Cerby
Identity security automation platform that discovers, secures, and governs "disconnected applications" — nonstandard enterprise apps that lack native support for SSO, MFA, or automated provisioning.
Visit Website ↗ + Add to CompareOverview
Cerby addresses a specific identity security gap: the enterprise applications that fall outside the reach of a traditional identity provider because they do not support SAML/SSO, modern MFA, or SCIM-based provisioning. These “disconnected applications” are typically social media accounts, marketing tools, and long-tail SaaS that employees adopt directly, creating shadow IT that identity teams can see but cannot govern with standard IAM tooling. Cerby’s platform discovers these applications, applies automated access controls and credential rotation on top of them, and brings them into standard identity governance and reporting workflows without requiring the application vendor to natively support enterprise identity standards.
Founded in 2020 and based in the San Francisco Bay Area, Cerby has raised more than $82 million in total funding, including a $40 million Series B round in 2025 led by DTCP Capital with participation from Okta Ventures, Salesforce Ventures, and Two Sigma Ventures — notable in that two of its investors are also strategic identity and security platform vendors. The company has reported tripling its base of six-figure enterprise accounts and named customers including monday.com.
The identity security market has largely solved governance for applications that support modern federation standards; Cerby’s bet is that the long tail of applications that don’t will remain a persistent, underserved risk surface as SaaS sprawl continues, and that automating control over that tail is a distinct product category rather than a feature of existing IAM platforms.
Innovation Matrix Assessment
Progressed from a $17M Series A to a $40M Series B within a few years while expanding platform scope for identity automation, a reasonable pace for a Series B-stage identity vendor.
Automates discovery, credential rotation, and access governance for applications that identity teams otherwise have to manage manually or simply cannot see, reducing a specific and recurring operational burden for IAM and IT teams.
A $40M Series B in 2025 led by DTCP with participation from strategic investors Okta Ventures and Salesforce Ventures, plus a reported tripling of six-figure accounts, indicates real commercial traction, though the company remains mid-stage and not yet at scale-incumbent size.
Targets a real, underserved gap left by standards-based IAM and SSO platforms (apps that never adopted SAML/SCIM), a distinct problem framing from mainstream identity governance vendors rather than an incremental feature.
Strategic investment and continued use by Okta and Salesforce Ventures (both identity-adjacent investors) is a mild positive signal, but no independent third-party test, MITRE-style evaluation, or named security-outcome case study was found; efficacy evidence rests mainly on customer growth metrics rather than verified security outcomes.
SaaS sprawl and shadow IT continue to grow, and the specific problem of non-federated applications is not solved by mainstream IAM suites, keeping this a relevant and durable niche within identity security.
Why CISOs Should Care
Gives identity and IT security teams visibility and automated control over the long tail of employee-adopted apps that never show up in the SSO tile dashboard and are otherwise invisible to governance tooling.
What Makes It Different
Rather than requiring app vendors to adopt SAML/SCIM, Cerby automates control on top of applications that never will, filling a gap mainstream IAM platforms structurally can't address.
The Matrix Verdict
57/100 — INCREMENTAL INNOVATOR
A well-funded, credibly differentiated identity security vendor solving a real and growing shadow-IT problem; strong momentum and product focus, though independently verified efficacy evidence is still limited relative to its funding profile.
Editorial Note: Claims vs. Verified Findings
Funding totals, investor names, and the 2025 Series B are independently reported by SecurityWeek and SiliconANGLE. Customer growth claims (tripling of six-figure accounts, specific named customers like monday.com) are self-reported by Cerby in press materials and not independently audited.
Sources
Alternatives to Cerby
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Silverfort
Agentless unified identity protection platform that extends MFA, ITDR, and access policy to legacy and unmanaged systems traditional…