Authorization drift
Named by 2 kept items in this workspace.
Search every workspace for Authorization drift. It matches the name as written, so it can find other things that share it.
The items that name it 2
An AI pentesting agent moves beyond intended scope without a person deliberately approving the step, reaching an unapproved asset, interacting with a third party, accessing more data than intended, or using a prohibited technique
Retriever runs with a service identity ignoring calling user's document-level ACLs
All techniques in this workspace.