Question 1

What is Lutril and what does it do?

Accepted Answer

Lutril is an access governance platform for employees and AI agents. It connects to your identity provider, your HRIS, and your SaaS tools, then runs access requests, access reviews, provisioning, offboarding, and AI governance from one policy layer. Every employee, every tool, every agent.

Question 2

What does Lutril integrate with?

Accepted Answer

45+ native connectors, including Google Workspace, Microsoft 365, Slack, Teams, GitHub, Notion, HubSpot, and AWS, with two new connectors shipping every month. HRIS events from tools like BambooHR, Lucca, and PayFit drive provisioning. For everything else, the universal MCP endpoint covers any tool with an API.

Question 3

How is Lutril different from Okta or Microsoft Entra ID (formerly Azure AD)?

Accepted Answer

Identity providers authenticate: they decide who can log in, then hand off. Lutril governs everything after that moment: who holds which permission in each SaaS tool, how access is requested and approved, what expires on its own, and what is actually removed when someone leaves. Keep your IdP as the front door. Lutril makes what sits behind it provable.

Question 4

How is Lutril different from SailPoint and other IGA platforms?

Accepted Answer

IGA platforms solve real problems, for organizations with a dedicated IAM team and a year of implementation ahead of them. Lutril is built for teams with neither. Discovery starts the day you connect Google Workspace or Microsoft 365, requests and approvals run in Slack and Teams instead of a portal nobody opens, and AI agents are governed as first-class identities with the same roles, policies, and audit trail as your employees.

Question 5

Does Lutril support just-in-time (JIT) access?

Accepted Answer

Yes, for employees and for AI agents. You set a policy per application and per access level: auto-approve when your conditions are met, route to an approver, or refuse. The requester picks how long they need, from one hour up to seven days, capped by the policy, and an approver can shorten that but never extend it. Requests and approvals happen in Slack, Teams, or the Lutril app. Lutril warns before the deadline with an option to extend, then takes the access back on its own.

Question 6

Can Lutril govern AI agents and non-human identities?

Accepted Answer

Yes. That is the core of the platform. Every agent gets a record in the registry with an owner, a model, and exact scopes. The Lutril MCP proxy checks each tool call against role-based policy before it executes, logs it immutably, and a global kill switch can pause an agent across every tool instantly. An API key alone can't do any of that. A credential is not a control.

Question 7

How fast can Lutril be deployed?

Accepted Answer

Discovery starts the same day: connect Google Workspace or Microsoft 365 and sign-in signals surface the apps, AI tools, and agents your team actually uses, approved or not. From there you add your HRIS and native connectors for provisioning and reviews. Nothing to install on endpoints, no network changes.

Question 8

Does Lutril help with SOC 2 and ISO 27001?

Accepted Answer

Yes. Access review campaigns produce exactly what auditors ask for: who had access, who reviewed it, what was decided, and proof the removals executed, all in one link. Every grant, request, approval, and agent tool call is logged, so the evidence exists the moment you need it instead of being reconstructed at audit time.

Question 9

What is shadow AI, and can Lutril find it?

Accepted Answer

Shadow AI is every AI tool and agent your team uses without approval: ChatGPT on personal emails, browser extensions, agents wired to API keys nobody tracks. Lutril finds both. Sign-in logs and email scanning surface the tools, a Chrome extension catches what OAuth never sees, and code scanning finds the agents living in your GitHub and GitLab repos. You get an inventory, an owner for each one, and a decision to make instead of a blind spot.

Question 10

Can I just ask Lutril a question about our access?

Accepted Answer

Yes. Lu AI is the prompt bar built into the Lutril app. Ask in plain language, for example "Who still has access but no longer appears in our directory?", "Who holds standing admin in both GitLab and Cloudflare?" or "Which AI agents are past their expiry but still hold a live credential?", and it answers from your own connected data rather than from generic documentation. Shortcuts cover the questions people ask most: /standing-access, /stale-access, /expiring and /orphans. Lu AI is read-only by design. It can read every account, policy, access request, review and AI agent in your tenant, and it has no ability to change any of them, so it can tell you what to fix but never acts on your stack by itself.

Account	Application	Role	Directory
t.weber@acme.com	GitLab	Owner	No match
m.chen@acme.com	Snowflake	SYSADMIN	No match
contractor-07@acme.com	Cloudflare	Admin	No match
j.okafor@acme.com	Datadog	Editor	No match

Account	Application	Role	Directory
t.weber@acme.com	GitLab	Owner	No match
m.chen@acme.com	Snowflake	SYSADMIN	No match
contractor-07@acme.com	Cloudflare	Admin	No match
j.okafor@acme.com	Datadog	Editor	No match

Govern every Human and AI Agent.

Your stack outgrew your security team. Now it has agents.

Standing access outlives the employee.

Shadow IT and Shadow AI.

AI agents act without guardrails.

One policy layer. Every identity.

1 – See

2 – Govern

3 – Enforce

4 – Prove

Built for humans and AI agents

Access Reviews & Access Graph

Shadow IT Discovery

Shadow AI & MCP Discovery

Just-in-Time Access Requests

Onboarding & Offboarding

MCP Gateway & Agent Governance

Ask your access questions in plain language

What IT and security leaders say about Lutril.

Connects to the tools your team already uses

Common questions

Built for the future. Available today.