Astrix Security provides an identity security platform built for AI agents and non-human identities. Its platform helps enterprises discover every agent, MCP server, service account, token, secret, and other non-human identity across SaaS, cloud, on-prem, and AI-connected environments, then apply governance, access controls, and threat response around those identities.
Astrix Security organizes its platform around a Discover-Secure-Deploy model. It gives security teams a single control layer to inventory identities, map ownership and permissions, reduce excessive access, and support secure-by-design deployment of agentic systems with short-lived credentials, just-in-time access, and auditable activity. The company’s positioning is centered on extending traditional IAM, IGA, and ITDR practices to AI-era and machine-driven access.
Offerings, Capabilities, and Integrations
Astrix Security combines AI agent security and non-human identity security in one API-based, non-proxy platform. Its capabilities span continuous discovery, ownership correlation, posture analysis, lifecycle workflows, policy enforcement, threat detection, secret governance, and third-party exposure analysis. The platform is designed to surface shadow agents, orphaned credentials, overprivileged access, anomalous activity, and risky vendor connections in a unified operating model.
Its coverage spans SaaS, IaaS, PaaS, on-prem systems, secret managers, and AI platforms, including MCP-connected environments. Astrix Security also connects with existing enterprise workflows and security operations tooling, including SIEM, SOAR, ITSM, ticketing, API automation, and collaboration tools, so teams can route alerts, open tickets, gather business justification, and automate remediation without replacing the rest of their stack.
Products and Services
- Agent Control Plane (ACP): A secure-by-design control layer for deploying AI agents with Zero Trust policy at creation, short-lived credentials, just-in-time least-privileged access, and full auditability.
- Discovery & Governance for AI Agents: Discovers AI agents and MCP servers, uncovers shadow agents, maps ownership and business context, and enforces policy to reduce attack surface and compliance gaps.
- Access & Lifecycle Management for AI Agents: Manages AI agent onboarding, policy-based provisioning, owner attestation, reviews, and decommissioning while enforcing least-privileged access controls.
- Agentic Threat Detection & Response (ADR™): Uses ML-based detection to identify unusual access patterns, out-of-scope actions, indicators of compromise, and exposed credentials tied to AI agents.
- NHI Discovery & Governance: Maintains real-time inventory of service accounts, OAuth apps, API keys, secrets, IAM roles, and other non-human identities with owner, vendor, permission, and usage context.
- NHI Lifecycle Management: Tracks non-human identity status, usage, rotation, expiration, attestation, and offboarding to reduce orphaned, stale, or unmanaged identities.
- Non-Human ITDR: Detects anomalous non-human identity behavior, secret leakage, third-party breach exposure, and policy deviations, with guided investigation and automated remediation workflows.
- Secret Management: Centralizes secret visibility across vaults and cloud environments, with monitoring, rotation, expiration enforcement, and response context for machine credentials.
- Third-Party Risk Management: Continuously discovers connected third-party apps and vendors, assesses reputation and exposure, supports app vetting, and accelerates remediation of risky access.
Target Customers
Astrix Security targets enterprises with complex cloud, SaaS, and automation footprints, especially organizations deploying AI agents or managing large volumes of service accounts, tokens, secrets, OAuth apps, and other machine identities. It is well suited to companies that need centralized visibility and control over non-human access to sensitive systems and data across distributed environments.
Typical stakeholders include identity and access management, IGA, cloud security, application security, security operations, TPRM, GRC, and AI or platform security teams. Astrix Security is particularly relevant for enterprises that want to extend existing identity programs to non-human identities and agentic systems without slowing development or adoption.
Cloud Integrations and Marketplace
- AWS Marketplace: Astrix Security has marketplace availability through AWS, supporting cloud-budget procurement and aligning with its coverage of AWS-connected non-human identities, secrets, and service-to-service access.
- Google Cloud Marketplace: Astrix Security has marketplace presence connected to Google Cloud and complements its support for Google Cloud and Google Workspace-related non-human identity and AI access governance.
Key People
- Alon Jackson: Co-Founder & CEO
- Idan Gour: Co-Founder & President
- Chris Moses: SVP, Worldwide Sales
- Jony Blatt: VP of Product
- Ofek Amir: VP of RnD
- Marina Epel: VP of Finance
- Dana Katz: VP of Marketing
- Jonathan Sander: Field CTO
- Vijay Vattikuti: VP Identity Strategy
- Tim Jaroch: VP of SE
- Rinat Oren: VP of HR
Key Facts
- Headquarters: Boston, Massachusetts, USA
- Employees: Approximately 100-120
- Annual Revenue: $25M-$50M
- Parent Company: None
- Subsidiaries: None
- Publicly Listed: No (privately held)
Analyst Recognitions
- Gartner: 2026 Market Guide for Guardian Agents – Representative Vendor in Agent Identity. 2026 Emerging Tech Impact Radar: 2026 – Sample Vendor in Identity and Access Management for AI Agents. 2026 Emerging Tech: The Future of AI Security Is in Securing Agent Actions, Not Prompts – Cited as a sample vendor in AI agent security. 2025 Emerging Tech Impact Radar: AI Cybersecurity Ecosystem – Sample Vendor in Agentic AI Ecosystem Security. 2025 Emerging Tech Impact Radar: Global Attack Surface Grid – Sample Vendor in Agentic Identities. 2025 Hype Cycle for Digital Identity – Recognized under Workload Identity Management. 2025 Leaders’ Guide to Modern Machine IAM – Featured in Workload Identity Management. 2025 Innovation Insight: Improve Security With Machine IAM – Featured in Workload Identity Management.
