Cisco Expands Security Portfolio With Astrix and WideField Acquisitions

Cisco is broadening its security strategy with the acquisitions of Astrix and WideField, a move that highlights how quickly non-human identities are becoming a priority for enterprise defenders. The deals reflect a wider industry shift toward using identity as the main control point for securing automated systems, AI agents, service accounts and other machine-driven workloads.

Security vendors have increasingly argued that traditional perimeter-based defenses are no longer enough for environments where software agents can act independently and access sensitive systems. In that model, organizations need better visibility into who — or what — is making requests, what permissions are being used, and whether those privileges are still appropriate.

Astrix and WideField appear to fit that direction. By bringing their capabilities into its security stack, Cisco is positioning itself to help customers manage the growing number of non-human identities inside modern IT environments. Those identities often outnumber human users and can be difficult to track because they are created for applications, integrations, workflows and automation tools rather than for employees.

The acquisitions also suggest that Cisco sees identity governance as an increasingly important layer in security operations. As companies adopt more AI-enabled systems and automate more business processes, the risk of excessive permissions, stale credentials and hidden access paths rises. Strengthening controls around non-human identities can help reduce those risks and give security teams more context about machine-to-machine activity.

Why it matters

• Non-human identities are becoming a larger attack surface in enterprise networks.
• Security providers are moving identity management closer to the center of their platforms.
• AI-driven and automated workflows can create access sprawl if they are not monitored carefully.

Cisco’s latest acquisitions place it alongside other security platform vendors betting that identity will play a larger role in defending the “agentic” enterprise. Rather than treating identity as just one piece of access management, the company is signaling that it expects identity to become a core layer for controlling both human and machine activity.