Astrix Security
Capability scores
Methodology →- Authentication
- 3.5
- SSO & Federation
- 3.0
- Authorization
- 3.5
- Lifecycle & Provisioning
- 4.0
- MFA & Passwordless
- 2.5
- Governance & Audit
- 4.5
- Developer Experience
- 3.5
- Deployment Flexibility
- 3.0
- Pricing Transparency
- 2.5
- Support & Ecosystem
- 3.5
Scored 0–5 against a published rubric. Independent analysis, no vendor sponsorship.
Overview
Most organizations have far more non-human identities (service accounts, API keys, OAuth tokens, secrets, and now AI agents) than human ones, and almost no one knows where they all live or what they can access. Astrix Security tackles that blind spot by discovering, inventorying, and risk-scoring these non-human identities across SaaS, cloud, and AI platforms. Founded in 2021 in Tel Aviv, it is positioned as a security and governance layer rather than an authentication system. Cisco completed its acquisition of Astrix on 29 June 2026, and Astrix's own site states it has ended standalone sales of new licenses effective 30 June 2026. Existing customers keep service under their current agreements while the capability is folded into Cisco. Cisco paid a reported 400 million dollars and is integrating Astrix into Duo, Splunk, and Cisco Identity Intelligence: see the news item.
What it is good at
Astrix is strongest at discovery and posture management. It connects to your environments, surfaces over-permissioned or stale credentials, flags risky third-party OAuth grants, and now extends to AI agent and MCP-style connections. Governance and audit visibility are the clear strengths, scoring highest. For security teams that need to map sprawl across many SaaS and cloud systems quickly, the breadth of discovery is the draw.
Where it falls short
It is not an IdP, so authentication, SSO, and MFA are largely out of scope, and it leans on the systems it monitors for enforcement. Remediation is improving but still partly advisory. As with the whole non-human identity category, the tooling is young and best treated as a visibility and risk layer alongside existing IAM, not a replacement for it.
Pricing
No public pricing. Sold as an annual enterprise subscription, typically scoped by environment size and connected platforms. Expect a sales-led process and a proof of value before commitment. Model your footprint with the TCO calculator.
Best for, and who should look elsewhere
A fit for security teams that need visibility into service accounts, API keys, OAuth grants, and AI agent integrations across SaaS and cloud. Look elsewhere if you want a runtime workload IAM control plane like Aembit rather than discovery and posture, or need published pricing. Compare with Oasis Security, Token Security, and the AI identity category.
Bottom line
A solid choice for security teams that need to see and govern non-human and AI agent identities. Pair it with your existing IdP rather than expecting it to authenticate anything.
Astrix Security: frequently asked questions
- Can I still buy Astrix Security?
- Not standalone. Cisco completed its acquisition on 29 June 2026, and Astrix's own site states it ended standalone sales of new licenses effective 30 June 2026. Existing customers continue to receive service under their current agreements while the capability is folded into Cisco. If you are evaluating non-human identity security today and want a product you can purchase directly, Astrix is no longer on the list; the capability will reach you through Cisco's portfolio instead. Cisco has said it is integrating Astrix into Cisco Identity Intelligence, Duo and Secure Access, with data feeding Splunk.
- How much did Cisco pay for Astrix?
- Cisco did not disclose a price. Calcalist reported approximately 400 million dollars on the announcement date of 4 May 2026. That figure has been widely repeated, but every article repeating it traces back to the single Calcalist report, so it is one source rather than many, and Cisco has never confirmed it. Astrix had raised 85 million dollars in total across a roughly 15 million dollar seed led by Bessemer and F2 Capital, a 25 million dollar Series A led by CRV in June 2023, and a 45 million dollar Series B led by Menlo Ventures through the Anthology Fund in December 2024, with Workday Ventures participating.
- What did Astrix Security actually do?
- Three documented functions. Discover built a real-time inventory of AI agents, MCP servers and non-human identities with risk context, covering custom, third-party and home-grown agents including shadow and unregistered ones. Secure flagged over-privileged agents and non-human identities, vulnerable configurations, abnormal activity and policy violations. Deploy provisioned agents with short-lived credentials, just-in-time access and precise scoping. Identity types covered were API keys, service accounts, OAuth tokens, secrets and webhooks. Discovery was agentless and API-based.
- What did Astrix integrate with?
- Cloud coverage was AWS, Google Cloud and Azure. SaaS integrations included Salesforce, Slack, Jira, Confluence, Okta, Google Workspace, Databricks, Snowflake, NetSuite and Atlassian. Identity sources were Active Directory and Microsoft 365 or Azure AD. AI platform coverage included OpenAI, Claude and Cursor, and infrastructure coverage included Kubernetes and GitHub, with Fortinet on the network side. Astrix explicitly covered MCP server discovery, which several competitors including P0 Security do not document.
- Why did the whole non-human identity category consolidate in 2026?
- Because the AI agent wave made non-human identity a platform requirement rather than a point product, and the large security vendors bought rather than built. Within six months: CrowdStrike acquired SGNL, announced 8 January 2026; Cisco acquired Astrix, closed 29 June; SailPoint acquired Entro Security, closed the same day, 29 June; Cyera acquired Otterize in mid-2025 and has since signed a letter of intent for Oasis Security; and Snowflake agreed to acquire Natoma. Any non-human identity shortlist written before 2026 is now substantially out of date, which is worth checking if you are working from an older comparison.
- Astrix or Entro: which should I compare?
- Neither, as independent products. Both were acquired on the same day, 29 June 2026, Astrix by Cisco and Entro by SailPoint. There is a practical difference in what happened next: Astrix stopped selling standalone licenses the following day, while Entro continues to be sold as a standalone offering to SailPoint customers while native integration proceeds. So if you need one of these two capabilities on a current purchase order, Entro through SailPoint is still obtainable and Astrix is not.
- Was Astrix compliant and secure?
- Astrix achieved SOC 2 Type 2 five months after emerging from stealth in 2022. No ISO 27001 certification or FedRAMP authorization was found, and there was no dedicated trust centre page. The National Vulnerability Database returns zero CVEs for Astrix Security, with no CISA KEV entry and no breach disclosure. Post-acquisition, compliance posture migrates to Cisco's, so the independently verifiable position as an Astrix product is effectively frozen at the June 2026 close.
- What are the alternatives now that Astrix is gone?
- Among vendors still independently purchasable: Oasis Security, the best-funded independent with 195 million dollars raised, though Cyera has signed a letter of intent to acquire it. GitGuardian, which raised 50 million dollars in February 2026 and comes from secrets scanning. Token Security, Clutch Security, Aembit, Natoma, Corsha and Andromeda Security. P0 Security if the problem is eliminating standing cloud access rather than inventorying existing credentials. If you are already a Cisco shop, the Astrix capability arriving through Identity Intelligence and Duo may simply be the answer.
Astrix Security comparisons
More AI Identity vendors
All AI Identity →- Aembit4/5
- Entro Security4/5
- Oasis Security4/5
- Clutch Security3.9/5
- P0 Security3.9/5
Related on Start with Identity
- Comparisonaembit-vs-astrix-security
Aembit brokers workload access at runtime. Astrix discovers non-human identities and scores their risk. They are complements, and only one is still sold standal
- Comparisonastrix-security-vs-entro-security
Two non-human identity discovery platforms that score identically and tie on seven of ten dimensions. Both were acquired on the same day, 29 June 2026.
- VendorCyera
specialist
By SWI Community Team · Last evaluated 2026-09-20
Independent, community-driven analysis. No vendor sponsorship. Compiled from public research and community input and verified on a best-effort basis, so details may be incomplete or out of date. Scores are opinions, not advice. Trademarks belong to their owners; mention does not imply affiliation or endorsement. See the full disclaimer, or send corrections to community@startwithidentity.com.