Astrix Security: governance profile
Part of Cisco since the acquisition completed on 29 June 2026. Rank 3=, total 7.30.
In short: Astrix Security, now part of Cisco, shares third place at 7.30 out of 10. It has the strongest inventory score in the register, with four discovery methods and owner mapping for every agent and MCP server. Human approval was not found in its public material, so its approval score is low.
1No. 3=
How does Astrix Security score in each area?
| Area | Weight | Score | Reason | Source |
|---|---|---|---|---|
| A1 Inventory and discovery | 15 | 10 | It uses four discovery methods to find agents across every layer. | Source: Astrix at RSAC 2026, read |
| A2 Ownership and accountability | 20 | 9 | It maps every agent and MCP server to its accountable owner. | Source: Astrix product, read |
| A3 Policy authoring and enforcement | 20 | 7 | Its allow, flag and block rules can be scoped by user, department, platform and resource. | Source: Astrix at RSAC 2026, read |
| A4 Human approval and escalation | 15 | 3 | Human approval was not found, and unrecognised activity is flagged instead. | Source: Astrix at RSAC 2026; Astrix product, read |
| A5 Audit evidence | 15 | 8 | It keeps a complete audit trail and adds detection and response. | Source: Astrix product, read |
| A6 Lifecycle and revocation | 10 | 7 | It issues short-lived credentials and applies policy at creation. | Source: Astrix at RSAC 2026, read |
| A7 Buying clarity | 5 | 5 | No public price is published. | Source: Cisco and Astrix Security, read |
Which of the 24 controls does Astrix Security document?
Not found means we did not find the control described in the sources listed. It does not mean the product lacks it.
- GOV-01Agent inventory: documentedSource: Astrix at RSAC 2026, read
- GOV-02Named accountable owner: documentedSource: Astrix product, read
- GOV-03Documented purpose: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-04Least privilege at creation: documentedSource: Astrix at RSAC 2026, read
- GOV-05Short-lived credentials: documentedSource: Astrix at RSAC 2026, read
- GOV-06Per-action policy: documentedSource: Astrix at RSAC 2026, read
- GOV-07Human approval for high-risk actions: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-08No self-approval: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-09Policy testing before go-live: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-10Tool allow-listing and hiding: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-11Revocation and kill switch: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-12Decommission at task end: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-13Per-action audit log tied to a person: partly documentedSource: Astrix product, read
- GOV-14SIEM export: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-15Periodic access review: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-16Shadow agent detection: documentedSource: Astrix at RSAC 2026, read
- GOV-17MCP server registry: partly documentedSource: Astrix product, read
- GOV-18Delegation bounded by the person's permissions: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-19Agent incident response: partly documentedSource: Astrix product, read
- GOV-20Change management for agent permissions: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-21Third-party agent onboarding: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-22Data access boundaries: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-23Evidence retention: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
- GOV-24Board reporting: not found in public materialChecked: Astrix at RSAC 2026; Astrix product; Cisco and Astrix Security, read
What does Astrix Security cost?
No public price is published. Astrix is now part of Cisco, so buying runs through Cisco.
Does Astrix Security work alongside your identity provider?
Not stated in the material we read.
A governance layer runs alongside your identity provider, never instead of it.
How does Astrix Security rank for specific buyer needs?
- Fourth at 7.25Best for regulated industries
- Fifth at 6.15Best for human oversight
- Shares second at 8.50Best for shadow agent inventory
- Fourth at 7.50Best for audit evidence
- Shares fifth at 6.70Best for a small team's fast start
- Shares fourth at 7.20Best for lifecycle and revocation
Head-to-head comparisons
Frequently asked questions
- 6.1 What is Astrix Security best at?
- Its highest area score is inventory, at 10 out of 10. It uses four discovery methods to find agents across every layer.
- 6.2 Where are the gaps in Astrix Security?
- Its lowest area is approval, at 3 out of 10. Human approval was not found, and unrecognised activity is flagged instead. Controls not found in its public material: 15 of 24.
- 6.3 How is Astrix Security priced?
- No public price is published. Astrix is now part of Cisco, so buying runs through Cisco.
Reviewed by The Register desk