SailPoint is acquiring Entro Security, which develops a cybersecurity platform for managing non-human identities, a source says in a deal valued at ~$200M
Acquisition strengthens SailPoint's push into the fast-growing market for securing non-human identities.
Context & Ripple Effects
SailPoint has long been positioned around enterprise identity management, and its recent public-market return followed a period under Thoma Bravo ownership. The reported Entro acquisition extends that identity focus to non-human identities rather than representing a move into an unrelated security category.
The deal matters because it puts a dedicated non-human-identity platform alongside SailPoint’s existing identity-management business, using acquisition rather than solely internal product development to address that segment.
First-order effects
- SailPoint would add Entro’s non-human-identity management capabilities and team to its identity-security portfolio, subject to the reported transaction closing.
- Entro’s customers and partners would face integration into a much larger identity-management vendor’s product and commercial organization.
Second-order effects
- SailPoint’s enterprise buyers may gain a stronger basis to assess employee and non-human identity controls together, while rivals in identity management and adjacent machine-identity security face a more comprehensive SailPoint offering.
- The acquisition increases pressure on specialized non-human-identity vendors to differentiate through product depth, partnerships, or scale as larger IAM providers expand into the category.
Third-order effects
- If comparable acquisitions continue, non-human identities are likely to become a standard control plane within broader identity-security suites rather than a persistently standalone product segment.
- That consolidation could shift competition toward platform integration and governance coverage, though the extent depends on whether enterprises prefer integrated suites over specialist tools.
The trend: The deal is one data point in the convergence of enterprise identity management and non-human-identity security into broader identity-security platforms.