Sonrai Security

Sonrai Security is a cloud identity and access security company whose Cloud Permissions Firewall (CPF) enforces least-privilege access across AWS, Azure, and Google Cloud by quarantining unused IAM identities, protecting sensitive permissions, and disabling unused services and regions without disrupting developers. The platform also ships WALLy, an AI-driven Cloud PAM agent that grants just-in-time privileged access through Slack and Teams, and offers agentic AI security consulting. Sonrai exposes a GraphQL API for the platform (endpoint https://app.sonraisecurity.com/graphql), documented in its CPF developer docs; platform and API access authenticate through an Auth0-backed OpenID Connect identity provider at login.sonraisecurity.com. Sonrai Security is backed by Menlo Ventures.

Sonrai Security publishes 1 API on the APIs.io network. Tagged areas include Company, Security, Cloud Security, Identity and Access Management, and CIEM.

Sonrai Security’s developer surface includes documentation, pricing, signup flow, engineering blog, support, authentication, and 10 more developer resources.

🌐 Visit website 📡 Source on GitHub
25.8/100 emerging ▬ flat Agent 14/100 human only Full breakdown ↓
scored 2026-07-27 · rubric v0.5
AccessSelf serve
1 APIs
CompanySecurityCloud SecurityIdentity and Access ManagementCIEMCloud PermissionsLeast PrivilegeGraphQLIAM

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 25.8/100 · emerging
Contract Quality 0.0 / 25
Developer Ergonomics 7.0 / 20
Commercial Clarity 8.9 / 20
Operational Transparency 0.7 / 13
Governance 0.0 / 12
Discoverability 9.3 / 10
Agent readiness — 14/100 · human only
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 15
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/sonrai-security: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Sonrai GraphQL API

GraphQL API for the Sonrai Cloud Permissions Firewall platform — exempt, protect, quarantine, and disable cloud IAM access. Bearer-token authenticated; reference documentation i...

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Sonrai Security Authentication

oauth2/openIdConnect/http · 2 schemes

SECURITY

Sonrai Security Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Resources

Get Started 3

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 SignUp
SignUp
 Login
Login

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

WellKnown
WellKnown
 LLMsTxt
LLMsTxt

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Conformance
Conformance

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization

Access & Security 2

Authentication, authorization, and security posture

Authentication
Authentication
 DomainSecurity
DomainSecurity

Operate 1

Status, limits, changes, and where to get help

Support
Support

Commercial 3

Pricing, plans, and the legal terms of use

Pricing
Pricing
 PrivacyPolicy
PrivacyPolicy
 TermsOfService
TermsOfService

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: sonrai-security
name: Sonrai Security
description: Sonrai Security is a cloud identity and access security company whose Cloud Permissions Firewall (CPF) enforces
  least-privilege access across AWS, Azure, and Google Cloud by quarantining unused IAM identities, protecting sensitive permissions,
  and disabling unused services and regions without disrupting developers. The platform also ships WALLy, an AI-driven Cloud
  PAM agent that grants just-in-time privileged access through Slack and Teams, and offers agentic AI security consulting.
  Sonrai exposes a GraphQL API for the platform (endpoint https://app.sonraisecurity.com/graphql), documented in its CPF developer
  docs; platform and API access authenticate through an Auth0-backed OpenID Connect identity provider at login.sonraisecurity.com.
  Sonrai Security is backed by Menlo Ventures.
url: https://raw.githubusercontent.com/api-evangelist/sonrai-security/refs/heads/main/apis.yml
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://sonraisecurity.com/wp-content/uploads/sonrai-logo-sharing.png
x-type: company
x-source: vc-portfolio
x-backed-by:
- menlo-ventures
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-21'
tags:
- Company
- Security
- Cloud Security
- Identity and Access Management
- CIEM
- Cloud Permissions
- Least Privilege
- GraphQL
- IAM
apis:
- name: Sonrai GraphQL API
  description: GraphQL API for the Sonrai Cloud Permissions Firewall platform — exempt, protect, quarantine, and disable cloud
    IAM access. Bearer-token authenticated; reference documentation is gated behind the Auth0 login.
  humanURL: https://docs.sonraisecurity.com/cpf/api/sonrai-graphql-api
  baseURL: https://app.sonraisecurity.com/graphql
  properties:
  - type: GraphQL
    url: https://docs.sonraisecurity.com/cpf/api/sonrai-graphql-api
  - type: APIReference
    url: https://docs.sonraisecurity.com/cpf/api/sonrai-graphql-api
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://sonraisecurity.com
- type: DeveloperPortal
  url: https://docs.sonraisecurity.com/cpf-public/
- type: Documentation
  url: https://docs.sonraisecurity.com/cpf-public/
- type: Pricing
  url: https://sonraisecurity.com/pricing/
- type: SignUp
  url: https://app.sonraisecurity.com/SignUp
- type: Login
  url: https://app.sonraisecurity.com/Login
- type: Blog
  url: https://sonraisecurity.com/blog/
- type: Support
  url: https://sonraisecurity.com/contact/
- type: PrivacyPolicy
  url: https://sonraisecurity.com/privacy-policy/
- type: TermsOfService
  url: https://sonraisecurity.com/terms-of-service/
- type: GitHubOrganization
  url: https://github.com/sonraisecurity
- type: Authentication
  url: authentication/sonrai-security-authentication.yml
- type: Conformance
  url: conformance/sonrai-security-conformance.yml
- type: DomainSecurity
  url: security/sonrai-security-domain-security.yml
- type: WellKnown
  url: well-known/sonrai-security-well-known.yml
- type: LLMsTxt
  url: llms/sonrai-security-llms.txt
x-enrichment:
  date: '2026-07-21'
  status: minimal
  artifacts_added: 7
  pass: local-v1