SailPoint to buy Entro in AI identity security push

SailPoint plans to acquire Entro, adding the company's non-human identity and credentials security technology to its platform.

The proposed deal targets a fast-growing area of cyber security as companies deploy more AI agents, automated workflows and machine identities across cloud systems.

Based in Tel Aviv, Entro focuses on discovering and securing non-human identities, including the credentials those systems use to access data and services. The addition is intended to expand SailPoint's recently launched Agentic Fabric, a framework for governing autonomous AI agents and machine identities.

The acquisition addresses a security area drawing increasing attention from corporate technology teams. As businesses add software agents, service accounts, APIs, tokens and certificates across development and production environments, security teams must manage a widening set of identities outside the traditional workforce identity model.

Entro would expand the visibility SailPoint can offer customers into those identities and their associated credentials. Its technology covers more than 1,000 non-human identity and agent types and can discover more than 1,200 credential types across more than 70 enterprise sources, including cloud platforms, developer tools, CI/CD pipelines and software-as-a-service environments.

Deal rationale

The transaction is intended to strengthen SailPoint's position in three areas: discovery of non-human identities, attribution of ownership to human users, and monitoring of activity linked to those accounts and credentials.

One of the central challenges in this market is not just finding machine identities, but understanding who is responsible for them and what level of access they hold. Companies often struggle to map service accounts, secrets, keys and tokens back to individual owners or teams, especially in large cloud estates where assets are created and retired rapidly.

Entro's lineage mapping and metadata tools are expected to help connect discovered non-human identities to human owners, while also showing permissions, usage and potential exposure. That information could then be tied to SailPoint's broader identity governance tools, including certification and lifecycle controls.

Another focus is ongoing monitoring. Entro adds detection and response features designed to watch for unusual behaviour by AI agents and machine identities in real time, with the aim of identifying excessive privileges and reducing the risk of misuse.

Mark McClain, Chief Executive Officer and Founder of SailPoint, outlined how the company sees the fit between the two platforms.

"The recent launch of our Agentic Fabric established a new paradigm for securing autonomous AI agents and non-human identities at scale, including native discovery, governance and protection. By bringing Entro's powerful and complimentary technology into our SailPoint platform, we will be giving our customers an even bigger advantage: frictionless, complete visibility into every non-human identity and-crucially-the context and credentials they use to access critical corporate data," said McClain.

AI security shift

The proposed acquisition reflects a broader shift in security priorities as AI systems move from experimental tools to operational software inside large organisations. Unlike human users, non-human identities can exist in vast numbers and be distributed across infrastructure, applications, development pipelines and third-party services.

That growth has made machine identity governance a more prominent concern for boards, security leaders and regulators. Mismanaged tokens, exposed secrets and over-privileged service accounts have become recurring factors in data breaches and cloud intrusions.

For identity security vendors, the rise of AI agents adds another layer. These systems may access data, invoke tools and perform tasks autonomously, increasing pressure for stronger controls over what they can reach, how long access lasts and how activity is logged.

Entro Co-Founder and Chief Executive Officer Itzik Alvas said the company was founded to address that expanding attack surface.

"We built Entro with a clear mission: to secure the modern cloud by discovering and protecting the sheer volume of credentials and non-human identities powering it. As enterprises embrace more automation and agentic workloads, this massive identity layer is only becoming more critical to protect. We are excited to integrate our deep, seamless discovery and lineage mapping engine into SailPoint's comprehensive identity security framework and Agentic Fabric. I believe that together, our combined non-human and AI capabilities will supercharge SailPoint's proven ability to secure every identity, human and non-human, across the global enterprise landscape," said Alvas.

Closing timeline

The transaction remains subject to customary closing conditions. SailPoint expects it to close in the third quarter of its fiscal year 2027.

No financial terms were disclosed.

If completed, the acquisition would give SailPoint a deeper presence in a cyber security segment where vendors are racing to address the spread of autonomous systems, machine accounts and cloud credentials. Entro's capabilities in credential discovery, ownership tracing and behavioural monitoring have become increasingly relevant as enterprises seek to control access beyond the human workforce.

Its technology is also expected to help customers identify the tools, APIs and credentials used by AI agents and machine identities across enterprise environments.