Cisco Acquires WideField to Strengthen Splunk’s Agentic SOC

Cisco made Splunk the centerpiece of its security and observability strategy after completing the $28 billion acquisition on March 18, 2024. The rise of autonomous AI agents, service accounts and other non-human identities has widened the threat beyond stolen credentials: approved users or agents can take unsafe actions after authentication and at machine speed. That makes identity, session and behavioral context essential for an AI-driven security operations center to investigate and respond safely.

Cisco announced its agreement to acquire Santa Clara, California-based WideField Security on June 18, 2026, and said on July 31 that the transaction had closed. Financial terms were not disclosed. WideField’s technology will be integrated into Splunk’s Agentic SOC to normalize and correlate identity, credential, session and activity telemetry across humans, machines and AI agents, helping analysts determine whether actions belong to legitimate sessions and assess the potential blast radius of suspicious behavior.