Small teams don't have time to stitch together five tools and hope it works.

Apollo gives you everything you need to find leads, reach them, and close deals — all in one place:

Stop juggling tools and start building pipeline that scales.

With Apollo, the AI revenue engine powering 4M+ users.

Sign up for free

-THE WIRE  THIS WEEK IN IDENTITY

N°01 · PLATFORM

Entra Agent ID is generally available, giving AI agents first-class identity objects with purpose-built constructs, specialized OAuth flows, and governance controls. Agent inventory moved to Agent 365 on May 1, while Entra stays the identity foundation underneath it. When the directory most enterprises already run ships agent identity as core infrastructure, the market has decided the question.

→ Microsoft Learn

N°02 · M&A

Cyera is a data security company. Oasis is a non-human identity governance platform. The letter of intent was signed in late July, mostly cash with the balance in Cyera shares. No definitive agreement or closing date has been announced yet, so treat the number as reported rather than final. Two companies building adjacent halves of the same problem decided the answer is one platform.

→ TechCrunch

So let’s talk about the IGA Market shall we,

At RSAC 2026, five vendors shipped agent identity frameworks in the same week. Cisco, CrowdStrike, Palo Alto Networks, Microsoft, and Cato Networks. Cisco put agent discovery into Identity Intelligence, agentic IAM into Duo, and MCP policy enforcement into Secure Access. Palo Alto shipped Prisma AIRS 3.0 with an agentic registry and an agentic identity provider. When that many platform vendors ship the same capability in the same week, the capability stops being a differentiator.

The M&A says the same thing from the other direction. CyberArk bought Zilla Security for $165 million plus a $10 million earn-out. Cisco bought Astrix for roughly $400 million. Delinea closed StrongDM in March. Rubrik picked up Strata in June. Cyera signed for Oasis at about a billion.

Exactly one of those is an IGA acquisition. That is the part worth sitting with. The others are PAM vendors, backup companies, and data security platforms buying pieces of the identity control plane. Governance is getting absorbed into platforms instead of sold as its own category.

Practitioners feel this at renewal. Omada surveyed 502 organizations for its 2025 State of Identity Governance report and 58.8% called total cost of ownership restrictive. Omada sells IGA, so read the number with that in mind. It still landed before platform bundling accelerated. You are paying standalone prices for capability that keeps appearing inside suites you already license.

Here is the question the market has not answered. If the commodity solves yesterday's problem, what solves tomorrow's?

Traditional IGA was architected for human identities. It assumes a person with a name, a manager, a department, and a lifecycle that runs from hire to termination. AI agents have none of that. They have contexts, and those contexts shift mid-session based on what they are doing, what tools they have called, and what data they have touched. SailPoint announced Agentic Fabric in May to extend its model outward across agents and machine identities. Extending the platform is a reasonable commercial move for any vendor with an installed base to protect. It also inherits the assumptions of the model being extended.

So IGA is compressing from two directions at once. Below it, commodity pricing and platform bundling. Above it, an agent governance problem the existing architecture was never designed for.

For practitioners, the timing works in your favor. The era of $2M implementations and 18-month timelines is ending. The organizations that assume the new commodity also handles agentic governance are going to be wrong in a way that gets expensive to correct.

If someone on your team is signing an IGA renewal this quarter, forward this to them. They should know what the market looks like before they sign.

-THE IDENTITY 50  A LIVING WATCHLIST

Every deal named above is tracked on the Identity 50, a watchlist of fifty vendors across orchestration, authorization, identity security, CIAM, non-human and agentic, PAM, and emerging. Each entry carries status, funding, and a recent sourced signal, plus a change log showing what moved and when. Nine of the fifty are already acquired. That count is the argument of this issue in one number.

It rebuilds itself as the market moves, so it is current when you open it rather than current when I last had time to edit it.

→ See the Identity 50

Think a vendor belongs on it? Reply to this email and tell me who.

Commoditization is good news for your budget and bad news for your assumptions. The platforms are absorbing governance because governance for humans is a solved problem. Governance for agents is not, and nobody is shipping that yet.

See ya next week.