Identity Foundation
One core.
Every identity.
Every identity.
THE GAP
Identity was never solved for people.
AI agents just raised the stakes.
Stolen credentials, phishing and compromised keys already give attackers a way in. AI agents multiply the attack surface, letting a single compromise spread at machine speed.
One key to forge sign‑ins
When signing authority rests in one key, a stolen key lets attackers forge trusted sign‑in tokens.
Phishable sign‑in
Attackers trick people into sharing verification codes or flood them with sign‑in prompts until one gets approved.
MFA on, strength unknown
Weak, stale and risky authentication methods hide behind an “MFA enabled” checkbox.
One key to forge sign‑ins
When signing authority rests in one key, a stolen key lets attackers forge trusted sign‑in tokens.
Phishable sign‑in
Attackers trick people into sharing verification codes or flood them with sign‑in prompts until one gets approved.
MFA on, strength unknown
Weak, stale and risky authentication methods hide behind an “MFA enabled” checkbox.
THE FOUNDATION
A new workforce.
A new architecture.
People log in a few times a day. Their AI agents ask for access and act around the clock, at a pace legacy identity platforms can’t keep up with.
Secure the trust layer
Protect token signing, sign‑in and authenticators, where attackers usually get in.
Converge people and agents
Manage people and AI agents in one core, with every agent tied to an accountable owner.
Scale to meet demand
Handle the constant sign‑in and authorization requests agents and sub‑agents create, and bring in people only when it matters.
Secure Split Key
Remove the single point of compromise. Split the signing key.
Most identity platforms keep token‑signing authority in a single key. If it’s compromised, attackers can forge trusted sign‑ins. Secure Split Key (SSK) divides it between our cloud and your environment, so both shares are needed to sign a valid token.
Stolen credentials stop short
Even with a password and a one‑time code, an attacker can’t sign a valid token without your key share.
Vendor breach, contained
A compromise of our cloud exposes only one share, not enough to sign.
Zero operational drag
Apps get standard SAML and OIDC tokens. No app changes and no extra steps at sign-in.
Authentication Methods
Make sign‑in phishing‑resistant. Nothing to read out or relay.
A push they can't talk you through
Replace number matching with a visual challenge tied to the sign‑in. No code to read aloud and no prompt to approve on autopilot.
AUTHENTICATOR INVENTORY
Stop treating MFA like a checkbox. Start measuring it.
Bring authenticators into one inventory, with strength scores, owners and when each was last used. See what people rely on to sign in and where it falls short.
Find methods that need attention
THREE WAYS IN
Start where you are.
Go as far as you choose.
Path 01
Start alongside your IdP
Keep your current identity platform and discover, secure and govern your AI agents. Nothing to migrate.
Path 02
Harden high‑risk apps
Make NewCore the IdP for high‑risk apps or your admin team, with phishing-resistant authentication and Secure Split Key.
Path 03
Upgrade to one identity platform
Bring sign-in for people and governance for agents together, with shared policies and clear ownership, managed from one place.