Silverfort

Silverfort, founded in Tel Aviv in 2016 by Matan Fattal, Yaron Kassner, and Hed Kovetz, built an agentless architecture that enforces MFA and adaptive access policy at the authentication-protocol level (Kerberos, NTLM, LDAP, RADIUS) rather than requiring an agent on every endpoint or application. That approach lets it extend modern access controls — MFA, risk-based blocking, service-account monitoring — to legacy systems, IT/OT infrastructure, command-line tools, and file shares that conventional IAM and MFA products historically could not protect, because they had no agent-installation path.

The company has raised $222 million across four rounds, including a $116 million Series D at a $1 billion valuation in January 2024, from investors including Brighton Park Capital. It markets itself as a Unified Identity Protection platform combining identity threat detection and response (ITDR) with identity threat prevention across on-prem Active Directory, cloud identity providers, and previously unprotectable resources.

Its architecture is a genuine structural departure from agent-based MFA and IAM: instead of deploying to every server and application, Silverfort sits at the identity infrastructure layer (typically integrated with domain controllers) and can enforce policy on any authentication request that passes through, including for service accounts that traditionally have no MFA option at all.