C1 Platform is the connected identity and access inventory and architecture shared by C1's Govern, Run, and Work products. It unifies people, service accounts, workloads, and agents into a single identity graph, so findings, governance, and agent access all draw from the same live data.

Is C1 Platform another product or package?

No. A customer can start and stop with a single product, such as Access or Vault, when that product solves the job. C1 Platform is the shared inventory and architecture those products already run on.

How does data enter the identity and access inventory?

Depending on the system, data can enter the identity and access inventory through a supported prebuilt or custom connector, API or database connection, CSV import, MCP path, customer-hosted connector, or C1 Bridge connection to a supported private MCP server.

Does the identity and access inventory cover every system and action?

No. Coverage of the identity and access inventory follows configured sources and supported target paths. Each connector or interface defines the objects, fields, actions, evidence, and update cadence available to C1.

How do findings relate to the identity graph?

A supported finding in the identity graph points back to the identity, account, access, credential, agent, or relationship that needs attention. Teams can then assign an owner and take a governed action on the underlying record.

Platform

C1 Identity Platform

One platform to govern identity, access, and agent work.

Book a demo

IDENTITY GRAPH

Complete visibility over every identity and entitlement

HOW IT WORKS

Connected records can associate a person, service account, workload, or agent with the accounts and accountable owners known to its sources.

Complete visibility over every identity and entitlement

FINDINGS

Detect security issues in real-time across your workforce and agents

HOW IT WORKS

Findings can flag issues such as unowned accounts, identity misclassification, lookalike records, risky access, or a decoy credential in use when the connected data supports that signal.

Explore identity security

Detect security issues in real-time across your workforce and agents

DECOYS

Detect credential theft in realtime

How it works

C1 vends credentials that look exactly like real ones but belong to no legitimate workload: human and service-principal credentials, connector credentials, access tokens, and federation trusts. Each authenticates against C1-monitored endpoints, so any use is observable.

NHI and agent visibility

Discover every non-human identity and agent

HOW IT WORKS

Supported connectors can ingest and categorize service accounts, keys, tokens, certificates, workloads, and other non-human identities from selected cloud and on-prem systems.

Discover every non-human identity and agent

400+ Identity connectors

Bring every identity and entitlement into one graph

How it works

Deploy prebuilt connectors for directories, HR systems, business applications, cloud platforms, databases, and private infrastructure.

Browse identity connectors

Bring every identity and entitlement into one graph

3000+ MCP connectors

Give agents governed access to enterprise tools

How it works

Select from the C1 catalog or register an MCP server directly, then discover its available tools and actions.

Browse MCP servers

Give agents governed access to enterprise tools

Extensibility and developer tooling

Build and operate C1 with the tools your engineers already use

How it works

Query identity data, integrate C1 into internal services, and invoke supported operations through the REST API and generated SDKs.

Build and operate C1 with the tools your engineers already use

Platform

Identity, access, and agent work on one connected platform.

Book a demo

C1 Identity Platform

Complete visibility over every identity and entitlement

Identities, accounts, and owners

Apps, resources, and entitlements

Relationships and effective access

Source-specific boundaries

Detect security issues in real-time across your workforce and agents

Identity and access findings

Shadow apps

Shadow AI

Shadow credentials

Governed resolution

Detect credential theft in realtime

Plant identity-native decoys

Bait the real surfaces

Route the response

Discover every non-human identity and agent

Build the NHI inventory from connected sources

Map owners and relationships

Bring supported agents into view

Move a discovery into governance

Keep inventory and runtime claims separate

Bring every identity and entitlement into one graph

Connect SaaS, cloud, infrastructure, and on-prem systems

Preserve fine-grained identity and access relationships

Run connectors where your environment requires

Extend coverage to homegrown systems

Turn synchronized data into governed action

Give agents governed access to enterprise tools

Start with thousands of ready-to-connect MCP servers

Authenticate every user, agent, and client

Apply identity-aware policy before execution

Keep credentials out of agent context

Record tool activity with its decision

Build and operate C1 with the tools your engineers already use

Automate through APIs and SDKs

Work from the C1 CLI

Manage configuration with Terraform

Add custom logic with Functions

Identity, access, and agent work on one connected platform.

Platform FAQs

What is C1 Platform?

Is C1 Platform another product or package?

How does data enter the identity and access inventory?

Does the identity and access inventory cover every system and action?

How do findings relate to the identity graph?

C1 Identity Platform

Complete visibility over every identity and entitlement

Identities, accounts, and owners

Apps, resources, and entitlements

Relationships and effective access

Source-specific boundaries

Detect security issues in real-time across your workforce and agents

Identity and access findings

Shadow apps

Shadow AI

Shadow credentials

Governed resolution

Detect credential theft in realtime

Plant identity-native decoys

Bait the real surfaces

Route the response

Discover every non-human identity and agent

Build the NHI inventory from connected sources

Map owners and relationships

Bring supported agents into view

Move a discovery into governance

Keep inventory and runtime claims separate

Bring every identity and entitlement into one graph

Connect SaaS, cloud, infrastructure, and on-prem systems

Preserve fine-grained identity and access relationships

Run connectors where your environment requires

Extend coverage to homegrown systems

Turn synchronized data into governed action

Give agents governed access to enterprise tools

Start with thousands of ready-to-connect MCP servers

Authenticate every user, agent, and client

Apply identity-aware policy before execution

Keep credentials out of agent context

Record tool activity with its decision