Ermes Cyber Security
Italian AI-driven browser security company protecting corporate web browsing from data exfiltration and behavior-based web threats, recognized by Gartner among global AI-cyberdefense leaders.
Visit Website ↗ + Add to CompareOverview
Ermes Cyber Security builds AI-driven browser security software that monitors and protects the flow of sensitive corporate data during employee web browsing. Rather than relying primarily on URL reputation lists or category filtering the way traditional secure web gateways do, Ermes evaluates the actual behavior of a web page in real time, aiming to catch data exfiltration through web trackers, malicious scripts, and other browser-based threats that reputation-only filtering misses.
Founded in 2018 as a spin-off from the Polytechnic University of Turin, Ermes is headquartered in Turin, Italy, and closed a Series A investment round in 2023 that totaled more than 3 million euros in its first tranche (led by Sinergia Venture Fund) with additional funds raised later the same year. The company says its technology protects more than 30,000 users and lists enterprise clients including KPMG, Carrefour, and Reale Mutua, and it was named by Gartner among a small set of organizations globally recognized for applying artificial intelligence to cyberattack defense.
Browser-based data exfiltration remains a persistent and often under-addressed attack surface, since employees interact with untrusted web content constantly and most existing controls (URL filters, DLP focused on email and endpoints) were not built to inspect in-browser behavior closely. Named enterprise clients and independent industry recognition give Ermes’s claims more grounding than typical vendor marketing, though the company’s specific detection-rate and threat-blocking statistics are self-reported and have not been independently benchmarked in public sources.
Innovation Matrix Assessment
Ermes has continued developing its AI-based behavioral web-threat detection since its 2018 founding, closing two funding tranches in 2023 to fund further R&D, though specific recent feature releases are not extensively documented in public sources beyond the core browser security platform.
A spin-off from the Polytechnic University of Turin with named enterprise clients (KPMG, Carrefour, Reale Mutua) and a claimed 30,000+ protected users indicates a functioning, scaled delivery operation for a company of its age and size.
Ermes closed more than 7.5 million euros across two 2023 Series A tranches led by Sinergia Venture Fund, and converted to a joint-stock company structure the same year, both concrete and independently reported signs of growth momentum.
Evaluating actual page behavior in real time rather than relying primarily on URL reputation or category-based filtering is a meaningful technical departure from the secure web gateway approach most competitors still lean on, addressing exfiltration vectors that reputation-only filtering misses.
Gartner's independent recognition of Ermes as one of a small set of organizations globally applying AI to cyberattack defense, combined with named, verifiable enterprise clients (KPMG, Carrefour, Reale Mutua), provides an outside validation signal stronger than most vendors in this matrix can show.
Browser-based data exfiltration through web trackers and malicious scripts remains a persistent, under-addressed attack surface as employees spend more of their workday inside the browser, keeping this category consistently relevant to enterprise data protection programs.
Why CISOs Should Care
For a CISO worried about sensitive data leaking out through everyday web browsing rather than email or file transfer, Ermes adds a behavior-based inspection layer that catches exfiltration and web-based threats that reputation-only URL filtering typically misses.
What Makes It Different
Ermes evaluates the real-time behavior of web pages rather than relying primarily on reputation or category databases, which is the key technical differentiator versus traditional secure web gateway and URL-filtering competitors.
The Matrix Verdict
67/100 — INCREMENTAL INNOVATOR
A credible, independently recognized European browser security vendor with real enterprise traction; its behavior-based approach is a genuine differentiator in a category still dominated by reputation-based filtering, though specific quantitative efficacy claims remain largely self-reported.
Editorial Note: Claims vs. Verified Findings
The claim of protecting 30,000+ users is self-reported by Ermes. The Gartner recognition as a top-100 AI-cyberdefense organization and the named enterprise clients (KPMG, Carrefour, Reale Mutua) are independently reported through EU-Startups and press coverage rather than Ermes's own marketing alone, giving them more weight. Detailed detection-rate statistics were not found and are not claimed here.
Sources
Alternatives to Ermes Cyber Security
Forward
CISO ReviewedBuilds a mathematically accurate 'digital twin' of enterprise networks, letting teams verify network and security changes before they…
Zscaler
A cloud-native security-service-edge pioneer that routes all user traffic through a global proxy cloud instead of backhauling it…
Claroty
Cyber-physical systems protection platform securing industrial, healthcare and enterprise IoT devices for critical infrastructure operators.
Tailscale
A zero-configuration mesh VPN built on WireGuard that applies Google's BeyondCorp zero-trust model to make secure networking accessible…
TXOne Networks Inc.
OT and industrial control system cybersecurity built for zero operational disruption, protecting legacy manufacturing and critical infrastructure devices…
Zero Networks
An automated, agentless microsegmentation platform that learns network behavior and generates least-privilege access policies without manual rule-writing.