About Astrix Security
Astrix Security sells software that maintains a real-time inventory of all AI agents, MCP servers, and NHIs, with context to understand risk and business usage. Astrix Security identifies and remediates AI agents and NHIs with excessive privileges, vulnerable configurations, abnormal activity, and policy violations. Astrix Security provisions secure-by-design AI agents with short-lived credentials, just-in-time, precisely scoped access, and policy at creation. Astrix Security offers Agent Control Plane (ACP), which lets you deploy AI agents rapidly and responsibly without access chaos or compliance risk.[1][7][10]
Astrix says it protects enterprises from AI agents and Non-Human Identities (NHIs) that fall outside traditional IAM. Agents and NHIs outnumber humans 100:1, yet remain outside IAM and audit review cycles, according to Astrix. Employees grant agents NHIs with broad, often static, permissions to corporate assets, according to Astrix. Astrix also says many agents operating autonomously remain shadow agents, without clear human ownership.[8]
On discovery, Astrix Security automates discovery of all agents, whether custom, third-party, or home-grown, including shadow, unregistered agents. Astrix Security connects in minutes to discover AI agents, MCP servers, non-human identities, and secrets across an environment. The inventory covers NHIs such as service accounts, OAuth apps, API keys, SSH keys, and IAM roles. Each AI agent, NHI, and secret automatically receives a risk score, based on dynamic access analysis, behavioral patterns, and security findings.[5][9]
On securing agents, Astrix Security describes posture management that reduces excessive privileges, fixes configuration weaknesses, and automatically assigns human ownership for each agent. Allow, flag, and block rules can be scoped by user, department, platform, and resource type, and are evaluated before any action is executed. ML-based engines analyze agent behavior across access patterns, IP call addresses, permission changes, secret usage, and connected apps or vendors to surface anomalies. Astrix Threat Center consolidates fragmented alerts into prioritized Threat Cases.[5][10]
On deployment of agents, security admins pre-define policies for AI agents with granular, least-privilege permissions for various use cases. Developers launch an agent from their preferred tool, selecting a pre-approved permission profile for onboarding. Security admins can then view and manage the deployed agent in the inventory with its policies attached. Managed agents receive instant access backed by short-lived, precisely scoped tokens that auto-expire. Astrix Security also lets customers use discovery and security to uncover shadow agents or those with sensitive permissions, then onboard them into ACP with precise, least privilege access.[7]
Astrix Security offboards NHIs automatically when employees leave, vendor contracts end, or identities are inactive. Astrix Security discovers exposed secrets and provides context and risk prioritization to remediate them. Astrix Security integrates with Slack notifications, Jira tickets, API automations, and ITSM, SIEM and SOAR systems. Astrix Security generates compliance reports on NHI usage, risk, and lifecycle events and simplifies audits for frameworks like PCI DSS, SOX, and GDPR.[11][12][13]
On how it is delivered, Astrix Security is agentless, non-proxy, and API-based, reads metadata only, and requires minimal permissions. Astrix Security says a consolidated, real-time inventory of all AI agents, NHIs, and secrets is available within hours. Astrix Security correlates data across cloud, SaaS, on-prem, databases, Vaults, CI/CD, and AI platforms to uncover shadow agents and their owners. Astrix Security says it protects environments from NHI risks, from AWS, Azure, ChatGPT, GitHub and BigQuery to Salesforce, Office365, and CoPilot.[5][9][14]
Since 2021, Astrix says it has pioneered and defined NHI security, helping Fortune 1,000 enterprises extend traditional IAM to cover NHIs. Alon Jackson is CEO and co-founder of Astrix. An international travel agency used Astrix to reduce the number of new high-risk NHIs by 97%. A Senior Director, Identity Security at Workday describes Astrix as a strategic solution to provide visibility and control of non-human identities. Astrix Security lists an address at 33 Arch Street Boston, MA 02110, USA. Astrix Security is now part of Cisco. Astrix has ended standalone sales of new licenses effective June 30th, 2026, and existing customers continue to receive the service and support outlined in their current agreements.[1][5][8][9][11][13][14][15]
Astrix Security on the record