All seven modules
Module 05 · Nerv-NHI · Machine identity
AI & Machine Identity
Your agents have credentials, permissions and standing access. Nobody offboards a bot.
Non-human identities now outnumber human ones in most tenants, and AI agents are the fastest growing category. Nerv-NHI discovers every agent, service account, API key, model endpoint and automation identity in your environment, tells you what it can reach, and closes the gap between what it was given and what it actually needs.
What it covers
- Agent and service identity discovery
- Credential and secret age, rotation, exposure
- Least privilege and standing permission review
- Delegated authority: who the agent acts for
- Agent to resource authorisation mapping
- Anomalous agent behaviour against baseline
- OAuth app and MCP server consent governance
- Named human owner for every machine identity
- Orphaned and abandoned identity retirement
- Automated scope reduction and revocation
Where it separates
- 01Built for agentic AI, not just service accounts.
- An agent that reasons, chains tools and calls other agents is not a static integration, and treating it like one is how standing access becomes a breach.
- 02Human and machine identity in one place.
- Nerv-ID and Nerv-NHI share a console, so a compromised staff account and the agent token it delegated are the same investigation.
- 03Ownership is enforced, not requested.
- Every non-human identity carries a named human owner and a review date. Unowned identities are surfaced, not silently inherited.
- 04Offboarding that actually completes.
- When a person, project or vendor leaves, the agents and keys created under that authority are identified and retired with them.
Machine identity governance is an emerging discipline with no settled market leader. We have deliberately not published a capability comparison for this module.