Cremit

In roughly two years a four-person team built a working multi-feature product (discovery, AI-based secret scanning, automated rotation), a reasonable pace for its size, though there is no independent record of repeated shipped advances.

Secrets sprawl and unmanaged machine credentials are a real, well-documented security gap, and automating discovery and rotation addresses it directly, but the product's maturity and scale of real-world use are unverified given the company's size.

Only a seed round of undisclosed size and a four-person team were found; there is no named customer, disclosed revenue, or later funding round, so momentum evidence is minimal.

Non-human identity and secrets security is an increasingly crowded category already served by larger, better-funded vendors (GitGuardian, Astrix Security, Oasis Security, Akeyless); Cremit is a very early entrant rather than a disruptive force yet.

Placing in the RSAC 2026 and BSidesSF 2026 Cloud Village CTF contests is genuine independent recognition of technical skill, but it is not evidence of production efficacy; no customer case study or incident evidence was found.

Non-human identity and machine-secret sprawl is a durable, growing problem as automation and AI agents proliferate, so the underlying need will matter for years even though this specific company's staying power is unproven.