Clarity Security is an identity security platform that combines identity governance with continuous, risk-driven posture management for human users, non-human identities (NHIs) and AI agents. Based in Denver and led by co-founder and CEO Alexis Moyse, the company describes its goal as Adaptive Trust: a state in which every identity is continuously assessed against the access it should have, and risky access is removed as soon as it appears rather than at the next periodic review. In May 2026 Clarity launched Aperture, its unified platform, together with a dedicated NHI & AI Security module. This overview explains how the platform works and what it covers, based on Clarity’s public product information and announcements.
At A Glance
| Vendor | Clarity Security, Denver |
|---|---|
| Category | Identity governance and administration (IGA), identity security posture management, NHI and AI agent security |
| Identities covered | Employees, contractors, service accounts, API keys, OAuth apps, bots and AI agents |
| Environments covered | Cloud, SaaS, on-premises (including complex Active Directory) and legacy mainframe |
| Deployment | SaaS, typically deployed in four to six weeks |
| Risk framework | Proprietary dynamic risk scoring, with NHI risk mapped to the OWASP Non-Human Identity Top 10 |
| Agentic AI | AI Agent Security module, Clarity Agents for autonomous remediation |
What The Platform Does
Clarity’s Aperture platform puts identity risk, posture management, governance and remediation on one identity graph. Its modules are listed below.
Identity Explorer
Identity Explorer visualises identity relationships and access patterns across the environment. It shows nested permissions, federated access and blast path analysis, so security teams can see not only who has access, but how they got it, what it connects to and what it exposes.
Dynamic Risk Scoring
At the centre of Aperture is a risk scoring engine that evaluates inherent and contextual risk for every identity and every access relationship. The riskiest identities and entitlements are surfaced first, so remediation can be prioritised rather than handled in review order.
Lifecycle Management
Lifecycle Management automates joiner, mover and leaver processes, including provisioning for new starters, access changes when people move roles, and offboarding when they leave. It is designed to keep access aligned with each person’s current role without manual tickets.
Access Reviews
Automated access reviews run user access certifications and prioritise high-risk items for reviewers. Because risk is assessed continuously, Clarity positions reviews as a confirmation of access that has already been checked rather than a discovery exercise, and compliance evidence is generated as a by-product of everyday operations.
Attribute-Based Access Control
Clarity supports fine-grained access policies based on identity attributes such as department, location, role or employment type, so access can be granted and removed automatically as attributes change.
Reporting
The reporting module lets teams build reports on any data held in Clarity, for audits, risk reporting and operational metrics.
Remediation
Aperture has read and write capabilities across connected systems, from legacy mainframes to modern SaaS applications. Every risk finding has an executable remediation path inside the platform, whether through a single click, a bulk action, an automated workflow or agentic remediation.
NHI & AI Security
The NHI & AI Security module, launched alongside Aperture in May 2026, extends discovery, governance and remediation to non-human identities. Its capabilities include:
| Discovery and inventory | Finds and classifies NHIs, including service accounts, API keys, OAuth apps, bots and AI agents, across cloud, SaaS, on-premises and mainframe environments |
|---|---|
| Risk scoring | Scores every NHI with Clarity’s risk model and maps findings to the OWASP Non-Human Identity Top 10 |
| Permission chains | Maps the full chain of permissions an NHI holds across connected systems |
| Blast radius visualisation | Shows how far a compromised NHI could move across the environment before reaching critical systems |
| Ownership | Assigns an accountable human owner to each NHI, so ownership becomes a standing property of the environment rather than an annual review task |
| Orphaned NHI detection | Surfaces unowned, stale and over-privileged NHIs, with options to assign a new owner, adjust access or disable the identity |
| Autonomous action | Clarity Agents can execute remediation actions, including deprovisioning |
Clarity tracks NHI risk reduction against the OWASP NHI Top 10 over time, giving leadership a consistent, vendor-neutral measure of posture improvement.
How The Architecture Works
| Component | What it does |
|---|---|
| Unified identity graph | Aperture treats human identities, NHIs and AI agents as first-class entities on one graph, linking each to its accounts, entitlements, owners and connected systems. |
| Connectors with read and write access | Clarity connects to on-premises, SaaS and hybrid systems through its integration library. Because connectors both read and write, the platform can discover access and also change or remove it directly. |
| Continuous assessment | The risk engine re-evaluates identities and access continuously rather than on a review schedule, and new findings are surfaced as soon as they appear. |
| Deployment | Clarity is delivered as SaaS and holds a SOC 2 attestation. Aperture is included in every existing Clarity deployment at no additional cost. |
Agentic AI Capabilities
AI Agent Security
The AI Agent Security module gives visibility and governance across AI agents operating in the environment. Agents are discovered and inventoried, assigned an accountable owner and a business purpose, scored for risk, and governed with the same lifecycle and review controls as other identities. Clarity maps AI agent posture against the OWASP NHI Top 10 and tracks remediation progress so leadership has an auditable record of risk reduction.
Clarity Agents
Clarity Agents are AI-driven agents within the platform that carry out remediation tasks, such as deprovisioning orphaned or over-privileged identities, as part of automated workflows.
Integrations
Clarity publishes a library of supported integrations covering on-premises directories such as Active Directory, SaaS applications, cloud platforms, HR systems used as sources of truth for lifecycle management, and legacy systems including mainframes. The full list is available on Clarity’s Supported Integrations page.
Use Cases And Industries
Clarity publishes solutions for risk management, compliance and audit readiness, operational efficiency, and automating onboarding and offboarding, along with NHI and AI agent governance. Its industry focus includes healthcare, where it supports HIPAA compliance, financial services, manufacturing, and travel and hospitality, where access must follow a dynamic workforce.