In the realm of cybersecurity, identity is often perceived as a protective “perimeter” surrounding an organization. Numerous breaches originate from methods such as password theft, phishing, and credential stuffing. Therefore, safeguarding the identities of users, applications, and machines is crucial for the overall security of the system.
While this may sound straightforward, the recent security incident involving the U.S. Treasury highlighted the complexities involved. In response, Clutch Security, a startup dedicated to enhancing non-human (machine) identity security, has announced a funding round of $20 million, reflecting the market’s urgent need to tackle this challenge.
SignalFire is spearheading this funding round, joined by investors like Lightspeed Venture Partners and Merlin Ventures, who also participated in Clutch’s previous $8.5 million seed funding. Clutch plans to allocate these funds toward research and development, product innovation, and enhancing its business development efforts.
Currently, Clutch has established integrations with nearly 60 popular infrastructure services, applications, and identity providers used by enterprises. The platform secures a wide range of data that facilitates interactions between these entities, including API keys, service accounts, “secrets,” tokens, and various credentials. Clutch’s offerings encompass network visibility, posture and risk management, and lifecycle management, all under a zero-trust framework. The potential for growth in this area is significant: research from Venafi indicates that the average number of machine identities within a large enterprise has surged from 320,000 in 2022 to an estimated 1 million by 2024.
Interestingly, Clutch’s focus on perimeter-related breaches coincided with a significant breach elsewhere. The Tel Aviv-based startup was founded in October 2023, just after Israel faced attacks from Hamas, leading to widespread conflict in Gaza.
CEO Ofir Har-Chen, who co-founded Clutch with Sagi Haas and Tal Kimhi (Har-Chen is on the far left in the accompanying image), noted that launching a company during such turbulent times was a double-edged sword. On one hand, many individuals were preoccupied and distressed by ongoing events, with some stepping away from their jobs to participate in military efforts. Conversely, this crisis sharpened the focus for those who remained in the workforce.
Initially, the company faced challenges in recruiting talent, finally bringing on its first employees in February. However, they developed a minimum viable product within just three months. “I believe we have one of the finest engineering teams in Israel, as all members have relevant experience,” Har-Chen stated. With a robust background in cybersecurity, he has spent two decades in various technical and executive roles in both the Israeli government and private sector (Haas and Kimhi are also former employees of Axonius, another cybersecurity firm).
Clutch is targeting a long-standing issue, according to Har-Chen. Service accounts in Windows Active Directory are notorious for being exploited by hackers since their inception in 1994. “There’s nothing novel here,” he explained. However, the rise of cloud computing and the prevalence of software as a service have intensified these challenges.
The introduction of AI and AI agents has also added a new layer of risk, making them prime targets for cybercriminals.
“We are witnessing a shift in perceptions, with non-human entities now seen as the weakest link,” he remarked. “AI agents are being rapidly integrated into enterprises, taking over many tasks traditionally performed by humans.” Har-Chen is convinced that this will lead to an uptick in attacks aimed at compromising these agents, resulting in a “surge of attacks.”
Clutch is not alone in recognizing these challenges. The competitive landscape features numerous players, including Semperis, which achieved a $1 billion valuation last year focused on addressing legacy Active Directory issues; Astrix Security, which secured $45 million in funding last December; Oasis, a notable Israeli startup with $40 million raised a year ago; CyberArk, which acquired Venafi for over $1.5 billion last year; Silverfort, known for its comprehensive identity strategy; and Token Security, which recently raised $20 million.
The rapid pace at which Clutch is progressing sets it apart, causing investors to take a keen interest. “What Clutch has accomplished in such a brief time is incredible—they’re not just creating a groundbreaking platform, but actually revolutionizing the entire industry,” said Guru Chahal, partner at Lightspeed Venture Partners, in a statement. “Their efforts are already making significant advancements in cybersecurity, and I believe Clutch will be transformative as enterprises begin to adopt agentic AI.”
Compiled by Techarena.au.
Fanpage: TechArena.au
Watch more about AI – Artificial Intelligence
