Clarity Security today announced the launch of Clarity Aperture, a unified identity security platform built on a foundational belief: governance was never enough. For two decades, organizations have built identity programs around compliance — documenting access, running periodic reviews, producing evidence for auditors. What they have not built is a way to continuously assess whether that access is creating risk, and close it when it is.
Fulfilling an audit requirement and actually reducing identity security risk are not the same thing. That gap is where breaches live, and it is not a gap that better governance closes — because governance was never designed to close it. IGA was built to satisfy auditors, not to reduce risk. It answers “who has access” and stops there. It cannot tell you whether that access is appropriate, where it creates exposure, or remediate it when it should not exist.
Clarity Aperture is built for what comes after governance.
The Platform
At the core of Aperture is a proprietary dynamic risk scoring engine that evaluates inherent and contextual risk across every identity and access relationship. The riskiest identities and access are always surfaced first, so remediation is targeted rather than reactionary.
Read and write capabilities span every connected system, from legacy mainframes to modern SaaS. That means every risk finding has a direct, executable remediation path without leaving the platform. Risk identified is risk that can be closed. Nested permissions, federated access, and blast path analysis answer not just who has access, but how they got it, what it connects to, and what it exposes.
The result is what Clarity calls Adaptive Trust: the enterprise where every identity is continuously governed by real-time risk intelligence, where identity security stops being a project that never ends, and where the audit is a byproduct of work already done rather than the work itself. Access reviews become a compliance formality — a confirmation of what is already true every day, not a discovery exercise.
The NHI & AI Security Module
Alongside Aperture, Clarity is launching its NHI & AI Security module — purpose-built for the identity attack surface growing fastest with the least governance.
AI agents, service accounts, API keys, OAuth apps, and bots now outnumber human identities in most enterprise environments. They operate with autonomous access, chain permissions across connected systems, and accumulate entitlements faster than any review cycle can track. According to IBM’s 2025 Cost of a Data Breach report, 97% of organizations that reported an AI-related breach lacked proper AI access controls. These are not edge cases. They are the new normal, and the least-governed part of the identity environment.
The NHI & AI Security module discovers every non-human identity across cloud, SaaS, on-premise, and mainframe. It maps full permission chains, assigns ownership, and makes accountability a structural property of the environment rather than an annual action item. Risk reduction is tracked against the OWASP Non-Human Identity Top 10, giving security leaders a board-ready, platform-agnostic measure of posture improvement that no vendor defines for themselves.
What Customers Are Seeing
Clarity’s unified approach is already being recognized in evaluations. In a recent enterprise assessment, a Senior Identity & Security Architect at a 10,000-employee organization described the platform this way:
“Clarity is an IGA product that also does Identity Security Posture Management. Not many tools have both in the same offering, which is standing out today because identity security is so critical — not just for large enterprise, but for smaller enterprise too. The product does identity and access governance as well as it takes care of risk posture. It gives visibility and an identity security posture management layer on top of it — not only your internal identity, which is the perimeter of the organization, but also aspects of SOC, ITDR, and risk management. The core value proposition is something that almost every company is looking for today.”
— Senior Identity & Security Architect, 10,000-employee enterprise (evaluation feedback, April 2026)
Why Today
“Three years ago I stood on an ISC2 stage and argued that identity governance was dead — that it had been reduced to a checkbox, and that the only way to revive it was to make risk the engine instead of compliance being the end goal,” said Alexis Moyse, CEO and Co-Founder of Clarity. “IGA was the wrong shape from the start — designed for auditors, not for security. We are not here to build better IGA. Aperture is what identity security should have looked like if risk had been the design from day one. The audit becomes a confirmation of what is already true — not the work itself. That is Adaptive Trust. That is where we are taking every customer.”
The release also reflects the scale of the non-human identity problem enterprises are waking up to. By conservative industry estimates, NHIs now outnumber human identities by 20 to 50 times in most environments, and AI agents are on track to add another order of magnitude. Legacy IGA tools were not built to govern machines; standalone NHI tools cannot tie their findings into the governance motion. Clarity Aperture treats every identity — human, non-human, AI — as a first-class citizen on the same graph, and governs them accordingly.
“When we speak with customers, the demands of both human identity governance and their pressing need for agentic identity governance create the need that Clarity fulfills for the enterprise, placing risk visibility and governance actions on a single foundation from which all identity is managed.”
— Ben Holzman, Partner at Venture Guides
What This Means for Security Teams
For organizations currently relying on periodic reviews and siloed visibility tools, Aperture offers a fundamentally different operating model. Identity risk is no longer something discovered at the next review cycle — it is surfaced and addressed the moment it exists. Compliance evidence is generated continuously, not assembled under pressure before an exam. And for the first time, human identities, non-human identities, and AI agents are governed in one place, at the same level of rigor, against the same risk standard.
Availability
Aperture is included in every existing Clarity deployment at no additional cost, with frequent new releases rolling out to existing customers. For more information on Aperture or the NHI & Agent Governance module, contact your Customer Service representative.
About Clarity Security
Clarity Security is building the platform for Adaptive Trust — continuous, risk-driven identity security across every human, non-human, and agentic identity in the enterprise. Clarity Aperture unifies identity risk, posture management, governance, and remediation in a single platform, deployed in four to six weeks, covering every environment from legacy mainframe to modern SaaS.
Read the official press release on Newswire.Clarity Security today announced the launch of Clarity Aperture, a unified identity security platform built on a foundational belief: governance was never enough. For two decades, organizations have built identity programs around compliance — documenting access, running periodic reviews, producing evidence for auditors. What they have not built is a way to continuously assess whether that access is creating risk, and close it when it is.
Fulfilling an audit requirement and actually reducing identity security risk are not the same thing. That gap is where breaches live, and it is not a gap that better governance closes — because governance was never designed to close it. IGA was built to satisfy auditors, not to reduce risk. It answers “who has access” and stops there. It cannot tell you whether that access is appropriate, where it creates exposure, or remediate it when it should not exist.
Clarity Aperture is built for what comes after governance.
