SailPoint to acquire Entro to bolster non-human identity security

SailPoint has announced its intent to acquire Entro, a Tel Aviv-based specialist in non-human identity (NHI) and credentials security. The Nasdaq-listed identity security vendor said the deal, expected to close in the third quarter of fiscal year 2027, will accelerate its recently launched Agentic Fabric platform and extend its reach to cover the credentials and machine identities underpinning autonomous AI agents.

No financial terms were disclosed. The transaction remains subject to customary closing conditions.

What Entro brings to the platform

The acquisition is primarily a technology play. Entro's platform offers agentless discovery of more than 1,000 NHI and AI agent types, and the ability to surface over 1,200 distinct credential types, including API keys, secrets, tokens and certificates, across more than 70 enterprise sources. Those sources span cloud environments, CI/CD pipelines, developer toolchains, and SaaS collaboration platforms.

SailPoint intends to integrate three specific Entro capabilities into Agentic Fabric. The first is credentials discovery, giving customers visibility into the tools and API access that AI agents use at runtime. The second is lineage mapping, which ties non-human identities back to human owners for accountability and enables what SailPoint describes as closed-loop, automated remediation. The third is Entro's proprietary Non-Human Identity Detection and Response capability, branded NHIDR, which monitors agent and machine-identity behaviour in real time and flags anomalous access patterns.

Mark McClain, chief executive and founder of SailPoint, said the combination would give customers "frictionless, complete visibility into every non-human identity and, crucially, the context and credentials they use to access critical corporate data."

Market context and competitive positioning

The NHI security category has emerged rapidly as enterprises deploy AI agents, service accounts and automated workflows at scale. Machine identities are estimated by several industry analysts to already outnumber human identities in large enterprises by a wide margin, and each carries its own access privileges and credential chain. The attack surface this creates, particularly around long-lived secrets and over-privileged service accounts, has become a priority for security teams.

SailPoint competes in this space against CyberArk, which has been extending its privileged-access management platform into machine-identity territory, and against a cluster of NHI-focused startups including Clutch Security and Astrix Security. Microsoft's Entra suite also addresses service-principal governance within Azure environments. By acquiring Entro rather than building NHI discovery natively, SailPoint accelerates time-to-market and adds a specialist credential-intelligence layer that would have taken considerably longer to replicate organically.

The integration of Entro's capabilities is also well-timed with respect to the broader regulatory landscape. The EU AI Act's obligations around transparency and auditability for AI systems in high-risk categories implicitly require organisations to know which agents are running, what data they access, and under whose authority. Identity governance is becoming a compliance requirement, not merely an operational preference. Similarly, frameworks such as NIST SP 800-207 on zero-trust architecture and emerging guidance from the UK NCSC on securing AI workloads all point toward the kind of least-privilege, continuous-monitoring posture that SailPoint is positioning Agentic Fabric to provide.

Itzik Alvas, co-founder and chief executive of Entro, said the company was built with a mission to secure the modern cloud by discovering and protecting the volume of credentials and non-human identities powering it, and described the combination as a way to "supercharge SailPoint's proven ability to secure every identity, human and non-human, across the global enterprise landscape."

SailPoint will need to demonstrate seamless integration with Entro's discovery engine and a clear migration path for existing Entro customers. Investors and enterprise buyers will be watching for a combined product roadmap, named reference customers, and confirmed pricing when the deal closes.