Butterfly Security Information

Butterfly Security is an identity security and AI agent governance platform purpose-built for enterprises managing complex identity infrastructure across Okta, Microsoft Entra ID, Auth0, PingOne, and 1Password. At its core, Butterfly provides automated backup and disaster recovery for identity providers. Organizations can schedule continuous backups of their entire IdP configuration — applications, users, groups, policies, authorization servers, and more — with point-in-time restore, configuration diff, and drift detection. If a misconfiguration, outage, or breach impacts your identity layer, Butterfly gets you back to a known-good state in minutes, not days. Beyond backup, Butterfly delivers full AI agent security. As enterprises adopt AI copilots, autonomous agents, and LLM-powered workflows, a new class of non-human identities is proliferating across identity systems — often without security team visibility. Butterfly automatically discovers AI agents hiding in your IdP configurations by scanning backup data for known AI platform patterns including OpenAI, Anthropic, Microsoft Copilot, AWS Bedrock, LangChain, and more. Each discovered agent is inventoried with risk scoring, identity bindings, permissions analysis, and shadow AI detection. The platform provides real-time activity monitoring for agent behavior, policy enforcement with configurable guardrails (access control, data boundaries, rate limits, human-in-the-loop approval), and full credential lifecycle management with AES-256-GCM encryption, expiry tracking, and one-click rotation. Key capabilities include compliance checking against NIST, SOC 2, ISO 27001, and CIS benchmarks, Terraform export for infrastructure-as-code workflows, git-based version control for configurations, and a CLI tool for automation pipelines.