Question 1

What is identity security?

Accepted Answer

Identity security protects human and non-human identities by connecting accounts, entitlements, credentials, access paths, risk findings, owners, and response actions.

Question 2

What is a non-human identity (NHI)?

Accepted Answer

A non-human identity is an account or application that operates without direct human interaction, such as a service account, service principal, workload, OAuth application, API key, or AI agent.

Question 3

Why are non-human identities a security risk?

Accepted Answer

Non-human identities often have broad permissions, long-lived credentials, unclear ownership, and no natural employee offboarding event. Forgotten or overprivileged identities can preserve an access path long after the workload that created them is gone.

Question 4

What is identity security posture management (ISPM)?

Accepted Answer

ISPM continuously identifies identity exposures such as excessive permissions, stale accounts, risky access paths, weak controls, and unmanaged credentials. It focuses on reducing preventable identity risk before an active attack.

Question 5

What is identity threat detection and response (ITDR)?

Accepted Answer

ITDR monitors identity activity for signs of compromise or abuse and coordinates investigation and response. ISPM addresses risky posture; ITDR addresses active identity threats, and the two disciplines work together.

Question 6

How does C1 identify and prioritize identity risk?

Accepted Answer

C1 turns supported internal and external signals into findings tied to the affected identity, access relationship, source evidence, owner, and current status. Connected context helps teams distinguish an isolated alert from a meaningful access path.

Question 7

What is an identity access path or blast radius?

Accepted Answer

An access path shows how an identity can reach an application, entitlement, credential, or sensitive resource through direct and inherited relationships. Its blast radius is the set of resources and actions that could be affected if that identity were compromised.

Question 8

How does C1 remediate and verify identity risk?

Accepted Answer

C1 can route a governed task or supported action to reassign, right-size, certify, or revoke access. The finding closes when the underlying condition clears rather than when a ticket is merely opened.

Question 9

Can C1 govern workforce identities and AI agents in one platform?

Accepted Answer

Yes. C1 maps people, workloads, service accounts, and agents to their accounts, entitlements, owners, and connected systems so teams can investigate risk with a shared identity graph and policy model.

Question 10

How does identity security support least privilege?

Accepted Answer

Identity security reveals unused, excessive, inherited, or risky access and connects each finding to a remediation path. Teams can then right-size permissions, expire temporary grants, or remove access that is no longer justified.

Question 11

How does C1 preserve evidence for identity security investigations?

Accepted Answer

C1 keeps the finding, source signal, affected identity, owner, access relationship, policy decision, remediation action, and resulting condition together. Available evidence depends on the connected source and supported action.

NHI & Identity Security

How do we discover and remediate identity based risks across our apps and agents?

Discover, alert, and remediate risks in real-time across your workforce and agents.

Populate the identity graph

Find every account, NHI, and agent

Generate findings in real-time

Automate response and remediation

The C1.ai products you'll use:

Find identity risk. Automate the response.

FAQs

Latest on the platform

C1 for Identity Security

Agentic AI Security Risks: The OWASP Top 10 and How to Fix Them

How Qualtrics Unified Identity, Streamlined FedRAMP Compliance, and Transformed Employee Access with C1