Intelligence | AI Agent Security
An inventory alone does not tell you what an agent did. Intelligence is where activity becomes evidence. Events give you every action the agent recorded and the policy outcome for each one. AI sessions give you the full record of what a coding tool did and what a person asked it to do, which is what you need for incident investigation, insider-risk review, or answering an auditor.
Where Visibility tells you what exists, Intelligence tells you what happened.
What Intelligence covers
| Page | What it shows | The question it answers |
|---|---|---|
| Events | Every action the agent recorded on your endpoints, with its outcome: Blocked, Audited, Allowed, or Observed | What did agents do, and which actions did a policy stop or record? |
| AI Sessions | Every AI coding session, with its commands, network activity, MCP use, and findings | Which sessions need a closer look, and what exactly happened in them? |
Updated about 2 hours ago
