On October 8, 2026, Forcepoint and BeyondTrust launched an integration that connects Forcepoint DSPM (Data Security Posture Management) with BeyondTrust Identity Security Insights. When BeyondTrust flags a risky identity, Forcepoint instantly shows which sensitive data that identity can access and makes it possible to revoke that access in a targeted way.
The integration was unveiled at BeyondTrust’s Go Beyond customer conference in Chicago. It covers both human and non-human identities (NHI), including service accounts and AI agents.
Why identity and data need to be connected
Today’s identity security tools can detect a compromised account or an identity with excessive privileges. What they lack is data context. The security team sees an alert but doesn’t know whether the identity has access to test data or to a customer database full of personal information.
DSPM, on the other hand, knows where sensitive data resides and how it is classified, but doesn’t know which identity is currently risky. Without connecting the two views, teams can’t prioritize correctly, and during an incident they often resort to broad measures that needlessly block legitimate users and workflows as well.
The rise of AI agents makes the problem even bigger. Bakshi Kohli, CTO of Forcepoint, points out that as agents take on real work, security teams must be able to revoke a single identity’s access without guesswork and without broadly blocking autonomous tools.
How the integration works
- Risky identity detection. BeyondTrust Identity Security Insights flags a risky identity, such as a compromised account, an over-privileged service account, or an AI agent, and maps its privilege paths, including inherited and indirect permissions.
- Data context. Forcepoint DSPM, with AI-native data discovery and classification, shows which sensitive data is reachable through that identity, such as PII, financial records, or trade secrets.
- Prioritization. Risky identities are ranked by the value of the data they can access, along with an explanation of why they were flagged.
- Targeted remediation. The team revokes access to sensitive records for that one identity only, with no impact on other users or business processes.
Key capabilities
| Capability | What it delivers |
|---|---|
| Data context for identity risk | For every risky identity, you see the specific sensitive records it can access |
| Targeted access revocation | Removes access for a single identity without disrupting other users or workflows |
| Risk-based prioritization | Ranks identities by the value of the data they can reach, with an explanation of why |
| Path analysis | Maps privilege paths, including inherited and indirect permissions |
| NHI and AI agent coverage | Compromised accounts, over-privileged service accounts, and AI agents |
David Manks, VP of Global Strategic Alliances at BeyondTrust, explains that the partnership combines Forcepoint’s data expertise with BeyondTrust’s identity and privilege intelligence. Customers can see where risky access creates real exposure and act on it right away.
The integration is available now for customers using both Forcepoint DSPM and BeyondTrust Identity Security Insights.
Final thoughts
Identity and data can no longer be two separate worlds. Combining identity threat detection with DSPM gives security teams an answer to the most important question in every incident: what is at risk, and how quickly can we close the exposure? And that holds even in environments where service accounts and AI agents work alongside people.
Want to know how the Forcepoint DSPM and BeyondTrust integration would work in your environment? Get in touch, and we’ll be happy to set up a demo for you.
Source: Forcepoint and BeyondTrust Connect Identity Risk to Data Exposure
