Entro Security is a non-human identity (NHI) and secrets security company whose product is now sold as SailPoint Entro. It is for security and identity teams that have lost track of the service accounts, API keys, tokens, secrets and AI agents spread across their cloud, SaaS and development environments.
The problem is sprawl: machine credentials pile up faster than anyone can review them, and each forgotten one is a way in for an attacker.
At A Glance
| Vendor | Entro Security, sold as SailPoint Entro |
|---|---|
| Category | NHI security, secrets security, AI agent security |
| Identities covered | Service accounts, API keys, tokens, secrets, bots, RPA identities, AI agents, MCP servers |
| Deployment | Agentless, out-of-band control plane |
| Agentic AI | AI agent and MCP server inventory, Agentic Access Administration, agent intent monitoring |
| Customers | Booking, SolarWinds, Elastic, KAYAK, Regatta |
| Ownership | SailPoint (acquisition announced June 2026) |
| Market classification | NHI Platforms & Machine Identity; also Secrets Management |
What Entro Security Does
Machine credentials now drastically outnumber human users, yet they rarely have an owner, a review cycle or anyone watching how they are used. Entro brings them under the same discipline as human access, in three stages: discover what exists, govern it through an accountable owner, and protect it by watching how it is used. When a key leaks, the team can then see who owns it and what it can reach before deciding how to respond. Within SailPoint, Entro extends SailPoint Agentic Fabric so that human and non-human identities can be governed in one platform.
Products
NHI And Secrets Discovery
Discovery answers the first question most teams cannot: what machine identities exist, and which secrets are still live. It recognises more than 1,200 NHI types, checks whether each discovered secret is active, and maps the lineage and “shadow admin blast radius” of every identity, so a team can see how much damage a single leaked credential could do. Scanning covers code repositories, cloud environments and CI/CD pipelines, and a Slack DLP feature catches secrets pasted into messages.
NHI Governance
Governance gives each bot, service account and AI agent a named human owner, with succession planning when that person changes role or leaves. Policy-driven lifecycle controls follow an identity from creation to retirement, orphaned accounts and excessive permissions are removed, and zero standing privilege is supported. Non-human identities join the same access reviews, audits and offboarding workflows as people.
NHIDR
NHIDR is for security operations teams that need to know when a machine identity starts behaving oddly. It continuously monitors behaviour for anomalies such as bulk downloads or access from unusual locations, and responds to active NHI threats.
AI Agent Security
AI agent security applies the same discover, govern and protect model to agents and the AI tools employees use.
| Agent discovery | An inventory of agents and MCP servers, including shadow AI agents and their credentials, each mapped to an owner and to the data it can reach |
|---|---|
| Agentic Access Administration | Manages agent permissions and policies, with continuous permission analysis and Just-In-Time access |
| Monitoring | Tracks AI prompt sessions, monitors agent intent and detects behavioural anomalies |
| AI tool control | Finds unapproved AI tools, redirects users to approved alternatives and responds to unapproved uploads |
How It Works
SailPoint Entro runs as an agentless, out-of-band control plane: it connects to the environments where identities live rather than sitting in the path of their traffic. From there it brings discovery, governance and detection and response together, raising alerts and triggering automated remediation from the same control plane.
| Component | What it does |
|---|---|
| Discovery scope | Inventory spans cloud, SaaS, SDLC and endpoints, including complex DevOps pipelines, cloud providers and SaaS platforms. |
| SailPoint platform | Entro feeds SailPoint Agentic Fabric, where non-human identities sit alongside employees, contractors and non-employees. |
Identities And Systems Covered
| Non-human identities | Service accounts, API keys, tokens, bots and Robotic Process Automation (RPA) identities |
|---|---|
| Secrets | Secrets in code repositories, cloud environments, CI/CD pipelines and Slack messages |
| AI agents | Shadow AI agents, MCP servers and agent credentials across cloud environments and endpoints |
| AI tools | Prompt sessions in Claude, Cursor and Gemini |
| Human owners | Employees, contractors and non-employees who own NHIs |
| Environments | Cloud, SaaS, SDLC and endpoints |
Company Background
| Founders | Itzik Alvas (co-founder and CEO) and Adam Cheriki (co-founder and CTO) |
|---|---|
| Headquarters | Boston, United States |
| Funding | An $18 million Series A led by Dell Technologies Capital in June 2024, after a $6 million seed round led by StageOne Ventures and Hyperwise Ventures, for a reported $24 million raised since leaving stealth in May 2023 |
| Acquisition | SailPoint announced on 15 June 2026 that it intends to acquire Entro |
Note: This overview is compiled from Entro Security’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.