Security Startups

Identity and access

Workforce, customer, and ITDR startups. Identity is the control plane; these companies treat it as the product.

17 companies · ordered by name · no paid placement · About this category

A

Apono

Tel Aviv, Israel

  • Series B
  • $54.5M raised
  • Founded 2022

Just-in-time cloud access that kills standing privileges for humans, machines, and agents.

Raised $34M Series B led by USVP, November 2025

C

ConductorOne

San Francisco, United States

  • Series B
  • $111M raised
  • Founded 2020

AI-native identity platform that folds IGA, IAM, and PAM into one access control plane.

Raised $79M Series B led by Greycroft, October 2025

Cymphony

New York, USA

  • Series A
  • $30M raised
  • Founded 2024

One workforce graph over employees, AI agents, and other nonhuman identities, and what each can reach.

Emerged with a $25M Series A co-led by Sequoia and SMBC Fin Atlas Beyond Fund at a valuation above $100M, September 2026

D

Descope

Los Altos, United States

  • Seed
  • $88M raised
  • Founded 2022

Customer identity workflows that let product teams ship login, MFA, and agent auth without an IAM rebuild.

Closed $35M seed extension, $88M total, September 2025

J

JumpCloud

Louisville, United States

  • Series F
  • $400M+ raised
  • Founded 2012

Cloud directory that binds workforce identity, devices, and access without living on Active Directory.

Acquired Breez to add identity threat detection, October 2025

L

Lumos

San Francisco, United States

  • Series B
  • $65M raised
  • Founded 2020

Autonomous IGA that reviews, provisions, and rightsizes access for people, NHIs, and AI agents.

Launched Identity Agent Force to govern human, NHI, and AI access, June 2026

O

Oak

Tel Aviv, Israel

  • Seed
  • $60M raised
  • Founded 2025

One identity platform for human, machine, and AI agent identities that compares granted access with real use and drives remediation continuously.

Emerged from stealth with a $60M seed round co-led by Accel, Greylock, and CRV, July 2026

Obsidian Security

Palo Alto, United States

  • Series D
  • $204M raised
  • Founded 2017

SaaS identity and agent governance inside the third-party apps where work actually happens.

Raised $85M Series D at $1.1B valuation, August 2026

Opal Security

New York, United States

  • Series B
  • $59M raised
  • Founded 2020

Policy-as-code access control plane for employees, service accounts, and AI agents.

Raised $23M and hired a new product bench, June 2026

P

P0 Security

San Francisco, United States

  • Series A
  • $20M raised
  • Founded 2022

Cloud IGA and PAM that answers who or what can touch production, then enforces it at runtime.

Closed $15M Series A led by SYN Ventures, September 2024

Push Security

Boston, United States

  • Series B
  • $49M raised
  • Founded 2019

Browser-native ITDR that stops phishing, token theft, and account takeover where the session lives.

Raised $30M Series B led by Redpoint Ventures, April 2025

S

Semperis

Hoboken, United States

  • Growth
  • $325M raised
  • Founded 2013

Identity threat detection and forest recovery for Active Directory, Entra ID, and Okta.

Secured $125M growth financing at a $1B+ valuation, June 2024

Silverfort

Plano, United States

  • Series D
  • $222M raised
  • Founded 2016

Runtime identity protection that puts MFA and least privilege on systems IAM vendors leave naked.

Acquired Fabrix Security for autonomous runtime identity security, April 2026

T

Teleport

Oakland, United States

  • Series C
  • $169M raised
  • Founded 2015

Infrastructure identity for SSH, Kubernetes, databases, and MCP servers without standing secrets.

Launched Beams trusted runtimes for AI agents, March 2026

U

Unosecur

Berlin, Germany

  • Seed
  • $5M raised
  • Founded 2021

Agentless identity fabric for human, machine, and AI identities across hybrid cloud and on-prem.

Raised $5M seed led by VentureFriends and DFF Ventures, April 2025

V

Veza

Los Gatos, United States

  • Series D
  • $235M raised
  • Founded 2020

Access graph that shows what every identity can actually do, not just which group it sits in.

Raised $108M Series D at $808M valuation, April 2025

W

WorkOS

San Francisco, United States

  • Series C
  • Founded 2019

Enterprise identity APIs so product companies can ship SSO, SCIM, and audit without becoming an IAM vendor.

Raised $100M Series C at $2B valuation, March 2026

About this category

About identity and access

Identity is the control plane of this directory, not a mega-cap IAM comparison grid.

This index maps every company whose primary product is workforce, customer, or identity-threat work: just-in-time access, modern IGA, CIAM and developer identity APIs, directory and hybrid AD recovery, and ITDR that watches sessions rather than only logs.

Public mega-cap IAM suites stay off this list. Secrets vaults and non-human identity products belong in secrets-identity when that is the main product.

Every entry carries a 2024 to 2026 proof-of-life signal recorded with a source link, and membership is taxonomy from the research pass.

What they build

Companies here build just-in-time privileged access, identity governance and access graphs, customer and developer identity APIs, hybrid directory and forest recovery, browser-native session defense, and runtime identity protection across on-prem and cloud.

Some sell one control plane for humans, service accounts, and agents together. Password managers, secrets vaults as the main product, and public mega-cap IAM consoles live elsewhere.

Who this is for

Identity engineers and CISOs shortlisting independent IGA, ITDR, or just-in-time access vendors, product teams that need to ship SSO and SCIM without becoming an IAM company, and investors mapping identity companies by what they ship rather than by booth adjacency.

Who is listed

Included only when a live company has primary category identity-access. Secrets-only products, public mega-cap IAM suites, and GRC platforms live in their own categories or off this directory.

Inclusion is category-based and verification-gated, not paid placement and not an endorsement of outcomes.

How order works

Listings are the full live catalog slice for this primary category, sorted alphabetically by name. This is not a scored quality ranking and there is no paid placement. Aevral is a disclosed house listing under the same rules (live, no pin). See /transparency.

17 companies. Catalog last reviewed 2026-08-23. Page copy reviewed 2026-08-31. Next review by 2026-09-30. Ordered by name. No paid placement.