cloud-identity
(3)
Sonrai Security
Sonrai Security is a New York-based enterprise cloud security company that helps large organizations lock down identity and access risk across AWS, Azure, Google Cloud and Kubernetes. Founded in 2017 by the team behind Q1 Labs, Sonrai built its reputation on a graph that maps every relationship between identities, permissions and data in the public cloud. Its flagship Cloud Permissions Firewall enforces least privilege by automatically blocking unused permissions with cloud-native, org-level policies, and its 2025 WALLy AI agent extends that to autonomously fix privilege risk across humans, machines and AI agents.
Delinea
Delinea is a San Francisco-based cybersecurity company that builds identity and privileged access management (PAM) software. Formed in 2021 from the merger of PAM veterans Thycotic and Centrify and rebranded as Delinea in 2022, the company secures the credentials, secrets, and privileged accounts that human users, machines, applications, and - increasingly - AI agents use to reach an organization's most sensitive systems. Its flagship Secret Server vault, Privilege Manager, DevOps Secrets Vault, and the cloud-native Delinea Platform are used by thousands of enterprises worldwide to enforce least privilege, rotate passwords, record sessions, and detect identity-based threats across hybrid and multi-cloud environments.
Cirrus Identity
Cirrus Identity is an Oakland-based software company that runs managed, cloud-hosted identity and access management for higher education, research institutions, non-profits and healthcare. Founded in 2013 by former UC Berkeley identity staff, it acts as a proxy and bridge between commercial identity providers (Entra ID, Okta, Duo, Google) and the multilateral research-and-education federations - InCommon, eduGAIN, the Canadian Access Federation and GakuNin - that campuses depend on but that most commercial IdPs do not support. More than 200 universities use it to retire aging Shibboleth deployments, let alumni and applicants log in with social accounts, and standardize authentication without rebuilding every application.