*July 31, 2026 Update: We have completed the acquisition of WideField Security. Welcome to Cisco!

We are excited to announce our intent to acquire WideField Security Inc. WideField’s technology will be integrated into Splunk to boost its Agentic SOC capabilities by helping normalize and correlate identity, session, and activity telemetry from a variety of sources. This will enable Splunk to assemble context across human, non-human, and AI-agent activity, including signals from Cisco Identity Intelligence.

The rapid deployment of AI agents, autonomous workloads, and non-human identities – all operating at machine speed – introduced a new class of security risk. Beyond unauthorized access, the challenge also includes authorized entities taking unsafe actions in the wrong context, which can cause significant damage before any human team has a chance to respond. Enterprises just weren’t prepared for the security problem that the rise of agentic AI created.

Addressing this requires a new approach to security that can detect suspicious behavior even from authenticated users and approved AI agents. It calls for three interconnected challenges to be tackled:

• Protect agents from the world with clear operational guardrails to ensure agents cannot be manipulated or exploited by bad actors.
• Protect the world from agents, ensuring that the AI agents operating within their environments are known, accountable, and restricted to only the access and actions they need to perform their intended tasks.
• Detect and respond to threats at machine speed and scale, mitigating the operational and security impacts from misaligned or compromised agents.

Identity, in today’s agentic AI era, is not just focused on who logged in but who, or what, took action and under which authority, which session, and with what blast radius. Identity is now foundational to how organizations govern, secure, and respond to human activity and non-human, such as AI agents, service accounts, workloads, automation identities, etc. Detections must translate into evidence-based decisions that help security teams triage faster, investigate with confidence and respond safely, with human approval where required.

For Agentic Security Operations that enable autonomous responses, it is imperative to have deterministic data pipelines that correlate telemetry from endpoints, identity systems, networks, and cloud in a format optimized for AI consumption.

WideField’s technology enables this telemetry to be utilized as part of AI-driven security workflows and reasoning at scale. Utilizing identity telemetry and intelligence from a wide variety of sources, including Cisco Identity Intelligence, Splunk’s Agentic SOC will be able to assemble session-level signals necessary for deeper analysis by security analysts, allowing these agents to infer whether an action belongs to a legitimate active session or a potentially malicious one. Furthermore, WideField’s technology will strengthen the Cisco Data Fabric by helping incorporate deeper identity and session intelligence, giving customers the context they need to operate AI safely and at scale, even beyond security operations.

With the acquisition of WideField, Cisco is continuing to invest in developing and delivering differentiated, enterprise-grade agent and agentic security solutions that address the real-world challenges facing today’s organizations. Building on the recent additions of Astrix Security and Galileo, WideField reinforces Cisco’s commitment to delivering an integrated trust layer for the agentic AI era — one that spans identity, runtime behavior, visibility, and enforcement — distinguishing Cisco as a trusted partner for enterprises seeking to operationalize AI with confidence and control.