01
Access requests
Verifies identity and policy, then routes the grant to an approver with everything attached.
Solutions · IT
The AI IT employee that answers the helpdesk before it queues.
Access requests verified and routed, onboarding checklists run to completion, unused licenses flagged, phishing reports triaged — with admin rights kept firmly human.
Access grants always approved by a person Onboarding checklists run to done Every change on the record
helpdesk · it
Ticket stream IT · Relay
RequestState
Password reset — identity verifiedRESOLVED
New hire day-1 — 14-step checklistRUNNING
12 seats unused for 60 daysFLAGGED
Phishing report from financeESCALATED
31 TICKETS TODAY4 NEEDED A HUMAN
-55%
Tickets reaching a human
100%
Access changes with an approver
$18k
Annual unused-license savings found
Representative results · your workload will vary
The job
What your IT employee owns.
02
On/offboarding
Runs the checklist — accounts, groups, hardware, revocations — and reports what's actually done.
03
License hygiene
Watches seat usage across your SaaS and flags what nobody has touched in months.
04
Security triage
First response on phishing reports and odd sign-ins, escalated with the evidence collected.
Guardrails
Helpful everywhere. Privileged nowhere.
The agent verifies, prepares, and routes — it does not hold admin rights. Access grants execute only after a named approver says yes, and privileged systems are excluded entirely.
Your auditors get a complete answer for every change. Every decision stays on the record.
it · guardrails
ActionState
Password resets (verified)AUTO
Standard app accessAPPROVER
Group & role changesAPPROVER
Admin & infra rightsHUMAN ONLY
Integrations
Plugged into your stack.
Scoped per system — reading the directory doesn't grant changing it, and changes always carry a named approver.
SL
SlackHelpdesk intake
GM
GmailRequests & comms
JI
JiraTicketing
NO
NotionIT runbooks
GO
Google DriveAccess reviews
ZO
ZoomProvisioning
GI
GitHubRepo access
+ thousands morevia Syntrum connectionsOnboarding went from a day of tab-switching to approving one checklist. Offboarding finally happens the same day someone leaves.
Straight answers.
No. It verifies the requester and the policy, prepares the change, and routes it to a named approver. What it can do alone — like verified password resets — is a boundary you set explicitly.
One trigger runs the full revocation checklist across connected systems, and the agent reports completion per item — so 'access removed' is a verified fact, not an assumption.
It does first response: collecting the reported message, checking indicators, and escalating to your security owner with the evidence assembled. It never quarantines or blocks on its own.
It's one standard role on any plan — from $12/month with your own API key on Solo, or on Team with model usage included. There are no per-seat charges for the people reviewing its work.
Start small
Put one agent to work this week.
Start with one repeatable job. Keep approval over every action, see the results, and expand when you are ready.