SecuPi lands on Gartner Hype Cycle for digital identity

SecuPi said it was named a Sample Vendor in Gartner’s 2026 Hype Cycle for Digital Identity in the Authorization Management Platforms category. The recognition comes as enterprise AI agents raise new risks around overprivileged service accounts, data exposure and runtime control.

Why it matters: - Authorization Management Platforms are still early-stage, with Gartner estimating market penetration at 1% to 5%. - The low adoption level suggests room for growth as enterprises move away from static permission models toward identity-centric controls. - Enterprise AI agents can access sensitive data through shared or overprivileged accounts, creating gaps between permissions and actual actions.

What happened: - SecuPi said it was recognized as a Sample Vendor in the 2026 Gartner Hype Cycle for Digital Identity. - The recognition is in the Authorization Management Platforms category. - SecuPi framed the announcement as validation of its Runtime Data Access Control Platform for Enterprise AI. - The company tied the announcement to a broader push to control AI access at the data layer.

The details: - SecuPi’s platform is designed to provide a continuous security lifecycle for human and AI agent access to enterprise data. - Discover: The platform identifies AI agents and MCP servers connecting to databases, files, applications, APIs and cloud data platforms. - Discover: SecuPi maps each interaction from the requesting human through the agent and service account to the data accessed and the action performed. - Govern: The platform applies identity-, purpose-, ticket- and data-aware policies. - Govern: Those policies define which resources, records, fields and document elements an agent may access, and which queries, transactions and privileged actions it may perform. - Protect: SecuPi operates in the data-access path to broker just-in-time accounts and enforce Zero Standing Privileges. - Protect: The platform can block unauthorized actions and dynamically mask, de-identify, tokenize or encrypt sensitive data before exposure to an agent or LLM. - Audit: SecuPi records each agent interaction with the requesting human identity, agent identity, purpose, ticket context, data accessed, action performed and risk score. - Audit: The company said the records are intended to support security teams and regulatory frameworks, including the EU AI Act. - SecuPi said the platform works across AWS Bedrock, Microsoft Copilot Studio, Salesforce Agentforce, ServiceNow, Snowflake Cortex AI, Databricks and custom MCP-based applications. - The company said security teams get visibility into each interaction, precision over sensitive-data access and the ability to stop unauthorized actions before execution. - SecuPi said the platform sits between AI agents and enterprise data to govern what AI agents, applications and privileged users can access, see and do. - The company said deployments include major Swiss banks, two of the world’s largest financial services organizations, leading US investment firms and three of the world’s largest telecommunications providers. - SecuPi said its capabilities include Database Activity Monitoring, NHI and service-account identity brokering, fine-grained access control, sensitive-data discovery, dynamic masking, tokenization, format-preserving encryption, de-identification, AI agent monitoring, risk analytics and tamper-resistant auditing. - More information is available on SecuPi’s website. - SecuPi also shared a LinkedIn page.

Between the lines: - Gartner placement can help vendors signal credibility in a crowded identity and security market. - The focus on runtime controls reflects a broader shift from perimeter security toward policy enforcement at the moment data is accessed. - The emphasis on AI agents and non-human identities shows how enterprise security is adapting to systems that act on behalf of people but do not fit traditional user-based controls.

What's next: - SecuPi is likely to use the Gartner recognition to push its runtime control model to more enterprise AI buyers. - The market opportunity will depend on how quickly organizations adopt authorization management tools and build controls for non-human identities. - Enterprises deploying AI agents will keep facing pressure to prove who accessed what, why it was accessed and whether the action was authorized.

The bottom line: - SecuPi is positioning runtime data access control as a core security layer for enterprise AI, not an add-on.