All agents · Defensive security
Access Review Assistant
BetaStale, excessive, or orphaned access flagged from an access export (rules applied in code), with a question for the reviewer on each account. Nothing is changed.
How it works
Upload a user-access export (users, roles or groups, last login, status, MFA). Rules applied in code flag inactive accounts, privileged roles, accounts still active after offboarding, missing MFA, and shared or test accounts. The AI writes a reviewer question per flagged account. Decisions and changes stay with your reviewers.
What you give it
- .csv access export
- Pasted CSV
Limitations
- Flags only: never removes, disables, or changes access.
- Uses dates in YYYY-MM-DD format; other formats show as 'no recorded login'.
- Doesn't connect to identity providers; export and upload.