Xage Security
Palo Alto-based zero trust access platform unifying identity-based security across IT, OT, and cloud environments, with strong traction among energy and industrial operators.
Visit Website ↗ + Add to CompareOverview
Xage Security builds an identity-based zero trust access and protection fabric aimed at IT, OT, and cloud environments simultaneously, a deliberately broader scope than most zero trust vendors that focus on IT-only workforce access. The platform enforces fine-grained, identity-driven access controls across converged IT/OT infrastructure, positioning itself as a fit for industrial and critical infrastructure operators trying to extend modern access control to legacy operational technology without re-architecting it.
Founded in 2017 and headquartered in Palo Alto, California, Xage has built a customer and investor base weighted toward energy and industrial sectors, with strategic backing from Chevron Technology Ventures, Aramco Ventures, and Saudi Aramco-linked SCF Ventures alongside traditional VCs, reflecting real commercial traction with oil and gas and critical infrastructure operators specifically rather than broad horizontal enterprise adoption.
The company closed a $20 million round in December 2025 led by Piva Capital, reporting a 50% rise in net new revenue between Q3 and Q4 2025 and more than 100% growth into Q1 2026, growth the company ties to intensifying demand following the high-profile 2025 cyberattack on Jaguar Land Rover that disrupted automotive manufacturing operations. Xage’s strategic investor base of industrial and energy operators is a genuine independent signal of relevance in OT security specifically, distinct from more marketing-driven growth claims common in the broader zero trust category.
Innovation Matrix Assessment
Xage reports accelerating revenue growth (50% quarter-over-quarter in late 2025, over 100% into Q1 2026) alongside continued platform investment in AI security for industrial environments, indicating an active and quickening product/market cadence.
Unifying identity-based zero trust access across IT, OT, and cloud in one fabric addresses a genuine architectural gap for industrial operators who otherwise need separate access control systems for legacy OT and modern IT.
A December 2025 $20M round led by Piva Capital, with strategic participation from Chevron Technology Ventures, Aramco Ventures, and SCF Ventures, plus independently reported triple-digit revenue growth, is a strong and well-corroborated momentum signal.
Extending zero trust identity fabric across converged IT/OT/cloud rather than IT-only is a meaningfully different scope than most zero trust vendors, though the underlying zero-trust concept itself is now widely adopted across the industry.
Strategic investment from operating energy companies (Chevron, Aramco) rather than purely financial investors is a credible indirect signal of real operational validation in industrial environments, though independently published performance benchmarks are not available.
Demand for OT/industrial zero trust intensified following the 2025 Jaguar Land Rover cyberattack that disrupted automotive manufacturing, directly validating the urgency of the IT/OT convergence security problem Xage addresses.
Why CISOs Should Care
Lets CISOs at industrial and critical infrastructure organizations apply consistent, identity-based zero trust access control across both modern IT systems and legacy OT equipment that was never designed for it.
What Makes It Different
Scopes its zero trust fabric across IT, OT, and cloud together rather than treating OT security as a separate, bolted-on product line, backed by strategic investment from major energy operators rather than financial investors alone.
The Matrix Verdict
70/100 — MEANINGFUL INNOVATOR
A fast-growing, well-corroborated zero trust vendor with genuine differentiation in unifying IT/OT/cloud access control and real traction among energy and industrial operators specifically.
Editorial Note: Claims vs. Verified Findings
The funding round, investor list, and revenue growth percentages are independently reported via GlobeNewswire and Industrial Cyber. The specific tie to Jaguar Land Rover-driven demand is the company's own framing of the market context and was not independently confirmed as causal.
Sources
Alternatives to Xage Security
Teleport
An identity-based infrastructure access platform issuing short-lived cryptographic identities for humans, machines, and AI agents in place of…
SpecterOps
Identity attack-path security specialist behind BloodHound, the widely used open-source tool for mapping Active Directory and Entra ID…
Astrix Security
Non-human identity security platform that discovers and governs API keys, OAuth tokens, service accounts, and AI-agent credentials across…
Socure
AI-driven identity verification and fraud platform used by banks, fintechs, and government agencies to validate identities during digital…
Keyfactor
Machine identity and PKI management platform helping enterprises secure certificates, keys, and post-quantum cryptography readiness at scale.
Silverfort
Agentless unified identity protection platform that extends MFA, ITDR, and access policy to legacy and unmanaged systems traditional…