Security · Agent Inventory
Every agent — and the ones with no owner, policy, telemetry, or pulse
Security can only govern what it can see. Control coverage is 63% (5 of 8 governed & monitored). That leaves 3 ungoverned, 1 shadow (installed but unmonitored), and 0 decommission (forgotten & orphaned) — start there.
Start here — the ungoverned, unseen & abandoned
3
ungoverned
Codex CLI, marketing-gpt, Zed Agent
1
shadow (unmonitored)
Zed Agent
0
decommission (forgotten & orphaned)
none
Control coverage
5 of 8 governed & monitored
Critical agents
1posture score < 50
Ungoverned
3no policy binding, no owner
Shadow + decommission
1unmonitored or abandoned
Agent roster
8 of 8 agents · default sort risk-first
Agent | Owner | Model | Tokens | Spend | Lifecycle | Posture |
|---|---|---|---|---|---|---|
marketing-gpt compound Internal · service ungovernedinstrumented | root no human identity | gpt-4o | 1.1M | $44.10 | Active | Critical 25 ↳ Approvals & sandbox bypassed (yolo) |
Zed Agent Zed Industries · ide ungovernedshadow · no telemetry | jane no human identity | — | 0 | $0.00 | Shadow unseen 3d | Elevated 60 ↳ No tool-approval policy |
support-copilot Internal · service governedinstrumented | svc-support@qpoint.io | gpt-4o | 5.6M | $168.40 | Active | Elevated 65 ↳ Running as root |
Codex CLI compound OpenAI · cli ungovernedinstrumented | dev-7f3@duck.com | gpt-5-codex | 2.4M | $78.00 | Active | Elevated 70 ↳ Sandbox disabled |
Cursor Anysphere · ide governedinstrumented | jane@qpoint.io | claude-sonnet-4-6 | 3.1M | $96.20 | Active | Standard 85 ↳ No tool-approval policy |
data-pipeline-agent Internal · service governedinstrumented | svc-data@qpoint.io | claude-haiku-4-5 | 9.2M | $52.30 | Active | Standard 90 ↳ No tool-approval policy |
Claude Desktop Anthropic · desktop governedinstrumented | mark@qpoint.io | claude-opus-4-8 | 800.0k | $31.00 | Active | Standard 95 |
Claude Code Anthropic · cli governedinstrumented | mark@qpoint.io | claude-opus-4-8 | 6.9M | $214.50 | Active | Standard 100 |
Risk-first by default — posture ascending so the weakest agents lead. Compound-risk rows (dangerous & unaccountable) are highlighted. Lifecycle is derived from telemetry, idle age, and accountability — every number traces to the live qcontrol /api shape.