Clutch Security
A Tel Aviv company securing non-human identities—API keys, tokens, service accounts, and AI agents—through short-lived, auto-expiring credentials.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Clutch Security builds a Universal Non-Human Identity (NHI) Security Platform covering discovery, lifecycle governance, risk posture, and real-time threat detection for machine credentials: API keys, tokens, service accounts, and increasingly AI agents. Its core technical bet is on ephemeral identities—short-lived credentials that automatically expire rather than requiring manual rotation—which it frames as a more scalable answer to machine-identity sprawl than static-secret vaulting.
Founded in Tel Aviv in late 2023 by Ofir Har-Chen (CEO, previously COO at Hunters), Sagi Haas, and Tal Kimhi (both previously of Axonius), the company has raised $28.5 million across an $8.5 million seed and a $20 million Series A (January 2025, led by SignalFire). It competes in a non-human-identity category that consolidated quickly in 2026: two close rivals, Astrix Security and Entro Security, were acquired by Cisco and SailPoint respectively, and category leader Oasis Security is reportedly being acquired by Cyera for roughly $1 billion.
Innovation Matrix Assessment
Ephemeral, auto-expiring NHI credentials are a concrete technical differentiator from static-secret rotation used by several competitors.
Addresses a measurable, growing problem—CyberArk's 2025 Identity Security Landscape report cites roughly 82 machine identities per human employee at the average enterprise.
Raised $28.5M from Lightspeed, SignalFire and Merlin Ventures across two rounds in about 14 months, in a category that just saw two competitors acquired and a third in a $1B deal.
Non-human identity security is a real, fast-moving category, but Clutch is one of several well-funded entrants rather than a clear category leader post-consolidation.
No named customer case studies or independent test results were found; evidence is limited to funding announcements and investor commentary.
Machine and AI-agent identity sprawl will keep growing as agentic AI adoption increases, giving the category durable multi-year relevance.
Why CISOs Should Care
Lets CISOs discover and govern the explosion of API keys, service accounts, and AI-agent credentials without relying on manual secret rotation.
What Makes It Different
Uses ephemeral, auto-expiring identities rather than long-lived secrets managed through periodic rotation.
The Matrix Verdict
62/100 — INCREMENTAL INNOVATOR
Clutch Security is an Incremental Innovator: technically sound and well-funded in a genuinely important category, but not yet differentiated from a NHI field that is actively consolidating around a handful of leaders.
Editorial Note: Claims vs. Verified Findings
Funding figures and founder backgrounds are independently reported by TechCrunch and Calcalist; no independent efficacy data exists beyond company and investor statements.
Sources
Alternatives to Clutch Security
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Veza
Identity security platform built around an authorization graph that maps who and what can actually access data and…