Identity command for people and AI agents
CrowID maps who and what can reach your systems, finds the exposure before an attacker does, and gives every AI agent scoped, short-lived access instead of your keys.
Everything that holds a key, in one place
People, AI agents, service accounts and the domains they act through. CrowID treats them as one estate and gives your team four clear jobs to do on it.
Operate
- One queue for every finding, ranked by blast radius
- Agents enrolled, scoped and stoppable in one click
- Live wall view for the operations floor
Protect
- Keys brokered, never handed to an agent
- Guardrails veto risky actions before they run
- Domains, email and web exposure under watch
Prove
- Hash-chained trail of every action and approval
- Controls tested continuously, not once a year
- Evidence an auditor can verify independently
Map
- Who and what can reach which system, and through what
- Drift caught the moment access widens
- Network rules written as identities, not IPs
Your domain, the way an attacker sees it
Type a domain and CrowID reads only what anyone on the internet can read. You get a grade, every finding with its evidence, and the exact fix.
Resolve
A, AAAA, NS, MX, TXT and CAA records over DNS-over-HTTPS, plus DNSSEC validation.
cloudflare-dns.com/dns-queryAuthenticate mail
SPF syntax and lookup count, DMARC policy and reporting, DKIM selectors, MTA-STS and TLS-RPT.
_dmarc · _mta-sts · _smtp._tlsProbe the web edge
HTTPS redirect, HSTS, CSP, framing, sniffing and referrer policy, version leaks, security.txt.
GET https://your.domain/Watch the perimeter
Certificate Transparency for expiry and new issuance, and up to 40 look-alike domains checked for DNS and mail.
CT logs · look-alikesGive agents the work, never the keys
Every agent runs under a named owner with a scope smaller than its owner's and a lifetime measured in minutes. Credentials stay in the broker. If a page tells an agent to send a key somewhere, there is no key to send.
- Scopes narrow at every hop. Owner, agent and sub-agent each hold less than the one above.
- Veto before acting. Guardrails stop exfiltration and bulk sends before the call goes out.
- One-click stop. Revoke an agent and every session it opened ends with it.
owner · passkeyagent · 15 minLive now, and what's in early access
We'd rather be precise than impressive. Here's exactly what's running on crowid.com and what we're rolling out with design partners.
Live on crowid.com
Live- Domain security scan. DNS, email authentication, TLS, web headers and look-alikes. No account needed.
- Daily monitoring. Up to 25 domains re-scanned every day.
- Alerts. Regressions, new look-alikes and grade drops.
- Secret scanner. Finds cloud, payment, AI and source-control keys in text or a public repo, entirely in your browser.
Early access
By invitation- Command. Findings correlated into incidents and triaged automatically.
- Identity & agents. Brokered keys, scoped sessions, guardrails.
- Estate map. Topology, drift and identity-based network rules.
- Trail & compliance. Tamper-evident evidence and continuous controls.
See what your domain tells an attacker
Free, no account, public data only. Create an account to keep watching it every day.