Software Engineer - Integrations

Lumos launches the Identity Agent Force to govern access for every human, NHI, and AI identity. Jun 15, 2026, 12:00 ET With agentic cyberattacks on the rise, new capabilities from Lumos arm defenders with a team of identity agents that continuously govern access for every human, non-human identity, and AI agent, so identity teams stop drowning in manual work and prevent their next breach. SAN FRANCISCO, June 15, 2026 /PRNewswire/ - Lumos, the identity management platform for the agentic era, today announced the Identity Agent Force, a team of AI agents that continuously govern access across every human, machine, and AI agent in the enterprise. These agents, part of the new Agent Hub, include an Access Review Agent, an Access Request Agent, a Role Mining Agent, an Entitlement Analyst, an NHI Owner Hunter, and an Agent Ownership Finder, with more agents shipping throughout the year. Attackers have agents now. With offensive models like Mythos, one attacker does the work of a hundred, running phishing, credential theft, and lateral movement faster than any human team can investigate. Simultaneously, defenders have more to protect than ever. Humans, non-human identities like service accounts and API keys, and a new workforce of AI agents all must be governed and secured. Identity teams responsible for this critical work can't succeed with traditional, human-centric identity tools. They are already drowning in tickets, reviews, and one-off requests, and the gap widens every quarter. If attackers have agents, defenders need agents too. The Identity Agent Force gives enterprises fire to fight fire: an integrated team of agents that absorbs the manual work at machine speed, at massive scale, all in the background. Humans' work becomes more important. Instead of pushing tickets, they encode the system with direction, strategy, and best practices. "AI is reshaping the enterprise faster than any technology before it, and traditional identity forces an untenable choice: move slow and die, or go fast and put the business at risk," said Andrej Safundzic, CEO of Lumos. "Attackers aren't waiting. They are using agents to attack businesses like never before. The Identity Agent Force gives defenders the same advantage with a team of agents that not only lets them fight back, but win." Agents do the work. Humans build the system. Traditional identity platforms manage access through human workflows like requests, approvals, reviews, certifications. That model is periodic and manual. Access reviews happen quarterly while risk changes hourly. Engineers keep access years after they need it. Service accounts run critical workflows without clear owners. Least privilege stays a project that never finishes. Most AI in identity today only makes that old workflow easier to talk to. A human still has to chase the issue, understand the context, and do the work. The Identity Agent Force changes the operating model. Each agent runs continuously in the background, makes access decisions across every identity, and escalates only the exceptions that need human judgment. When a team needs more coverage, they deploy another agent from the Agent Hub. Every agent stands on two foundations: * A live map of every identity and every permission. Every human user, non-human identity, and AI agent, mapped down to the fine-grained access inside each app. * Memory of how the company actually operates. Lumos remembers who owns what, which approvals route through legal, what a sales engineer should and shouldn't touch, which contractors can go near customer data. Lumos builds and maintains this context, so every new agent understands the business on day one. Inside the Identity Agent Force * Access Review Agent. Runs access reviews end-to-end, certifying safe access on its own and surfacing only the decisions a human needs to make. * Access Request Agent. Grants access for exactly as long as someone, or some agent, needs it, then revokes it on its own. Standing privileges shrink with every request. * Role Mining Agent. Learns how teams actually use access and drafts least-privilege roles in seconds, not after a year-long consulting project. * Entitlement Analyst. Translates permissions into plain English, so approvers see what access actually grants before they say yes. * NHI Owner Hunter. Monitors every service account, API key, and token, and shuts down the dormant or over-scoped ones before attackers find them. * Agent Ownership Finder. Catalogs the agents and NHIs running in the business and assigns each a human owner. New agents get an owner before they get to work. Because Lumos is built on a full Identity Governance (IGA) backbone, the agents go beyond point-in-time fixes. Every action can be translated into durable policy, improving security posture and compliance with each decision. Request a demo at lumos.com. About Lumos Lumos is the first identity platform built around autonomous agents, not manual workflows. Security teams use Lumos to give every human, machine, and AI agent a living control layer that watches and governs access in real time. Traditional identity governance was built for human workflows and periodic reviews. AI makes the problem bigger, messier, and faster: more identities to protect, more permissions to govern, and less time to catch abuse. Lumos helps teams at companies like Mars, Netskope, Assurant, and GitLab move faster, reduce risk, and prove compliance, all while keeping humans in control. SOURCE Lumos

Lumos, an autonomous identity platform, has launched Identity Security Agents that enable organisations to identify and remediate identity-related risks at scale. The agents build on the company's Identity Intelligence capabilities to provide visibility across human, non-human and AI agent identities. The platform combines unified identity visibility, AI-powered risk prioritisation and autonomous agents that can investigate findings and execute remediation. Unlike visibility-only platforms, Lumos connects discovery to remediation through its full IGA backbone, translating security findings into durable policy. According to Lumos research, 96% of organisations experienced an identity-related incident last year. The Identity Intelligence capability is available now, whilst Identity Security Agents are accessible via waitlist. Lumos serves hundreds of companies including Pinterest, Anduril and GitHub.

Lumos launches industry-first Agentic User Access Reviews, moving towards Autonomous Identity governance. News provided by. SAN FRANCISCO and NEW YORK, Dec. 9, 2025 /PRNewswire/ - Lumos, the Autonomous Identity company, today announced the launch of Agentic User Access Reviews (UARs). This first-of-its-kind capability deploys autonomous AI agents to review user access, spot risky permissions, and enforce least privilege by default. By replacing manual spreadsheet reviews with AI-driven context and clear recommendations, Lumos helps organizations finish review campaigns up to 6x faster while eliminating the security risks associated with "rubber-stamped" approvals. Access reviews have reached a breaking point. With the explosion of apps, identities, and data, managers are now confronted with thousands of line items but lack the context to understand who uses what. Under pressure to clear their queues, many default to a "Select All | Approve" approach. This "rubber stamping" phenomenon keeps unused and risky access in place, turning what should be a critical security control into a meaningless paperwork exercise. * The "Rubber Stamp" Epidemic: Research indicates that "review fatigue" drives managers to approve nearly all access requests without scrutiny, undermining the security value of the audit process. * Operational Waste: Manual reviews waste tens of thousands of dollars per employee annually in administrative time. Worse, human error leads to "dirty data" and failed audits, forcing teams to spend months fixing mistakes instead of securing the business. * Real-World Impact: Organizations automating identity workflows report massive efficiency gains. A leading fintech company recently saved $3.5 million in unused licenses and repurposed the work of 6 full-time employees by automating access and governance workflows with Lumos. Agentic Autonomy: Stop Guessing, Start Verifying Lumos Agentic UARs fundamentally change the workflow. Instead of asking managers to investigate every user from scratch, the Lumos AI Identity Agent, Albus, runs the first pass. Albus analyzes dozens of data points for every identity - including role, department, access sensitivity, last activity, peer group alignment, and SoD conflicts. It then separates low-risk, commonly used access from high-risk anomalies, suggesting exactly what to keep and what to remove based on real-time evidence. "Traditional IGA tools just move the spreadsheet into a web app. We didn't just build a tool; we built an analyst," said Andrej Safundzic, CEO & Co-Founder of Lumos. "Agentic User Access Reviews use Albus to do the heavy lifting first. It validates who the user is, if they actually use the access, and if it violates policy. This transforms a blind guess into a fast, verified decision and helps our customers trust that reviews are actually protecting the business, not just draining it." "For years, access reviews felt like a black box. Managers were asked to approve permissions without any proof that they were needed. Lumos Agentic UARs changed that. Real-time activity and last login data now sit inside the review screen so our managers can see if access is used and how risky it is. It turned a compliance chore into a real security check." - Matthew Anderson, Sr Manager of Corporate IT, Prosper. * Complete Visibility: Reviews cover humans, service accounts, and other non-human identities (NHI) in a single view. This eliminates the "blind spots" where over-privileged bot accounts often hide. * Natural Language Explanations: Albus goes beyond abstract risk scores. Get explanation in plain language why an access looks safe or unsafe (e.g., "User hasn't logged in for 90 days" or "Matches peer group usage") so managers and auditors have total clarity on every decision. * Peer and Role Analysis: Albus identifies "role anomalies" - users who have access that their teammates do not - to catch privilege creep and scope drift. * Inactivity Detection: Automatically flags accounts and permissions that have been dormant, allowing teams to remove access before it becomes a target for takeover. * Closed-Loop Remediation: Instantly deprovisions rejected access across more than 100 integrations and creates an immutable audit trail, eliminating the need for manual cleanup tickets. To learn more about how Albus is transforming UARs, visit here or read the launch blog. About Lumos Lumos is the first Autonomous Identity platform to automatically discover and manage access across all your apps. Instead of being overwhelmed by the sprawl of apps and access, Lumos empowers organizations with one unified solution that controls access on auto-pilot. With Lumos, gain full visibility, enhance security, and boost productivity - all in one platform. Trusted by hundreds of companies including Pinterest, Anduril, and GitHub, Lumos powers millions of access requests across global companies. Learn more: www.lumos.com. SOURCE Lumos