Findings
Posture issues found across agents and identities.
If you don't see this feature in your console, ask your SecureAuth contact to
enable the nhi feature flag for your organization.
The apps and agents that sign in to your directory can hold long-lived secrets, broad permissions, or no owner, and nobody reviews them the way they review people. NHI monitoring checks each non-human identity against a set of rules, and each match is a finding: one identity that breaks one rule.
Where findings appear
The Findings tab on Anomalies and Findings lists what the last complete directory sync found. Each row shows the severity, the rule, the identity's name and kind, and when SecureAuth last saw the finding. Select a row to see why it was flagged, the evidence, and the finding's history.
Triage a finding
A new finding is Open.
Acknowledge marks it as tracked, Dismiss marks it as needing no action, and Reopen returns it to open.
Triage needs manage_nhi, and every status change is recorded in the audit log.
You can't resolve a finding yourself: SecureAuth sets Resolved when a later sync no longer sees the problem.
A resolved finding stays visible for 120 days.
For the rules and how to connect a directory, see Non-human identities (NHI).