Question Library
The questions a security team should be able to answer about its agents
Every question nerl0 tracks, in one catalog. Each one is a check you can activate, an answer you can export and a number you can measure again with the next scan.
Browse the catalog
21 questions in 6 groups. Pick a group or search for a word.
Questions in the product01How many AI agents run in our environment?InventoryCount02Which agents has nobody claimed an owner for?InventoryList03Which MCP servers are connected to our agents?InventoryList04Which agents were created in the last 30 days?InventoryTrend05Which service accounts do agents reuse?IdentitiesList06How many non-human identities are older than 90 days?IdentitiesCount07Which OAuth apps hold grants to AI tools?IdentitiesList08Which keys have never been rotated?IdentitiesList09Which agents can reach crown-jewel data?ExposureList10How many agents have proven access to production data?ExposureCount11Which agents can write to production?ExposureList12Which identities reach customer data through more than two hops?ExposureList13What is the shortest path from an agent to sensitive data?PathsPath14Which roles let an agent assume admin?PathsPath15Which single grant would break the most paths if we revoked it?PathsPath16What changed since the last scan?ChangeTrend17Which new paths opened this week?ChangeTrend18Which fixes closed an exposure?ChangeTrend19Which answers can we prove with a scan?EvidenceList20Who approved this grant, and when?EvidenceList21Which findings map to ISO 27001 and NIS2 controls?EvidenceList
No question matches. Try another word.
Every question has the same shape
A question is not a dashboard tile. It states what it asks, what it counts and what it cannot show.
01AskA plain question about agents, identities or data, written the way a security lead would say it.
02AnswerA count, a list, a path or a trend, taken from your connected platforms.
03Measure againThe same question runs with every scan, so you see what changed.