Cisco to Acquire Astrix Security in Move to Secure AI Agents

SAN FRANCISCO — Cisco Systems Inc. announced Monday its intent to acquire Astrix Security, a startup specializing in the protection of non-human identities, marking a strategic expansion into the security infrastructure required for autonomous AI agents.

The acquisition, valued at an undisclosed amount, aims to integrate Astrix’s technology into Cisco’s broader cybersecurity portfolio. The deal comes as enterprises increasingly deploy artificial intelligence agents that require secure access to internal systems through API keys, service accounts, and OAuth tokens. Cisco stated the move is designed to extend zero trust principles to this emerging agentic workforce.

Astrix Security, based in the United States, has developed a platform focused on managing and securing machine identities. As organizations automate more processes, the number of non-human identities has surged, creating a complex attack surface that traditional identity and access management tools often fail to address. Cisco executives indicated that securing these digital credentials is critical to preventing unauthorized access and data breaches in an era of advanced automation.

The cybersecurity giant noted that the integration of Astrix’s capabilities will allow customers to apply consistent security policies across both human and non-human entities. This approach aligns with Cisco’s existing zero trust architecture, which assumes no implicit trust within or outside the network perimeter. By securing the identities of applications and AI agents, Cisco aims to mitigate risks associated with compromised credentials and lateral movement within enterprise networks.

Industry analysts have pointed to the growing reliance on AI agents as a primary driver for the acquisition. As businesses adopt generative AI and autonomous systems, the management of machine identities has become a critical vulnerability. Astrix’s technology is positioned to address the specific challenges of securing these identities, which often lack the traditional authentication methods used for human users.

The deal is subject to regulatory approval and customary closing conditions. Cisco expects to close the transaction later this year, pending final agreements. Astrix Security will operate as a subsidiary of Cisco, with its leadership team remaining in place to oversee the integration of its technology into Cisco’s security solutions.

While the acquisition highlights the growing importance of non-human identity security, questions remain regarding the timeline for full integration and the specific pricing models for the new capabilities. Cisco has not yet disclosed details on how the technology will be bundled with existing products or whether it will be offered as a standalone service. The company also did not address potential competition from other cybersecurity firms developing similar solutions for the AI-driven market.

The announcement underscores the shifting landscape of enterprise security, where the focus is expanding beyond human users to include the vast array of automated systems now integral to business operations. As AI agents become more prevalent, the need for robust identity management solutions is expected to grow, positioning Cisco and Astrix at the forefront of this emerging sector.