FAQ
What does the Identity Risk Calculator do?
It scores a single identity from 0 to 100 based on the factors that drive account-takeover and misuse risk — privilege / blast radius, authentication strength, network exposure, credential handling, governance and monitoring — and bands it Low, Moderate, High or Critical. It works for human users, service accounts, and agentic (AI) identities, each with a tailored set of factors.
Why score service accounts and AI agents separately?
Non-human identities now outnumber human ones and fail differently. A service account's risk is dominated by long-lived secrets, orphaned ownership and over-permissioning; an AI agent's risk is dominated by autonomy, tool/shell access, prompt-injection exposure and whether it runs under its own governed identity. The calculator uses factor sets tuned to each.
Is my data uploaded anywhere?
No. The calculation is pure client-side math in your browser. Nothing you select is sent to a server.
Does this replace my identity provider's risk engine?
No. Live IdP risk (Entra ID Protection, Okta ThreatInsight, etc.) uses real signals like impossible travel and leaked credentials. This tool is a fast, transparent triage score to compare identities, prioritise hardening, and make the "why is this account risky?" conversation concrete.
How do I lower an identity's score?
Cut blast radius with least privilege, move to phishing-resistant authentication (FIDO2/passkeys), restrict logins to managed devices, replace long-lived secrets with short-lived tokens or managed identities, assign an owner and lifecycle, and put logging and alerting on the identities that can do the most damage.