SECURITY

SailPoint acquires AI agent security startup Entro for reported $200M

SailPoint Technologies Inc. is acquiring Entro Security Ltd., a startup that helps enterprises secure their artificial intelligence agents.

The companies announced the deal today without disclosing the financial terms. CTech reported that the transaction is worth about $200 million.

Nasdaq-listed SailPoint sells a platform that companies use to regulate employee access to their applications. The software can rotate passwords, remove risky account permissions and perform related tasks. In March, SailPoint launched a product called Agentic Fabric that extends companies’ access controls to AI agents. The acquisition of Entro will help it enhance the offering.

Tel Aviv-based Entro raised about $24 million prior to the acquisition. Its namesake software platform can automatically create an inventory of the AI agents in a company’s network. It creates a graph that shows how workers interact with each agent. The platform can, for example, flag that an agent should be deleted because it hasn’t been accessed for over 90 days.

AI agents use access credentials such as application programming interface tokens to interact with external services. According to Entro, its platform identifies credentials that are stored in an insecure manner. The software also displays related information such as how an access token was created and which services it unlocks.

Entro uses the data that it collects to create a baseline model of each agent’s activity patterns. When an agent displays unusual behavior that might indicate a breach, the platform notifies administrators. The alert that Entro generates includes a natural language description of the incident and the services that it affects. For example, the platform might inform administrators that an agent attempted to download files from a database it never accessed before.

Entro generates remediation suggestions for the risks that it finds. A dropdown menu enables users to apply one of the recommended mitigations with a few clicks. Workers can rotate the credential used by a potentially malicious agent, notify administrators and sync incident data to external tools.

The technology will enable SailPoint to broaden the range of AI workloads that its Agentic Fabric product can secure. “This accelerates our native reach, bringing out-of-the-box coverage for over 1,000 NHI and agent types, plus the discovery of over 1,200 non-human identity types — such as keys, tokens, certificates and credentials,” SailPoint Chief Marketing Officer Wendy Wu wrote in a blog post.

Entro’s AI agent monitoring features will also be embedded into Agentic Fabric. The integration will enable the platform to automatically mitigate risks such as application accounts that give AI agents overly broad access to sensitive data.

SailPoint expects to close the acquisition in the third quarter.

Image: Entro