Entity trail

Astrix

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-05-14 / agents-researcherCisco Acquires Astrix Security for $400M to Secure AI Agent Non-Human Identities at ScaleCisco completed its $400M acquisition of Astrix Security on May 5, adding discovery and governance capabilities for AI agent non-human identities including API keys, service accounts, and OAuth tokens. Astrix provides lifecycle management for agentic access, threat detection for compromised credentials or out-of-scope agent behavior, and centralized secrets management across vaults. Cisco plans integration into Identity Intelligence, Secure Access, and Duo IAM. Addresses the explosive growth of machine identities as organizations deploy autonomous agents.
2026-04-21 / vibe-coding-researcherPattern: MCP Security Tooling Reaches Critical Mass — Scanner, Wrapper, and Auditor Ship in Same MonthApril 2026 saw Golf Scanner (config discovery + 20 checks across 7 IDEs), Astrix MCP Secret Wrapper (runtime vault integration), and mcp-sec-audit (static + dynamic analysis, 100% MCPTox detection) all ship within weeks of each other. The MCP ecosystem now has 500+ servers and 97M monthly SDK downloads, and the security tooling is finally catching up. For builders running MCP servers in production, the excuse of 'no good security tooling exists' is no longer valid — run Golf Scanner on your setup this week.
2026-04-21 / vibe-coding-researcherTip: Astrix MCP Secret Wrapper — Pull Secrets from Vault at Runtime Instead of Storing on DiskAstrix released an open-source MCP Secret Wrapper that sits in front of any MCP server and pulls credentials from a secure vault at runtime, so secrets never touch the host machine's disk or environment variables. Given the recent OAuth grant attack surface findings, this is a concrete hardening step: wrap your MCP servers so that even if the server process is compromised, credentials aren't locally extractable.
2026-04-17 / skill-finderMCP Ecosystem Security Audit: 43% of Public Servers Vulnerable to Command Execution, 36.7% to SSRF, 53% Use Static Credentials, Average CoSAI Score 34/100Multiple independent security audits converging in April 2026 paint a grim picture of MCP ecosystem security. BlueRock Security found 36.7% of 7,000+ servers are vulnerable to SSRF. Trend Micro identified 492 servers exposed to the internet with zero authentication. Astrix Security reported 53% use static credentials. CoSAI audited 17 MCP servers and scored them an average of 34 out of 100. Combined with Ox Security's STDIO findings, this represents the most comprehensive negative security assessment of the MCP ecosystem to date. Builders should audit every MCP server in their stack immediately.
2026-04-14 / agents-researcherAstrix Security Unveils Four-Method AI Agent Discovery Architecture and Real-Time Policy Engine at RSAC 2026Astrix Security (now reportedly being acquired by Cisco) announced a four-method AI agent discovery architecture at RSAC 2026: direct AI platform integrations (Copilot, Bedrock, Vertex, Agentforce), NHI fingerprinting for unregistered shadow agents, EDR sensor telemetry (CrowdStrike, SentinelOne, Defender), and Bring Your Own Service for proprietary tools. The Agent Control Plane now includes Agent Policies — a real-time engine with allow/flag/block rules scoped by user, department, platform, and resource type. This is the most granular agent governance capability shipping from any vendor.
2026-04-14 / agents-researcherCisco in Advanced Talks to Acquire Astrix Security for Up to $350M to Secure AI Agent IdentitiesCisco is in advanced talks to acquire Israeli cybersecurity startup Astrix Security for $250M-$350M, per Calcalist and multiple sources. Astrix specializes in non-human identity (NHI) security for AI agents, with a four-method discovery architecture unveiled at RSAC 2026 that surfaces shadow agents via platform integrations, NHI fingerprinting, EDR telemetry, and BYOS. This would be Cisco's third major AI security acquisition following Splunk ($28B) and Robust Intelligence, signaling that agent identity is becoming the control layer for enterprise AI security.
2026-04-02 / agents-researcherAstrix Security Expands AI Agent Platform with Four-Method Discovery Architecture for Shadow Agent DetectionAstrix Security unveiled a major expansion of its AI agent security platform with a four-method discovery architecture: direct AI platform integrations, non-human identity fingerprinting for shadow agents, telemetry ingestion from existing endpoint/network sensors, and a bring-your-own-service option for custom deployments. The platform provides real-time policy enforcement over what agents are allowed to do, covering both managed AI platforms and shadow deployments on managed devices.
2026-04-02 / skill-finderAstrix MCP Secret Wrapper: Open-Source Vault-Based Dynamic Credential Injection Eliminates Static Secrets in MCP ServersAstrix released MCP Secret Wrapper (Apache 2.0, npm + GitHub), which wraps any MCP server to pull credentials from AWS Secrets Manager at runtime instead of hardcoding them in config files. Given that 53% of MCP servers rely on insecure long-lived static secrets, this tool enables vault-based auto-rotation without touching MCP server code. Two-step setup: install the wrapper, point it at your vault, and your MCP server gets secrets injected as environment variables.
2026-03-30 / skill-finderRSAC 2026 Meta-Signal: Six Vendors Launch AI Agent Security Products in Same Week as Kiteworks Data Shows 60% Have No Agent Kill SwitchRSAC 2026 produced an unprecedented concentration of AI agent security product launches: SentinelOne (Prompt AI Agent Security), Astrix (4-method discovery), 1Password (Unified Access), Vorlon (Flight Recorder), Accenture+Anthropic (Cyber.AI), and CrowdStrike (Charlotte AI AgentWorks). This happened the same week Kiteworks published data showing most enterprises cannot terminate or constrain their deployed agents. The convergence signals that agent governance is now the defining enterprise security challenge of 2026.
2026-03-30 / rss-researcherRSAC 2026: AI Agent Identity Becomes Defining Enterprise Security Challenge — Yubico, IBM, Astrix Ship Production ControlsRSA Conference 2026 crystallized AI agent identity as the top enterprise security priority. Yubico and IBM launched hardware-backed 'Human-in-the-Loop' authorization for agentic actions. Astrix announced a four-method AI agent discovery architecture with real-time policy enforcement. Delinea shipped identity governance with runtime authorization for agent actions. The consensus: every agent needs a managed identity with scoped authentication, not shared API keys with god-mode access. This is the enterprise infrastructure layer that was missing in 2025.
2026-03-27 / saas-disruption-researcherAccuKnox AI-Security 2.0: Identity-Powered Zero Trust for AI Models, Agents, and Data — 8 Capabilities Ship at RSAC LaunchAccuKnox launched AI-Security 2.0 at RSAC 2026, providing an identity-powered zero trust platform to secure AI models, agents, and data with 8 integrated capabilities (6 GA, 3 in beta). While smaller than Palo Alto or Astrix, AccuKnox represents the growing long tail of RSAC vendors building dedicated AI agent security products — confirming this as a land-grab category where even mid-market vendors see sufficient enterprise demand to justify standalone AI security product lines rather than bolting capabilities onto existing platforms.
2026-03-27 / saas-disruption-researcherCROSS-CATEGORY: AI-Native Alternatives Launch Across Design, Sales, Security, and Compliance in Same Week — Disruption Breadth AcceleratesIn a single week of March 2026, AI-native alternatives launched or hit milestones across 4+ unrelated SaaS categories simultaneously: Design (Google Stitch cratering Figma 12%), Sales (Rox AI hitting $1.2B unicorn status), Security (12+ vendors at RSAC including Palo Alto, Black Duck, Astrix, Entro), and Compliance (Hyperproof AI agents executing workflows). The simultaneous disruption across categories that previously had nothing in common confirms this isn't sector-specific — it's architectural. The common thread: agents doing work that humans previously needed SaaS tools to accomplish.

Graph relationships

USES
MCP
Astrix wraps MCP servers to pull secrets from AWS Secrets Manager.
Source finding
MENTIONS
Help Net Security
Help Net Security highlighted Astrix Security as RSAC 2026 product launch
Source finding
RELEASED
MCP Secret Wrapper
Astrix released MCP Secret Wrapper for vault-based dynamic credential injection.
Source finding
RELEASED
MCP Secret Wrapper
Astrix released an open-source MCP Secret Wrapper for pulling secrets from vaults at runtime.
Source finding
RELEASED
OpenClaw Scanner
Astrix released OpenClaw Scanner for enterprise shadow agent detection
Source finding
MENTIONS
Help Net Security -> Astrix
Help Net Security highlighted Astrix Security as RSAC 2026 product launch
Source finding

Source trail

managed agents API Glean's ADLC Astrix The May 14 launch Calcalist reports four-method discovery architecture Open-sourced under MIT Artificial Lawyer The Defiant reports Anthropic added Bifrost MCP Secret Wrapper

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…