Apono
Tel Aviv, Israel
- Series B
- $54.5M raised
- Founded 2022
Just-in-time cloud access that kills standing privileges for humans, machines, and agents.
Raised $34M Series B led by USVP, November 2025
Workforce, customer, and ITDR startups. Identity is the control plane; these companies treat it as the product.
17 companies · ordered by name · no paid placement · About this category
Tel Aviv, Israel
Just-in-time cloud access that kills standing privileges for humans, machines, and agents.
Raised $34M Series B led by USVP, November 2025
San Francisco, United States
AI-native identity platform that folds IGA, IAM, and PAM into one access control plane.
Raised $79M Series B led by Greycroft, October 2025
New York, USA
One workforce graph over employees, AI agents, and other nonhuman identities, and what each can reach.
Emerged with a $25M Series A co-led by Sequoia and SMBC Fin Atlas Beyond Fund at a valuation above $100M, September 2026
Los Altos, United States
Customer identity workflows that let product teams ship login, MFA, and agent auth without an IAM rebuild.
Closed $35M seed extension, $88M total, September 2025
Louisville, United States
Cloud directory that binds workforce identity, devices, and access without living on Active Directory.
Acquired Breez to add identity threat detection, October 2025
San Francisco, United States
Autonomous IGA that reviews, provisions, and rightsizes access for people, NHIs, and AI agents.
Launched Identity Agent Force to govern human, NHI, and AI access, June 2026
Tel Aviv, Israel
One identity platform for human, machine, and AI agent identities that compares granted access with real use and drives remediation continuously.
Emerged from stealth with a $60M seed round co-led by Accel, Greylock, and CRV, July 2026
Palo Alto, United States
SaaS identity and agent governance inside the third-party apps where work actually happens.
Raised $85M Series D at $1.1B valuation, August 2026
New York, United States
Policy-as-code access control plane for employees, service accounts, and AI agents.
Raised $23M and hired a new product bench, June 2026
San Francisco, United States
Cloud IGA and PAM that answers who or what can touch production, then enforces it at runtime.
Closed $15M Series A led by SYN Ventures, September 2024
Boston, United States
Browser-native ITDR that stops phishing, token theft, and account takeover where the session lives.
Raised $30M Series B led by Redpoint Ventures, April 2025
Hoboken, United States
Identity threat detection and forest recovery for Active Directory, Entra ID, and Okta.
Secured $125M growth financing at a $1B+ valuation, June 2024
Plano, United States
Runtime identity protection that puts MFA and least privilege on systems IAM vendors leave naked.
Acquired Fabrix Security for autonomous runtime identity security, April 2026
Oakland, United States
Infrastructure identity for SSH, Kubernetes, databases, and MCP servers without standing secrets.
Launched Beams trusted runtimes for AI agents, March 2026
Berlin, Germany
Agentless identity fabric for human, machine, and AI identities across hybrid cloud and on-prem.
Raised $5M seed led by VentureFriends and DFF Ventures, April 2025
Los Gatos, United States
Access graph that shows what every identity can actually do, not just which group it sits in.
Raised $108M Series D at $808M valuation, April 2025
San Francisco, United States
Enterprise identity APIs so product companies can ship SSO, SCIM, and audit without becoming an IAM vendor.
Raised $100M Series C at $2B valuation, March 2026
Identity is the control plane of this directory, not a mega-cap IAM comparison grid.
This index maps every company whose primary product is workforce, customer, or identity-threat work: just-in-time access, modern IGA, CIAM and developer identity APIs, directory and hybrid AD recovery, and ITDR that watches sessions rather than only logs.
Public mega-cap IAM suites stay off this list. Secrets vaults and non-human identity products belong in secrets-identity when that is the main product.
Every entry carries a 2024 to 2026 proof-of-life signal recorded with a source link, and membership is taxonomy from the research pass.
Companies here build just-in-time privileged access, identity governance and access graphs, customer and developer identity APIs, hybrid directory and forest recovery, browser-native session defense, and runtime identity protection across on-prem and cloud.
Some sell one control plane for humans, service accounts, and agents together. Password managers, secrets vaults as the main product, and public mega-cap IAM consoles live elsewhere.
Identity engineers and CISOs shortlisting independent IGA, ITDR, or just-in-time access vendors, product teams that need to ship SSO and SCIM without becoming an IAM company, and investors mapping identity companies by what they ship rather than by booth adjacency.
Included only when a live company has primary category identity-access. Secrets-only products, public mega-cap IAM suites, and GRC platforms live in their own categories or off this directory.
Inclusion is category-based and verification-gated, not paid placement and not an endorsement of outcomes.
Listings are the full live catalog slice for this primary category, sorted alphabetically by name. This is not a scored quality ranking and there is no paid placement. Aevral is a disclosed house listing under the same rules (live, no pin). See /transparency.
17 companies. Catalog last reviewed 2026-08-23. Page copy reviewed 2026-08-31. Next review by 2026-09-30. Ordered by name. No paid placement.