Identity: The Missing Link in Agentic AI Security – Astrix Named in New Gartner® Report
Astrix Security has been recognized as an Agentic AI Security highlighted vendor in the latest Gartner report, Emerging Tech: Top-Funded Startups in AI TRiSM: Agentic AI and Beyond. The report examines how organizations are responding to the growing trust, risk, and security challenges introduced by AI systems and highlights identity as a foundational control for securing AI agents.
TL;DR
- Gartner® Emerging Tech: Top-Funded Startups in AI TRiSM: Agentic AI and Beyond includes Astrix Security in the Agentic AI Security category, one of five core pillars in the AI TRiSM framework.
- Gartner positions Agentic AI Security as a critical and rapidly growing area as enterprises move from AI experimentation to large-scale deployment of autonomous agents.
- Why this matters: Gartner forecasts that over 60% of enterprises will secure the AI lifecycle through AI security platforms by 2030, up from less than 10% in 2025. Gartner also predicts that AI systems will initiate 50% of all service requests by 2030, driven largely by agentic AI.
- Gartner identifies identity and access management for AI agents as a key blocker preventing agentic AI deployments from reaching enterprise scale, citing gaps in authorization, governance, and runtime control.
- This recognition reinforces the core problem Astrix is built to address: securing AI agents and the non-human identities that power them.
- What security leaders need for Agentic AI Security:
- Discovery and governance of AI agents and non-human identities, including shadow adoption.
- Runtime authorization and policy-based access controls for autonomous agents.
- Contextual inspection of agent activity, transactions, and sessions across tools, APIs, and data sources.
- Guardrails that scale across multi-agent workflows and third-party or embedded AI.
What the Gartner report covers
Gartner’s Emerging Tech: Top-Funded Startups in AI TRiSM: Agentic AI and Beyond analyzes how enterprises and vendors are responding to the rapid expansion of AI adoption, particularly as AI systems become more autonomous and interconnected.
The report examines 120 early-stage startups across the AI TRiSM landscape and tracks more than $1.7B in venture funding to identify where investment, innovation, and enterprise demand are converging. Gartner organizes this landscape into five core categories:
- AI Security Platforms
- Agentic AI Security
- Information Governance
- AI Governance
- AI Security Testing
A central theme of the research is that AI risk is no longer limited to models and prompts. As organizations deploy AI agents that can initiate actions, access systems, and interact with other agents, the security challenge shifts from model behavior to operational control.
Gartner frames agentic AI as a tipping point where traditional security, governance, and IAM approaches begin to break down.
Within this context, Agentic AI Security emerges as one of the most critical and heavily funded categories in AI TRiSM. Gartner highlights that while enterprises are eager to adopt autonomous agents for productivity and automation, many lack the foundational controls required to deploy them safely at scale.
How Agentic AI is changing the enterprise attack surface
Gartner frames this shift as a material change to enterprise risk. AI agents are autonomous by design, operate across trust boundaries, and rely on non-human identities to function. These identities are often poorly inventoried, over-privileged, and disconnected from enterprise IAM workflows, introducing new attack vectors that traditional security models were not designed to handle.
Data points shaping the market
Gartner’s research highlights how quickly this shift is happening:
- In 2025, fewer than 10 percent of enterprises secured the AI lifecycle through dedicated AI security platforms.
- Gartner expects that number to exceed 60 percent by 2030.
- By 2030, AI systems are predicted to initiate 50 percent of all service requests, driven largely by agentic AI.
- 35% of senior cybersecurity leaders suspect unsanctioned use of GenAI but lack concrete visibility into where and how it is being used.
Together, these data points reinforce a consistent theme. AI agents are being deployed faster than enterprises can govern them, and identity gaps are a primary source of risk.
How Astrix is featured
Gartner categorizes Astrix under Agentic AI Security, one of five core pillars in the AI TRiSM framework. AI TRiSM (Trust, Risk, and Security Management) is a Gartner-developed framework that ensures AI model governance, trustworthiness, fairness, reliability, and data protection to enable responsible AI adoption.
Gartner identifies five core categories within this space, and Agentic AI Security has emerged as one of the most critical, receiving over $520 million in collective VC funding among examined startups.
Gartner, Emerging Tech: Top-Funded Startups in AI TRiSM: Agentic AI and Beyond, Mark Wah, David Senf, Tarun Rohilla, 13 January 2026. GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
Gartner definition of Astrix
“Astrix Security takes an identity-first approach to AI agent security, securing AI agents and non-human identities at scale and enabling the discovery and governance of shadow adoption, threat detection for active usage, and policy-based control of agent access via its agent control plane.”
Gartner Recommendations for 2026
For C-level executives looking to stay ahead of the AI vendor race, the report offers clear guidance:
- Prioritize IAM for AI Agents: Integrate with identity providers and implement runtime authorization to ensure robust controls are applied to autonomous agents.
- Address the Agent Ecosystem: Quickly develop security measures that align with AI agent platforms like Microsoft Copilot Studio, Google Vertex AI, and LangGraph.
- Implement Layered Controls: Blend AI governance with runtime inspection to oversee agent operations at the API level.
The Path Forward
As the “agent-to-agent” (A2A) ecosystem matures, the need for an identity-first security layer will only grow. At Astrix, we are committed to providing the solution necessary to secure AI agents and the non-human identities powering them, ensuring that as your AI grows more autonomous, your security stays resilient.
Astrix delivers the “AI agent discovery, observability and control” that the report calls for. Our platform empowers security and identity teams to:
- Discover every AI agent along with its associated non-human identities (NHIs) and machine credentials — including API keys, service accounts, secrets, and more across environments.
- Secure them through continuous security posture management, threat detection & remediation by surfacing excessive privileges, vulnerable configurations, abnormal activity, and policy violations.
- Deploy new secure-by-design AI agents safely with Zero Trust access policies, just-in-time credentials, and audit trails enforced through the Astrix’s Agent Control Plane (ACP).
Ready to see how Astrix helps enterprises discover, secure, and deploy AI agents responsibly across the enterprise? Book a demo today.
Gartner, Emerging Tech: Top-Funded Startups in AI TRiSM: Agentic AI and Beyond, Mark Wah, David Senf, Tarun Rohilla, 13 January 2026.
GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.
Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
