Pathlock has launched Nexus, a platform for governing access, controls, identity, and application security across enterprise resource planning systems, with a focus on treating AI agents, bots, and service accounts as identities to be governed alongside human users. The company describes Nexus as delivering real-time intelligence on transactions executed by users, bots, and AI agents across systems including SAP, Oracle, Workday, and more than 150 other applications.
The non-human identity angle is central to the launch. Nexus is built to discover, own, and lifecycle every AI agent, bot, and service account with the same rigor applied to human identities, and to detect what Pathlock calls toxic access combinations, where a single identity accumulates permissions that together enable fraud or error. As autonomous agents begin executing transactions inside core business systems, the question of which agent holds which permissions, who owns it, and whether its actions can be traced becomes an identity-governance problem rather than a purely technical one.
The platform pairs that identity layer with access controls and threat detection aimed at the enterprise resource planning environment. It offers emergency access management for time-bound privileged access, attribute-based access decisions, and fine-grained separation-of-duties enforcement with rulesets aligned to financial-controls frameworks. For insider threat and agentic-AI risk, Pathlock says Nexus analyzes more than 70 log sources against over 1,500 threat signatures and evaluates transactions at machine speed, in sequences and volumes the company says many organizations struggle to validate.
“Without visibility into how critical ERP transactions are being executed, enterprises are exposed to audit failures, fraud, breaches, and compliance gaps,” said Damon Tompkins, Chief Executive Officer of Pathlock. The company frames the launch as a response to control models built for an earlier era, a point echoed by Kyle Wechsler, an SAP security leader at Protiviti, who said control models built a decade ago no longer meet the needs of automated, AI-driven environments.
The launch lands in a fast-moving segment focused on governing machine and agent identities. SailPoint has built out an Agentic Fabric for AI and non-human identity governance, and a group of identity and security vendors recently integrated Anthropic’s Claude Compliance API to bring AI activity into enterprise governance tools. Pathlock’s contribution centers that approach on the ERP transaction layer, where financial and operational consequences are most direct.
Sources: PR Newswire
–
By the ID Tech Editorial Team
