iam
(17)
Lumos
Lumos began by replacing the IT ticket queue with an internal app store. Six years later, it is betting that the next identity administrator will be a coordinated crew of software agents - with humans reserved for the judgment calls.
Beyond Identity
Beyond Identity is a New York-based identity security company that eliminates passwords and identity-based attacks by binding authentication to cryptographic, device-resident credentials. Its Identity Defense Platform delivers phishing-resistant MFA, continuous device trust, and deepfake protection for meetings, giving enterprises deterministic proof of who - and what device - is accessing their systems. Founded in 2019 by Silicon Valley veterans, the company has raised $205M and reached a $1.1B valuation.
Ilantus Services
Ilantus Services is an identity-centric cybersecurity company that designs, implements, and operates Identity and Access Management (IAM) programs on a Zero Trust framework. Founded in 2000 and now a subsidiary of Network Intelligence, it blends advisory, implementation, and 24x7 managed services with AI-powered accelerators - tools like AiA (application onboarding), iAudit (access certification), iDash (monitoring), and iTDR (identity threat detection) - to help enterprises across finance, healthcare, energy, manufacturing, and government control who has access to what, and why.
Oasis Security
Oasis Security is a New York and Tel Aviv based cybersecurity company that built the first enterprise platform purpose-built to discover, secure, and govern non-human identities (NHIs) - the service accounts, API keys, tokens, workloads, and increasingly the AI agents that now vastly outnumber human users in modern cloud environments. Founded in 2022 by former Israeli intelligence engineers Danny Brickman and Amit Zimmerman, Oasis gives security teams a single source of truth for machine identities, automating inventory, posture management, threat detection, remediation, and full lifecycle governance. As enterprises race to deploy AI agents that can act autonomously with real credentials, Oasis positions its Agentic Access Management platform as the control layer that lets companies scale AI without losing control of who - and what - has access.
PlainID
PlainID is an Israeli cybersecurity company and the recognized pioneer of Policy-Based Access Control (PBAC). Its authorization platform lets enterprises define, manage, and enforce who can access what across applications, data, APIs, microservices, and - increasingly - AI agents, replacing the tangle of hard-coded access rules scattered across systems with centralized, dynamic, real-time policy decisions. Founded in 2014 and headquartered in Tel Aviv with a strong New York presence, PlainID has raised roughly $99-100M and serves Fortune 500 organizations across financial services, healthcare, telecom, and government.
Token Security
Token Security is a New York- and Tel Aviv-based cybersecurity company that secures non-human identities (NHIs) - the service accounts, API tokens, workloads and, increasingly, autonomous AI agents that now vastly outnumber human users inside enterprises. Its agentless platform continuously discovers these machine identities across cloud, SaaS and AI environments, maps their ownership, permissions and access into a unified identity graph, and enforces least-privilege and lifecycle controls. Founded in 2023 by CEO Itamar Apelblat and CTO Ido Shlomo, the company has raised roughly $27M (Seed plus a $20M Series A led by Notable Capital) and counts customers such as GitLab, Bloomreach, HiBob, Dayforce and BetterHelp.
LastPass
LastPass is a cloud-based password and identity management company that lets people, families and businesses store, generate and share credentials from an encrypted vault protected by zero-knowledge, AES-256 encryption. Founded in 2008 and now an independent company again after spinning off from GoTo in 2024, LastPass serves more than 100,000 businesses and tens of millions of users worldwide. Under CEO Karim Toubba, the company is expanding beyond password management into a broader 'Secure Access Essentials' platform that adds SaaS/AI app discovery, access control and single sign-on directly through the browser.
LoginRadius
LoginRadius is a Vancouver-headquartered customer identity and access management (CIAM) company that gives businesses a single platform to register, authenticate, and manage their end users at scale. Founded in 2012 as a social-login tool, it grew into a full identity-as-a-service suite covering single sign-on, passwordless login, passkeys, adaptive MFA, and no-code identity orchestration - with configurable data residency across 35+ regions to satisfy regulated industries. The platform is used by thousands of brands to secure large consumer bases while keeping login experiences fast and compliant.
StackOne
StackOne is a London-based integration platform that gives B2B SaaS companies and AI agent builders a single unified API to connect to hundreds of enterprise systems - from HR and CRM to ticketing, messaging and identity. Combining a proprietary tool-calling LLM with a real-time, privacy-first engine, it offers 200+ pre-built connectors and thousands of ready-made actions so agents can reliably and securely take actions inside the software businesses already use. Founded in 2023 by Romain Sestier and Guillaume Lebedel, the company raised a $20M Series A led by GV (Google Ventures) in May 2025 and has surpassed 1 billion API calls.
ZITADEL
ZITADEL is an open-source identity and access management platform that gives developers enterprise-grade authentication and authorization without vendor lock-in. Built in Go with an API-first design and native multi-tenancy, it supports OAuth2, OpenID Connect, SAML, SCIM, passkeys, MFA and self-service flows, and can run as a self-hosted deployment or as a managed cloud service. Founded in Switzerland in 2019 and now remote-first, ZITADEL aims to make identity a foundational piece of infrastructure - like a database or a web server - rather than a barrier to shipping software.
Cirrus Identity
Cirrus Identity is an Oakland-based software company that runs managed, cloud-hosted identity and access management for higher education, research institutions, non-profits and healthcare. Founded in 2013 by former UC Berkeley identity staff, it acts as a proxy and bridge between commercial identity providers (Entra ID, Okta, Duo, Google) and the multilateral research-and-education federations - InCommon, eduGAIN, the Canadian Access Federation and GakuNin - that campuses depend on but that most commercial IdPs do not support. More than 200 universities use it to retire aging Shibboleth deployments, let alumni and applicants log in with social accounts, and standardize authentication without rebuilding every application.
Radiant Logic
Radiant Logic is an enterprise identity-data company whose RadiantOne platform unifies fragmented identity information scattered across legacy directories, cloud apps, and databases into a single, real-time Identity Data Fabric. Born from the invention of the virtual directory in 2000, the company now layers AI-driven analytics and a generative assistant (AIDA) on top of that unified data so organizations can see who has access to what, spot identity risk, and remediate it. More than 30% of the Fortune 100 and roughly 60% of U.S. Federal Cabinet agencies rely on it to streamline operations, reduce risk, and simplify compliance.
SecureAuth
SecureAuth is an Irvine, California identity security company that has spent two decades trying to answer one stubborn question: is the person (or machine, or AI agent) on the other end of a login really who they claim to be? Founded in 2005, it built a name on risk-based and passwordless authentication, then doubled down on AI with its Arculix platform, continuous facial assurance, and a 'microperimeter' that extends Zero Trust controls to AI agents. Today it serves both workforce (IAM) and customer (CIAM) use cases for 250+ enterprises across regulated industries, protecting more than 250 million identities.
VentureSoft
VentureSoft is a Silicon Valley IT services and consulting firm that helps enterprises modernize through AI, secure cloud infrastructure, and data solutions. Founded in 1996 and headquartered in Pleasanton, California, with offices in Dubai and Bengaluru, the company has delivered 1,000+ projects to more than 300 clients ranging from venture-backed startups to Fortune 500 names like Nike, Tesla, Intuit and Gap. Its work spans data analytics and AI, security and GRC, cloud and DevSecOps, ERP/CRM, application development, and 24/7 managed services.
Strata Identity
Strata Identity is a Boulder, Colorado cybersecurity company that pioneered the category of Identity Orchestration. Its Maverics platform lets enterprises connect any application to any identity provider - on-premises or cloud - without rewriting code, so they can migrate off legacy systems, survive identity outages, and govern access for both humans and AI agents. Founded in 2019 by SAML co-author Eric Olden and two fellow identity veterans, Strata raised more than $40 million and was acquired by data-security firm Rubrik in June 2026.
Opal Security
Opal Security is an AI-native identity and access governance platform that gives enterprises real-time visibility and direct control over every identity - employees, service accounts, and AI agents alike. Founded in 2020 in San Francisco, Opal replaces stale, checkbox-style access reviews with policy-as-code and just-in-time access so organizations can enforce least privilege at scale instead of merely auditing it after the fact.
Cerby
Cerby is an identity security automation platform that brings nonstandard and disconnected applications - the ones that don't speak SAML, SCIM, or OIDC - into the identity lifecycle of enterprise IdPs like Okta, Azure AD, and Ping. Using robotic process automation and agentic AI, Cerby automates onboarding, offboarding, credential rotation, and access governance for the apps traditional IAM tools leave behind.