Opal Security
Opal Security is an AI-native access management platform that automates least-privilege enforcement across cloud infrastructure, SaaS apps, and now AI agents, aiming to replace static role-based access with continuous, request-driven, time-bound permissions.
Visit Website ↗ + Add to CompareOverview
Opal (operating as Perma Security Incorporated) builds identity access management focused on least-privilege enforcement at scale — just-in-time access requests, automated approval workflows, and access reviews spanning cloud infrastructure and SaaS applications, extended to cover access for AI agents as enterprises deploy more of them.
The company has raised $59 million from investors including Greylock Partners, Battery Ventures, and Box Group, and was named to Notable Capital’s ‘Rising in Cyber 2026’ list of promising private cybersecurity startups. Its registered address is in San Francisco, California.
Innovation Matrix Assessment
Opal has expanded from core cloud/SaaS access management into AI agent access governance as that need emerged, reflecting responsiveness to a fast-moving threat surface.
Automating just-in-time access requests and approvals directly reduces the manual access-review burden that consumes significant identity team time in most enterprises.
$59 million raised from Greylock and Battery Ventures, plus inclusion on a notable 'Rising in Cyber' industry list, are credible signals of investor and market confidence.
Just-in-time, request-driven access management is an established pattern (following vendors like Teleport and StrongDM); Opal's AI-agent extension is timely but incremental rather than category-redefining.
No independent, third-party efficacy benchmark was found; effectiveness claims are vendor-stated rather than externally validated.
As AI agents are granted increasing infrastructure and data access, least-privilege enforcement that spans human and machine identities together is likely to grow in strategic importance.
Why CISOs Should Care
Standing, over-provisioned access remains a top contributor to breach severity once an attacker gets a foothold; Opal gives CISOs a path to enforce time-bound, request-driven access at scale across both human and AI-agent identities without manual access-review overhead.
What Makes It Different
Opal frames access management around continuous, workflow-driven least privilege rather than periodic access certification campaigns, and treats AI agents as a first-class identity type needing the same lifecycle controls as human employees.
The Matrix Verdict
53/100 — INCREMENTAL INNOVATOR
A well-funded access management platform with credible tier-one venture backing and industry recognition; its extension into AI-agent access governance is timely, though independent efficacy validation is not yet available.
Editorial Note: Claims vs. Verified Findings
The $59 million funding figure and named investors are independently confirmed via the company's own site; the registered San Francisco address is confirmed via its privacy policy, but founding year and customer counts are not independently verified.
Sources
Alternatives to Opal Security
Wiz
Agentless, graph-based cloud security platform that maps multi-cloud risk end-to-end, now owned by Google after a record $32B…
Chainguard
Provides hardened, minimal, continuously-rebuilt container images and software packages to eliminate vulnerabilities before they reach production.
Microsoft Defender for Cloud
Microsoft's built-in cloud-native application protection platform, unifying CSPM, workload protection, and DevOps security natively across Azure, AWS, and…
Sysdig
The company behind Falco, the CNCF's runtime security standard, offering an eBPF/kernel-level CNAPP built on live syscall-based threat…
Obsidian Security
Obsidian Security provides a SaaS security posture management (SSPM) platform that detects identity-centric threats and misconfigurations across enterprise…
Tenable Cloud Security
An agentless, graph-based cloud identity and posture platform, born as Israeli startup Ermetic, now folded into Tenable's exposure-management…