Cisco Acquires Astrix Security to Boost AI Agent and Non-Human Identity Security

Key Takeaways

• Cisco announced its intent to acquire Astrix Security Ltd., a specialist in Non-Human Identity (NHI) security.
• The acquisition aims to bolster enterprise defenses against the escalating attack surface introduced by the proliferation of AI agents.
• Astrix’s technology will enhance Cisco’s ability to discover, monitor, and secure AI agents and their NHIs, integrating with existing Cisco Identity Intelligence, Secure Access, and Duo Identity and Access Management solutions.
• This move addresses the critical security gaps arising from AI agents’ reliance on non-human credentials like API keys and service accounts, which are prime targets for compromise.

Cisco has unveiled its plans to acquire Astrix Security Ltd., a prominent firm recognized for its expertise in Non-Human Identity (NHI) security. This strategic maneuver is designed to fortify enterprise environments against the expanding array of cyber threats stemming from the widespread adoption of AI agents.

The contemporary business landscape is undergoing a profound transformation, characterized by the increasing integration of “agentic AI.” These sophisticated, automated AI agents operate at machine speeds, accessing critical data, making autonomous decisions, and executing complex tasks. While undeniably boosting productivity, their unsupervised deployment introduces significant security vulnerabilities.

Cisco’s Strategic Acquisition of Astrix Security

Unlike human users, AI agents depend on non-human identities to interact with enterprise systems. These identities encompass a range of credentials, including API keys, service accounts, and OAuth tokens. Should these credentials be compromised by malicious actors, they can be leveraged to carry out widespread malicious operations.

A recent Cisco AI Readiness Index revealed that a mere 24% of organizations possess the necessary security frameworks to safely govern AI agent activities. Furthermore, the emergence of AI-driven threats, such as the Mythos model, is compelling security teams to confront high-impact, accelerated cyberattacks that demand immediate attention.

Astrix Security has dedicated the past five years to specializing in the protection of credentials that facilitate machine-to-machine interactions. Through this acquisition, Cisco will gain advanced technical capabilities to identify, monitor, and secure every AI agent and NHI across an organization’s infrastructure. The integration of Astrix will introduce four critical functionalities to Cisco’s comprehensive security portfolio:

• Discovery and Governance: Security teams will be able to comprehensively map all AI agent activities, address hygiene deficiencies, and prevent potential compliance breaches.
• Lifecycle Management: Administrators will gain streamlined control over AI agents, from their initial provisioning to their eventual decommissioning.
• Threat Detection and Response: The platform will automatically detect compromised credentials and prevent AI agents from performing actions outside their authorized scope.
• Secrets Management: Organizations will benefit from centralized protection for sensitive keys and tokens across various cloud environments and secure vaults.

Enhancing Cisco Zero Trust Capabilities

Cisco intends to integrate Astrix’s technology into its existing Cisco Identity Intelligence platform, thereby enriching contextual awareness and visibility across its entire security ecosystem. These new NHI features will also extend to Cisco Secure Access and Duo Identity and Access Management solutions.

This integration will enable companies to authenticate and authorize non-human identities under a stringent Zero Trust model, ensuring that AI agents are subjected to the same rigorous security scrutiny as human employees. By feeding this enhanced intelligence into Splunk or other Security Information and Event Management (SIEM) tools, Security Operations Centers (SOCs) will obtain a unified perspective on agent behavior, facilitating real-time threat investigation.

This acquisition represents a pivotal move in Cisco’s broader strategy to secure the evolving AI landscape. It complements recent infrastructure advancements, including Project Glasswing, Live Protect, and the Galileo acquisition. By securing the non-human credentials that AI agents rely on, Cisco is empowering organizations to adopt automation securely and at scale.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.