oleria

Quick Summary: New non-human identities created outside of formal processes become ungoverned within hours — but most security teams only discover them at the next quarterly review. Oleria, an AI-native identity security & governance platform, detects every new NHI within hours of creation and triggers ownership and classification workflows automatically.

Outcome

Every new NHI is a governance decision that either happens now or becomes a retroactive cleanup problem. By the time a quarterly review catches a new service account, it has authenticated thousands of times, accumulated consumers, and lost the context that would make right-scoping easy. Catch it within days; treat it right.

The reality

New NHIs accumulate when teams build. CI/CD pipeline gets a new step that needs auth. New SaaS integration installs. New microservice deploys with its own service account. Every "new" is a chance to do the right thing - assign owner, declare purpose, set rotation cadence. Every quarter that passes makes those decisions retroactive and harder.

The pattern at most enterprises is "find new NHIs at next quarterly review." That delay is the gap. NHIs created last week are easier to attribute, easier to right-scope, and easier to govern than NHIs created last quarter. The window matters.

What you get with Oleria

Real-Time NHI Discovery and Onboarding means the governance conversation happens immediately — not at the next quarterly review when context is stale and the window to course-correct has closed.

New NHIs surface within hours, not at the next quarterly review.

Continuously refreshed feed of NHIs created in the last 7 days, sortable by creator, app, and scope sensitivity.

Onboarding queue that makes governance the path of least resistance.

Each new NHI prompts the creator to assign an owner and declare purpose - making onboarding part of NHI creation, not a retroactive cleanup three months later.

Instant flag on high-risk creation patterns.

NHIs created with admin scope, NHIs from new or non-standard platforms, and NHIs from unexpected creators all surface for immediate review - not at the next cycle.

Creation rate trending by team and app.

New-NHI volume per week, per team, per app - anomalies like sudden spikes or a new platform appearing surface within days.

What good looks like

Before: New NHIs go undetected until the next quarterly review - 60 to 90 days after creation. After: New NHIs surface within hours; onboarding happens within days.
Owner and declared purpose assigned at creation - not backfilled months later when context is gone.
Anomalous creation patterns (sudden spike, new platform) flagged within days - not surfaced at quarterly review when the window to course-correct has closed.
NHI count grows by deliberate decision, not silent accumulation - every addition is a known, attributed choice.

‍

Frequently Asked Questions

How fresh is "near-real-time"?

NHI inventory refreshes every couple of hours. New NHIs surface within hours of creation for top-tier connectors.

What if creator metadata is missing for some apps?

Some apps don't track creator (e.g., cloud platforms with multiple creation paths). For those, we surface the NHI with creator-unknown and route to the team that owns the app.

Can we block NHI creation that doesn't meet our policy?

Blocking is a creation-time control - typically enforced by the source app, not by inventory tooling. We surface the gap so policy can evolve.

How does this fit into existing CI/CD or onboarding workflows?

The onboarding queue integrates with existing developer workflows - new NHIs created during pipeline runs or service deployments appear in the queue automatically.

What about NHIs created by IaC or automation tools like Terraform or Ansible?

IaC-provisioned NHIs surface the same as manually created ones - identified by creation source where the platform exposes it.

How does near-real-time NHI detection support SOC 2 or audit evidence requirements?

SOC 2 CC6 and CC7 require evidence that access is granted intentionally and reviewed regularly. Near-real-time detection with an owner-assignment onboarding queue creates a timestamped record of every new NHI, its declared purpose, and its assigned owner.

Catch every new NHI within hours of creation instead of discovering it at the next quarterly review