IBM Buys AuthMind to Monitor AI Agent Identity and Access

Summary
IBM says AuthMind will help discover AI agents, monitor their behavior after credentials are issued, and revoke access when activity falls outside authorized policies.
Key points
- IBM bought AuthMind, an identity security startup founded in 2020.
- IBM says AuthMind can discover sanctioned and unsanctioned agents at the network layer, including external agents attempting to enter an enterprise.
- AuthMind analyzes behavioral and network signals, assigns risk scores, and can alert security operations teams and other security tools.
- IBM says the technology can revoke or sever credentials in real time when an agent or privileged identity acts outside authorized policies.
- AuthMind is intended to complement HashiCorp Vault's short-lived credentials with post-issuance monitoring and boundary controls.
- IBM Verify integrates human identity management, agent identity, and privileged access management, according to the company.
Article Details
- Event Type
- IBM acquisition of identity security startup AuthMind
- Impact
- IBM said the acquisition will extend its agent identity capabilities across discovery, registration, credential management, monitoring, and retirement. AuthMind can discover sanctioned and unsanctioned agents, assess their behavior and risk, and support real-time credential restriction or revocation when activity is outside authorized policies.
People
Vendors
AuthMindThe Armonk, New York-based technology giant said its buy of Washington, D.C.-area AuthMind will make it easier to restrict or revoke agent access when activity is risky or outside its authorized scope, said viceHashiCorpHow AuthMind Works With HashiCorp's Vaulting TechnologyIBMIBM purchased an identity security startup led by the former CEO of Datablink and Cyren to discover agents and monitor credential use after issuance.
Products
HashiCorp VaultHashiCorp Vault establishes secure access through secrets management and dynamic, short-lived credentials, Viswesan said, while AuthMind enforces post-issuance monitoring and boundary control. IBM Verify integrates withIBM Verifycredentials, Viswesan said, while AuthMind enforces post-issuance monitoring and boundary control. IBM Verify integrates with AuthMind to bridge human identity management, agentic identity and privileged access
