Application Control · Agents
Know every script and agent, and who owns it.
Crawlers, scrapers, CI runners and AI agents are a fast-growing share of what crosses a network, and the least accounted for. Application Control gives you one row per agent and an owner for each.
| Caller | Kind | Owner | Status |
|---|---|---|---|
| build-runner-7 | CI runner | Priya Nair | Owned |
| report-bot | AI agent | Lena Park | Owned |
| sync-script.py | Script | — | No Owner |
| unknown crawler | Crawler | — | Block |
A rulebase that can talk about non-humans.
Part of both Private Access and Internet Access, and included with both from the Small plan.
One row per agent
Every caller seen gets a row. An agent nobody will claim is the finding.
Claims are checked
What a caller calls itself is a claim it chose, so it is checked against evidence it cannot choose.
Inbound and outbound, kept apart
Someone else's crawler reading your site is a different problem from your own people sending work to a model.
Callers, never conversations
No prompt or response content is read, stored or scored to identify a caller.
An owner for each
Give each agent an owner, and a group can own what a team runs.
Seen, but not on the list
Callers seen in the last 7 days that nobody has listed yet are shown for you to decide on.
Every caller has a person behind it.
Give each agent an owner. Filter to unowned agents, and the list becomes the work to do.
- Filter to unowned agents
- Rules for a caller, like rules for a person
- Report-only first, as everywhere else
| Caller | Seen | Owner |
|---|---|---|
| report-bot | 2 min ago | Lena Park |
| nightly-export | 6 h ago | No Owner |
| sync-script.py | 1 d ago | No Owner |
See what agents do, over time.
The Observability page in the console shows agent activity for your organisation, so a new caller stands out when it appears.
Included with Private Access and Internet Access from the Small plan, $5 per user per month.
Asked often.
Do you read what agents send to AI models?
No. Application Control identifies callers. No prompt or response content is read, stored or scored.
Is this a separate product to buy?
No. It is part of Private Access and Internet Access, from the Small plan.
Can I block an agent?
Yes. Rules can name a caller, and as with any rule you can run it in report-only first.