Centeye
Book a call Start free trial

AI agent security Early access

Centeye Synthwatch gives every AI agent an identity, an owner and an off switch.

AI agents now read mail, move files, raise tickets and call other apps, with their own access and often nobody watching. Synthwatch makes every agent known, owned and answerable. You know who it is, who owns it, what it can reach and what it actually did, and you can stop it in one step.

Ask for early access Book a 30-minute call →

Part of the Centeye platform · Agent security

Centeye Synthwatch
  • Agent register
  • An owner for every agent
  • Scoped, revocable identity
  • Data each agent can reach
  • Behaviour profile
  • Copilots inside SaaS
  • App-to-app access
  • One-step off switch
Works withMicrosoft 365Microsoft Entra IDGoogle WorkspaceMicrosoft CopilotGemini

What is AI agent security?

An AI agent is software that acts on its own: it signs in, reads data and takes actions. Each one is a new kind of worker, a non-human identity holding keys to your systems.

Agent security answers five questions for every agent: who is it, who owns it, what can it reach, is it allowed, and is it behaving? Synthwatch answers them across Microsoft 365, Google Workspace and the SaaS apps your agents connect to, from outside the agent, through identity and access, so it works whichever AI vendor built the agent.

Capabilities

What Centeye Synthwatch takes care of.

Each capability with a real situation: what happens, and what Synthwatch does about it.

  1. 01

    Agentic identity

    Verifiable, scoped and revocable identities for AI agents and non-human workloads. Every agent tied to a human sponsor, holding only the access its job needs, and stoppable in one step.

    A What happens

    An agent built by the sales operations team runs on a shared admin account with access to everything.

    B What Synthwatch does

    Synthwatch flags an agent with no identity of its own, names its sponsor, and lists the narrower access its job needs.

  2. 02

    Agentic data governance

    Makes sure each agent can read, write and surface only the data it should, and finds oversharing, like an assistant that can see every finance file.

    A What happens

    A Copilot assistant can see every file in the finance share, because the share is open to all staff.

    B What Synthwatch does

    Synthwatch finds the oversharing and shows which files the assistant could surface, and to whom.

  3. 03

    Observability and governance

    Continuous discovery of every agent, a behavioural profile of what normal looks like for each one, and policy enforcement when it steps outside. Every agent visible and accountable, with a record of what it did.

    A What happens

    A support agent that answers 200 tickets a day starts exporting customer records at midnight.

    B What Synthwatch does

    Synthwatch sees it step outside its profile and alerts its owner, or revokes its access at your setting.

  4. 04

    AI security posture management

    Posture for your agents, models, datasets and pipelines: what is exposed, misconfigured or over-privileged, ranked by risk, with the fix.

    A What happens

    A test agent built last quarter still holds a live key and write access to production data.

    B What Synthwatch does

    Synthwatch ranks it as the top risk, with the fix: retire the key and remove the write access.

  5. 05

    Agentic SaaS security

    Secures the agents and copilots inside your SaaS platforms, governs the AI apps connected through OAuth, and contains SaaS-to-SaaS spread when one compromised app reaches the next.

    A What happens

    A compromised scheduling app uses its access to one SaaS tool to reach into the CRM.

    B What Synthwatch does

    Synthwatch traces the app-to-app chain and cuts the grant between them before it reaches customer data.

Every interaction, answerable

Who owns it, what it can reach, and is it allowed?

Agents work with people, with other agents and inside your SaaS apps. Synthwatch answers the same five questions for every hop, and acts from outside the agent, through identity and access.

Person Dana, Finance
Asks it to reconcile last month’s bills Synthwatch checks every hop
AI agent Invoice agent
Who owns it?
Dana is its sponsor. Every agent in the register has a named human owner.
What is its identity?
Its own identity, separate from Dana’s account, so its actions are never mistaken for hers and can be stopped without locking her out.
What can it reach?
The finance share and the accounting app. Not HR files, not anyone’s mailbox.
Where is it controlled?
In Microsoft Entra ID or Google Workspace, through the grants it holds. Synthwatch acts there, from outside the agent.
Is it allowed?
Reading invoices is its job, so yes. Exporting the full vendor list is not, so it is flagged or stopped at your setting.

Deeper context: If Dana’s own account is taken over, every agent she sponsors is reviewed in the same case.

How it works

It detects, connects the dots, and fixes it.

Synthwatch doesn’t stop at an alert. Praxis links what it finds to the rest of the attack, then fixes it at the setting you choose.

  1. 01

    Detects

    Spots what is wrong, as it happens.

    • Every agent, as it appears
    • Access beyond its job
    • Behaviour outside its profile
  2. 02

    Connects the dots

    Links it to everything related, in one case.

    • The person who sponsors it
    • The data it opened
    • The apps it reached next
  3. 03

    Fixes it

    On your dial: tells you, asks first, or handles it.

    • Revoke its access
    • Reset its keys
    • Contain the spread
On your dial Tell me Centeye finds it, explains it and recommends the fix. You do the rest.Ask me first Centeye prepares the fix and runs it the moment you approve, from a phone if needed.Handle it Centeye fixes it on its own, checks it worked, and tells you after.

In action

Centeye Synthwatch in action.

Pick a case to see what happened, what Centeye saw, and what it did.

The invoice agent goes off script

Friday, 11:20 pm

  1. What happened

    An invoice agent that reads a few dozen files a day starts pulling over a thousand from the finance share, using a key that leaked into a public code repository.

  2. What Centeye saw

    Synthwatch sees behaviour far outside the agent’s profile while its owner is offline, and Praxis links it to the leaked key.

  3. What it did

    The agent’s access is revoked and its key reset, every file it opened is listed, and the owner wakes up to a one-page summary.

Better together

Centeye Synthwatch doesn’t work alone.

Identity, endpoint, email, AI use and agents are one picture to an attacker. Each link below is made automatically, in the same case.

Getting started

Join the Centeye Synthwatch early access.

Connect Microsoft 365 and Google Workspace and Synthwatch starts listing the agents already working for you within minutes.

Ask for early access Book an intro call → Questions about Synthwatch? Read the FAQ → Agentic browser security is part of Lumen →

Terms explained: AI Agent · NHI · SSPM · OAuth Grant