Stream.Security
Cloud detection and response platform built around a continuously updated model of the production environment, called a cloud twin.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Stream.Security, formerly Lightlytics, builds a live model of a customer’s production environment spanning cloud, SaaS, identity, network and runtime layers. The model, marketed as CloudTwin and now ProductionTwin, is used to map exploitable paths and to trace attacks across boundaries.
The company positions the platform around autonomous prevention, detection, threat hunting and remediation, with automated response aimed at cutting investigation time. It is headquartered in Tel Aviv and has raised about $55 million, including a $30 million Series B in October 2024 led by U.S. Venture Partners.
Innovation Matrix Assessment
Rebranded from Lightlytics and moved from cloud change-impact modeling toward autonomous detection and response, with a patent-pending world-model approach.
Correlating cloud, identity and runtime context in one model can shorten triage and attack-path analysis for cloud teams.
$30M Series B (Oct 2024, USV, Citi Ventures) and a named customer set including RingCentral and Kaltura; still mid-sized.
Using a continuously updated environment model as the basis for detection and response differs from alert-centric CDR tooling, though the digital-twin idea is spreading.
Gartner Cool Vendor 2024 and Peer Insights reviews are positive, but we found no independent efficacy tests or named incident outcomes.
Cloud and hybrid estates will keep growing in complexity, and contextual models are likely to stay central to automated response.
Why CISOs Should Care
Gives cloud security teams a single contextual model for working out which exposures are reachable and how an attack could move, which can cut triage time.
What Makes It Different
Rather than collecting alerts and layering rules, it maintains a model of the whole production environment and reasons over it.
The Matrix Verdict
65/100 — INCREMENTAL INNOVATOR
Stream.Security scores as a Meaningful Innovator. The model-based approach and funding are credible, but independent efficacy evidence is thin.
Editorial Note: Claims vs. Verified Findings
Autonomous-defense and remediation-speed claims come from the vendor. Independently found items are the funding rounds and Gartner Cool Vendor 2024 listing.
Sources
Alternatives to Stream.Security
Wiz
Agentless, graph-based cloud security platform that maps multi-cloud risk end-to-end, now owned by Google after a record $32B…
Chainguard
Provides hardened, minimal, continuously-rebuilt container images and software packages to eliminate vulnerabilities before they reach production.
Second Front Systems
A Wilmington, DE defense-tech company whose Game Warden platform deploys commercial SaaS into DoD classified networks in 90…
Sysdig
The company behind Falco, the CNCF's runtime security standard, offering an eBPF/kernel-level CNAPP built on live syscall-based threat…
Microsoft Defender for Cloud
Microsoft's built-in cloud-native application protection platform, unifying CSPM, workload protection, and DevOps security natively across Azure, AWS, and…
Obsidian Security
Obsidian Security provides a SaaS security posture management (SSPM) platform that detects identity-centric threats and misconfigurations across enterprise…