Identity Giants Consolidate AI Security Market with Wave of Acquisitions

Between April 2025 and August 2026, several large identity and security platforms acquired startups that specialize in securing AI agents and non-human identities. The deals led to a surge in agent security acquisitions, with 30 transactions recorded since 2024, including 14 announced in 2026 alone.

Cisco bought Astrix Security for $400 million, while SailPoint purchased Entro Security for about $122.6 million in cash. Okta acquired Permiso Security and Cyera bought Oasis Security, valued at $1 billion. Palo Alto Networks closed its $21.1 billion purchase of CyberArk, the largest transaction in the ledger.

The acquisitions have significant implications for security buyers. The identity market has seen this trend before, with capabilities like multi-factor authentication starting as separate purchases and eventually becoming features within identity platforms. Agent identity is following a similar path, with vendors now offering NHI and agent capabilities inside their platforms.

Before buying a standalone tool, it's essential to check if your current identity vendor already ships these features. The acquisitions also introduce roadmap risk, as acquired products' roadmaps follow the parent's platform strategy. Integrations with rival identity providers or SIEM tend to lose priority.