Machine Identity

Akeyless is an established identity security platform delivering secrets management, certificate lifecycle management, encryption/KMS, and secure remote access from a unified SaaS, using patented Distributed Fragments Cryptography (DFC) instead of a self-managed vault. In 2025–2026 it extended the platform to AI-agent identity with ephemeral, task-scoped access.

Astrix Security discovers and secures non-human identities, AI agents, and MCP servers, and provisions secure-by-design agents through its Agent Control Plane with short-lived credentials and just-in-time access. Following its acquisition by Cisco, its capabilities are being integrated into Cisco's identity and zero-trust portfolio.

Corsha secures machine-to-machine and API communication with trusted machine identities and dynamic, MFA-style authentication (m-MFA) for machines, plus connection discovery and identity-based access control. It is purpose-built for operational technology, defense, and critical infrastructure, deployable as SaaS or self-hosted via hardware and virtual control points.

Defakto (formerly SPIRL, rebranded in 2026) is a non-human identity and access management platform built on the SPIFFE standard. It issues dynamic, cryptographically verifiable identities for services, workloads, CI/CD pipelines, and AI agents in place of static credentials and service accounts.

Entro Security is an agentic AI and non-human identity security platform that discovers, classifies, and governs NHIs and secrets across clouds, code, vaults, and collaboration tools, with behavioral threat detection via its NHIDR engine. SailPoint completed its acquisition of Entro in June 2026, making it the NHI and secrets layer of SailPoint's Agentic Fabric.

HashiCorp Vault

Open coreFree tierEnterprise

Widely used secrets management and machine identity platform, available as open source, enterprise and HCP Vault Dedicated.

Oasis Security is a non-human identity management platform covering inventory, ownership, posture, lifecycle, and secret rotation for machine identities, with AI-SPM and intent-aware access controls for AI agents. In July 2026, data-security company Cyera agreed to acquire Oasis for approximately $1 billion, with closing expected later in the year.

Token Security is a machine-first identity security platform that discovers non-human identities and AI agents across cloud, SaaS, and on-prem environments, then manages their posture, lifecycle, and threats. In March 2026 it introduced Intent-Based AI Agent Security, which aligns agent permissions with their stated purpose.