SecurityWeek
Aembit Scores $16.6M Seed Funding for Workload IAM Technology
Maryland startup Aembit gets funding to build an identity platform designed to manage, enforce, and audit access between federated workloads. By
Aembit, a Maryland startup with ambitious plans in the identity and access management space, has snagged $16.6 million in early stage venture capital funding. The company said the seed-stage financing was provided by Ballistic Ventures and Ten Eleven Ventures, two firms active in funding cybersecurity companies. Aembit is building an identity platform designed to manage, enforce, and audit access between federated workloads. The company has rolled out a product that  provides secure access from client workloads to the services they depend on, like APIs, databases, and cloud resources. Aembit’s pitch is that it would simplify application development and delivery, allowing enterprises to authorize access to services based on defined policies, issue credentials expected by those services, and log the interactions between systems. The new investors are betting that Aembit’s use of new techniques like secretless authentication and credential providers, as well as no-code integrations to simplify secure access for developers will provide differentiation in a crowded IAM marketplace. Aembit is the brainchild of David Goldschlag and Kevin Sapp, two security engineers who previously created and sold NewEdge to Netskope in 2019.

Aembit Scores $16.6M Seed Funding for Workload IAM Technology

Competitive Strategic Window:
The Competitive Strategic Window analyses the competitive landscape in terms of markets, applications, and geographies to help the vendor define an alignment or fit between their capabilities and opportunities for future growth prospects. It describes the optimal or favorable fit for the vendors to adopt successive merger and acquisition strategies, geography expansion, research & development, and new product introduction strategies to execute further business expansion and growth during a forecast period. FPNV Positioning Matrix:
The FPNV Positioning Matrix evaluates and categorizes the vendors in the Cloud Identity & Access Management Market based on Business Strategy (Business Growth, Industry Coverage, Financial Viability, and Channel Support) and Product Satisfaction (Value for Money, Ease of Use, Product Features, and Customer Support) that aids businesses in better decision making and understanding the competitive landscape. Market Share Analysis:
The Market Share Analysis offers the analysis of vendors considering their contribution to the overall market. It provides the idea of its revenue generation into the overall market compared to other vendors in the space. It provides insights into how vendors are performing in terms of revenue generation and customer base compared to others. Knowing market share offers an idea of the size and competitiveness of the vendors for the base year. It reveals the market characteristics in terms of accumulation, fragmentation, dominance, and amalgamation traits. The report provides insights on the following pointers:
1. Market Penetration: Provides comprehensive information on the market offered by the key players
2. Market Development: Provides in-depth information about lucrative emerging markets and analyze penetration across mature segments of the markets
3. Market Diversification: Provides detailed information about new product launches, untapped geographies, recent developments, and investments
4. Competitive Assessment & Intelligence: Provides an exhaustive assessment of market shares, strategies, products, certification, regulatory approvals, patent landscape, and manufacturing capabilities of the leading players
5. Product Development & Innovation: Provides intelligent insights on future technologies, R&D activities, and breakthrough product developments
The report answers questions such as:
1. What is the market size and forecast of the Global Cloud Identity & Access Management Market? 2. What are the inhibiting factors and impact of COVID-19 shaping the Global Cloud Identity & Access Management Market during the forecast period? 3. Which are the products/segments/applications/areas to invest in over the forecast period in the Global Cloud Identity & Access Management Market? 4. What is the competitive strategic window for opportunities in the Global Cloud Identity & Access Management Market? 5. What are the technology trends and regulatory frameworks in the Global Cloud Identity & Access Management Market? 6. What is the market share of the leading vendors in the Global Cloud Identity & Access Management Market? 7. What modes and strategic moves are considered suitable for entering the Global Cloud Identity & Access Management Market? Market Dynamics

Global Cloud Identity &amp; Access Management Market Research Report to 2027 - Featuring Dell Technologies, ForgeRock, HID Global and IAM Technology Among Others - ResearchAndMarkets.com

2022 Emerging IAM Technology Spend
Community Chats Webinars Library
2022 Emerging IAM Technology Spend
I recently ran another of my highly scientific industry polls – via LinkedIn to get a feel for this years spending patterns as they pertain to some emerging identity and access management technology areas. I have been tracking four emerging areas over the past 8 months or so, including Passwordless Authentication (where The Cyber Hut released a 61 page buyer guide last year ), Cloud Identity/Infrastructure Entitlements Management, Decoupled Authorization and Identity Threat Detection and Response . All four areas have had significant venture capitalist funding over the past 36 months and the use cases and capabilities of each have started to stabilise to a point where buy side procurement and integration is becoming consistent and vendors are identifying their competitive go to market narratives. So my poll was essentially asking, which of these areas would a buy-side practitioner look to invest in during 2022? So the response was quite small (n=53) but as always, the comments and commentary are also the most interesting part of any poll. The overwhelming majority was seemingly passwordless authentication. It could be argued that this area is probably the most mature in some respects of the 4 sectors – have we not been trying to rid ourselves of passwords since about 1975? The passwordless arena has certainly blossomed over the past year or two, with vendors such as Transmit Security , HYPR , Secret Double Octopus , 1Kosmos , Beyond Identity , Keyless.io , Magic.link and Stytch all receiving decent funding rounds. The battle grounds for passwordless seem to divide into the B2E and B2C worlds, with broad coverage (how many integrations and applications can be brought into the project) and broad user involvement (how many user and device types can be integrated) both important – not to mention the ability to deliver enrolment and lost device use cases in an entirely self-sufficient way – avoiding the dreaded help desk call. Most passwordless vendors are seemingly leveraging asymmetric cryptographic and challenge response style flows (some standards based using the likes of WebAuthn, some proprietary) with the private key being securely stored either on device in a tamper resistant way, or off device in a distributed fashion. Local mobile biometry seems popular too to gain access to the private key. A focus on improved identity proofing, account recovery and app-less integrations are interesting competitive areas too. Second in the poll list was Cloud Infrastructure/Identity Entitlements Management. CIEM (often pronounced “kimm”) is looking to solve the observability and management issues of having a multi-cloud and distributed application landscape. Many large enterprises will have a multitude of different application and service provider integrations that they need to handle and of course identity is somehow stuck in the middle trying to be the glue that defines identity attributes as well as providing a foundation for authorization via permissions and rules. It is interesting to see how CIEM actually evolves – and does the set of capabilities needed to manage this ecosystem start to fall into the next flavour of Identity Governance and Administration or a more hybrid approach to identity analytics? Decoupled Authorization (or externalized authorization management) has been around for a while (see Axiomatics and PlainID ) where the focus was upon having a dedicated policy decision point away from the authentication and session management services associated with the identity provider infrastructure. As authentication is becoming a “known” feature set, the need for continual security, adaptive access, zero trust identity post authentication, coupled with a more complex set of assets to protect (think APIs, microservices, data objects, privacy for PII, IoT) we’ve started to see authorization gaining a second wind. A wave of vendors have emerged such as Cloudentity , Scaled Access (recently acquired by OneWelcome) and Veza are all competing to take the post-login security budget – via the protection for a range of resources using fine grained access control. Whist access and relationship management wasn’t added to the poll there is certainly a wave of vendors looking to handle the first step in that authorization challenge – via improved cloud-centric access request management, access review and access intelligence. See ConductorOne and Indent as some examples. The final position in the poll, went to the area of Identity Threat Detection and Response. ITDR is certainly a more recent sector, but one with some deep origins. Threat detection has often been associated with endpoints and devices. The concepts around discovery of assets and then analysis via signatures and behaviour is a staple security model. Applying this concept to the mature identity landscape seems a pretty sound evolutionary step – how can organisations aim to manage a distributed identity landscape with remediation without dedicated tooling? Well I’m assuming they can’t. Here the ability to ingest identity data be it from identity providers, activity logs or the applications themselves, before applying checks, scans and rules provides a basic foundation to essentially identify misgoverned accounts, permissions and behaviours. Emerging vendors in this space include Oort , Permiso , Silverfort and Illusive . About The Author
Simon Moffatt is Founder & Analyst at The Cyber Hut. He is a published author with over 20 years experience within the cyber and identity and access management sectors. His most recent book, “Consumer Identity & Access Management: Design Fundamentals”, is available on  Amazon . He is a CISSP, CCSP, CEH and CISA. His 2022 research diary focuses upon “Next Generation Authorization Technology” and “Identity for The Hybrid Cloud”. Up and Coming Events
Email*

2022 Emerging IAM Technology Spend

Security consulting firm shares insights on how identity and access      management has expanded in scope and depth in the age of digital      transformation
November 27, 2017 08:00 AM Eastern Standard Time
AUSTIN, Texas--( BUSINESS WIRE )-- Edgile ,      the leading cyber risk and regulatory compliance partner to the Fortune      500, will present a case study on IAM best practices at the Gartner      Identity & Access Management Summit in Las Vegas, Nevada, November      28-30, 2017. In a solution provider session on November 29, from 3:15      p.m. – 4:00 p.m., Edgile managing partner Lawrence      Wolf will a lead a discussion on how IAM has expanded in both depth      and scope in the era of digital transformation. With a long history of IAM success, Edgile was recently named SailPoint      Partner of the Year for the Americas and is recognized as a Microsoft      Gold Security Partner, with its consultants honored by Microsoft as      MVPs. Located at booth #314, Edgile senior architects and consultants      will be on hand to connect with event attendees. The modern enterprise is increasingly seeking ways to embrace digital      business models while adding security for new and evolving threats,      including the necessity to manage the identity of customers, partners,      and other third parties. The annual Gartner event draws many of the      world’s leading executives and thought leaders to discuss the biggest      IAM challenges of today. A risk that enterprises face is the temptation to use technology as a      quick fix for near-term concerns and challenges. In his solution      provider session, “7 Questions to Ask Yourself before Buying IAM      Technology,” Edgile partner Lawrence Wolf will unpack a case study that      illustrates the benefits of a “strategy-first” model to help businesses      select the technologies best suited to their unique corporate objectives      and challenges. In September, Gartner listed Edgile as a Representative Vendor of      professional services in their 2017 Market Guide for IAM Professional Services, North America. Download      a complimentary copy of Gartner's Market Guide for IAM Professional      Services, North America . Edgile was included in this report for the      second year in a row. Supporting resources:
To schedule a meeting with Edgile, contact      us . *Gartner, “Market Guide for IAM Professional Services, North America,”      Brian Iverson, Kevin Kampman, Anmol Singh, 13 September 2017. Gartner does not endorse any vendor, product or service depicted in      its research publications, and does not advise technology users to      select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's      research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to      this research, including any warranties of merchantability or fitness      for a particular purpose. About the Gartner Identity & Access Management Summit
Gartner Identity & Access Management Summit 2017 will discuss how to      tackle complex issues and generate new ideas to reimagine approaches to      IAM for success in the digital age. Gartner analysts will present the      latest tactics and best practices across IAM fundamentals, and look      ahead at analytics-driven automation and advances in consumer engagement      platforms. About Edgile
Edgile is the trusted cyber risk and compliance partner to the world’s      leading organizations, providing consulting, managed services, and      harmonized regulatory content. Our strategy-first model optimizes IAM,      GRC, and cybersecurity both on-premises and in the cloud. By      transforming risk into opportunity, we secure the modern enterprise      through solutions that increase business agility and create a      competitive advantage for our clients. For more information: www.edgile.com

Edgile Speaks About the New Age of IAM at the Gartner Identity & Access Management Summit

Provider of emergency training technology. The company's solutions are used for training and assessing incident commanders and emergency managers working in the world's civil, aviation, industrial, and homeland security sectors in the skills of command, control, and emergency management. The company has developed a software-based incident command training tool for the fire and emergency sector. The software creates realistic fire ground scenarios through a desktop simulator, reproducing in real-time the processes and conditions experienced by incident commanders and others responsible for taking command of emergency incidents.

VectorCommand

The VectorCommand and IAMTech products naturally complement each other extremely well and this partnership further re-enforces the fact that we are both world-leading developers of innovative software solutions for incident management .

IAMTech signs exciting agreement with VectorCommand

Alcatel-Lucent Enterprise

Funding Date

Pre-Money Valuation

Post-Money Valuation

Amount Raised

Shares Authorized

Issuance Price

Dividend Rate

Liquidation Preferences

Liquidation Price

Participation

Conversion Price

Anti Dilution

General Voting

Board Voting

Par Value

Cybersecurity

IAM Technology looks at the problems with security by establishing that high volumes of data and transactions are real. It assist companies to protect its networks from intruders. It is able to check out root trust in microseconds to verify they are real.

Name	Work History	Title	Status
David Croston	Alcatel-Lucent Enterprise	Founder	Current
Subscribe to see more		Subscribe to see more	Subscribe to see more
Subscribe to see more		Subscribe to see more	Subscribe to see more
Subscribe to see more	Subscribe to see more	Subscribe to see more	Subscribe to see more

Name	David Croston	Subscribe to see more	Subscribe to see more	Subscribe to see more
Work History	Alcatel-Lucent Enterprise			Subscribe to see more
Title	Founder	Subscribe to see more	Subscribe to see more	Subscribe to see more
Status	Current	Subscribe to see more	Subscribe to see more	Subscribe to see more

Wells Fargo Success Story

Professional Services

Platform Overview

IAM Technology

Executives

IAM Technology Management Team

4 Team Members

This profile has not been claimed.

Discover the right solution for your team