Cyber-resilience data protector HYCU’s aiR Graph product connects to Entra ID and Okta to map every AI copilot and agent deployed within enterprise environments.
This free, read-only tool discovers AI agents operating across a company’s full application stack. It assesses core risk attributes for each agent, including readable and writable data scope, unattended operation capability, the number of authorized invoking users, and assigned ownership status. It further identifies which applications interacting with these AI agents lack independent backup protection. HYCU highlights that modern AI agents commonly operate with extensive permissions and direct write access to core business record systems. Misconfigured prompts, compromised credentials, or out-of-scope agent behaviors can alter or erase data across multiple applications at machine speed. Without independent backup for these applications, affected data cannot be recovered after incidents.
HYCU founder and CEO Simon Taylor said: "Every organization we talk to is adding AI agents faster than it can count them, and most of those agents hold permissions nobody regularly inspects. If you can't see it, you can't protect it. aiR Graph gives any organization that first look for free. It shows which agents can change or delete data, and which of the applications they reach have no independent copy to recover from. That second answer is where resilience starts.”
Jason Buffington, Principal Analyst at Data Protection Matters, points out: “Mapping agent permissions against backup coverage is the gap assessment that most IT and security teams didn't realize they needed and will appreciate immediately."
HYCU launched a new data intelligence layer in May to analyze multi-source backup data and uncover cyber-resilience risks invisible to single-source risk monitoring tools. The aiR Graph module specifically targets agent-driven risks facing enterprise applications, with detailed core capabilities as follows:
---It establishes read-only connections with Microsoft Entra ID (including enabled Microsoft Entra Agent ID) and Okta (including subscribed Okta AI Agents).
---These two platforms serve as the initial supported discovery sources, with more integrations planned for future updates.Its initial scan comprehensively maps all enterprise applications and identifies all deployed AI copilots and agents within the organization.
---For each detected agent, aiR Graph displays key details including OAuth scopes, readable and writable data sources, organization-wide access privileges, unattended operation permissions, the volume of invoking users, and verified owner or sponsor information.
---It delivers severity-based risk assessments centered on functional capabilities rather than just ownership status. Risk levels rise based on operational impact, such as unattended access to all user data, broad system access paired with write or delete privileges, and persistently enabled accounts linked to deleted agent identities.
---The tool visualizes the most frequently accessed applications by AI agents and identifies which of these workloads are eligible for HYCU’s protection, enabling IT teams to prioritize backup for record systems most vulnerable to agent-related risks.
---One-click assessment reports generate point-in-time analysis files equipped with executive summaries, prioritized remediation recommendations, and full asset inventories for management review, security audits and board-level reporting.
Once aiR Graph confirms an agent has write access to platforms such as Git repositories, Salesforce instances or Confluence workspaces, enterprises can deploy HYCU R-Cloud’s independent, immutable application backup. Supporting over 100 workloads, this secure backup copy enables businesses to roll back data to pre-incident states when AI agents generate unintended errors or destructive actions.
HYCU Chief Product Officer Anant Chintamaneni said: "We made a deliberate choice to keep language models out of the risk assessment. Every finding in aiR Graph comes from an explicit rule applied to data read from your identity provider. Run it twice on the same tenant, and you get the same answer, and every finding traces back to the field that produced it. When a security team takes that report to an auditor or a board, it has to hold up.”
Built with an extensible architecture to support additional discovery sources, HYCU aiR Graph is accessible to all organizations regardless of existing HYCU subscriptions, available directly via HYCU’s official channels and global partner ecosystem. As a key component of HYCU aiR, the tool empowers enterprises to search, query and deploy purpose-built intelligent agents across all backup data resources.
Beijing Qianxing Jietong Technology Co., Ltd.
Sandy Yang/Global Strategy Director
WhatsApp / WeChat: +86 13426366826
Email: yangyd@qianxingdata.com
Website: www.qianxingdata.com/www.storagesserver.com
Business Focus:
ICT Product Distribution/System Integration & Services/Infrastructure Solutions
With 20+ years of IT distribution experience, we partner with leading global brands to deliver reliable products and professional services.
“Using Technology to Build an Intelligent World”Your Trusted ICT Product Service Provider!
Vietnamese
