Akeyless Scanner

The Akeyless Scanner is a native scanner type that inspects your Akeyless account, discovering the full inventory of identities, roles, secrets and certificates, as well as the relationships between them. Each discovered object is evaluated against Identity & Secrets Intelligence security policies, which assess its risk posture and surface the resulting findings for review.

What the Akeyless Scanner Discovers

Each scanner covers one or more object types, selected when the scanner is created:

Prerequisite

• An Akeyless account with the Identity & Secrets Intelligence license.
• A deployed and connected Akeyless Gateway version 4.52.0 and later.
• A Gateway with Akeyless AI Insights configured.
• A user with Manage ISI Scanners or Admin Gateway Permission.
• A user with Identity & Secrets Intelligence Administrative Rule set to Scoped or All.

Required Akeyless Permissions

The Akeyless Scanner does not use a Target. Grant the List capability on the Access Role associated with the Gateway's Admin Access ID. The scanner only lists objects, and never reads secret values.

To scan the whole account, set the path of each rule to /*.

Create an Akeyless Scanner in the Akeyless Console

1. Log in to the Akeyless Console, and go to Products > Identity & Secrets Intelligence > Scanners.
2. Click New, and select the scanner type Akeyless then click Next.
3. Define a Name for the scanner.
4. Define a Gateway that will execute the scans and click Next.
5. Use the Object Type drop-down list to select the scanner's scope, and click Finish.

Scan Akeyless

1. Log in to the Akeyless Console, and go to Products > Identity & Secrets Intelligence > Scanners.
2. Click the Akeyless scanner
3. Click start scan

Once the scan completes, results appear in Inventory for review.