Clutch
Clutch is a Tel Aviv-based platform that discovers, governs, and secures non-human identities, secrets, and AI agents across enterprise environments.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Clutch (Clutch Security) is a Tel Aviv, Israel-based cybersecurity company founded in October 2023 that builds a platform for discovering, governing, and securing non-human identities (NHIs) — API keys, service accounts, tokens, certificates, and secrets — as well as, more recently, AI agents operating across cloud, SaaS, and on-premises environments. Its core technology, the ‘Identity Lineage Graph,’ maps relationships between an identity’s origin, owner, storage location, and the resources it accesses, which the company uses to build behavioral baselines, detect anomalous credential use, and progressively enforce zero-trust controls such as ephemeral credentials. The platform integrates with roughly 60-100+ infrastructure and identity tools and reports named enterprise customers including NTT Data, Fluidra, OpenWeb, and Cedar.
In January 2025, Clutch raised a $20 million Series A led by SignalFire, with participation from existing investors Lightspeed Venture Partners and Merlin Ventures, bringing its total funding to roughly $28.5 million since its $8.5 million seed round. The raise and the broader machine-identity security category were covered independently by TechCrunch, SecurityWeek, and Calcalist. CEO Ofir Har-Chen has a two-decade cybersecurity background, and co-founders Sagi Haas and Tal Kimhi previously worked at Axonius. The company operates in an increasingly crowded but fast-growing NHI and machine-identity segment alongside competitors such as Astrix Security, Entro Security, Oasis Security, and Token Security.
Innovation Matrix Assessment
Went from an $8.5M seed to a $20M Series A in roughly 18 months while expanding from NHI and secrets discovery into AI-agent identity governance, indicating a fast product-iteration pace backed by credible investors.
Machine-identity sprawl is a genuine, growing blind spot for security teams, and named enterprise customers (NTT Data, Fluidra, OpenWeb, Cedar) suggest real operational adoption, not just a lab concept.
Backed by SignalFire, Lightspeed Venture Partners, and Merlin Ventures with $28.5M total raised, independent press coverage in TechCrunch, SecurityWeek, and Calcalist, and a Fortune Cyber60 listing constitute solid, verifiable market momentum for a company only about two years old.
Non-human identity security is a real and rising category, but Clutch is one of several well-funded entrants (Astrix, Entro, Oasis, Token Security) rather than a clear category-definer.
No named breach-prevention case study, independent red-team test, or analyst efficacy benchmark was found; customer names are confirmed but described outcomes come from company materials.
As AI agents and machine-to-machine authentication proliferate, non-human identity management is likely to remain a core, growing security discipline over the next 3-5 years.
Why CISOs Should Care
CISOs increasingly cite unmanaged service accounts, API keys, and now autonomous AI agents as a top blind spot; Clutch gives them a single inventory and lifecycle-management layer for these non-human identities.
What Makes It Different
Clutch's Identity Lineage Graph ties each machine identity back to its human owner, origin, and consuming resources rather than just flagging exposed credentials, aiming to make NHI risk actionable rather than just visible.
The Matrix Verdict
62/100 — INCREMENTAL INNOVATOR
Clutch is a real, well-funded, independently covered company addressing a genuine and growing security gap, with credible investors and named enterprise customers.
Editorial Note: Claims vs. Verified Findings
Funding amount, investors, founders, and founding date are independently corroborated by TechCrunch, SecurityWeek, and Calcalist; specific product efficacy claims and the customer list come from Clutch's own materials and have not been independently tested or verified.
Sources
Alternatives to Clutch
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
CyberArk
The market-leading privileged access management vendor, extending from vaulted human credentials into machine identity and secrets management.