Identity & Secrets Intelligence

Akeyless Identity & Secrets Intelligence provides centralized discovery, risk assessment, and remediation support for identities, secrets, and certificates across cloud accounts, Kubernetes clusters, GitHub, and Akeyless environments. It scans connected sources and evaluates discovered assets against security policies to identify policy violations and security risks, including exposed secrets, excessive privileges, and certificate lifecycle issues. Findings include risk severity and contextual relationships between affected assets and connected resources, enabling security teams to assess the potential blast radius of a compromise, understand downstream impact, and prioritize remediation. By combining policy-driven detection, dependency visibility, and remediation guidance, Identity & Secrets Intelligence helps address security gaps and reduce identity- and credential-related exposure.

How It Works

1. Discover: Scanners enumerate every secret, identity, and certificate across a connected environment.
2. Evaluate: Policies assess that inventory against built-in rules for secret hygiene, identity privilege, and certificate lifecycle risk.
3. Remediate: Any object in violation surfaces as a finding in Inventory. Its Security Graph tab maps the roles, identities, and resources connected to that finding, and its Remediate tab, including AI-Powered Remediation, provides the fix.

Key Features

• Continuous discovery of secrets, identities, and certificates across connected environments
• Built-in policies covering secret hygiene, identity privilege, and certificate lifecycle risk
• Graph-based investigation of related objects and blast radius
• AI-powered remediation assistance on individual findings
• Dashboard with security posture, trends, and status indicators to prioritize investigation and remediation

Supported Environments

AWS, Azure, GCP, GitHub, Kubernetes, and Akeyless itself.

Access And Availability

Before you can use Identity & Secrets Intelligence, confirm the following:

• The account has the Identity and Secrets Intelligence feature enabled.
• The user is account admin, or has an Access Role with Identity & Secrets Intelligence administrative rule set to scoped or all.

To set up an Access Role for ISI, run the following commands:

1. Create a new Access Role:

   Shell

   akeyless create-role \
     --name <role-name> \
     --isi-access <scoped|all>

   Where:

   • --name: the name of the Access Role to create.
   • --isi-access: the level of ISI administrative access to grant the role, scoped or all.

2. Associate the Role with an Authentication Methods Auth Method:

   Shell

   akeyless update-auth-method-access \
     -n <auth-method-name> \
     --new-access-rules </path/to/role>

   Where:

   • -n: the Auth Method to associate with the role.
   • --new-access-rules: the path of the Access Role to associate.

Operational Views

Use these views to explore the product from high-level posture down to specific remediation actions:

Next Steps

• Scanners for scanner setup
• Policies for view policies