Silverfort & SentinelOne unite on AI identity security

Silverfort and SentinelOne have formed a strategic alliance focused on identity security, with an emphasis on securing human and non-human identities in AI-driven workplaces.

The partnership combines Silverfort's identity controls with SentinelOne's detection and response tools across endpoints, cloud workloads and AI applications. The goal is to improve defences against identity-based attacks as organisations deploy more automated systems and software agents.

The agreement comes as security teams face a growing range of digital identities inside corporate networks, including service accounts, application programming interfaces, workload identities and AI agents that can act with little or no direct human oversight.

Recent incidents have underscored the pace of these risks. The companies pointed to a supply chain attack in which the npm credentials of the primary Axios maintainer were hijacked, with the first infection observed 89 seconds after publication. They also cited a trojaned version of LiteLLM that was updated by an autonomous coding assistant; SentinelOne said it blocked the malicious process in under 44 seconds.

Runtime focus

Under the alliance, Silverfort's technology will be used to discover and secure AI agents and other non-human identities at runtime. This will support controls including multi-factor authentication, just-in-time access, adaptive policies and what Silverfort describes as virtual fencing for machine identities.

SentinelOne's Singularity platform will provide detection and response across endpoints, cloud workloads and user identities. By correlating identity and endpoint signals during active incidents, the partners say security teams should have more context when deciding whether to isolate credentials, stop authentication requests or remove malicious activity from systems.

The partnership also includes deeper technical collaboration and joint research, rather than a limited product integration. The stated aim is to tie identity enforcement more closely to automated security operations, so suspicious authentication activity can trigger action at the same time as endpoint or workload alerts.

For customers, this means bringing identity signals into threat detection workflows that have often focused more heavily on devices and software behaviour. It also reflects a broader industry effort to address the growing use of legitimate credentials and trusted access paths by attackers, rather than relying only on malware that is easier to spot in isolation.

Identity risk

Identity security has become more prominent as companies expand their use of cloud services, connected applications and machine accounts. Traditional identity management tools have often struggled to apply consistent controls to older systems, proprietary software and operational infrastructure.

Silverfort has positioned itself around that gap, particularly for organisations that want to apply authentication and access policies without replacing existing identity infrastructure. SentinelOne, known primarily for endpoint security, has been expanding its coverage across cloud, identity and AI-related threats.

That shift reflects changes in the attack surface. In many automated environments, the line between a user, a workload and a software agent is increasingly blurred, especially when those entities can authenticate, retrieve data and execute actions at speed.

"Security architectures built around isolated tools are failing to keep up with modern threats," said Ron Rasin, Chief Strategy Officer, Silverfort. "By unifying runtime identity enforcement with autonomous AI Security, we are helping organisations stop identity-driven attacks before damage occurs, and preparing them to secure the next generation of AI-powered environments. Together, this joint solution enables organisations to secure their entire environment from a single platform, consistently across both cloud and on-premises environments."

According to SentinelOne, the alliance is intended to reduce reliance on separate products that handle identity and endpoint protection independently. The company argues that a unified approach is becoming more important as attacks unfold at machine speed and AI systems begin to initiate actions that once required human approval.

"In cybersecurity, the strongest defense is a unified one," said Melissa K. Smith, Senior Vice President of Global Strategic Partnerships & Initiatives, SentinelOne. "By joining forces with Silverfort, we're moving beyond traditional boundaries to create a security ecosystem that is truly autonomous. We want to take the guesswork out of identity protection. Together, we're delivering a level of visibility and real-time enforcement that neither identity nor endpoint tools could achieve alone, ensuring our customers remain resilient in an increasingly complex threat landscape."