# Authentication for AI agents and the people behind them.

> Hawcx ties each AI agent to a verified person and checks every tool call against its ceiling. People sign in with no password to phish.

Markdown version of <https://www.hawcx.com/>. Last updated 2026-10-07.

Hawcx roots every AI agent in a verified person and checks each tool call before it runs. Your customers and employees sign in without a password.

## [AI agent authentication](https://www.hawcx.com/ai-agents)

Every tool call checked before it runs.

## [Passwordless authentication](https://www.hawcx.com/passwordless)

Sign in with a biometric or device PIN.

## Two products, one identity layer.

### AI agent authentication

Every agent action is checked against the person it works for, before it runs.

### Passwordless authentication

Phishing-resistant sign-in with a key that never leaves the device.

## Every agent tied to a person. Every call checked.

Hawcx gives each AI agent an identity rooted in the employee it works for, checks every tool call against that person’s ceiling before it runs, and keeps a record of every attempt.

### Identity rooted in a person

Each agent acts for a verified employee, with a new credential for every call.

### Checked against a ceiling

Every tool call is allowed, held, rejected or denied before it runs.

### Approvals

Sensitive actions wait for a named person.

### Audit

Every attempt is recorded, with the person behind it.

### Stop any agent

Stop one agent, or every agent a person owns, from one place.

## Sign-in without passwords. For customers and employees.

People sign in with a biometric or device PIN, using a key that never leaves their device. There’s nothing to phish, reset or leak.

### Phishing-resistant

A key only works on the site it was made for. Lookalike sites get nothing.

### Drop-in SDKs

Six SDKs and a WordPress plugin, for the apps you already have.

### Device-bound keys

Keys are made on the device and never leave it.

### Workforce SSO

Passwordless SAML sign-in for your employees’ apps.

### Nothing to reset

No passwords to reuse, reset or leak.

## Built for your security review

Everything your reviewers need to approve Hawcx, and a team that stays with you after launch.

1. **Security review**: The SOC 2 Type II report, architecture and data-flow documents your reviewers ask for.
2. **Deployment**: Run Hawcx in your cloud or ours, next to the identity provider you already use.
3. **Ongoing support**: A named technical contact, with response times written into your order form.