01
Behavioral baselines
Learn normal access patterns per role, so unusual activity stands out from routine work.
Access Anomaly Agent
pegasus · Access Anomaly Agent
governed by CIP
Access Anomaly Agent · HRIS suite
- Connected to Workday, BambooHR, HiBobMerge
- Behavioral baselinesPegasus
- Proactive deviation alertingPegasus
- Explainable risk scoringPegasus
- policyEvery score is explained by the behavior behind it.CIP
doneDeployed with the HRIS suite
Illustrative sampleThe Pegasus impact
The Pegasus Access Anomaly Agent helps security and HRIS teams detect unusual access to their most sensitive data by building behavioral baselines, alerting on deviations and scoring the risk of each one.
Your HRIS holds your most sensitive data: employee records, payroll, benefits and access permissions. Unusual access to it is rarely noticed at the time.
- HRIS platforms supported through Merge
- 60+
- Specialized agents in the HRIS suite
- 6
- To deploy, from connected systems to go-live
- 4 weeks
- Of hypercare after launch
- 30 days
Capabilities
AI does the volume. Humans keep the judgment.
02
Proactive deviation alerting
Separate activity outside the baseline from routine access, and receive it for review.
03
Explainable risk scoring
Score each deviation, so the review queue starts with what matters most.
Systems connected
Connected to the systems you already run.
Works across any HRIS via Merge: Workday, BambooHR, HiBob, Personio, ADP and 60+ more.
- Workday
- BambooHR
- HiBob
- Personio
- ADP
Governance built in
Human-in-the-loop control, with every action audited.
- Every score is explained by the behavior behind it
- Alert thresholds are set by your security team
- CIP audit trail
FAQ
Access Anomaly Agent FAQs
A suite connects to your platforms through Merge's unified APIs. Whether your HRIS is Workday, BambooHR, or HiBob, the same AI agents work identically — because Merge normalizes the data model. You get consistent intelligence regardless of which vendor you chose.
4 weeks. Week 1: Connect your systems. Week 2: Configure agents and workflows. Week 3: Test with real data. Week 4: Go live. 30-day hypercare included after launch.
A one-time deployment fee scoped to the number of agents and complexity, plus a monthly retainer for managed operations. We quote both once we know which agents you need. Works with whatever platforms you have — no additional per-platform fees.
No. The deployment fee is scoped to the number of agents and their complexity, so the scoping call starts from the agents you need. If one workflow is the whole problem, a packaged Pegasus agent piloted on that workflow is the faster start.
Workday's Sana agents work inside Workday. Moveworks supports Workday plus a few other platforms. Pegasus suites work across whatever you have — 60+ HRIS platforms, 40+ ATS platforms, 30+ accounting platforms, 30+ CRM platforms — powered by Merge. When your problem spans your entire platform ecosystem, the suite connects the intelligence across all of it.
Related agents
The other agents in the HRIS suite, and the packaged agents the same team uses.
Additional resources
The HRIS suite
Deep AI agents that handle security diagnostics, access governance, compliance evidence, and onboarding orchestration — across whatever HRIS you run.
200+ platforms through Merge
HRIS, ATS, accounting, CRM, ticketing and file storage, connected during onboarding with no custom integration build.
CIP, the control plane under every agent
Open-source governance: every action audited, every deployment versioned, every decision explainable. MIT-licensed.
Next step
Start running your people operations on Pegasus.
Book a scoping call and we'll map your HRIS platforms, the agents you need, and the timeline.