The acquisition reflects a market shift in which identity security is expanding from authentication at the perimeter to runtime monitoring of what identities do once inside an environment. Permiso introduced SandyClaw in April, a sandboxed analysis platform that evaluates AI agent skills for malicious behavior before deployment, directly addressing the risk that autonomous agents with legitimate credentials can be exploited or behave unpredictably post-authorization.