Cisco To Buy WideField Security To Harden Splunk Agentic SOC

Cisco announced its intent to acquire Santa Clara identity-security startup WideField to give Splunk's Agentic SOC deeper session and non-human identity telemetry as AI agents proliferate inside enterprises.

Cisco To Buy WideField Security To Harden Splunk Agentic SOC

Cisco has announced its intent to acquire WideField Security, a Santa Clara identity-lifecycle security startup, to embed session-level and non-human identity intelligence into Splunk's Agentic Security Operations Center. Terms of the deal, disclosed by Cisco SVP and Splunk GM Kamal Hathi on June 18 and highlighted again in this week's cybersecurity M&A tallies, were not made public. WideField had previously raised more than $11 million in Series A funding.

Why Identity Became The Agentic-AI Blast Radius

WideField's platform discovers human and non-human identities, maps exposure across accounts and roles, detects weak authentication paths and monitors sessions in real time using behavioral analysis. Cisco says that telemetry will be normalized and correlated inside Splunk to "assemble context across human, non-human, and AI-agent activity," giving analysts the session-level signals needed to tell a legitimate agent action from a compromised one. It is a direct answer to a security problem enterprises did not see coming: authorized AI agents taking unsafe actions in the wrong context faster than any human team can respond.

WideField Security identity graph

Third AI-Security Tuck-In This Year

The WideField deal is the third bolt-on Cisco has made in agentic security in 2026, following its earlier Cloud Control launch and the acquisitions of Astrix Security and Galileo. Each fills a slot in what Cisco calls an "integrated trust layer" spanning identity, runtime behavior and enforcement. The Cisco Data Fabric picks up WideField's session intelligence, Splunk uses it to enrich detections, and Cisco Identity Intelligence stitches everything into the SOC pipeline. It also cements the ex-Splunk franchise, acquired for $28B in 2024, as Cisco's front line in the AI security wars.

An M&A Wave With No Ceiling In Sight

SecurityWeek tracked 37 cybersecurity M&A deals in June and Momentum Cyber counted 219 transactions worth a disclosed $9.1 billion in H1 2026, on track for a record year. AI security is the dominant sub-theme, with recent activity ranging from Accenture's $4.2B Dragos, runZero and NetRise deal to Nebius closing its $643M Eigen AI acquisition. Cisco's WideField play is smaller by dollar value but strategically pointed: it plugs the identity gap Cisco needed to sell AI-native SOCs to nervous CISOs.

Reporting based on coverage from Cisco Blogs, SecurityWeek and SDxCentral.

Category: M&A

Tags: Cybersecurity Enterprise AI Mergers & Acquisitions AI Infrastructure agentic AI

Related Articles