Secberus
Miami-based cloud security posture management (CSPM) vendor offering a risk-driven, policy-as-code platform for multi-cloud compliance.
Visit Website ↗ + Add to CompareOverview
Secberus builds a cloud security posture management platform that continuously evaluates configuration and compliance risk across AWS, Azure, and Google Cloud environments. Rather than shipping a fixed set of compliance rule checklists, the company positions its platform as “adaptable” — letting security teams define and prioritize their own risk policies as code, so findings map to what an organization actually considers risky rather than a generic industry baseline.
Founded in 2017 and headquartered in Miami, Florida, Secberus has grown gradually as a small, independent CSPM vendor, reporting roughly $2.9 million in annual recurring revenue in 2024, up from $2.3 million the prior year. The company sells both directly to mid-market and enterprise customers and through managed security service providers, managed service providers, and systems integrators that resell its platform to their own client base.
Secberus operates in a cloud security posture management category that has consolidated heavily into broader cloud-native application protection platforms from much larger, better-capitalized vendors. Its channel-partner-driven go-to-market and configurable risk-policy model give it a niche among smaller and mid-market customers who want more control over their compliance definitions than a fixed-checklist tool provides, though it competes from a considerably smaller resource base than the CNAPP platform leaders.
Innovation Matrix Assessment
No major recent feature launches were found in public sources; the platform appears to iterate steadily but without the visible rapid release cadence of better-funded CSPM competitors.
Third-party data puts headcount at roughly 11 employees currently, down from about 20 in 2023, which for a company operating since 2017 is a yellow flag on operational scale even if it reflects deliberate efficiency rather than distress.
Reported revenue grew from about $2.3M to $2.9M ARR between 2023 and 2024 (roughly 26% growth), which is real but modest for a seven-year-old company, and no funding round has been announced since its original seed raise.
A configurable, policy-as-code approach to risk scoring differentiates Secberus modestly from fixed-checklist CSPM tools, but the category has since been largely absorbed into broader CNAPP platforms from much larger vendors, limiting how disruptive a point CSPM product can be.
No independent third-party evaluation or named large-enterprise case study was found; available evidence of efficacy is limited to the company's own revenue and customer-segment claims.
Multi-cloud security posture management remains a core, persistent need as organizations run hybrid AWS/Azure/GCP environments, though the standalone-CSPM category faces headwinds as buyers increasingly prefer consolidated CNAPP suites.
Why CISOs Should Care
CISOs who want a smaller, more configurable CSPM vendor than the major CNAPP platforms get a risk-based, policy-as-code approach to cloud compliance, typically delivered through an existing MSSP, MSP, or systems-integrator relationship.
What Makes It Different
Secberus lets teams define their own risk-weighted policies as code rather than relying solely on fixed compliance-framework checklists, and it leans on a channel-partner go-to-market model rather than pure direct enterprise sales.
The Matrix Verdict
48/100 — EMERGING / UNRANKED
A legitimate, real-revenue CSPM vendor operating in a category now dominated by far larger CNAPP platforms; credible but modest growth, with no independent evidence yet of breakout traction.
Editorial Note: Claims vs. Verified Findings
Revenue and ARR figures ($2.9M in 2024, $2.3M in 2023) and total funding figures (reported between $6.6M and $15.9M depending on the source) come from third-party data aggregators rather than Secberus's own disclosures, and the funding figures conflict between sources, so treat them as directional rather than precise. No independently verified named enterprise customer case study was found.
Sources
Alternatives to Secberus
Wiz
Agentless, graph-based cloud security platform that maps multi-cloud risk end-to-end, now owned by Google after a record $32B…
Chainguard
Provides hardened, minimal, continuously-rebuilt container images and software packages to eliminate vulnerabilities before they reach production.
Microsoft Defender for Cloud
Microsoft's built-in cloud-native application protection platform, unifying CSPM, workload protection, and DevOps security natively across Azure, AWS, and…
Obsidian Security
Obsidian Security provides a SaaS security posture management (SSPM) platform that detects identity-centric threats and misconfigurations across enterprise…
Sysdig
The company behind Falco, the CNCF's runtime security standard, offering an eBPF/kernel-level CNAPP built on live syscall-based threat…
Upwind Security
Fast-growing, venture-backed CNAPP startup combining agentless scanning with eBPF runtime sensors for real-time cloud and AI workload risk…