# Product Overview

Discover, secure and manage AI agents & NHIs

[Learn more](/content/product/index.html)

## CAPABILITIES

1. [Discover](/content/product/ai-agent-discovery/index.html): Maintain real-time inventory of all AI agents, MCP servers, and NHIs, with context to understand risk and business usage.
2. [Secure](/content/product/secure-ai-agents/index.html): Identify and remediate AI agents and NHIs with excessive privileges, vulnerable configurations, abnormal activity, and policy violations.
3. [Deploy — powered by ACP (Agent Control Plane)](/content/product/deploy-and-provisioins-ai-agent-discovery/index.html): Provision secure-by-design AI agents with short-lived credentials, just-in-time, precisely scoped access, and policy at creation.

## Supported environments

## AI AGENTS

1. [Discovery and Governance for AI Agents](/content/use-cases/ai-agent-discovery-and-governance/index.html): Set policy to resolve hygiene issues, reduce attack surfaces and prevent compliance violations.
2. [Agentic Threat Detection & Response (ATDR)](/content/use-cases/ai-agent-access-and-lifecycle-management/index.html): Manage AI agents and their NHIs from provisioning to decommissioning.
3. [Agentic Access & Lifecycle Mgmt](/content/use-cases/ai-agent-threat-detection-and-response/index.html): Detect and respond to threats such as compromised credentials and out-of-scope agent actions.

## non-human identities

1. [NHI Discovery & Governance](/content/use-cases/nhi-governance/index.html): Control and enforce policies across your NHI attack surface.
2. [NHI Lifecycle Management](/content/use-cases/lifecycle-management/index.html): Manage NHIs from provisioning to decommissioning.
3. [Non-Human ITDR](/content/use-cases/non-human-itdr/index.html): Detect and respond to suspicious NHI activity & 3rd party breaches.
4. [Secret Management](/content/use-cases/secret-management/index.html): Centralized secret management across vaults & cloud.
5. [Third-Party Risk Management](/content/use-cases/third-party-risk/index.html): Discover and assess third-party apps & vendors accessing your environment.

## WHAT’S NEW

### NHI GOVERNANCE

#### Eliminate Security Blindspots in Risk & Compliance

Astrix helps security leaders control and govern Non-Human Identities (NHIs) through continuous discovery, risk management, monitoring, and audit-ready reporting.

## Attacks

### CircleCI

Jan 2023

CircleCI experienced a breach where malware compromised an employee’s device, enabling attackers to steal session tokens and access customers’ sensitive data and encryption keys.  
[Learn more](/content/learn/blog/the-circleci-breach-the-results-of-a-stolen-access-token/index.html)

### Slack

Jan 2023

Threat actors gained access to Slack’s externally hosted GitHub repositories via a “limited” number of stolen Slack employee tokens.  
[Learn more](/content/learn/blog/11-attacks-in-13-months-the-new-generation-of-supply-chain-attacks/index.html)

### Microsoft

Sep 2023

A published SAS token by Microsoft’s AI researchers exposed 38TB of sensitive data for over 2 years.  
[Learn more](/content/learn/blog/11-attacks-in-13-months-the-new-generation-of-supply-chain-attacks/index.html)