Aembit
Silver Spring, United States
Workload IAM that issues short-lived, secretless credentials for services, scripts, and AI agents.
Raised $25M Series A led by Acrew Capital, September 2024
← All shortlistsSeries A Series B Series A Series A Series B Series A Series C Series A Series A Series A Series B
Best Secrets and non-human identity companies
Secrets, certificates, machine identity, and NHI startups. The credentials humans did not mean to ship.
Catalog last reviewed 2026-08-23. Page copy reviewed 2026-08-10. Next editorial review by 2026-09-10. Alphabetical order, no paid placement. 11 matched live listings.
This shortlist is the live catalog slice for the Secrets and non-human identity category. Listings appear here only when their primary category matches. Full page-unique intros for remaining categories ship in a later polish pass.
How order works. Matched companies are the full live catalog slice for this primary category, sorted alphabetically by name. This is not a scored quality ranking. When listing fees open, they are intended to affect publish timing or review-queue position only, not alphabetical order or praise on this page (payments are currently closed). Aevral is a disclosed house listing under the same rules (coming soon, no pin). See /transparency.
Category index: /categories/secrets-identity. Parent hub: /best. Full catalog: /directory.
Akeyless
Ramat Gan, Israel
SaaS vault for secrets, keys, and certificates that never stores the master key in the customer's cloud.
Took a strategic investment from Deutsche Bank Ventures, October 2024
Clutch Security
Tel Aviv, Israel
Zero Trust for non-human identities: discover the secret, then make stolen static credentials useless.
Raised $20M Series A led by SignalFire, January 2025
Corsha
Washington, United States
Machine identity provider for operational technology, factories, and defense networks that still run API keys.
Raised $18M Series A-1 led by SineWave Ventures, April 2025
Defakto
Palo Alto, United States
SPIFFE-based non-human IAM that replaces static secrets with short-lived workload identities.
Raised $30.75M Series B led by XYZ Ventures, October 2025
Doppler
San Francisco, United States
Developer-first secrets platform that syncs env vars, rotates them, and logs who changed what.
Launched Change Requests for approved secret edits, October 2024
GitGuardian
Paris, France
Secrets detection plus NHI lifecycle, from leaked keys in git to the agents still using them.
Raised $50M Series C led by Insight Partners, February 2026
Infisical
San Francisco, United States
Open-source secrets manager you can self-host or run as SaaS, now adding agent-safe credential proxying.
Raised $16M Series A led by Elad Gil, June 2025
Smallstep
San Francisco, United States
Private CA and device identity so internal TLS, SSH, and laptops get short-lived certificates instead of passwords.
Published hardware-bound device identity essay, May 2026
Token Security
Tel Aviv, Israel
Machine-first identity security that finds every NHI, names an owner, and cuts leftover privilege.
Named to Rising in Cyber 2026 after a $20M Series A, May 2026
Truffle Security
San Francisco, United States
Verified secret scanning that proves a leaked key still works, then helps you kill it.
Raised $25M Series B led by Intel Capital and a16z, November 2025