SECURIX Developed Product
Non-human Identity Discovery X Ray
A discovery assessment of your non-human identities, including service accounts, credentials, AI agents and cloud workloads, that uncovers the ownership, privilege and lifecycle risks behind them.
Solution overview
Non-human Identity Discovery X Ray identifies centrally managed or federated non-human identities across the agreed supported platforms and assesses their ownership, credentials, privileges and lifecycle. Silverfort provides read-only discovery. SECURIX applies its own risk scoring, maps findings to relevant regulatory controls and prioritizes the actions. You receive four deliverables: an NHI Inventory Report, a Risk Heatmap, an Executive Briefing and a Regulatory Gap Analysis.
Your business needs
Know which non-human identities exist and where the risks lie
Inventory and ownership
Service accounts, workload identities and AI agents accumulate across platforms without a shared inventory or clearly assigned owners. Teams cannot reliably say which identities exist or who is responsible for them.
Credentials and privileges
Credentials that never expire and identities with excessive privileges leave risks unresolved. Without a consistent assessment, it is difficult to decide what needs attention first.
Lifecycle and evidence
Without usage information, teams cannot distinguish dormant identities from active ones. Risk and compliance teams assemble evidence for each audit without a shared baseline.
Who this is for
A shared baseline for the teams responsible for NHI risk
For medium and large organizations with Entra ID and on-premises Active Directory, growing cloud and automation use, and regulatory requirements. The assessment is intended for organizations that lack visibility into their NHI inventory, ownership, privileges and lifecycle.
CISO / IAM owners
A prioritized view of NHI risks and a documented basis for deciding which actions and investments come first.
IAM / SecOps / Infrastructure and Cloud Teams
An inventory register and classified findings for technical investigation and remediation planning.
Risk / Compliance / Internal Audit
A regulatory gap analysis that connects findings with relevant controls and identifies evidence for audit discussions.
Our deliverables
Four deliverables to guide your remediation decisions
Every engagement includes four deliverables covering the agreed platform connections. Silverfort provides discovery. SECURIX supplies the scoring model, regulatory mapping, priorities and handover.
- NHI inventory report — A report and a CSV inventory of the identities found, with class, platform, credential status, lifecycle status and ownership information. The CSV inventory stays with you.
- Executive briefing — A briefing of 10 to 15 slides, presented to management in plain language. It explains the results and the three decisions needed to reduce the risks.
- Risk heatmap — A risk rating using the SECURIX scoring model for credential hygiene, lifecycle, age and entitlements. Critical results are flagged.
- Requirements engineering — Running stakeholder interviews and workshops to establish what the customer and the users need.
- Remediation and implementation
- Continuous monitoring and operations
- Local and standalone environments
- Vaults and secret scanning
- Custom AI environments
How we deliver
From discovery to prioritized action
-
We agree on the platform connections, stakeholders and data handling. We establish read-only access and confirm any firewall clearance required for on-premises Active Directory.
-
We discover and classify identities across the agreed connections, inventory their attached credentials and map ownership information. AI agents and bots are classified using naming patterns and application types, then validated with application owners. This classification is heuristic.
-
We analyze risk and lifecycle findings using SECURIX scoring, map regulatory gaps and prepare the four deliverables.
-
We present the executive briefing, review technical findings and prioritized quick wins, and hand over the inventory and recommendations to your teams.
Preparation typically takes one week and depends on access approvals and any necessary firewall clearance. Once preparation is complete and access is confirmed, Core assessments take around two weeks and Extended assessments around three weeks. The raw inventory is available at the end of the first discovery week.
Discovery scope
Four classes of non-human identity
The assessment covers identities centrally managed or federated through supported platforms, together with the credentials attached to those identities.
Service Accounts
Technical accounts used by services and automated processes, assessed for ownership, credential status, lifecycle and privilege.
Keys, secrets and certificates
Credentials attached to in-scope identities, including client secrets, certificates and access keys on app registrations, service principals and IAM roles.
AI agents and bots
Centrally managed agent and bot identities. Classification uses naming patterns and application types and is validated with application owners.
Cloud Workload Identities
Identities used by cloud workloads, assessed for ownership, privilege and lifecycle risks within the agreed platform connections.
Package scope
X-Ray Core
Entra ID and on-premises Active Directory, with up to three connections. Assessment duration: approximately two weeks after preparation and confirmation of access.
X-Ray Extended
Multi-cloud discovery across supported platforms, including Entra ID, AWS, GCP, Okta, Ping and Active Directory, with up to six connections. Assessment duration: approximately three weeks after preparation and confirmation of access.
A connection is one Entra ID, AWS or GCP tenant, one Okta or Ping instance, or one Active Directory domain. Additional connections are scoped separately.
Technology partners
Discovery with Silverfort, assessment by SECURIX
Silverfort provides the discovery engine. SECURIX supplies risk scoring, regulatory mapping, priorities and handover. Discovery uses read-only access, installs no agents and makes no changes to production authentication.
You do not need to purchase a Silverfort license or commit to a remediation platform. Subsequent technology decisions follow from the findings.
Frequently asked questions
Before your consulting engagement begins
Discovery uses read-only access. No agents are installed and no changes are made to production authentication. Access approvals and firewall clearance for on-premises Active Directory may still be required before discovery starts.
Read-only access to each agreed connection, a named contact for each platform and any necessary firewall clearance. Application owners need to be available to validate AI-agent classification. Customer effort is approximately four to six person-days.
The Statement of Work documents where identity data is processed and stored, how long it is retained and how it is deleted after handover, together with the data-processing agreement.
No. It provides the inventory, risk analysis and recommendations needed to decide what to address. Remediation and implementation are scoped separately. A prioritized remediation roadmap is available as an optional addition.
Contact
Let’s discuss your next step
Tell us about your non-human identity priorities. Together, we’ll clarify the scope and how discovery can support your next decision.
