SailPoint closes its Entro Security deal, reportedly at 200 million dollars
Two weeks from announcement to close. Entro brings discovery and lifecycle management for more than 1,200 kinds of secret, token, and certificate into SailPoint's Agentic Fabric, aimed at the machine identities that outnumber staff by an order of magnitude.
SailPoint has completed its acquisition of Entro Security, announced on 15 June 2026 and closed on 29 June. Calcalist reported the price at about 200 million dollars. Entro, founded in October 2022 by Itzik Alvas and Adam Shriki, had raised 24 million dollars and counts Booking.com, SolarWinds, and Elastic as customers. Its platform discovers and manages non-human identities and the secrets behind them, covering more than 1,200 types of secret, token, and certificate inside developer environments. SailPoint is folding it into Agentic Fabric, the access-control layer for AI agents it launched in March, with chief executive Mark McClain describing the goal as one control plane for human, machine, and agent identity.
Why it matters
Governance vendors have historically stopped at the identity record. Entro starts from the secret itself, finding the API key hardcoded in a repo or the token in a CI pipeline that no joiner-mover-leaver process ever touched. Those two views disagree in every real estate, and the disagreement is the finding.
Watch how the pieces are sold. Entro standalone was a discovery and posture product; inside SailPoint it becomes a feed into certification and lifecycle, which is more useful but harder to buy without the suite. If you are an Entro customer without SailPoint Identity Security Cloud, get renewal terms in writing. For the wider pattern, see machine identity management and the acquisitions tracker.
Source: SailPoint, price via SecurityWeek
Related on Start with Identity
- BlogCisco buys Astrix Security for a reported 400 million dollars
Astrix goes into Duo, Splunk, and Cisco Identity Intelligence. The pitch is extending zero-trust principles to an agentic workforce, which in practice means gov
- BlogCyera agrees to buy Oasis Security for about 1 billion dollars
A data-security company is paying roughly 1 billion dollars, about 700 million of it in cash, for a four-year-old non-human identity startup. The price says mor
- BlogServiceNow closes its Veza acquisition at about 1.2 billion dollars
Announced in December 2025 and closed on 2 March 2026, substantially in cash. Veza, valued at 808 million dollars in its Series D, now supplies the permission g
- Comparisonastrix-security-vs-entro-security
Two non-human identity discovery platforms that score identically and tie on seven of ten dimensions. Both were acquired on the same day, 29 June 2026.
- CVESailPoint Identity Security Cloud access-control flaw
Identity Security Cloud (ISC) failed an access-control check. One of three 2024 ISC CVEs (3317/3318/3319) that still shape how we talk about SaaS IGA risk in 20
- CVESailPoint IdentityIQ content-type XSS
IdentityIQ reflected script through an incorrect content-type (CWE-79). CVSS 7.1. November 2025. An XSS on an IGA console is an admin-session theft.