Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across an enterprise.
Visit Website ↗Overview
Astrix Security, founded in Tel Aviv in 2021 by Alon Jackson and Idan Gour, focuses specifically on non-human identities (NHIs) — the API keys, OAuth tokens, service accounts, and third-party app integrations that connect SaaS platforms, cloud services, and increasingly AI agents to each other. These credentials typically outnumber human accounts many times over in a modern SaaS-heavy enterprise, yet historically have had almost no dedicated inventory, ownership tracking, or lifecycle management.
The company’s platform discovers these non-human identities across an organization’s connected app ecosystem, assesses whether they are over-privileged, unused, or exhibiting anomalous behavior, and automates remediation — revoking or rotating risky credentials without requiring engineering teams to manually audit every integration.
Astrix has raised $85 million total, including a Series B led by Menlo Ventures with participation from Workday Ventures, positioning it within the fast-emerging non-human identity/AI-agent-identity security category alongside peers like Oasis Security, Entro Security, and Token Security.
Innovation Matrix Assessment
Has moved quickly from SaaS-to-SaaS integration risk into broader NHI governance and AI-agent identity security as the category has developed.
Automating discovery and remediation of stale or over-privileged API keys and service accounts addresses a real, previously unmanaged operational blind spot for security teams.
$85M raised including a Series B with strategic investment from Workday Ventures is solid growth-stage validation, though modest relative to category leader Oasis Security's $195M.
Non-human identity governance did not meaningfully exist as a dedicated security category before this generation of vendors; it addresses an access-control gap traditional IAM and IGA tools were not built for.
As an early-stage category vendor, independent production-scale efficacy evidence beyond funding announcements and vendor case studies is limited in public sources.
Non-human and AI-agent identities are growing far faster than human identities in most enterprises, making this a structurally growing rather than shrinking problem.
Why CISOs Should Care
Astrix gives security teams visibility into a credential population — API keys, OAuth grants, service accounts — that is typically invisible to conventional IAM tools but is a frequent vector in SaaS supply-chain attacks.
What Makes It Different
It treats machine credentials as first-class identities requiring discovery, ownership, and lifecycle governance, rather than treating them as background plumbing invisible to security tooling.
The Matrix Verdict
72/100 — MEANINGFUL INNOVATOR
A genuine category-creator addressing a real and rapidly growing gap, with solid but not category-leading funding momentum. A Meaningful Innovator, with room to grow into a higher tier as the NHI category matures.
Editorial Note: Claims vs. Verified Findings
Funding figures are corroborated across Crunchbase and press coverage (SiliconANGLE); specific claims about the scale of the non-human-identity problem are largely vendor-framed, though the underlying category concern is independently discussed across the security industry.
Sources
- Astrix Raises $45M for AI Security — https://astrix.security/learn/news/astrix-raises-45m-series-b-to-redefine-identity-security-for-the-ai-era/
- SiliconANGLE — https://siliconangle.com/2024/12/10/astrix-security-secures-45m-strengthen-nonhuman-identity-protection-enterprise/
- Network World — https://www.networkworld.com/article/3479538/astrix-security-manages-non-human-entities-across-networks-and-clouds.html
Alternatives to Astrix Security
Silverfort
Agentless unified identity protection platform that extends MFA, ITDR, and access policy to legacy and unmanaged systems traditional…
Veza
Identity security platform built around an authorization graph that maps who and what can actually access data and…
Oasis Security
Non-human identity management platform discovering, classifying, and governing service accounts, API keys, and machine credentials, now extending to…
Semperis
Identity resilience platform specializing in Active Directory security posture, attack-path discovery, threat detection, and disaster recovery.
Microsoft Entra ID
Microsoft's cloud identity and access platform (formerly Azure AD) providing SSO, conditional access, MFA, and identity governance across…
CyberArk
The market-leading privileged access management vendor, extending from vaulted human credentials into machine identity and secrets management.