01
Natural-language troubleshooting
Ask the question the way a manager would, and receive the roles, groups and policies that decide the answer.
Security Diagnostic Agent
pegasus · Security Diagnostic Agent
governed by CIP
Security Diagnostic Agent · HRIS suite
- Connected to Workday, BambooHR, HiBobMerge
- Natural-language troubleshootingPegasus
- Automated permission tracingPegasus
- Explainable, evidenced answersPegasus
- policyEvery question and answer is logged.CIP
doneDeployed with the HRIS suite
Illustrative sampleThe Pegasus impact
The Pegasus Security Diagnostic Agent helps HRIS and security administrators resolve access issues without hours of manual tracing by answering questions in natural language, such as “Why can't Maria access the payroll report?”, and tracing the roles and permissions behind the answer across whichever HRIS you run.
Security troubleshooting in an HRIS takes hours. Someone has to trace roles, groups and policies by hand to explain why one person cannot open one report.
- HRIS platforms supported through Merge
- 60+
- Specialized agents in the HRIS suite
- 6
- To deploy, from connected systems to go-live
- 4 weeks
- Of hypercare after launch
- 30 days
Capabilities
AI does the volume. Humans keep the judgment.
02
Automated permission tracing
Compare the access a person has with what the report or task requires, and see the gap.
03
Explainable, evidenced answers
Receive each diagnosis logged with what it read, so the fix can be reviewed before anyone changes access.
Systems connected
Connected to the systems you already run.
Works across any HRIS via Merge: Workday, BambooHR, HiBob, Personio, ADP and 60+ more.
- Workday
- BambooHR
- HiBob
- Personio
- ADP
Governance built in
Human-in-the-loop control, with every action audited.
- Every question and answer is logged
- Access changes stay with your administrators
- CIP audit trail
FAQ
Security Diagnostic Agent FAQs
A suite connects to your platforms through Merge's unified APIs. Whether your HRIS is Workday, BambooHR, or HiBob, the same AI agents work identically — because Merge normalizes the data model. You get consistent intelligence regardless of which vendor you chose.
4 weeks. Week 1: Connect your systems. Week 2: Configure agents and workflows. Week 3: Test with real data. Week 4: Go live. 30-day hypercare included after launch.
A one-time deployment fee scoped to the number of agents and complexity, plus a monthly retainer for managed operations. We quote both once we know which agents you need. Works with whatever platforms you have — no additional per-platform fees.
No. The deployment fee is scoped to the number of agents and their complexity, so the scoping call starts from the agents you need. If one workflow is the whole problem, a packaged Pegasus agent piloted on that workflow is the faster start.
Workday's Sana agents work inside Workday. Moveworks supports Workday plus a few other platforms. Pegasus suites work across whatever you have — 60+ HRIS platforms, 40+ ATS platforms, 30+ accounting platforms, 30+ CRM platforms — powered by Merge. When your problem spans your entire platform ecosystem, the suite connects the intelligence across all of it.
Related agents
The other agents in the HRIS suite, and the packaged agents the same team uses.
Additional resources
The HRIS suite
Deep AI agents that handle security diagnostics, access governance, compliance evidence, and onboarding orchestration — across whatever HRIS you run.
200+ platforms through Merge
HRIS, ATS, accounting, CRM, ticketing and file storage, connected during onboarding with no custom integration build.
CIP, the control plane under every agent
Open-source governance: every action audited, every deployment versioned, every decision explainable. MIT-licensed.
Next step
Start running your people operations on Pegasus.
Book a scoping call and we'll map your HRIS platforms, the agents you need, and the timeline.