What Act is
Act maps attack paths across identities (AI, NHI, and human), applications, network and cloud resources and enables teams to properly scope access and isolate resources. The vendor site is act.security. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Act covers
Act is in the catalog for these capabilities. Categories: CSPM, Identity, and IaC. Technologies covered: AI and Cloud. Catalog tags: Trending and Hot Right Now.
How to evaluate Act in a security program
Use Act as a stack candidate, not as diligence evidence. The oneNorma score for Act is 6.5/10 (percentile 94). If the real gap is in CSPM, Identity, and IaC, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what act.security publishes. Contrast it with pentesting and Security Cloud & Compliance.