shadow-it
(12)
Nudge Security
Nudge Security is an Austin-based cybersecurity company that helps organizations discover and govern the SaaS and AI applications their employees adopt, often without IT's knowledge. Founded in 2021 by Russell Spitler and Jaime Blasco, the platform combines Day One SaaS and AI app discovery, security posture management, identity governance, third-party risk, and spend management, then reaches employees directly with 'security nudges' via browser, Slack, and Teams to guide safer choices without blocking work. It raised a $22.5M Series A in November 2025 and serves nearly 200 customers.
Torii
Torii is a SaaS Management Platform (SMP) that helps IT and finance teams discover, optimize, and govern the software running across their organization. Founded in 2016 by three serial entrepreneurs, Torii pioneered a discovery-first approach that surfaces shadow IT - and, more recently, shadow AI - through browser extensions, SSO, direct integrations, and financial data. On top of that visibility it layers spend analytics, license optimization, and no-code automation for tasks like onboarding, offboarding, and renewals. Headquartered in New York with R&D in Israel, Torii counts customers such as Instacart, Bumble, and Palo Alto Networks, and was named a Leader in Gartner's 2025 Magic Quadrant for SaaS Management Platforms.
Valence Security
Valence Security is a SaaS and AI security company that helps enterprises find and fix risks created by SaaS and AI sprawl. Its platform unifies SaaS discovery, SaaS Security Posture Management (SSPM), AI Security Posture Management (AI-SPM), and Identity Threat Detection and Response (ITDR), then pairs that visibility with one-click and collaborative remediation workflows that engage business users to actually close gaps. Founded in 2021 and backed by Microsoft's M12, YL Ventures, and Porsche Ventures, Valence positions itself as a leader in securing the modern, agentic SaaS estate.
CyCognito
CyCognito is a cybersecurity company that builds an external exposure management platform. It maps an organization's internet-facing attack surface the way an attacker would - discovering unknown, unmanaged, and forgotten assets across cloud, web, and APIs, then testing and prioritizing the risks that actually matter. Founded in 2017 by former Israeli intelligence (Unit 8200) operators, CyCognito counts large enterprises like Tesco, Colgate-Palmolive, Panasonic and Hitachi among its customers, and raised a $100M Series C in 2021 at an $800M valuation.
Russell Spitler
Russell Spitler is co-founder and CEO of Nudge Security, an Austin-based cybersecurity company that helps organizations discover and govern the sprawl of SaaS and AI apps employees adopt on their own. He previously ran product strategy at AT&T Cybersecurity and AlienVault, where he co-founded the Open Threat Exchange, one of the largest open threat intelligence communities in the world. In November 2025, Nudge Security raised a $22.5 million Series A led by Cerberus Ventures, bringing total funding to roughly $39 million.
Uri Haramati
Uri Haramati is the co-founder and CEO of Torii, a New York-based SaaS management platform that helps IT teams discover, track, and automate the sprawl of software applications inside modern companies. A serial entrepreneur, he previously co-founded Life on Air, the studio behind the viral live-streaming apps Meerkat and Houseparty, and earlier launched the event-discovery app Skedook. He raised a $50M Series B for Torii led by Tiger Global in 2022, bringing total funding to $65M, and describes his lifelong ambition as building 'one software to manage all software.'
BRM
BRM is an AI-powered vendor management and procurement platform that gives finance, legal, and IT teams a complete, organized view of every vendor, contract, and renewal. Its AI 'SuperAgents' automatically discover vendors across a company's email, ERP, corporate cards, and other systems, extract contract terms, build a live renewal calendar, monitor compliance, and even help negotiate renewals - replacing the spreadsheets and manual data entry that procurement has long depended on.
dope.security
dope.security is a Mountain View cybersecurity startup that rebuilt the Secure Web Gateway (SWG) so it runs directly on the endpoint instead of routing traffic through a vendor's cloud datacenter. Founded in 2021 by ex-Symantec and Forcepoint product leader Kunal Agarwal, its 'fly-direct' architecture inspects web traffic on-device, claiming faster performance, fewer outages, and better privacy than legacy cloud proxies. The company has expanded from its core dope.swg product into AI-powered data protection with CASB Neural and DOPAMINE DLP, backed by roughly $20M from GV (Google Ventures) and Boldstart Ventures.
Productiv
Productiv is a SaaS and AI portfolio governance platform that helps enterprise IT teams discover, measure, and right-size every application employees actually use - including the AI tools nobody told them about. Founded in 2018 in Palo Alto, the company has raised $73M and now counts companies like DocuSign, Robinhood and Okta among its customers.
Zluri
Zluri is a next-gen SaaS Management and Identity Governance platform that helps IT and security teams discover every app and identity inside an enterprise, automate joiner-mover-leaver workflows, and run access reviews without spreadsheets. Founded in 2020 and headquartered in San Francisco with engineering in Bengaluru, it serves 250+ enterprise customers including Monday.com, Tipalti, Whoop, Razorpay, and Traveloka.
Spin.AI
Spin.AI is an AI-powered SaaS security and data-protection company based in Palo Alto. Its SpinOne platform unifies SaaS Security Posture Management, ransomware defense, automated backup and recovery, and browser extension risk control for Google Workspace, Microsoft 365, Salesforce, and Slack - serving more than 1,500 organizations across 100+ countries.
Belsasar Lepe
Belsasar 'Bel' Lepe is co-founder and CEO of Cerby, the identity automation platform built to secure the applications that traditional identity tools ignore - the sprawling layer of disconnected, nonstandard, and unmanageable apps that enterprises actually run on. A first-generation Mexican-American and Stanford Computer Science graduate, Lepe started at Google at 18, then co-founded Ooyala - a video technology company that achieved two exits totaling over $440M - before turning his attention to the gaping hole in enterprise identity security. Cerby raised $54M in Series B funding in 2025, counts L'Oréal, Fox, and Allstate among its customers, and has grown ARR 10x in under two years.