Use case · Shadow AI and Non-Human Identities

A discovered inventory, not a self-attested one.

Ask any team for a list of the service accounts and AI tools in their environment and you will get a list somebody wrote down. CINQUE produces the one your environment can actually be shown to contain.

Non-human identitiesAI tools in the app inventoryDiscovered, not attested

Book a Discovery Workshop Get a demo

The problem

AI security means two things, and most tools only do the first.

AI for security is what every tool now claims. Security for the AI you run is the part most tools skip. The identities calling those tools, and the machine identities that have quietly accumulated around them, are the population growing fastest and baselined least.

“AI security means two things. AI for security, what every tool now claims. Security for the AI you run, the part most tools skip.”CINQUE Healthcare datasheet

The inventory is a survey

A list assembled by asking teams what they use records what people remembered, not what is running.

Machine identities outnumber people

Service accounts, tokens, keys, and integrations rarely have an owner who can say what normal looks like for them.

Sanctioned and unsanctioned look identical

An approved AI tool and one somebody signed up for with a corporate address produce the same kind of traffic.

Reach is the real question

What matters is not that the tool exists. It is which identities call it and what those identities can already reach.

What CINQUE does

What CINQUE surfaces.

Non-human identities as first-class identities

Service accounts, tokens, keys, and integrations surface as identities and inherit the same persona baselines as your people, so a machine identity has a documented normal like everything else.

AI tools in the application inventory

Generative AI applications appear in the application inventory alongside everything else your environment reaches, discovered from observed activity rather than from a questionnaire.

Activity path attribution

For any AI tool or service account, the identities that called it, the devices and networks they came from, and the data stores in the same journey.

Drift on identities that should be boring

A service account is the most predictable thing in your environment until it is not. Deviation from its own baseline is visible without a policy having been broken.

109to 1

Machine identities for every human identity

Palo Alto Networks, 2026 Identity Security Landscape Report

What it answers

The questions the board asks and the questions the engineer asks.

The question

Who is asking

What CINQUE gives you

What AI is running in our environment?

CISO, board, and risk

An application inventory built from observed activity, with the identities that reach each one.

Is this inventory discovered or attested?

Audit and second line

The provenance of every entry. Each entity carries the source system it was observed in.

Which service accounts are outside their scope?

IAM engineering

Observed behavior against the persona baseline, per non-human identity, with the journey attached.

What would one stolen token reach?

Incident response

The surfaces that identity has actually reached, not the surfaces its entitlements permit.

Inventory provenance framed against a large health plan's own AI Asset Inventory Standard, which requires an Inventory Source field and requires reviewers to distinguish a discovered record from a self-attested one. Population figures: 109 machine identities for every human identity, and 40% of deployed AI agents already reach organizational data (Palo Alto Networks, 2026 Identity Security Landscape Report).

Scope

What CINQUE does not do.

Stated plainly, so nobody is surprised in month two.

CINQUE surfaces AI tools as applications in the inventory and baselines the identities that reach them. It does not model an autonomous agent as its own identity type today.
CINQUE does not block, proxy, or filter AI usage. It tells you what is there, who reaches it, and what else is in the same journey.

Related use cases