# Sonrai Security

**Canonical:** https://apis.io/providers/sonrai-security/  
**Website:** https://sonraisecurity.com  
**APIs profiled:** 1

Sonrai Security is a cloud identity and access security company whose Cloud Permissions Firewall (CPF) enforces least-privilege access across AWS, Azure, and Google Cloud by quarantining unused IAM identities, protecting sensitive permissions, and disabling unused services and regions without disrupting developers. The platform also ships WALLy, an AI-driven Cloud PAM agent that grants just-in-time privileged access through Slack and Teams, and offers agentic AI security consulting. Sonrai exposes a GraphQL API for the platform (endpoint https://app.sonraisecurity.com/graphql), documented in its CPF developer docs; platform and API access authenticate through an Auth0-backed OpenID Connect identity provider at login.sonraisecurity.com. Sonrai Security is backed by Menlo Ventures.

## Kin Score — 18.7 / 100 (emerging)

Scored 2026-08-19 under rubric 0.12.0. Trend: falling (-8.1 from 26.8).

| Facet | Score |
|---|---|
| Discoverability | 87.0 |
| Contract Quality | 0.0 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 2.6 |
| Developer Ergonomics | 31.0 |
| Commercial Clarity | 6.6 |
| Access Clarity | 6.6 |

## Agent readiness — 12.0 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | yes |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **Sonrai GraphQL API** — GraphQL API for the Sonrai Cloud Permissions Firewall platform — exempt, protect, quarantine, and disable cloud IAM access. Bearer-token authenticated; reference documentation i...

## Security (2)

- **Sonrai Security Authentication** — oauth2/openIdConnect/http · 2 schemes
- **Sonrai Security Domain Security** — TLSv1.3 · HSTS · DMARC

## Tags

Company, Security, Cloud Security, Identity and Access Management, CIEM, Cloud Permissions, Least Privilege, GraphQL, IAM

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/sonrai-security/). Scores are computed from the provider's own public artifacts under a published rubric.