Cybersecurity Deal: SailPoint to Buy Israeli Startup Entro for About $200 Million

SailPoint, the Nasdaq-listed identity security company, said Monday that it plans to acquire the Tel Aviv startup Entro. The purchase price has not been formally disclosed, but reports put the deal at about $200 million. The transaction is subject to customary closing conditions and is expected to close in the third quarter of fiscal 2027.

Entro is described as a pioneer in securing non-human identities and access credentials. SailPoint said the acquisition will accelerate its recently launched Agentic Fabric platform and expand its strategy for protecting the modern enterprise across the digital ecosystem, especially as companies rapidly deploy autonomous AI agents, complex cloud architectures, and programmable workflows.

SailPoint CEO and founder Mark McClain said Agentic Fabric created “a new paradigm” for securing AI agents and non-human identities at scale through built-in discovery, governance, and protection. He said Entro’s technology will give customers full, frictionless visibility into every non-human identity, along with the context and credentials used to reach critical corporate data.

Entro co-founder and CEO Itzik Elbaz said the company was built to secure the modern cloud by discovering and protecting the large volume of access credentials and non-human identities that power it. He said the rise of AI-driven automation makes that identity layer critical, and he welcomed the chance to combine Entro’s deep discovery engine and data lineage mapping with SailPoint’s security platform.

After the deal closes, SailPoint expects Entro’s technology to add discovery and credentials coverage across more than 1,000 types of non-human identities or agents, and more than 1,200 types of credentials, including secrets, keys, tokens, and certificates, across over 70 critical enterprise sources. SailPoint said the combined tools will help enforce policy-driven governance, map machine identities back to human owners for accountability, and enable real-time monitoring, behavioral anomaly detection, least-privilege enforcement, and automated remediation.