Glossary · AI agents

What is NHI (Non-Human Identity)?

Any account that can reach company data without a person signing in: service accounts, API keys, connected apps and, increasingly, AI agents.

People sign in, get prompted for MFA and leave the company one day. Non-human identities do none of that. They often hold broad access, never expire and are rarely reviewed.

AI agents make the problem bigger. A Copilot or Gemini agent that reads mail, files or the directory is a non-human identity with real reach, and it can be added by any user in minutes.

Governing NHIs starts with knowing they exist: who owns each one, what it can reach and how to switch it off.

How Centeye handles it

Centeye Synthwatch (early access) gives every AI agent an identity, an owner and an off switch.

Synthwatch: AI agent security →

Go deeper: AI agent governance and NHI

See one attack, end to end.

A 30-minute intro call on sample data, or a free trial on your own tenant.