The Problem: Machines That No One Is Watching
As enterprises deploy AI agents, cloud microservices, CI/CD pipelines, and automated workflows at scale, a largely invisible security problem has grown alongside them: non-human identities (NHIs). Unlike employees, machines — API tokens, service accounts, certificates, secrets, and keys — often proliferate without systematic oversight. They access sensitive systems with broad permissions, they rotate (or don't), and they rarely appear in the identity governance platforms companies use to manage human users. That gap is now a primary attack surface.
SailPoint's acquisition of Entro Security, announced June 15, 2026, is a direct response to that gap.
The Deal
SailPoint, the Austin-based identity security company, announced its intent to acquire Entro Security — a Tel Aviv-based non-human identity specialist founded in October 2022 by CEO Itzik Alvas and CTO Adam Shriki. The deal is valued at approximately $200 million according to reporting by Calcalist; SailPoint did not officially confirm financial terms. The transaction is expected to close in Q3 of SailPoint's fiscal year 2027.
Entro had previously raised $24 million across seed and Series A funding rounds before this exit.
What Entro Does
Entro's platform addresses NHI security end-to-end. Its discovery engine can identify and monitor more than 1,000 NHI and agent types — including AI agents, service accounts, automated pipelines, and third-party integrations — as well as over 1,200 credential types (API keys, tokens, secrets, certificates, and access keys) across 70+ enterprise technology sources spanning cloud environments, CI/CD pipelines, SaaS applications, and collaboration platforms.
The platform does more than just enumerate what exists. Its proprietary Non-Human Identity Detection and Response (NHIDR™) capability continuously monitors machine identities for behavioral anomalies in real time — unusual access patterns, excessive privilege, dormant credentials still carrying permissions, or credentials that have been silently compromised. Entro's identity lineage mapping traces the relationships between human identities and the machine identities they own or control, showing the full chain from a developer's account to the service keys it has spawned.
This combination of discovery, context, and real-time behavioral detection gives security teams visibility into a class of identity risk that traditional identity governance platforms were never designed to address.
Why SailPoint Is Buying It Now
The acquisition is specifically timed to accelerate SailPoint Agentic Fabric, the company's recently launched platform for securing the complete spectrum of digital identities — human and non-human — in an enterprise environment. As enterprises deploy increasingly autonomous AI agents, the number of machine identities in a typical organization is growing faster than human user counts, yet the governance tooling was built for humans.
SailPoint CEO Mark McClain described the combination as providing "frictionless, complete visibility into every non-human identity" and their associated credentials. Entro CEO Alvas framed it as a chance to "supercharge SailPoint's proven ability to secure every identity, human and non-human, across the global enterprise landscape."
SailPoint's Position in the Market
SailPoint returned to public markets via IPO in early 2025 after several years as a private company under Thoma Bravo. Its Q1 FY2027 results exceeded both revenue and earnings expectations, though forward guidance was read as cautious by analysts, causing recent stock momentum to soften. The Entro acquisition is partly a signal of strategic direction — doubling down on identity governance at precisely the moment when AI-driven enterprise automation is creating a new generation of attack surfaces.
Industry Context
The Entro deal is one of roughly 190 cybersecurity M&A transactions announced through mid-2026, a period of intense consolidation across the identity and access management (IAM) space. The broader dynamic is that the IAM category — long focused on governing which humans can access which systems — is being reshaped by the AI-agent wave, where the most active and privileged entities in an enterprise are increasingly non-human.
For large enterprises running complex cloud-native environments with dozens of integrated SaaS tools and hundreds of automated pipelines, the question of whether any of those machine credentials have been over-provisioned, leaked, or quietly abused is both urgent and, without tooling like Entro, largely unanswerable. The acquisition positions SailPoint to own that conversation as enterprises realize that identity security now extends well beyond the employee directory.
Sources:
