zero-standing-privilege

Kubernetes operator and kubectl plugin for Just-in-Time privilege escalation. Grant temporary, time-limited cluster access with automatic expiry, full audit trail via Kubernetes Events, and Prometheus metrics — no database, no external dependencies.

Zero Standing Privilege Gateway for Azure - JIT access for AI agents, automation, and service principals

IdentityBench v4.1 & v4: multi-turn Enterprise IGA & Zero-Trust agent benchmark (Connectors, NHI Classification, NP-Hard Role/SoD Math, JIT/CAE, Access Reviews, JML) with multi-agent skills & steering. Published results run on v4_lite/v41_lite (60 scenarios, 360 tasks); harness supports v4_full/v41_full (180 scenarios, 1,080 tasks).

Open-source Privileged Access Management (PAM) in Go. A hardened vault plus a broker that injects credentials just-in-time: the secret reaches the target, never the human or AI agent who asked. SSH, RDP, WinRM and PostgreSQL brokering, session recording, Zero Standing Privilege, break-glass and an AS/400 green-screen console. Beta, for learning.

Autonomous AI on-call engineer that fixes production incidents while holding zero standing credentials (single-use, scoped, just-in-time grants)

Runtime governance for AI agents on synthetic data: governed tool bridge with human-issued single-use approvals, expiring JIT elevation, shadow-agent detection, blast radius, zero-standing-privilege score.

Mint a scope-exact Cloudflare API token, hand it to a command, burn it on the way out.

SGNL — independent third-party profile of a public API surface, by API Evangelist. SGNL is a continuous identity and authorization platform that eliminates standing privilege and makes real-time, context-aware access decisions for both human users and AI agents. It sits at the center of an enterprise IAM architecture, dynamically adapting permissio