Defakto Security

Defakto (formerly SPIRL) builds an identity and access management platform focused specifically on non-human identities: service accounts, API keys, workload identities, CI/CD pipelines, and increasingly AI agents. Its core pitch is replacing long-lived static secrets with dynamic, continuously verified credentials issued and rotated automatically, closing off a class of breach that traditional human-focused IAM tools largely ignore. The platform works across AWS, Azure, Google Cloud, and hybrid infrastructure.

The problem Defakto targets is real and growing: non-human identities now outnumber human employees by a wide margin in most enterprises, yet many organizations still run on static API keys and over-privileged service accounts with no consistent lifecycle management. Defakto raised a $30.75 million Series B round led by XYZ Venture Capital, bringing total funding to roughly $50 million, signaling meaningful investor confidence in the non-human identity security category.

Defakto competes in an increasingly active space alongside Astrix Security, Oasis Security, and Aembit, all chasing the same non-human identity gap. Its differentiation rests on breadth of coverage across the full non-human identity lifecycle rather than a single integration point, but as a Series B company it is still proving durability of adoption at scale.