Omada acquires EmpowerID to secure AI agents

By Splitfeed EditorialLast updated Sep 26, 2026, 19:17 UTC

On September 24, 2026, identity governance company Omada announced the acquisition of EmpowerID, framing the deal as a direct response to what both companies described as an AI agent security gap in enterprise environments. No financial terms were disclosed in the available announcements. The acquisition is oriented around governing non-human identities, specifically AI agents that operate autonomously inside corporate systems, and providing what the companies characterized as real-time oversight of those agents.

The deal reflects a broader shift in enterprise security concerns that has quietly accelerated alongside the deployment of AI agents in business workflows. Traditional identity governance was built around human users and service accounts, but AI agents complicate that picture because they can act, authenticate, and access resources at machine speed without direct human involvement at each step. Closing that gap is genuinely contested territory: it is not yet settled what effective AI agent governance should look like technically, which regulatory frameworks apply, or which vendors will own the category. Omada is making a bet that identity governance is the right layer at which to solve the problem, but that premise itself is open to debate.

Because no reactions from the Pro-AI, Anti-AI, or Middle Ground camps have surfaced around this story, the positions can only be sketched in general terms. Advocates of AI adoption would typically welcome this kind of acquisition as evidence that the enterprise ecosystem is maturing, with security infrastructure catching up to deployment realities rather than lagging dangerously behind. Critics of AI expansion would likely argue the opposite, that the need for a dedicated acquisition to police AI agents in real time reveals how exposed enterprises already are, having deployed agents before adequate controls existed. A middle ground position would probably treat the deal as a reasonable but early step, noting that governance tooling alone does not resolve deeper questions about accountability when an AI agent causes harm or makes an unauthorized access decision.

The argument will sharpen as Omada begins integrating EmpowerID's capabilities and as enterprise customers report whether real-time agent governance actually reduces incidents. Regulatory guidance on non-human identity from bodies like NIST or the EU AI Act enforcement apparatus would also help clarify whether this acquisition addresses the right risks or only part of them.