← Keycard
Keycard role-play cheat sheet
For the mock cold call at the end of most SDR interviews.
What they sell, in one line
Gives AI agents their own verified identity and short-lived, limited permissions so they only do what they're asked.
Who you'd be calling
CISO, Head of Security, VP Engineering, platform leads at large companies building AI agents.
Your opener
“Hi {name}, this is {me} from Keycard. I'm calling because teams rolling out AI agents are running into access and security questions, do you have a quick minute?”
Problems you solve for them
- AI agents using shared, long-lived passwords or API keys
- No clear record of what an agent did and on whose behalf
- Hard to limit what an agent can access to just the task at hand
Discovery questions to ask
- Are any teams here building or testing AI agents that connect to internal systems?
- How do those agents log in to other tools today?
- If an agent did something it shouldn't, how would you trace it back?
Objections they'll throw at you
“I'm busy right now.”
→ Understood, I'll be brief. Can I grab five minutes later this week to ask how your team handles agent access?
“Not interested.”
→ Fair enough. Is it that AI agents aren't on your roadmap yet, or that access is already covered?
“We already use Okta or our current identity tools.”
→ Good, those are great for people. Agents act differently and change fast, so have you looked at how your current tools handle them?
“Send me an email.”
→ Sure thing. Who on your team owns AI agent security, so I send it to the right person?
Interview tips for this company
- Learn the basics: identity, access, credentials, and why AI agents make them harder.
- You don't need to be technical, but practice explaining 'short-lived, task-scoped access' in plain words.
Written from public information about Keycard to help you practice. Ask an insider what their role play looked like; it's the best prep there is.