Silverfort Acquires Fabrix Security to Build Autonomous Identity Security for the AI Era

Silverfort has announced its acquisition of Fabrix Security, bringing together two companies focused on addressing one of the fastest-growing challenges in cybersecurity: how to control access in environments increasingly driven by AI. The deal centers on combining Silverfort’s real-time enforcement capabilities with Fabrix’s AI-native decisioning engine, with the goal of enabling organizations to manage access across human users, machines, and autonomous agents.

The acquisition comes at a time when identity security is under pressure. Enterprise systems are no longer limited to employees logging into applications. Instead, they are filled with APIs, services, and AI agents continuously interacting with infrastructure, often without direct human involvement. Traditional approaches built around static permissions and predefined roles are struggling to keep pace with this shift, especially as systems become more dynamic and operate at machine speed.

The Shift from Static Rules to Real-Time Decisions

Silverfort has built its platform around enforcing security decisions at runtime, meaning access is evaluated at the exact moment it is requested rather than relying on assumptions made in advance. This approach already gives organizations a way to monitor and control access across both cloud and on-premise systems without disrupting existing infrastructure.

The addition of Fabrix introduces a new layer of intelligence into that process. Fabrix was designed from the ground up as an AI-native identity security company, focusing on understanding context, intent, and behavior in real time. Instead of simply checking whether an identity has permission, its technology evaluates what that identity is trying to do and whether the action makes sense in the current context.

This distinction becomes critical as AI agents enter the picture. These systems do not behave like human users. They operate continuously, interact with multiple services simultaneously, and can trigger complex chains of actions that are difficult to predict. A static rule that works for a human user can quickly become a liability when applied to an autonomous system.

Why Identity Security Is Breaking Down

The explosion of non-human identities is one of the most important but under-discussed challenges in cybersecurity. Enterprises now manage thousands, sometimes millions, of machine identities, each with its own permissions and behaviors. Adding AI agents into that mix introduces another level of unpredictability, as these systems can adapt and evolve in ways that traditional security models were never designed to handle.

This is where the concept of runtime decision-making becomes essential. Instead of trying to anticipate every possible scenario in advance, the system evaluates each access request in real time, using all available context to determine whether it should be allowed. That includes analyzing identity relationships, historical behavior, organizational roles, and the intent behind the request.

Silverfort’s existing enforcement capabilities combined with Fabrix’s decisioning engine aim to create a system that can not only make these decisions instantly but also enforce them across the entire environment without introducing friction.

Building Toward Autonomous Identity Security

The combined vision from Silverfort and Fabrix is what they describe as autonomous identity security. In practical terms, this means moving away from human-managed access control toward a system where AI continuously evaluates and enforces decisions without requiring constant intervention.

This approach reflects a broader trend across cybersecurity, where AI is increasingly being used not just to detect threats but to actively prevent them in real time. In the context of identity, this could fundamentally change how organizations manage access, shifting the focus from policy creation to continuous validation.

The idea is not to eliminate human oversight entirely, but to remove the bottlenecks that prevent security teams from keeping up with the speed of modern systems. By automating decision-making at the point of access, organizations can maintain control even as their environments become more complex.

Why This Acquisition Matters Now

The timing of this acquisition is significant. Enterprises are accelerating their adoption of AI-driven tools, from copilots to fully autonomous agents capable of executing multi-step workflows. These systems promise efficiency gains, but they also introduce new risks that are not well addressed by existing security frameworks.

Without real-time controls, an AI agent with excessive permissions or flawed logic can create cascading issues across systems. Even small mistakes can scale quickly when actions are executed automatically and at high speed. This makes identity security one of the most critical layers in the modern security stack.

By combining runtime enforcement with AI-driven decision-making, Silverfort and Fabrix are positioning themselves to address this challenge directly. Their approach suggests that the future of identity security will not be defined by who has access, but by what actions are allowed in any given moment.

Implications for the Future of Identity Security

This acquisition highlights a shift in how identity security is likely to evolve as AI systems become more autonomous. Static permissions and predefined roles are becoming harder to manage in environments where machine and agentic identities act continuously and at high speed. In response, security models are moving toward real-time evaluation, where access decisions are made based on context and behavior at the moment they occur.

This shift will likely change how security teams operate. Instead of manually defining access rules, the focus may move toward monitoring automated decisions, auditing outcomes, and setting boundaries for how systems behave. That introduces new challenges around transparency and accountability, particularly when AI systems are making critical access decisions.

At the same time, real-time decisioning raises practical concerns. Systems must balance speed with accuracy, as mistakes could either disrupt operations or expose vulnerabilities. As organizations adopt more AI-driven infrastructure, identity security will need to adapt without introducing unnecessary complexity or risk.