Human identities
Manage customer, workforce, partner and administrator journeys.
Identity and access for people and workloads
Manage sign-in, authorization and device posture for people, devices, services and AI agents.
Capabilities
Bring identity, device security and policy workflows together without treating any single login as the whole trust decision.
Machine & agent identity
Govern services, workloads, devices and AI-agent principals.
Fine-grained authorization
Use policy and relationship-aware controls to restrict actions.
Stronger authentication
Build on modern authentication and step-up verification experiences.
Device trust
Connect enrollment, posture and access expectations.
Auditable governance
Record decisions and retain accountability across boundaries.
Identity and policy controls
Documentation and APIIdentities
- Human & agent principals
- Workforce, customer, partner, service & AI agents
- 111 Identity API ops
- Individually classified in capability registry
- StratoID Authenticator
- TOTP, HOTP, number-matched push & encrypted backup
Policies
- Authentik + SpiceDB
- OIDC/SAML authentication + relationship authZ
- 92 Network API ops
- Sovereign network control plane · default deny
- Step-up verification
- Context-aware MFA & short-lived token issuance
Devices
- Cross-OS device agent
- Windows, macOS, Linux, iOS & Android posture
- Enrollment & MDM/SASE
- Certificates, inventory, remote commands & zero-trust
- Dedicated identity service
- OIDC token issuance is separate from the public website
Who it’s for
Solutions and integrationsModern enterprises
Secure employees, customers and partners consistently.
Cloud platforms
Bring service-to-service identity into infrastructure operations.
Agentic systems
Put boundaries around autonomous services and AI employees.
Getting started
Check the integration and deployment requirements for your environment.
Review deployment availabilityInventory identities
Identify people, machines, devices and applications.
Define access
Map authentication, authorization and posture policies.
Validate trust
Test deny-by-default paths and operational evidence before activation.
Related products
View all NexoCloud products- NexoCloud The NexoCloud ecosystem Build, deploy, operate and secure your digital products in one connected cloud ecosystem. Infrastructure and developer experiences designed to work together.
- SkyForge Deploy • Operate • Observe Turn repositories and infrastructure into manageable services. Bring deployment orchestration, operational signals and AI-assisted remediation into one engineered workflow.
- AppForge Discover • Build • Deliver Discover application architecture, design delivery workflows and coordinate the journey from source code to tested, distributable software.
- Droplet Quality • Evidence • Release Understand your application, find coverage gaps, coordinate testing and make release decisions supported by traceable evidence—not intuition.
Frequently asked questions
What does StratoID cover?
StratoID brings sign-in, authorisation, device compliance and network access into one identity platform.
Can it support AI agents?
StratoID includes agent identities. Scope and test their permissions before granting production access.
What should I check before production?
Confirm identity, device management and network enforcement for your deployment.
Talk to the StratoID team
Tell us what you’re planning and we’ll connect you with the right team.
Ask us about deployment options, availability and support.