# SailPoint Acquires Entro for $200M, Doubling Down on Non-Human Identity Security
Identity governance powerhouse SailPoint has announced its agreement to acquire Entro, an Israeli specialist in non-human identity and credential security, in a transaction valued at approximately $200 million. The move signals intensifying enterprise demand for AI and machine identity protection as organizations grapple with rapidly proliferating automated agents and service accounts across their infrastructure.
## The Deal and Strategic Rationale
SailPoint's acquisition of Entro represents a significant expansion of the company's capabilities into one of the fastest-growing segments of cybersecurity: non-human identity (NHI) and credential management. While SailPoint has long dominated the human identity governance space—helping enterprises manage access, permissions, and lifecycle management for employees and contractors—the explosive growth of artificial intelligence, automation, and API-driven infrastructure has left a critical gap.
Entro, founded and headquartered in Israel, raised a total of $24 million across seed and Series A funding rounds before this acquisition, validating market interest in dedicated NHI solutions. The company's technology enables:
The acquisition will integrate Entro's capabilities directly into SailPoint's Agentic Fabric, a platform designed to secure AI agents and autonomous systems within enterprise environments.
## Background: The Non-Human Identity Crisis
For decades, identity governance focused almost exclusively on *human* users: employees, contractors, and external partners. But the modern enterprise has fundamentally changed.
Current infrastructure reality:
Unlike humans, who request access, authenticate, and theoretically follow security policies, machine identities operate autonomously. A compromised API key or a privileged service account can grant attackers persistent, difficult-to-detect access. A malicious AI agent, once deployed, can consume credentials and pivot through infrastructure faster than any human attacker.
The scope of the problem:
Recent industry reports suggest the average enterprise has over 10,000 machine identities—often outnumbering human users by a factor of 5:1 or more. Yet most organizations lack visibility into what these identities do, what permissions they hold, or whether they've been compromised.
## SailPoint's Market Position and Momentum
SailPoint returned to public markets via IPO in early 2025 after being taken private by Silver Lake Partners in 2021. The company has rebuilt investor confidence in the identity governance category, with stock momentum reaching peaks in May 2026. However, shares have trended downward in recent weeks following the company's Q1 FY2027 earnings report.
While the earnings beat both revenue and adjusted earnings expectations, forward guidance disappointed investors, arriving at the conservative end of market estimates. The Entro acquisition appears designed to address investor concerns about future growth drivers—particularly in the emerging AI and automation segments where SailPoint's existing platform is less mature.
The timing reflects broader market dynamics: identity governance is shifting from a compliance-driven, human-centric discipline to a *security-critical* one that must handle increasingly complex threat surfaces dominated by non-human actors.
## The Entro Technology: What SailPoint Is Acquiring
Entro's core strength lies in secrets discovery and lineage mapping—two critical capabilities that existing identity governance platforms historically underserved.
Secrets Discovery involves scanning code repositories, container images, cloud configurations, and logs to identify exposed credentials before attackers find them. Tools like git-secrets and Truffles catch some exposure; Entro's technology provides enterprise-grade scanning at scale, particularly valuable for organizations running hundreds of microservices.
Lineage mapping is more sophisticated: it answers the question "If this service account is compromised, what can an attacker reach?" By connecting machine identities to the systems they access, the data they can read, and the processes they control, Entro enables security teams to understand blast radius and prioritize remediation.
These capabilities become essential in AI-driven environments. An AI agent that requests credentials shouldn't simply be granted access to everything it can technically use—it should be restricted to the specific resources needed for its function. Entro's mapping technology helps implement that principle.
## Market Context: 190 Deals and Consolidation
The Entro acquisition fits a clear pattern in 2026's cybersecurity M&A market, which has already recorded roughly 190 announced deals year-to-date according to SecurityWeek's tracker.
Recent comparable transactions include:
| Deal | Acquirer | Target | Reported Value |
|------|----------|--------|-----------------|
| Entro | SailPoint | Non-Human Identity | ~$200M |
| Apono | 1Password | Identity and Access | $250M–$300M |
| Various | Industry-wide | Cybersecurity | 190 YTD |
Notably, identity and access management remains the hottest M&A segment, signaling enterprise board-level agreement that identity is the perimeter.
## Implications for Enterprise Security Teams
### Immediate Considerations
Organizations relying on SailPoint's platform should anticipate:
1. Expanded roadmap: SailPoint will likely integrate Entro's secrets discovery and mapping capabilities into its core product over the next 12–18 months
2. Potential pricing changes: Bundled NHI capabilities may increase SailPoint's total cost of ownership or require customers to upgrade licensing tiers
3. Integration options: Entro may continue as a standalone product for customers with specific NHI needs, or consolidate fully into the main platform
### Broader Implications
The acquisition validates a hard truth: identity governance without non-human identity coverage is incomplete. Organizations cannot secure their infrastructure by managing only human users while leaving tens of thousands of machine identities, service accounts, and API keys ungovernered.
This drives several outcomes:
## HackWire Analysis
The SailPoint-Entro deal is significant because it marks the moment when identity governance enters its second era—one where non-human identities are no longer an afterthought but a boardroom priority.
For years, identity security meant managing humans: Okta logins, Active Directory membership, access reviews. Machine identities were delegated to platform teams and DevOps as operational overhead. That era ended when enterprises realized they could no longer track or govern the explosion of service accounts, API keys, and automation systems silently accumulating access across their infrastructure.
What makes this timing critical:
1. AI acceleration has made non-human identity urgent, not theoretical. Organizations are deploying AI agents—both internal and third-party—that need credentials to function. These agents inherit or are granted overly broad permissions by default. When an AI agent is compromised or behaves unexpectedly, blast radius scales faster than human attackers can move.
2. Entro's seed funding ($24M) shows the market already exists. This is not SailPoint inventing a new category; it's consolidating a proven one. The buyer market validation is clear: enterprises already see NHI as a distinct, expensive problem.
3. SailPoint's timing signals confidence in identity's centrality. By making a $200M bet immediately after earnings disappointed, SailPoint is saying: "Growth comes from solving harder identity problems, not just executing better in existing categories." That's directionally correct.
The hidden risk: If SailPoint integrates Entro's technology poorly, or if licensing becomes prohibitive, we'll see an explosion of point solutions in non-human identity management—fragmenting the space again. The opposite risk: if the integration is seamless and SailPoint prices competitively, machine identity governance becomes as standard as user access reviews. That second outcome is better for enterprise security. We're betting on it.
— HackWire Editorial
## Recommendations for Security Leaders
Organizations should use this acquisition as a catalyst for their own NHI assessment:
1. Inventory non-human identities: Conduct a complete audit of service accounts, API keys, machine identities, and automation credentials across your environment. Most organizations will be shocked by the count.
2. Map credential dependencies: Understand which applications, infrastructure, and data depend on which machine identities. This lineage map becomes your remediation priority list.
3. Establish NHI governance baseline: Even if you haven't deployed dedicated tools, implement basic practices: regular credential rotation, least-privilege assignment, and audit logging of machine account activities.
4. Evaluate consolidation vs. best-of-breed: If you use SailPoint, Okta, or other identity platforms, understand your strategy for NHI coverage. Will you consolidate onto your existing vendor, or maintain specialized point solutions?
## Related Coverage