Agent Identity & Governance Discovery Engine
"You can't secure what you can't see."
Continuously scans cloud, SaaS, and on-premises environments to discover every deployed agent — sanctioned or shadow. 10 discovery sources, LLM endpoint fingerprinting, API call pattern analysis.
Traces what each agent can access. Databases, APIs, code repos, production systems. Identifies over-privilege, orphaned credentials, and privilege escalation paths across 8 escalation rules.
Determines who created each agent, who owns it now, and whether they're still with the organisation. Maps ownership gaps — agents running with no accountable human are flagged critical.
Visualises the full relationship map. Agent-to-agent trust, delegation chains, permission maps, hidden transitive trust chains. Blast radius analysis — if this agent is compromised, what else is at risk.
Produces compliance-ready reports mapped to EU AI Act, NIST AI RMF, CSA AI Safety Initiative, OWASP Agentic Top 10, and UK AISI. Full gap analysis with remediation recommendations.
The unique capability no competitor can replicate. Feeds discovered agents directly into NEMESIS for adversarial validation. IDRIS finds it, NEMESIS proves it's exploitable. The loop closes.
Discovery → Validation → Defence.
Nothing assumed known. Nothing assumed safe. Nothing assumed defended.
Standard mode discovers, maps, audits, and reports. Passive. Safe to run in any environment.
UNLEASHED mode turns discovery into destruction. Every agent IDRIS finds is fed through the full Red Specter offensive stack for live adversarial validation.
Ed25519 gated. Founder's machine only. RESTRICTED classification. Air-gapped output. Never transmitted.