Academy
What is an attack path?
Glossary · AI agent and machine identity security
Short answer
An attack path is a chain of identities, grants and tools that leads from one starting point to sensitive data.
Why it matters
A single permission rarely looks dangerous. The risk sits in the chain: identity A can assume role B, which can read store C.
A path is a route that exists, not proof that anyone used it. That is why paths are ranked by how close they get to your most sensitive data.
What it looks like
A coding agent uses a repository token. The token reaches a CI secret. The secret deploys to production. Three steps, each reasonable alone.
In nerl0
The Security Graph draws each path as agent, credential, role and data store. Issues carry the recommended breakpoint, and the next scan verifies the fix. See Security Graph.