SECURITY ATLAS / EVALUATION BRIEF
Cisco / Astrix Agent Identity Security
Research reviewed: 2026-10-18
https://atlasofsecurity.com/landscape/vendors/cisco-astrix-agent-identity/

THE ATLAS TAKE
Astrix agent and non-human identity capabilities remain useful research context, but this is explicitly transition coverage. The official site states standalone new-license sales ended June 30, 2026, while existing customers continue under their agreements and capabilities move into Cisco over time. Atlas would prioritize current support, inventory continuity and a documented migration path rather than recommend buying the historical standalone offering. The underlying identity work remains important: discover owners and permissions, constrain credentials and prove lifecycle changes. Future Cisco integration must be verified as an actual available product and contract.

SCOPE
This is transition coverage for Astrix capabilities and existing customers. Astrix states that standalone new-license sales ended June 30, 2026.

WORTH A LOOK WHEN
Existing Astrix customers reviewing agent/NHI governance, support continuity and transition planning.

THINK TWICE WHEN
A new buyer expects to purchase the historical standalone license without confirming a current Cisco offer.

IMPLEMENTATION
1. Confirm the existing agreement
Record support contacts, entitled functions, current renewal terms and any documented transition commitments.

2. Preserve operational continuity
Verify inventory, configuration and audit export and identify connector dependencies before any migration.

3. Revalidate identity lifecycle
Use a disposable agent to test scoped credentials, approved permission cleanup and target-side loss of access.

OPERATING REALITY
Identity owners still need to maintain connectors, ownership, credential policies and remediation while transition plans develop. Existing customers should preserve usable inventory and audit exports and validate support responsibilities. Do not postpone access cleanup simply because future packaging is uncertain; verify current capabilities against the agreement actually in force.

COMMERCIAL CONSIDERATIONS
For existing customers, compare renewal/support and any proposed Cisco transition against the current contract. New buyers need an available Cisco product and written capability map rather than a historical Astrix quote.
- Existing agreement and support/renewal terms
- Current Cisco packaging and transition requirements
- Connector continuity, exports and lifecycle operations

EVALUATION PLAN / PROPOSED TESTS, NOT COMPLETED RESULTS
1. Reconcile a known agent/NHI roster
Acceptance evidence: Keep ownership, permissions and missing-coverage evidence.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

2. Exercise one currently supported scoped credential lifecycle
Acceptance evidence: Verify target access before and after expiry/revocation.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

3. Export an existing-customer inventory and audit sample
Acceptance evidence: Document usable identifiers, support responsibilities and transition gaps.
Owner: __________  Pass criterion: __________
Observed result: __________  Evidence location: __________

QUESTIONS FOR THE VENDOR
- Which licenses remain available to new customers?
- Which capabilities have moved into a Cisco offering?
- How are existing integrations supported during transition?

EVIDENCE GAPS
- Atlas has not independently tested identity discovery or credential enforcement.
- Confirm current Cisco availability, existing-customer support and any migration commitments in writing.

SOURCES
Astrix: Cisco acquisition and standalone-sales notice (Lifecycle)
https://astrix.security/
Astrix: Agent Control Plane provisioning model (Product information)
https://astrix.security/product/deploy-and-provisions-ai-agent-discovery/
Astrix agent discovery and visibility (Product information)
https://astrix.security/product/ai-agent-discovery/

Use synthetic fixtures in an authorized environment. Agree rollback and acceptance criteria before enforcement.
Documentation research and Atlas analysis. Independent hands-on effectiveness, effort, and complete price remain unassessed.