Read about the latest changes to Thalian.
Thalian already told you which AI agents exist in your environment. Now it governs them: what each agent is authorized to do, what it actually does, and the drift between the two, correlated across every platform the agent touches.
Thalian now detects AI tools installed on managed devices, joins them with corporate OAuth grants and identity classification, and surfaces three new compound rules that no identity-only tool can fire.
Your IT stack was designed around humans. Your AI agents are not humans. Here is what that gap actually looks like in production, and the control framework that names it.
The Compliance page now covers four frameworks side-by-side: SOC 2, ISO 27001, NIST CSF 2.0, and ISO 42001. The Compliance Trend chart plots all four framework scores over time, so security teams can see at a glance which posture is moving and which framework is dragging.
MCP server v1.1.0 adds write-scope action tools; Okta AI agent principals now sync as first-class non-human identities; AI chat can now act on grouped findings and remove admin roles.
New interactive threat visualization, IP-based login context, dramatically less finding noise, and Thalian now installs directly from the Slack App Directory.
Three new integrations, 400+ detection rules, recurring access reviews with PDF evidence export, remediation playbooks, cross-platform offboard cascade, and Claude Opus 4.7.
Thalian now supports bulk decisions in access review campaigns, a FAIR-aligned entity risk model, and smarter integration error handling.
UX improvements across the landing page, demo experience, and signup flow based on a full product audit.
Thalian's detection engine nearly doubled — from 173 rules to 316 — with new integrations, deeper platform analysis, and findings that require 3+ connected platforms to surface.