Defakto
Non-human identity platform replacing static service-account credentials with dynamic identities for AI agents and workloads.
Visit Website ↗ + Add to CompareOverview
Defakto builds an identity and access management platform purpose-built for non-human identities — AI agents, services, workloads, and CI/CD pipelines — replacing static credentials and overprivileged service accounts with dynamic, short-lived identities for every automated interaction. The bet is that machine and agent identity, not human identity, is where credential sprawl and privilege-escalation risk is growing fastest.
Founded in 2023 by CEO Danny Oliveri and CTO Eli Nesterov, and based in Palo Alto, California, Defakto closed a $13 million Series A in April 2024 followed by a $30.75 million Series B in October 2025, bringing total funding to roughly $50 million. The Series B was led by XYZ Venture Capital with participation from The General Partnership, Bloomberg Beta, WndrCo, and J.P. Morgan, alongside notable angel investor Michael Coates, former CISO of Twitter.
The differentiator is that Defakto was built specifically for the non-human identity layer from the outset, rather than retrofitting a human-centric IAM product. The fast Series A-to-B progression and the caliber of strategic and angel investors are real, credible confidence signals. Non-human identity has become a fast-moving, increasingly crowded category by 2026, with several well-funded peers pursuing similar territory, and Defakto hasn’t yet published named enterprise customer case studies or independent analyst placement, so its efficacy claims remain largely investor-validated rather than production-proven in public.
Innovation Matrix Assessment
Progressed from Series A to Series B in about 18 months, reflecting fast product and go-to-market iteration.
Credential sprawl for non-human identities is a well-documented, fast-growing operational risk that this platform directly targets.
A fast Series A-to-B raise with strategic investors including J.P. Morgan and a notable former-CISO angel signals real investor confidence, though customer-side evidence is thin publicly.
Non-human identity is an increasingly crowded, fast-moving category with several credible competitors; Defakto is a serious player but not uniquely category-defining.
No independent testing, named customer case studies, or analyst placements were found; investor credibility is not the same as demonstrated production efficacy.
Machine and agent identity sprawl is one of the fastest-growing, most durable risk categories as AI agents proliferate across enterprises.
Why CISOs Should Care
Replaces static, overprivileged service-account credentials with dynamic identities scoped to each automated interaction, closing a growing gap human-centric IAM tools don't cover.
What Makes It Different
Purpose-built from the start for non-human identities rather than a human IAM product extended to cover machines and agents.
The Matrix Verdict
60/100 — INCREMENTAL INNOVATOR
A credibly backed, fast-moving non-human identity platform; Incremental Innovator given the lack of public customer or analyst validation despite strong investor confidence.
Editorial Note: Claims vs. Verified Findings
Funding rounds and investor participation are independently reported. No independent customer case studies or analyst recognition were found; product-effectiveness claims are vendor-stated.
Sources
- Defakto $30.75M Series B — https://www.securityweek.com/defakto-raises-30-million-for-non-human-iam-platform/
- Defakto Series B announcement — https://www.defakto.security/blog/defakto-secures-30-75-m-series-b-to-set-a-new-standard-in-non-human-identity-security/
- Defakto company site — https://www.defakto.security/about/
Alternatives to Defakto
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
AppViewX
Machine identity management platform automating certificate lifecycle management (CLM) and PKI operations at enterprise scale, including post-quantum cryptography…