SailPoint completes Entro Security buy to govern agentic identities
SailPoint has completed its acquisition of Entro Security, a Tel Aviv-based specialist in non-human identity (NHI) and credentials security. The Nasdaq-listed identity governance vendor said Entro's solutions are immediately available to SailPoint customers as standalone offerings, while native integration into the broader SailPoint platform continues in the background. Financial terms were not disclosed.
The deal closes a capability gap that has grown rapidly as organisations deploy AI agents and automated workflows at scale. SailPoint says non-human identities now outnumber human ones across enterprise environments, creating a large and poorly governed attack surface centred on machine credentials, API tokens, service accounts and secrets buried inside developer toolchains.
What Entro brings
Entro's technology centres on discovery and runtime security for secrets stored in CI/CD pipelines, codebases and container registries. The company's platform is said to recognise more than 1,200 types of granular credentials, tokens and certificates. Its NHIDR capability monitors token behaviour in real time, flags anomalies, and intercepts what the company describes as malicious AI tool calls, including prompt-injection-style threats.
Combined with SailPoint's existing Agentic Fabric product, which maps the relationships between human users, entitlements, machines and AI agents into a unified identity graph, the pairing is intended to give security teams two complementary views: broad human-accountability governance on one side and highly specific credential-lineage tracking on the other.
Mark McClain, CEO and founder of SailPoint, framed the rationale in terms of the shift toward autonomous AI workloads. "By officially bringing Entro into the SailPoint platform today, we are closing the AI governance gap," he said. "We aren't just giving organisations another telemetry dashboard; we are delivering a real-time, unified control plane to govern, secure, and manage the lifecycle of every single identity, human, machine, or AI agent, across their global digital footprint."
Entro's co-founders Itzik Alvas and Adam Cheriki will join SailPoint's technology organisation and lead continued development of the integrated product.
Market and competitive context
The NHI security category has attracted significant attention over the past eighteen months as agentic AI architectures move from pilot to production. A number of well-funded startups, including Astrix Security and Clutch Security, are pursuing overlapping approaches to machine-credential discovery and governance. Established identity providers such as CyberArk and BeyondTrust compete on privileged access management, which overlaps closely with secrets governance. SailPoint's acquisition signals a view that broad identity governance platforms, rather than point solutions, will become the consolidation layer for this category.
The acquisition also arrives as regulators are paying closer attention to AI system controls. The EU AI Act's obligations for general-purpose AI systems and high-risk applications include requirements for human oversight and auditability. Unified governance tooling that ties human accounts to the AI agents they authorise could help organisations demonstrate compliance, though SailPoint has not yet mapped its combined platform against specific regulatory frameworks.
SailPoint will demonstrate the combined capabilities at Black Hat (Booth 5639) and Ai4 (Booth 410). Investors and customers will be watching for a timeline on native platform integration, published benchmark data for the NHIDR detection engine, and named enterprise references that can validate the combined product in production environments.