A control that checks whether a login flow is occurring through an authorised domain, browser context, or proxy path. It is designed to expose reverse-proxy phishing and session relays that capture credentials in real time. For identity security teams, it helps catch the handoff between social engineering and session theft.
#1 Authority in NHI Education, Research and Advisory, empowering organizations to tackle the critical risks posed by Non-Human Identities (NHIs), including AI Agents.