IBM Acquires AuthMind to Extend Identity Security for AI Agents
AuthMind maps links between identities and the resources they access, helping security teams spot shadow agents, unusual access and excessive permissions.

IBM acquired AuthMind on Thursday, Nov. 12, adding identity observability and threat detection to its efforts to secure AI agents and extend HashiCorp Vault protections beyond credential issuance.
AuthMind’s technology builds an identity activity graph that maps connections between identities and the resources they access. The map can help security teams spot shadow agents, unusual access patterns and excessive permissions.
IBM’s relationship with AuthMind dates to 2023, when IBM Ventures invested in the company’s seed round. The companies later collaborated through IBM Identity Protection on governance, risk detection and real-time remediation for AI agents and other nonhuman identities.
The acquisition adds to IBM’s earlier work on AI agent safeguards.