Notes
In short: Notes record dated events that matter to AI agent governance buyers: acquisitions, product launches and framework work. Each note says what happened and cites the source. It explains where the product sits in the register and lists what we will recheck at the next monthly review. A feed is available for readers.
What has happened so far?
- NIST NCCoE publishes comments on agent identity. NIST NCCoE published its summary of comments on the software and agentic AI identity concept paper on 29 September 2026. What it covers and what comes next.
- Cyera completes its Oasis Security acquisition. Cyera completed its acquisition of Oasis Security on 3 September 2026. Oasis now operates as Cyera Identity, which leads the register on audit evidence.
- Cisco completes Astrix and SailPoint completes Entro. Cisco completed its Astrix Security deal and SailPoint completed its Entro deal on 29 June 2026. What both mean for agent discovery and ownership.
- NewCore emerges from stealth with $66M. NewCore emerged from stealth on 15 June 2026 with $66M from Cyberstarts, Index Ventures and Evolution Equity Partners. What it documents and where it ranks.
- Palo Alto Networks introduces Idira. Palo Alto Networks introduced Idira on 12 May 2026. What the register found in public material, where Idira scores well and which controls were not found.
- Palo Alto Networks completes its CyberArk acquisition. Palo Alto Networks completed its acquisition of CyberArk on 11 February 2026. What it means for buyers comparing privileged access and agent governance.