SailPoint Acquires Entro Security to Strengthen Automated Machine Identity and Credential Lifecycle Management
TL;DR
- SailPoint acquires Entro Security to secure non-human identities and machine credentials.
- The deal addresses security gaps caused by the rise of AI agents.
- Entro’s tech enables agentless discovery of over 1,000 non-human identity types.
- Integrated features will enhance SailPoint’s Agentic Fabric and credential lineage mapping.
- Entro’s tools are now available as a standalone offering for SailPoint customers.
SailPoint has officially crossed the finish line on its acquisition of Tel Aviv-based Entro Security. Finalized on June 29, 2026, the deal is a calculated bet on a future where non-human identities (NHI)—those silent, automated workers—need just as much supervision as the people sitting at their desks. By folding Entro’s specialized tech into the SailPoint identity security platform, the company is aiming to plug the massive security gaps left by the explosion of AI agents and cloud-native workflows.
The core of this move is about upgrading SailPoint’s Agentic Fabric framework. As companies lean harder into autonomous systems, the corporate network has become crowded with invisible entities. Traditional identity governance was built for humans with usernames and passwords, not for thousands of API keys, tokens, and service accounts running wild in the cloud. SailPoint is now looking to bring some order to that chaos.
The Non-Human Identity Problem
We’ve reached a point where the sheer volume of machine identities has eclipsed the human workforce. Every time a developer spins up a cloud service or an AI agent triggers a process, a new credential is born. According to industry reporting on the acquisition, Entro’s tech can perform agentless discovery on over 1,000 types of non-human identities and 1,200 types of granular credentials.
That’s a staggering amount of "shadow" access. Most organizations don’t even know these credentials exist, let alone who owns them or what they’re doing. By baking Non-Human Identity Detection and Response (NHIDR™) into the SailPoint ecosystem, the goal is to map the lineage of these identities. If you can’t link a machine identity back to a human owner, you’re just guessing at security. This acquisition aims to turn that guesswork into verifiable accountability.
Strategic Integration and Technological Capabilities
This isn’t just a "buy and bury" move. Entro co-founders Itzik Alvas and Adam Cheriki are joining the SailPoint ranks to steer the integration. With the ink dry, SailPoint has confirmed that Entro’s tools are already hitting the market as a standalone offering for current customers.
The technical heavy lifting provided by Entro is summarized below:
| Feature | Functionality |
|---|---|
| Agentless Discovery | Maps 1,000+ non-human identity types across cloud environments. |
| Credential Mapping | Detects and secures 1,200+ granular credential and token types. |
| Lineage Mapping | Ties machine identities to human owners for clear accountability. |
| NHIDR™ | Provides real-time detection and response for automated threats. |
Securing the Age of Agentic AI
The real pressure point here is the rise of "agentic identities." These aren't just static service accounts; they are autonomous AI agents capable of making decisions, accessing sensitive data, and executing complex tasks. As noted in financial coverage of the transaction, organizations are waking up to the reality that these agents represent a massive, unmanaged attack surface.
If an AI agent is provisioned, used, and then forgotten, its credentials remain a wide-open door for attackers. SailPoint’s strategy is to create a unified governance layer that treats these agents like any other user. By monitoring the credential lifecycle—from birth to decommissioning—they’re trying to ensure that security policies aren’t bypassed just because the "user" happens to be a piece of code. The ability to map the lineage of these agents is the secret sauce here; it gives security teams the context they need to spot an anomaly before it turns into a breach.
What This Means for Security Operations
For the teams in the trenches, this integration is designed to solve four persistent headaches:
- Visibility: Shining a light on "shadow" identities hidden deep within codebases and cloud configs.
- Governance: Forcing accountability by tethering every machine identity to a specific human or business process.
- Threat Response: Using NHIDR™ to catch behavioral anomalies before they spiral.
- Lifecycle Management: Automating the rotation and revocation of secrets to stop the "forever-valid" credential problem.
Credential-based attacks are the go-to move for attackers looking to move laterally through a cloud environment. By automating the discovery and management of these secrets, SailPoint is effectively trying to shrink the attack surface. It’s a shift in philosophy: machine identities can no longer be treated as second-class citizens in the identity ecosystem.
As the industry continues to grapple with the rapid-fire evolution of AI, the ability to govern non-human identities is shifting from a "nice-to-have" to a fundamental requirement. By bringing Entro into the fold, SailPoint is signaling that the future of identity security isn't just about managing people—it’s about managing the entire digital workforce, whether they have a pulse or not. The Agentic Fabric is clearly the centerpiece of their roadmap, and with these new capabilities, they’re betting that the market is ready for a more rigorous, automated approach to governance.
