus onboarding and offboarding actions. Enforcement depth outside integrated platforms is unclear.
commercial · generally available · Research snapshot 2026-09-06
Visit the official product source ↗Agent identity & access · Agent discovery & inventory · Agent security & threat detection
Useful conversation with: CISO, Identity security lead, SOC manager.
Show me the identity graph for one shadow agent — its NHIs, credentials, reachable resources and owner — then apply a policy that blocks it and offboard it.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Documented by provider
Astrix automatically discovers custom, third-party, shadow and managed AI agents, MCP servers, NHIs (service accounts, OAuth apps, API keys, SSH keys, IAM roles) and secrets inside and outside vaults, and maps them in an identity graph with owners.
Limit: Product page does not list the specific connectors or their coverage limits.
Vendor claim
The platform can onboard shadow agents, offboard unused agents and agents of departing employees, revoke access after policy violations and automate secret rotation.
Limit: Automation scope per integrated system is not documented on the fetched page.
Independently corroborated
Astrix released Agent Policies and agentic just-in-time access alongside four AI agent discovery methods in March 2026.
Limit: Vendor-issued press release distributed by PR Newswire; no third-party validation of coverage claims.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction