Entro Security

• SailPoint's own Agentic Fabric line discovers AI agents and credentials with SailPoint sensors, so SailPoint could retire the Entro-branded offering and fold that discovery into its own product.
• Entro's named customer references predate the AI-agent repositioning. If no named customer for the agent-governance pillar appears under SailPoint, the agent story stays messaging rather than adoption.
• The Cloud Security Alliance reports that no major compliance framework was written with agentic AI credentials in mind, so buyers could defer non-human identity governance until an auditor asks for it.
• CyberArk pairs privileged access with the Venafi machine-identity line and Cisco acquired Astrix Security, so a buyer could take non-human identity coverage from an incumbent it already runs.

Entro defines its problem as machine credentials that nobody can count. Itzik Alvas told TechCrunch at the seed stage that the founders had spoken with more than a hundred CISOs who could not say how many secrets their companies held in the cloud, where those secrets lived, or who used them. SecurityWeek reports the company's estimate of roughly 45 non-human identities for every human one, alongside its reading of IBM and Verizon breach reports, and cites the Dropbox Sign compromise of a back-end service account as an example of the class.

An independent body republishes those ratios and adds survey findings of its own. The Cloud Security Alliance AI Safety Initiative cites Entro's H1 2025 research, through its bibliography, for the 45 to 1 enterprise ratio and a 144 to 1 ratio in cloud-native environments, and reports from its own surveys that only 15% of organizations feel highly confident in preventing attacks based on non-human identities and that more than 16% do not track the creation of AI-related identities at all. The same paper finds that none of SOC 2, ISO 27001, PCI DSS, NIST 800-53 or the EU AI Act was written with agentic AI credentials in mind, and warns that organizations may treat this governance as a future requirement rather than a present obligation.

The 2026 framing extends the same problem to AI access. Alvas argues that enterprise AI adoption starts with a connection rather than a strategy deck, with a developer wiring a tool to a language model or authenticating an agent against SharePoint, GitHub or Salesforce before security can answer who connected what. Entro positioned AGA as the governance answer for those access paths, which identity governance products built for human users were not designed to track. [s13, s11, s21, s15]

The Entro platform unifies three product lines with a named component for each job. The secrets line detects and secures exposed API keys, tokens and secrets across the software development lifecycle, from source code and automation to collaboration apps and vaults, and the vendor puts its coverage at more than 1,200 types of secrets. The non-human identity line manages each identity from creation to retirement, removes idle identities, right-sizes permissions and rotates secrets. NHIDR, the vendor's detection engine, baselines identity activity, alerts on suspicious patterns and triggers automated remediation.

The agentic line extends that engine to AI agents. Entro introduced it as a third pillar in September 2025 to discover software-as-a-service agents and local agents reached through Model Context Protocol clients and servers, map each agent to the identities and secrets it uses, and attribute a human owner. AGA followed in March 2026, and Help Net Security reports that it surfaces AI clients through endpoint detection integrations, integrates with agent foundries including AWS Bedrock and Copilot Studio, and provides activity visibility and policy enforcement with audit trails of allowed and blocked activity.

A Claude Code plugin carries that monitoring onto a developer's own machine. Installed through the Claude marketplace and described in a February 2026 company post, it logs sessions and tool calls and classifies intent using an in-house small language model.

Capability evidence stays vendor-authored. The page sitemap lists no documentation portal, and the fetched sources carry no third-party technical evaluation of the platform. The most inspectable artifact is the Claude Code plugin, which the company says installs through the Claude marketplace in minutes. [s4, s3, s6, s2, s8, s9, s14, s10]

Entro competes in a non-human identity field that analysts and acquirers now map by name. Coverage of the RSAC 2026 Innovation Sandbox finalists, compiled by AI tooling in March 2026, lists Entro beside Oasis Security and the CyberArk and Venafi combination, crediting Entro's software-development-lifecycle integration and noting thinner lifecycle governance. Calcalist calls non-human identity security one of the hottest sectors in Israeli cybersecurity and names Oasis Security and Astrix Security, which Cisco acquired, as operating in the same space.

Against point tools, Entro argued context. TechCrunch describes the status quo it set out to replace as a mix of scanners such as Gitleaks, vaults from AWS, Azure or HashiCorp, and continuous-integration secret scanners such as Cycode, with Entro differentiating on end-to-end monitoring that says which exposed secret actually matters. AGA pointed the same engine at identity governance products by naming the agent-access questions they were not built to answer.

The acquisition changed the competitive question. SailPoint's completion release divides the work, giving SailPoint Agentic Fabric the broad governance of non-human identities across business applications and giving Entro the depth inside developer environments, where it discovers secrets, tokens and certificates in continuous-integration pipelines, codebases and container registries. SailPoint then launched Agentic Fabric into general availability on August 4, 2026, describing its own endpoint and browser sensors and naming no Entro product, so a buyer of either capability now buys from the same vendor. [s19, s17, s13, s15, s16, s18]

Named enterprise customers arrived in the company's first year, and the independent record still names that set. Calcalist reported Booking, SolarWinds, Elastic, KAYAK and Regatta as customers by the June 2024 Series A, and its June 2026 acquisition story names Booking.com, SolarWinds, Elastic, KAYAK and Regatta Great Outdoors again. The customers page claims dozens of customers worldwide without publishing a count.

The vendor's own pages add security leaders on the record. The customers page runs a spotlight naming Anthony Scarfe as deputy CISO at Elastic, Eli Erlikhman as VP of product and cloud security at Sprinklr, Avishai Avivi as CISO at SafeBreach and Moshe Michelashvili as CTO and co-founder at Deep Voice, and the homepage carries testimonials attributed to Tim Brown at SolarWinds and Guy Stolero at ControlUp. None of those references speaks to the AI-agent security the product now leads with, so the public adoption evidence predates the repositioning.

The motion is demo-led with no price on Entro's own pages. The page sitemap lists a demo-request page and a free-assessment page and no pricing page. SecurityWeek reported that the Series A would fund headcount growth from 35 to around 80 by the end of 2024, and no funding round after that June 2024 raise appears in the fetched record. Calcalist reported that Entro employs dozens of people across Israel and the United States who were expected to join SailPoint's development operations in Israel. [s12, s17, s5, s1, s10, s11]

The founders bring operator backgrounds rather than prior exits. TechCrunch reports that Itzik Alvas and Adam Cheriki met during their time in the Israeli security forces, that Alvas worked as a senior site-reliability-engineering manager at Microsoft after a healthcare company, and that Cheriki held security roles at IBM, Javelin Networks, Symantec and Broadcom. Alvas told TechCrunch that both had been responsible for secret security in prior positions, which is the pain the product addresses.

Backers and analysts add outside signal. Calcalist names StageOne Ventures and Hyperwise Ventures behind the seed round and Dell Technologies Capital leading the Series A, and TechCrunch names Trusteer and Transmit Security founders Rakesh Loonkar and Mickey Boodaei plus Imperva founder Amichai Shulman among the seed angels. KuppingerCole published a Rising Star note on Entro in April 2025, and the Cloud Security Alliance AI Safety Initiative cites Entro's H1 2025 research in its non-human identity whitepaper.

The acquisition retained both founders. SailPoint's completion release states that Alvas and Cheriki joined its technology organization to keep developing identity-security capabilities as Entro's technology is integrated into the SailPoint platform. Neither founder shows a prior exit in the fetched record, and the record names no builds below the two principals, so the verifiable strength is their domain experience and the confidence that backers, one analyst firm and an acquirer placed in it. [s13, s12, s20, s21, s16]

Public assurance evidence is what the vendor displays itself. The homepage footer publishes an AICPA SOC 2 Type II badge and an ISO 27001 badge as image files. The page sitemap publishes no trust portal, no downloadable report and no security page, so the attestations reach a buyer as badges rather than as documents to inspect.

Named references and awards sit beside those badges. The customers page carries security leaders on the record from Elastic, Sprinklr, SafeBreach and Deep Voice, and the homepage names a Gartner Cool Vendor listing in the identity-first category, a Globee award, a SINET 16 award and a Cybersecurity Excellence award. Case studies are published under generic titles such as securing an entertainment enterprise, without naming the customer.

The acquisition leaves the assurance question open. SailPoint's completion release does not state how Entro's attestations or its disclosure posture will be handled, so a buyer weighing assurance today has the displayed badges and nothing further in the reviewed record. [s1, s5, s10, s16]

Add analyzed competitors to compare them side by side with Entro Security.

Entro sells to the enterprise security and identity team that already owns human identity and inherits the machine side by default. That buyer answers for API keys, service accounts, tokens and now AI agents that connect cloud and software-as-a-service systems outside the identity lifecycle. The Cloud Security Alliance republishes Entro's own research for that population, near 45 to 1 against human users across enterprises and as high as 144 to 1 in cloud-native environments, and adds its own survey finding that only 15% of organizations feel highly confident against attacks on those identities.

The agentic framing sharpens that buyer rather than opening a new one. Itzik Alvas argues that enterprise AI adoption starts with a connection rather than a strategy deck, with a developer wiring a tool to a language model or authenticating an agent against SharePoint, GitHub or Salesforce before security can answer who connected what. The named user stays the security and identity team, not a new one.

Named references skew to large technology and consumer-internet accounts. Calcalist reported Booking, SolarWinds, Elastic, KAYAK and Regatta within twelve months of launch and named the same five at the acquisition, and the customers page carries security leaders on the record from Elastic, Sprinklr, SafeBreach and Deep Voice. The fetched record names no regulated-industry or government customer, so the evidenced buyer is a large technology enterprise rather than the regulated class whose procurement slows a replacement.

Entro unifies secrets, non-human identities and AI agents in one platform with a named component for each job. The secrets line finds exposed API keys, tokens and secrets across the software development lifecycle and puts its coverage at more than 1,200 types. The non-human identity line manages each identity from creation to retirement, removes idle identities, right-sizes permissions and rotates secrets. NHIDR baselines each identity's behavior, flags deviations such as an unknown consumer or a privilege change, and triggers automated remediation through playbooks and security-operations integrations.

AI does two jobs inside the product. ContextIQ, the vendor's triage model, classifies each secrets finding by type, purpose and context to suppress false positives, and NHIDR applies language-model analysis with identity context for the same reason. The Claude Code plugin adds a third, using an in-house small language model to label what an agent session was trying to do, and SailPoint's completion release describes embedded small language models recommending remediations.

What holds up is engineering breadth rather than a data advantage. The cited record names no training corpus, no accuracy benchmark and no cross-customer dataset behind the ContextIQ model or the NHIDR engine, so a buyer comparing detection quality has the vendor's own description and no measured result beside it. The record identifies no vendor-retained corpus behind those baselines.

Entro sells a demo-led enterprise motion with no public price. The page sitemap publishes a demo-request page and a free-assessment page and no pricing page, and the customers page claims dozens of customers worldwide rather than a published count.

Named-customer proof is real and front-loaded to the early years. Calcalist named Booking, SolarWinds, Elastic, KAYAK and Regatta within twelve months of launch and named the same five two years later at the acquisition, and the customers page adds security leaders on the record from Elastic, Sprinklr, SafeBreach and Deep Voice, whose captured testimony describes secrets and non-human identities. None of it speaks to the AI-agent line Entro added in September 2025, so the adoption evidence predates the repositioning.

The acquisition is now the dominant go-to-market fact. SailPoint completed the purchase on June 29, 2026, sells Entro's products as standalone offerings while native platform integration continues, and kept both founders. In August 2026 it launched its own Agentic Fabric line into general availability on SailPoint endpoint and browser sensors without naming an Entro product, so how the two are packaged for a buyer is not yet on the record.

Entro publishes no price. The page sitemap lists a demo-request page and a free-assessment page and no pricing page, so the charged unit and the list price stay private. A vendor that withholds price usually sells negotiated enterprise deals, which fits the CISO buyer and the demo-led motion.

The public record does not state a billing unit. Entro frames its value around the volume of non-human identities, secrets and agents an enterprise cannot count, and puts secrets coverage at more than 1,200 types, and no fetched page says whether it charges by identity, by environment or by platform tier.

The acquisition reframes the pricing question. SailPoint sells Entro's products as standalone offerings while integration continues, and its August 2026 launch put Agentic Fabric inside the Agentic Business and Agentic Business Plus suites, so a buyer may meet this capability as a line in a broader identity contract rather than as a separately metered product.

Entro delivers as a platform that connects to a customer's environment through integrations and observes what it finds there. It discovers non-human identities, secrets and agents across clouds, code, continuous-integration pipelines, on-premises systems and collaboration tools, then classifies them, assesses posture, and remediates by removing idle identities, right-sizing permissions and rotating secrets. The cited pages do not specify the enforcement topology or whether Entro issues the credentials that agents authenticate with.

The integration surface is the operational backbone. The integrations page spans connector categories including identity providers, vaults, cloud providers, code repositories, endpoint detection, security information and event management, and collaboration apps, and names connectors such as CyberArk Conjur, Delinea Vault, Microsoft Entra ID and Microsoft Sentinel. AGA adds endpoint detection and agent-foundry integrations to surface agents running on workstations and inside AWS Bedrock and Copilot Studio.

Enforcement detail stops at the behavior level. Help Net Security describes AGA auditing and governing agent behavior as it executes, with policy controls for sanctioned Model Context Protocol targets and audit trails of allowed and blocked activity, and does not state the architecture behind those controls, so the record does not show a buyer how an agent action gets blocked.

Entro publishes the table-stakes assurance evidence a CISO buyer expects and nothing deeper. The homepage footer carries an AICPA SOC 2 Type II badge and an ISO 27001 badge as image files. The page sitemap publishes no trust portal, no downloadable report and no security page, so these attestations ease procurement without giving a buyer a document to read.

Named security-leader references add corroborating color on top of those badges. The customers page carries Anthony Scarfe of Elastic, Eli Erlikhman of Sprinklr, Avishai Avivi of SafeBreach and Moshe Michelashvili of Deep Voice on the record, which signals enterprise use. Those pages document no security-review outcome, so the references support the badges rather than substituting for a published report.

The completed acquisition adds an open assurance question. SailPoint's release does not state how Entro's attestations or its disclosure posture will be handled, so a buyer weighing assurance today has the displayed badges and nothing further in the reviewed record.

Entro positions itself as one platform unifying secrets, non-human identity and AI-agent security. The buyer centralizes machine-identity work rather than stitching point tools together, covering discovery, classification, posture, NHIDR detection, remediation and the agent line in one platform. Entro grounds that claim in a correlated view of identities, secrets and agents across the estate.

Entro reaches outward through connectivity rather than a builder marketplace. The integrations page lists connector categories across software-as-a-service, on-premises and hybrid environments, and AGA integrates natively with agent foundries such as AWS Bedrock and Copilot Studio, so Entro depends on the tools it ingests from rather than serving as infrastructure others build on. No third-party developer marketplace appears in the fetched pages.

The ecosystem question now belongs to SailPoint. Its completion release presents Entro's developer-environment depth as the complement to SailPoint Agentic Fabric, which builds a unified identity graph across human users, entitlements, machines and agents. SailPoint then shipped Agentic Fabric to general availability on its own sensors, and its completion release presents the two as complementary, so a buyer now meets both inside one vendor's portfolio.

Entro's credibility comes from two founders with operator backgrounds rather than prior exits. TechCrunch reports that Itzik Alvas worked as a senior site-reliability-engineering manager at Microsoft after a healthcare company, and that Adam Cheriki held security roles at IBM, Javelin Networks, Symantec and Broadcom. Alvas fronted the company's public positioning as chief executive.

Investor, analyst and acquirer signals reinforce that background. The seed and Series A drew StageOne Ventures, Hyperwise Ventures and Dell Technologies Capital as lead, alongside angels including Trusteer and Transmit Security founders Rakesh Loonkar and Mickey Boodaei and Imperva founder Amichai Shulman. KuppingerCole named Entro a Rising Star in non-human identity management in April 2025, and the Cloud Security Alliance AI Safety Initiative cites Entro's H1 2025 research.

Depth below the founders stays unverified in the fetched sources. Neither founder shows a prior exit and no individual build below the principals surfaces, so the verifiable strength is domain experience plus the confidence that backers, one analyst firm and an acquirer placed in it. Both founders joined SailPoint's technology organization at the close, and Calcalist reported that Entro's staff across Israel and the United States were expected to join SailPoint's development operations in Israel.