IBM buys AuthMind to monitor how AI agents use credentials
IBM plans to connect AuthMind, which monitors the use of credentials, to HashiCorp Vault, the tool that gives them.
On 12 November 2026, IBM said it bought AuthMind, a company that monitors how identities of persons, machines and AI agents use access. IBM plans to connect AuthMind to HashiCorp Vault, its tool for credentials and secrets. This helps teams see how an agent works after it logs in. IBM gave no price and no test results.
How it works
AuthMind maps the connections between identities and resources in an identity activity graph. It tracks how identities use apps, systems and data, and flags unusual access and too many permissions. IBM says network traffic analysis can find shadow agents, which are agents that no one at the company controls.
The proof
IBM gave no test results. AuthMind did work with IBM before to find risks for AI agents. IBM Ventures invested in AuthMind in 2023.
What is not known
IBM gave no price and no date for the full connection. The connection is a plan. Only IBM says the connection helps.
Insight: IBM buys the control that starts after login
In October 2026, Descope added an approval step before an agent gets access, and Self Labs hid card numbers from agents. IBM pays for the step after login. This reads as a move from who an agent is to how it works. The next move to monitor is if other vault vendors buy tools that monitor use. A correct credential does not show safe use.
Sources
Posted
