Valid credentials
The password was right
Reused passwords from old breaches let attackers log in as the customer. A login that passes every check can still be the wrong person.
BetaTrust and Identity squad
Nova Sentinel — Lead AI Zero Trust Security Architect
AI zero trust for every session and payment
Nova Sentinel — Lead AI Zero Trust Security ArchitectNova Sentinel is an AI agent that gives every login, session and payment request a trust score before the transaction is decided. She checks device, location, impossible travel and reused credentials against what's normal for that customer. Low-trust sessions go to your fraud team, or to step-up authentication if you've set that rule.
Nova Sentinel
Session #77104 scored
IllustrativeFlagged for review
Trust score 0.22 · low
Flag explained
“New device, impossible travel since last login, password found in breach data.”
Job description
What Nova Sentinel does Job description
Nova Sentinel is a Lead AI Zero Trust Security Architect. She sits between your authentication layer and your payment flow, scores the trust of each session and request, and passes that score to your fraud checks before money moves.
AI AGENT · TRUST AND IDENTITY SQUADBeta
NOVA SENTINEL
Lead AI Zero Trust Security Architect
REPORTS TO
Your Head of Fraud or CISO
WORKS WITH
Your identity provider, mobile and web apps, and payment systems
DEPLOYED
Shadow mode first, then the autonomy you set
KEY RESPONSIBILITIES
01Score the trust of every login, session and sensitive request against device, location, network and the customer's history
02Detect impossible travel, new devices and credentials found in known breach data
03Re-score the session when something changes, such as a new payee or a changed phone number
04Pass the trust score and its reasons to fraud scoring before a payment is decided
05Recommend step-up authentication or send the session to an analyst, by the rules you set
AUTONOMY MODEL
LOWMEDIUMHIGH
Low risk
Can let the session continue, if you allow it
Medium risk
Goes to an analyst by default
High risk
Always goes to an analyst
You set the threshold per rule.
Kill switch: Turn Nova off at any time
Options
How the options compare
| CRITERIA | Static MFA rules | Standalone device fingerprinting | Nova Sentinel |
|---|---|---|---|
| Time to first results | Already in place | Integration and tuning | Shadow mode on your live sessions |
| Who decides | Fixed rule at login | Vendor score, then your rule | Analyst, inside trust bands you set |
| Why a session was trusted | Passed MFA once | Device risk score | Plain-English reason with the signals behind it |
| Checks after login | No | Sometimes | Re-scores on new payees and profile changes |
| Shares with fraud scoring | No | Through custom integration | Yes, before a payment is decided |
| Where it's weaker | Social engineering gets past a one-time code | Sees the device, not the customer's history | Needs good device and location data, and a shadow period to tune step-up rates |
Works best with
AI agents that work best with Nova Sentinel
Nova's score gets sharper when other agents add what she can't see on her own.
THREAT
Aiden Flux
Senior AI Fraud Risk Analyst
Uses Nova's session trust score as an input when he scores the payment.
Meet AidenTRUST AND IDENTITY
Cian Gatekeeper
Lead AI Customer Identity Director
Gives Nova one identity record per customer across app, web, branch and API.
Meet CianTRUST AND IDENTITY
Iris Verma
Senior AI Identity Verification Specialist
Runs document and liveness checks when a low-trust session needs the customer to prove who they are.
Meet Iris
Thoughts that matter
Insights on AI agents, financial crime and compliance
What we're learning about AML, fraud and the evidence examiners ask for.
Best AML Software in 2026: An Honest Comparison for Banks and Fintechs
Read More
goAML Registration and STR Filing in the UAE: A Step-by-Step Guide for Reporting Entities
Read More
Transaction Monitoring Software: UAE Acceptance Checklist
Read More
PEP and Sanctions Screening: What the MLRO Owns
Read More
Session Risk Scoring: Continuous Authentication for Banks
Read More
Impossible Travel Detection in Banking: How It Works
Read More
Questions? We Have Answers
-1.svg)
Frequently Asked Questions
Still have questions?
Talk to the people who build the agents. We'll answer per capability, yes or no.
It stops a bank from trusting a session just because the login passed. Nova Sentinel scores each session and sensitive request against device, location, impossible travel and reused credentials, then passes that score to fraud checks before a payment is decided. Your team sets what happens at each trust level.
Nova scores and recommends. Your rules decide whether a medium-risk session goes to step-up authentication or an analyst, and high-risk sessions always reach a person. A kill switch turns Nova off without touching your login flow.
MFA checks the customer once at login. Nova keeps scoring through the session, so a new payee or a changed phone number after login still counts. MFA stays in place, and Nova's score can tell you when to ask for it again.
Nova scores your live sessions and records her reasons, but nothing is challenged or stopped. Your current controls keep working, and you compare Nova's scores with your confirmed takeover cases. You decide whether, and where, to switch on any autonomy afterwards.
Login and session events with timestamps, customer identifiers, device data, IP address and location. Payee changes and profile updates help her re-score mid-session. Confirmed takeover cases help tune the trust bands.
No. Nova reads events from your identity provider and apps and adds a trust score. Your authentication, MFA and login flow stay as they are.
FluxForce runs as SaaS, on-premise or hybrid, built on Microsoft Azure. We agree data residency and which components run inside your environment during deployment design, before any data moves.