Keyfactor Expands Into AI Agent Identity With Cofide Deal

Agentic AI
,
Identity & Access Management
,
Multi-factor & Risk-based Authentication

Deal Extends Certificate-Based Trust Framework to AI Agents and Software Workloads

Michael Novinson (MichaelNovinson) •
July 27, 2026    

See Also: Identity Is the New Control Plane in the AI Era

The proposed acquisition of London-based Cofide will allow Cleveland-based Keyfactor to offer identity management for these emerging workloads using the same trust framework customers already rely on, said CEO Jordan Rackie. He said organizations need a secure way to establish and manage identities for autonomous agentic AI systems.

“We believe that when we look at our trust control plane and we look at the needs of our customers into the future, Cofide is extending that platform, allowing us to have that next frontier of workload and agentic AI identity support,” Rackie told ISMG.

Cofide, founded in 2024, employs six people and hasn’t disclosed any outside funding. The company has been led since its inception by Matthew Bates, who was previously co-founder and CTO of Kubernetes training and consultancy Jetstack, which was acquired by Venafi in March 2020. Bates stayed on until October 2023 as CTO of the machine identity provider’s cloud native business (see: Keyfactor Lands $1B to Expand Crypto Trust Platform).

How Cofide Enhances Keyfactor’s Existing Workload Investments

While only a subset of Keyfactor’s customers are actively securing AI agents and autonomous workloads today, the company believes this reflects the beginning of a much larger market opportunity. Keyfactor views the acquisition as an opportunity to establish an early leadership position before AI identity security becomes a mainstream enterprise requirement over the next several years, according to Rackie.

“We believe that this gives us a very dynamic solution that extends our trust control plane in a very real manner,” Rackie said. “It’s something our customers have been asking us about. They’ve been observing the activity happening within their organization as well, and we believe that we’re picking this off at the right time.”

Organizations often rely on passwords or long-lived credentials, particularly in testing environments and sometimes even in production systems. Because AI agents are designed to operate autonomously and often perform sensitive tasks, he argued that static credentials represent poor security practice. Cofide’s technology offers dynamic certificate-based identities that better align with modern security principles.

“It creates a major opportunity for our organization as we move toward the future, and it becomes a sizable piece of the trust control plane and a strategic pillar and a highly differentiated offering for our customer base relative to the alternatives that are in the market,” Rackie said.

Keyfactor already provides identities for software workloads, but Cofide enhances those capabilities by making identities more dynamic, scalable and easier to manage. Rackie said Cofide’s technology builds naturally on Keyfactor’s existing certificate-based approach, making integration into the company’s platform relatively straightforward.

“We’re going to isolate this product,” Rackie said. “We’re going to continue to enhance it and continue to get it enterprise-grade and enterprise ready, and then have it become part of our trust control plane strategy.”

What Distinguishes Cofide From Other Workload Identity Firms

Keyfactor evaluated several companies operating in the workload identity market, and one of the biggest differentiators was Cofide’s commitment to standards-based identity management built around SPIFFE. Open standards give customers greater confidence that they can meet regulatory requirements, maintain interoperability and avoid vendor lock-in as the market continues to evolve, Rackie said.

“Cofide is highly committed to standards-based approaches, whereas a lot of other companies in the space sometimes extend beyond that, and for us, we’re much more comfortable operating within the standards that are established in the market so we can commit to our customers that we will be able to support them through any sort of security audits or things that are hypercritical to them,” Rackie said.

AI agents are designed to operate autonomously across multiple environments and systems, which he said creates entirely new identity management challenges because agents require secure identities that can move dynamically while maintaining trust and authorization. As organizations deploy autonomous AI systems across cloud environments, identity management must become significantly more dynamic.

“The dynamic and traveling nature of an identity creates elements of complexity that, quite honestly, have been areas the entire market has been studying to figure out how to support the security aspect of that,” Rackie said.

Cofide’s target market mirrors Keyfactor’s existing enterprise customer base, Rackie said. He identified financial institutions, government agencies and telecom providers as among the organizations showing the greatest interest in securing AI agents because they operate in highly regulated settings and face increasing pressure to adopt stronger identity controls as AI deployments expand.

“We are always thinking about what’s coming down the road, and our belief is that the demand is going to continue to come for this type of offering,” Rackie said. “There’s already really good momentum, relatively speaking, but comparatively to our size, we believe that we’re catching this early technology adoption curve that will set us up for great success over the next three-to-five years.”