Passwords are the weakest link
Shared, reused and phished passwords are still how most breaches start.
IdenXThe identity provider for people and AI agents.
Passwords leak.
They get pasted into scripts, shared in chat and phished from inboxes. Every leaked password is a way in.
Passwords leak.
They get pasted into scripts, shared in chat and phished from inboxes. Every leaked password is a way in.
Sign in with something you hold.
Passkeys and hardware security keys replace passwords, with an allow-list of the key models your organisation accepts.
Approve on your phone.
Risky actions ask for a fresh approval: a push to the IdenX app and a number to match, so a stolen session alone is not enough.
Agents get their own name.
An agent receives its own short-lived identity, tied to the person who sent it. People and agents use the same front door on separate lanes.
Enterprise product · IdenX
The identity provider for people and AI agents.
IdenX is where every R92 product signs people in. It replaces passwords with phishing-resistant sign-in, gives agents their own accountable identity, and puts approvals on a phone.
In use at R92 today
The problem
Agents borrow human sessions
When an agent signs in as a person, nobody can tell afterwards who actually did the work.
Every app has its own login
Separate accounts per tool mean separate rules, forgotten leavers and no single place to switch access off.
What it does
Phishing-resistant sign-in
Passkeys and hardware security keys, with an allow-list of the key models your organisation accepts. Government smart-card sign-in is built and not yet switched on.
Phone approvals
The IdenX phone app approves sign-ins and risky actions with a push and a number to match.
Step-up for risky actions
Products ask IdenX for a fresh, stronger proof before anything sensitive, not just at the start of a session.
Accountable agent identity
Agents receive their own short-lived credentials, linked to the person who asked, never a shared login.
Groups and directory sync
Groups in IdenX become roles in each product. Bringing people in from a company directory you already run is built and in testing.
Works with
Every R92 product
DaVault, the Nexus console, myAi and R92 Projects sign people in through IdenX today. R92 Access does too in testing; the Nexus phone app has not switched over yet.
DaVault
Approvals for privileged access arrive on the same phone app.