SandboxAQ has announced the general availability of AQtive Guard, a platform designed to manage and secure Non-Human Identities (NHIs) and other cryptographic assets used by AI agents – both friendly and malevolent – that are surging across enterprise environments.
As billions of AI agents flood enterprise ecosystems, organisations are facing an unprecedented surge of intelligent, adaptive cyber threats capable of continuously probing networks, evading detection, and rapidly exploiting vulnerabilities. This escalating threat demands proactive, AI-driven cryptographic defences to counteract attacks that evolve faster than traditional security measures can respond.
AQtive Guard’s Discover module enables organisations to maintain an accurate inventory and control over both NHIs and cryptographic assets such as keys, certificates, algorithms, and libraries, and is crucial for compliance and meeting regulatory mandates. AQtive Guard’s Protect orchestrates automated remediation workflows and enforces protection policies such as credential rotation or certificate renewal.
Leveraging its Large Quantitative Models (LQMs), AQtive Guard’s Discover and Protect modules provide organisations with unprecedented visibility, control and remediation, addressing the escalating challenges of machine-to-machine communication security, compliance pressures, and the transition to the new NIST security standards.
As part of the launch, SandboxAQ also announced two key capabilities:
- Robust integration with the CrowdStrike Falcon cybersecurity platform, representing SandboxAQ’s deepest technical integration to date. AQtive Guard empowers joint customers with full visibility into their non-human identity and cryptographic inventories and vulnerabilities by pulling data directly from CrowdStrike endpoints. One-click ingestion translates to value from the first hour of use. AQtive Guard can then remediate the vulnerabilities as they are identified.
- Interoperability with Palo Alto Networks, a trusted name in enterprise security solutions. SandboxAQ is ingesting Palo Alto Networks’ firewall logs directly into AQtive Guard, resulting in key visibility improvements for network security posture, vulnerability detection, and security compliance.
“There will be more than one billion AI agents with significant autonomous power in the next few years,” stated Jack Hidary, CEO of SandboxAQ. “Enterprises are giving AI agents a vastly increased range of capabilities to impact customers and real-world assets. This creates a dangerous attack surface for adversaries. AQtive Guard’s Discover and Protect modules address this urgent issue.”
“As organisations accelerate AI adoption and the use of agents and machine-to-machine communication across all business domains and functions, maintaining a real-time, accurate inventory of NHIs and cryptographic assets is an essential cybersecurity practice. Being able to automatically remediate vulnerabilities and policy violations identified is crucial to decrease time to mitigation and prevent potential breaches within the first day of use of our software,” said Marc Manzano, General Manager of Cybersecurity at SandboxAQ.
AQtive Guard addresses these challenges by providing a unified, AI-driven solution for modern NHI and cryptography management. The platform offers:
- Vulnerability detection and inventory: Builds a complete and continuously updated inventory by integrating data from multiple sources, including existing data and meta-information captured from existing cybersecurity platforms and configuration management database tools. AQtive Guard works across the leading cloud providers including Amazon Web Services (AWS) and Google Cloud (GCP). This unified global inventory forms the crucial foundation for LQM analysis.
- AI-powered insights, prioritisation and risk analysis: Applies SandboxAQ’s industry-leading Cyber LQM to the unified inventory. By leveraging meta-data for advanced filtering and clustering, the platform enables efficient, noiseless exploration and accurate root-cause analysis, and delivers prioritised, actionable insights with contextual guidance for remediation and risk reduction, effectively reducing false positives. An integrated GenAI assistant further supports teams in understanding how to navigate relevant standards and regulatory frameworks.
- Automated remediation and lifecycle management: Streamlines and automates the entire lifecycle of identities and cryptographic keys – including issuance, rotation, and revocation – reducing manual overhead and minimising the risk associated with stale or compromised secrets.
- Compliance and NIST standards: Provides targeted remediation recommendations, a powerful query engine with pre-built rulesets for major compliance standards (and custom query capabilities), and robust reporting to demonstrate compliance and significantly accelerate migration to new NIST standards.
Discussion about this post