Security Agents: Detect and respond to access control incidents

Get real-time alerts for critical physical security events, from tailgating detection and anti-passback enforcement to login anomalies and policy breaches, with Kisi’s automated security agents.

The visibility, coverage, and speed your security team needs

Security agents for instant incident detection

Access anomaly agents for smarter threat detection

Detect unusual patterns in how users access your spaces before they become a threat. These agents monitor behavioral anomalies like login issues, credential abuse, tailgating, and anti-passback violations, helping you catch early signs of compromised accounts or suspicious movement across your organization.


  • Tailgating detection

    Prevent unauthorized entry by detecting when an unauthorized person follows a valid unlock without presenting their own credentials.

  • Anti-passback

    Ensure users exit before re-entering to stop credential sharing or piggybacking and maintain accurate records of who’s in your space.

  • Login anomaly detection

    Identify suspicious login patterns across geographical locations that may indicate compromised credentials and take timely action.

  • High digital credentials usage

    Detect excessive use of digital keys that could signal credential sharing or account compromise and enforce secure access practices.

  • Excessive access denial

    Spot users repeatedly denied badge or fob entry and resolve potential signal issues, permission misconfigurations, or probing behavior.

  • Primary device change policy

    Get notified when a user changes their primary access device, a possible sign of credential theft or unauthorized re-provisioning.

  • Security operations agents for stronger system control

    Maintain a clean, secure access and security environment with automated oversight of users, groups, hardware, and admin activity. These agents help you enforce access rules, reduce human error, and stay ahead of system issues, without relying on manual checks or reactive fixes.


  • Inactive user removal

    Automatically remove suspended users or those without access who’ve been inactive for over 60 days to reduce dormant accounts and tighten access hygiene.

  • Admin notification policies

    Set up custom notifications for admin-level events so key stakeholders are alerted when sensitive changes occur.

  • Hardware outage

    Get notified instantly when Kisi controllers or readers go offline so you can resolve issues before they disrupt access.

  • User added to sensitive group

    Detect when a user is added to high-privilege groups to ensure every change is intentional, authorized, and logged.

  • Door agents for detecting physical access breaches

    Monitor critical door events like forced entries or held-open doors in real time. Door agents give you immediate visibility into unauthorized access attempts and unusual door behavior so you can respond quickly and keep your entry points secure.


  • Door held open

    Notifications repeat at set intervals until the door is closed, helping you respond quickly and reduce the risk of tailgating or door misuse.

  • Door forced open

    Get alerted when a door is physically forced without a valid unlock, signaling a potential intrusion or tampering attempt.

  • Step

    1

    Configure alerts

    Choose which Security Agents to activate, assign them to specific doors or locations, and define who should be notified when incidents occur.

    Step

    2

    Detect violations

    Security Agents continuously monitor your doors, users, and system behavior to detect access anomalies, forced entries, and risky activity in real time.

    Step

    3

    Respond to incidents

    Get instant alerts through the Kisi app so the right people can act quickly, resolve issues fast, and maintain secure, audit-ready access logs.

    Automate your access control response with our Security Agents

    Get a personalized walkthrough of how Security Agents can help you prevent access violations and respond to risks in real time.

    • Connect with a Kisi expert in 24 hours

    • Get a tailored solution for your use case

    • Start using Kisi in a matter of days

    Loading

    Explore resources on incident prevention and smarter security

    Explore best practices, insights, and tools for improving physical security across your organization. Learn how to identify risks, automate alerts, and build a more proactive approach to access control.


    FAQ

    • Kisi’s Security Agents are automated alerting tools that track access events and unusual behavior in real time. They detect incidents like tailgating, forced door entry, login anomalies, excessive access denials, high digital credential usage, anti-passback violations, hardware outages, and more. Once triggered, agents send immediate alerts so you can respond quickly and reduce risk.

    • Yes. With Security Agents, you can control where and how each alert is applied. You can assign agents to specific doors, locations, or groups of users, giving you the flexibility to focus on the areas that matter most. This ensures your alerts stay relevant, targeted, and actionable.

    • Alerts can be received through the Kisi app, email, or integrated with third-party communication tools like Slack. You can assign specific users to receive alerts from individual Security Agents, ensuring the right people are notified quickly and can respond effectively.

    • Yes. Security Agents help you meet compliance requirements by providing real-time visibility into access-related events and policy violations. They generate alert records that support audit trails, reduce manual oversight, and demonstrate that physical access is monitored and enforced in accordance with security standards like SOC 2 and ISO 27001.

    • Security Agents are easy to configure within the Kisi dashboard, but some agents require specific hardware to function. For example, door-based agents like Held Open or Forced Open require a Kisi Controller and compatible contact sensors. Once your hardware is in place, you can activate agents, assign them to doors or users, and choose who should receive alerts. Most organizations can begin detecting incidents within days. Contact our security experts for a personalized demo and set up info.

    • Some Security Agents, like Held Open, Forced Open, and Inactive User Removal, are included in all Kisi plans. Other advanced agents may depend on your pricing tier, hardware setup, and use case. Our team is happy to help you understand what’s available in your current plan or explore upgrade options.