Akeyless

Security for AI Identity AccessData Security also known as Akeyless Security

Market readinessHow well the company can compete in its security market, scored across eight dimensions against public evidence. Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
DefensibilityHow well the company holds its position if competitors catch up on features, scored across seven dimensions against public evidence. Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure.
Founded 2019
Funding $80M
Last updated 2026-09-15

All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.

Executive Summary

Akeyless sells enterprises a cloud service that manages secrets, the credentials software uses to authenticate to other systems. Its SecretlessAI product routes an AI agent’s access through a gateway so the agent never receives a credential. Its Agentic Runtime Authority product blocks agent actions that violate policy before they run. Founded in 2019, Akeyless had raised $80 million by its 2022 Series B, led by NGP Capital. Its named customers include Wix, Cimpress, Progress and Constant Contact. KuppingerCole reports vendors combining secrets management with privileged access management, so those vendors could bundle both and compete with Akeyless. A customer that leaves would have to recreate in another product the permissions and authentication for its workloads and AI agents.

Sourced Details

Description Akeyless is an identity security platform for AI agents, machines, and humans. It manages secrets, keys, certificates, and machine identities from one policy engine, delivers them with no vault overhead, and secures AI agent actions at runtime. [f1]
Founded 2019 [f2]
HQ New York, United States [f3]
Funding $80M total [f4]
Latest funding Series B ($65M, Nov 2022, led by NGP Capital) [f4]
Deployment SaaS [f5]
Compliance FIPS 140-3, ISO 27001, PCI DSS, SOC 2 Type 2 [f5]

Products

Product What it does
Akeyless Identity security platform for machines and AI agents that issues just-in-time, vaultless secrets and certificates so agents authenticate without hardcoded credentials and act under runtime control.

Matrix Coverage

AI Defense Matrix

GovernIdentifyProtectDetectRespondRecover
AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain.
AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients.
AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD.
AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services.
AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes.
Training Data Datasets used for training, fine-tuning, and continued learning.
Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history.
AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools.

Akeyless is an identity security platform for machines and AI agents that issues just-in-time, vaultless secrets and certificates so agents authenticate without hardcoded credentials and act under runtime control. It is mapped to the AI Defense Matrix. [f6]

Cyber Defense Matrix

IdentifyProtectDetectRespondRecover
Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware.
Applications Software, interactions, and application flows on the devices.
Networks Connections and traffic flowing among devices and apps, plus communication paths.
Data Content at rest, in transit, or in use across devices, apps, and networks.
Users The people using the devices, apps, networks, and data.

Akeyless provides secrets management and machine-identity security. This conventional security is mapped to the Cyber Defense Matrix. [f7]

Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

Established 28 /40 Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
Dimension Score Rationale
Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. 3/5 Akeyless names a specific buyer problem, static secrets spread across cloud, Kubernetes, pipelines, and applications, and SecurityWeek describes secrets sprawl and KuppingerCole describes machine identity growth as enterprise problems. The one figure tied to that buyer, more than 12 tools across 15 categories and 75 vendors, comes from data Akeyless says it compiled, so the pain is independently framed but not independently quantified. [s2, s9, s13, s12]
Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. 4/5 Akeyless publishes detailed documentation of its control plane, dynamic secrets, and key-fragment design, and two outside checks bear on that capability. NIST lists the Akeyless FIPS Cryptographic Module, the cryptographic library inside its products, under an active FIPS 140-3 certificate, and KuppingerCole evaluated the platform in its 2025 enterprise secrets management compass. [s3, s17, s15, s13]
Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. 3/5 The enabler is the growth of machine identities that KuppingerCole’s April 2025 compass describes. Akeyless expanded its products to AI agents with SecretlessAI in July 2025 and Agentic Runtime Authority at general availability in September 2026. The cited buyer-side evidence is that one analyst category note, now more than 12 months old, plus Akeyless’s own launch announcements. Timing is plausible with a credible enabler, but it falls short of multiple recent buyer-side signal kinds. [s13, s27, s20]
Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. 4/5 Co-founder Shai Onn co-founded Fireglass, which CTech reports was sold to Symantec and which Akeyless’s about page also records, a verifiable in-domain exit documented by two sources. Oded Hareven has senior experience in identity and access management. The cited sources contain no sustained publication record or category-defining recognition for the founders. [s11, s6]
GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. 4/5 Akeyless names multiple enterprise customers on its own pages, with homepage testimonials from security leaders at Progress, Constant Contact, Cimpress, and Wix plus a Cimpress case study. SiliconANGLE relays the company’s own statement naming Wix, Cimpress, Outbrain, and Stash Financial. Both companies document the Thales partnership, with Thales’s own blog crediting CipherTrust Secrets Management powered by Akeyless. The cited sources contain no independent corroboration of Akeyless’s revenue or customer scale. [s1, s21, s10, s8, s24]
Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. 3/5 SecurityWeek reports $80 million raised through a $65 million Series B led by NGP Capital in November 2022, and Akeyless announced a strategic investment from Deutsche Bank’s corporate venture group in October 2024 without stating an amount. Akeyless has shipped visibly since, including SecretlessAI in 2025, a FIPS 140-3 module validation in April 2026, and Agentic Runtime Authority in September 2026. It discloses no revenue, margin, or growth-efficiency figure, so the raise looks proportional to the motion while efficiency stays unconfirmed. [s9, s12, s27, s15, s20]
Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. 4/5 KuppingerCole’s 2025 Leadership Compass places Akeyless among six Overall Leaders in enterprise secrets management, and SecurityWeek and SiliconANGLE both cover it as a secrets management company. No cited source names a category after Akeyless or describes it as the category’s definer, which the top rung asks for. [s13, s9, s10]
Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. 3/5 Akeyless’s key-fragment design and a control plane that workloads authenticate through add friction beyond a quarterly feature release, and Thales offers Akeyless’s engine inside its own CipherTrust platform. CyberArk, Delinea, and BeyondTrust share its Overall Leader tier, and AWS and Google hold Market Leader ratings in the same KuppingerCole report. No cross-customer data asset or documented multi-year lock-in appears in the cited sources, so a bundled rival offering could eventually replicate the position. [s17, s3, s8, s13]
Business Risks KuppingerCole reports secrets management converging with privileged access management, so vendors in those categories could fold secrets management into privileged access deals and compete with Akeyless’s standalone platform…
  • KuppingerCole reports secrets management converging with privileged access management, so vendors in those categories could fold secrets management into privileged access deals and compete with Akeyless’s standalone platform.
  • AWS and Google, which KuppingerCole rates as Market Leaders in enterprise secrets management, could keep buyers that standardize on one cloud on their native secrets managers instead of a third-party platform.
  • Thales co-leads the same KuppingerCole category and sells CipherTrust Secrets Management powered by Akeyless, so a Thales decision to replace the Akeyless engine would turn a distribution partner into a direct competitor.
Problem & Market Akeyless sells to the security and platform teams that manage the credentials, certificates, and keys machines use to reach each other…

Akeyless sells to the security and platform teams that manage the credentials, certificates, and keys machines use to reach each other. Its secrets management page describes replacing static secrets across cloud, Kubernetes, CI/CD pipelines, and applications with identity-based authentication and just-in-time access. Akeyless puts the fragmentation at more than 12 tools across 15 categories and 75 vendors, citing data Akeyless compiled itself.

Independent sources describe the same problem. SecurityWeek calls secrets sprawl a glaring weakness in the software supply chain, with API keys, passwords, and certificates regularly exposed in public repositories. KuppingerCole’s 2025 compass on enterprise secrets management states that machine identities far outnumber human ones and that non-human identity management is emerging as a significant segment.

Akeyless now applies the same problem to AI agents. It launched SecretlessAI in July 2025 for AI agents and Model Context Protocol (MCP) servers. In September 2026 it made Agentic Runtime Authority generally available to control what an agent does once it has access. [s2, s12, s9, s13, s27, s20]

Product Capabilities The Akeyless platform brings secrets management, certificate lifecycle management, privileged access, key management, and AI agent security under one SaaS policy engine…

The Akeyless platform brings secrets management, certificate lifecycle management, privileged access, key management, and AI agent security under one SaaS policy engine. The documentation describes a single cloud-based control plane for application-to-application authentication, certificate issuance, privileged access, and automated identity workflows across hybrid and multi-cloud environments. Dynamic secrets carry a predefined expiration time, after which Akeyless revokes the access.

Distributed Fragments Cryptography is the technical core Akeyless markets. The company describes it as patented technology that performs cryptographic operations on key fragments held across regions and cloud providers without combining them. Its documentation adds that a customer may hold one fragment in its own environment, and that when this Customer Fragment is used no party, including Akeyless, can derive the key without it. The same documentation lists the Customer Fragment as optional.

Akeyless’s AI agent products use the same brokered access. SecretlessAI brokers an agent’s access through the Akeyless Gateway so the agent never receives the target credential, and Agentic Runtime Authority blocks agent actions that violate policy before they execute. For agents that still need direct credentials, Akeyless says it governs their issuance, rotation, and revocation under central policy.

Two outside checks bear on this capability. NIST lists the Akeyless FIPS Cryptographic Module under active FIPS 140-3 certificate 5227, validated in April 2026 at overall level 1, and describes it as a general-purpose cryptographic library integrated into Akeyless products. KuppingerCole also evaluated the platform in its 2025 enterprise secrets management compass. [s2, s3, s28, s17, s16, s26, s20, s15, s13]

Competitive Positioning Akeyless competes in enterprise secrets management with privileged access vendors, cloud providers, and self-hosted vaults…

Akeyless competes in enterprise secrets management with privileged access vendors, cloud providers, and self-hosted vaults. KuppingerCole’s 2025 compass names Akeyless an Overall Leader alongside BeyondTrust, CyberArk, Delinea, SSH, and Thales, and the same report rates AWS, Google, and HashiCorp as Market Leaders. Akeyless therefore sells against cloud providers and privileged access vendors that KuppingerCole also rates highly.

Akeyless also sells directly against self-hosted vaults. A Cimpress security manager quoted on its homepage says Akeyless made it easy to decide to rip and replace Hashi Vault. Its secrets management page offers migration tools for teams moving off open-source or self-hosted vaults. Its pricing page licenses connectors that manage secrets stored in external vaults, including HashiCorp Vault, so a customer can govern an existing vault from Akeyless.

Thales is both a partner and a co-leader. Akeyless announced in April 2023 that Thales would offer Akeyless secrets management inside the CipherTrust Data Security Platform, and Thales’s own 2025 blog credits its Overall Leader placement to CipherTrust Secrets Management powered by Akeyless. That makes Thales a channel for Akeyless and a rival in the same analyst tier. KuppingerCole’s report also lists Aembit and Oasis Security among its vendors to watch. [s13, s1, s2, s4, s8, s24]

Go-to-Market & Traction Akeyless names enterprise customers on its own pages…

Akeyless names enterprise customers on its own pages. Akeyless publishes homepage testimonials from security leaders at Progress, Constant Contact, Cimpress, and Wix, and a Cimpress case study says the company chose Akeyless as its secrets management solution. That case study reports a 70% cost reduction against Cimpress’s previous provider, a figure Akeyless publishes.

Press coverage adds names in the company’s voice. SiliconANGLE’s 2022 funding article relays Akeyless’s statement that Wix, Cimpress, Outbrain, and Stash Financial are customers. Akeyless’s April 2026 announcement says its new chief strategy officer, Yael Fainaro, was an Akeyless customer at Synamedia.

The Thales partnership is the channel both companies describe in their own words. Thales markets CipherTrust Secrets Management as powered by Akeyless and cites that product in its 2025 KuppingerCole placement. Akeyless does not disclose revenue or a customer count. [s1, s21, s10, s25, s24, s8]

Team & Credibility Akeyless’s founders pair a prior security exit with identity management backgrounds…

Akeyless’s founders pair a prior security exit with identity management backgrounds. CTech reports that Shai Onn, Refael Angel, and Oded Hareven founded Akeyless in 2019, and that Onn co-founded Fireglass, which was sold to Symantec. Akeyless’s about page describes Hareven as a veteran of an IDF cyber-security unit who specializes in identity and access management, with earlier roles at Moovit and CA Technologies.

The about page describes Akeyless’s encryption technology and two submitted patents. In April 2026 Akeyless appointed Yael Fainaro as chief strategy officer and said she previously held corporate development roles at CyberArk and Cisco.

Akeyless’s investors include venture firms and a bank. NGP Capital led the 2022 Series B with early backers Team8 and JVP, according to SecurityWeek, and Akeyless announced Deutsche Bank’s corporate venture group as a strategic investor in October 2024. SiliconANGLE reports that Mike Christenson, a former New Relic and CA Technologies executive, joined the board at the Series B. [s11, s6, s25, s9, s12, s10]

Trust Readiness Akeyless builds its trust case on a design that limits its own access to customer keys…

Akeyless builds its trust case on a design that limits its own access to customer keys. The trust center says neither Akeyless nor its cloud providers have access to customer secrets and keys. The documentation says Zero-Knowledge Encryption requires the customer’s own key fragment, and that with such a fragment Akeyless cannot decrypt the customer’s data. Authorized users and workloads keep the access their policies grant, down to read-only access to specific secrets.

The trust center lists FIPS 140-3, SOC 2 Type II, ISO 27001, PCI DSS compliance, and DORA, and NIST’s validation registry confirms the FIPS 140-3 certificate for the Akeyless cryptographic module. Akeyless’s trust center describes a bug bounty program, regular penetration tests, and infrastructure spread across multiple cloud platforms, regions, and availability zones. [s5, s16, s17, s2, s15]

Competitors CyberArk, Delinea, BeyondTrust, HashiCorp Vault, Aembit, Oasis Security, Token Security…
Company Relationship Note Compare
CyberArk competes with Named with Akeyless among KuppingerCole’s 2025 Overall Leaders in enterprise secrets management, competing for the same secrets and privileged access buyer. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.
Delinea competes with Another KuppingerCole 2025 Overall Leader in enterprise secrets management, competing with Akeyless for privileged access and secrets budgets.
BeyondTrust competes with Shares KuppingerCole’s 2025 Overall Leader tier in enterprise secrets management with Akeyless and competes for the same buyer.
HashiCorp Vault competes with The self-hosted vault Akeyless markets migration away from, including a Cimpress testimonial about replacing it.
Aembit competes with Listed by KuppingerCole as a vendor to watch in enterprise secrets management, competing for the machine and AI agent identity buyer.
Oasis Security competes with Listed by KuppingerCole as a vendor to watch in enterprise secrets management, contesting the same non-human identity budget.
Token Security competes with Competes with Akeyless for the budget that covers non-human and AI agent identities. N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable.

Add analyzed competitors to compare them side by side with Akeyless.

Strategy Deep Dive

A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.

Defensibility

Contested 14 /21 Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure. reinforce or reposition

A customer that leaves Akeyless must move the access policies and authentication methods its workloads and AI agents use to reach systems, which is meaningful integration work. Akeyless says it cannot decrypt a customer’s data when that customer holds its own key fragment, a setup its documentation marks as optional. NIST has validated the cryptographic library inside Akeyless products. Its about page describes the encryption technology and two submitted patents. Customers buy software that their own teams operate.

Dimension Score Rationale
Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. 1/3 Akeyless sells a SaaS platform that customers configure and operate themselves, with a free starting tier and enterprise plans metered by clients, certificates, and transactions. Customers pay for the software’s capabilities, and their own teams operate it.
Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. 2/3 Once workloads and AI agents obtain credentials through the Akeyless control plane and gateway, a departing customer must move its access policies, authentication methods, and dynamic-secret targets to another system, which is meaningful integration friction. The cited sources document that mechanism but do not size what migrating away would cost.
Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. 2/3 NIST lists the Akeyless FIPS Cryptographic Module under active FIPS 140-3 certificate 5227, a government-run validation that a replacement would also need wherever a buyer requires validated cryptography, though a funded rival can obtain one. The trust center’s SOC 2 Type II, ISO 27001, PCI DSS, and DORA listings are entry costs, and no mandate or authorization held only by Akeyless appears in the cited sources.
Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. 3/3 Akeyless documents cryptographic operations performed on key fragments that are never combined, dynamic credentials issued with set expirations, and gateways that connect private environments to a SaaS control plane, which is security-critical real-time engineering. The NIST validation covers the cryptographic library inside the products, while the fragment design is described by Akeyless.
Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. 2/3 Named customers such as Cimpress, which its case study describes as a company with more than $2 billion in annual revenue, and testimonials from Progress, Constant Contact, and Wix place the buyer in large enterprises. None of those named customers is shown as a regulated or government buyer, and a free starting tier also admits small teams, so the evidenced buyer class is the large enterprise.
Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. 3/3 Applications, workloads, and AI agents obtain credentials and brokered access through the Akeyless control plane and gateway, which makes Akeyless infrastructure that other software depends on to reach systems and data.
Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. 1/3 Akeyless describes its Distributed Fragments Cryptography as patented, and its about page mentions two submitted patents. No granted patent appears in the cited sources, so the IP asset is not evidenced as granted, and no retained dataset, content licence, or cross-customer telemetry asset appears either.
Strategic Market Segmentation Akeyless targets enterprises that manage secrets, keys, certificates, and machine identities across cloud, on-premises, and Kubernetes environments…

Akeyless targets enterprises that manage secrets, keys, certificates, and machine identities across cloud, on-premises, and Kubernetes environments. Its secrets management page centers on replacing static secrets in code and pipelines with identity-based authentication, and its homepage adds AI agents and human access to the same platform.

Akeyless’s named customers include Cimpress, which its case study describes as a company with 12,000 employees and more than $2 billion in annual revenue. Akeyless also publishes testimonials from security leaders at Progress, Constant Contact, and Wix. A free starting tier sits below customized enterprise plans.

KuppingerCole describes secrets management moving from a specialized IT concern to a central part of enterprise security strategy. Akeyless’s Agentic Runtime Authority page frames its AI agent use cases as access patterns CISOs need to govern.

Product Capabilities & AI Advantages The platform unifies secrets management, certificate lifecycle management, privileged access, key management, and AI agent security under one policy engine…

The platform unifies secrets management, certificate lifecycle management, privileged access, key management, and AI agent security under one policy engine. The documentation describes a single cloud-based control plane for application-to-application authentication and automated identity workflows, and dynamic credentials carry a predefined expiration, after which Akeyless revokes access.

Distributed Fragments Cryptography is the design Akeyless leads with. Akeyless says the patented technology performs cryptographic operations on key fragments spread across regions and cloud providers without combining them. The documentation says a customer may hold one fragment itself, and that with this optional Customer Fragment in place no party, including Akeyless, can derive the key without it.

The AI agent products extend the same brokered access. SecretlessAI routes an agent’s access through the Akeyless Gateway so the agent never receives the target credential, and Agentic Runtime Authority blocks agent actions that violate policy before they execute. The general availability release added integrations for Claude Enterprise, OpenAI Codex, and Amazon Bedrock AgentCore.

NIST’s FIPS 140-3 certificate 5227 validates the Akeyless FIPS Cryptographic Module, which NIST describes as a general-purpose cryptographic library integrated into Akeyless products. That certificate covers the library, while the description of the fragment design is Akeyless’s own.

Sales Engagement & Go-to-Market Akeyless names its customers mainly through its own pages…

Akeyless names its customers mainly through its own pages. Akeyless publishes testimonials from security leaders at Progress, Constant Contact, Cimpress, and Wix, and its Cimpress case study describes the switch to Akeyless. SiliconANGLE relays the company’s 2022 statement naming Wix, Cimpress, Outbrain, and Stash Financial as customers.

Thales provides a documented channel. Akeyless announced in April 2023 that Thales would offer Akeyless secrets management inside CipherTrust, and Thales’s 2025 blog attributes its KuppingerCole Overall Leader placement to CipherTrust Secrets Management powered by Akeyless. KuppingerCole’s report names Akeyless an Overall Leader in its own right.

Akeyless’s disclosed investors include venture firms and a bank. SecurityWeek reports $80 million raised through a $65 million Series B led by NGP Capital in November 2022, and Akeyless announced a strategic investment from Deutsche Bank’s corporate venture group in October 2024 without stating an amount. Akeyless does not disclose revenue or a customer count.

Pricing Model Akeyless offers a free starting tier and customized enterprise plans, and it publishes billing units without dollar prices, so a buyer needs a quote to learn the cost…

Akeyless offers a free starting tier and customized enterprise plans, and it publishes billing units without dollar prices, so a buyer needs a quote to learn the cost. Secrets management is metered by clients, which Akeyless defines as users, applications, or servers that open a session, with multiple instances of one application counted once.

Other modules carry their own units, including connectors to external vaults, managed certificates, cryptographic transactions, and tokenizers, and overage is invoiced at the end of a 12-month contract. Buyers choose between Pure SaaS, a fully cloud-managed service, and Hybrid SaaS, which adds on-premise gateways and zero-knowledge encryption for teams that want secrets and identity data inside their own infrastructure.

Product Delivery & Operations Akeyless runs as a SaaS control plane, with lightweight gateways that connect private environments to the service…

Akeyless runs as a SaaS control plane, with lightweight gateways that connect private environments to the service. The documentation says it operates across public cloud, hybrid and multi-cloud, on-premises, Kubernetes, and serverless environments.

Dynamic credentials carry a predefined expiration, and Akeyless revokes access when they expire. The trust center describes infrastructure spread across multiple cloud platforms, regions, and availability zones, along with an incident response and business continuity plan.

Agent requests that use SecretlessAI and Agentic Runtime Authority pass through the Akeyless Gateway, where Akeyless says intent, policy, data exposure, and audit are enforced in a single path. For agents that still need direct credentials, Akeyless says it governs issuance, rotation, and revocation under central policy.

Earning Customers' Trust Akeyless’s trust case centers on limiting its own access to customer keys…

Akeyless’s trust case centers on limiting its own access to customer keys. The trust center says neither Akeyless nor its cloud providers have access to customer secrets and keys. The documentation says Akeyless cannot decrypt a customer’s data when that customer holds one of the key fragments. Authorized users and workloads still receive the access their policies grant.

The trust center lists FIPS 140-3, SOC 2 Type II, ISO 27001, PCI DSS compliance, and DORA, and NIST’s registry records the active FIPS 140-3 certificate for the Akeyless cryptographic module. Akeyless also describes a bug bounty program and regular penetration tests of its application and infrastructure.

Platform Strategy & Ecosystem Positioning Akeyless positions one platform for machine, AI agent, and human identities, with a single policy engine across secrets, keys, certificates, and privileged access…

Akeyless positions one platform for machine, AI agent, and human identities, with a single policy engine across secrets, keys, certificates, and privileged access. Its April 2026 announcement cites more than 130 integrations across cloud providers, security tools, and enterprise platforms.

Akeyless also reaches customers inside other vendors’ products. Thales sells CipherTrust Secrets Management powered by Akeyless, and the Agentic Runtime Authority release lists integrations with Claude Enterprise, OpenAI Codex, and Amazon Bedrock AgentCore. Connectors for external vaults, including HashiCorp Vault, let customers manage existing secret stores from Akeyless.

Team & Execution Capability The founding team combines a prior security exit with identity management and cryptography backgrounds…

The founding team combines a prior security exit with identity management and cryptography backgrounds. CTech reports that Shai Onn, Refael Angel, and Oded Hareven founded Akeyless in 2019 and that Onn co-founded Fireglass, which was sold to Symantec. The about page describes Hareven as an identity and access management specialist and mentions the encryption technology and two submitted patents.

Akeyless added a chief strategy officer in April 2026, Yael Fainaro, who previously held corporate development roles at CyberArk and Cisco. SiliconANGLE reports that former New Relic and CA Technologies executive Mike Christenson joined the board at the 2022 Series B, and the about page lists JVP, Team8, NGP Capital, and Deutsche Bank as investors.

Sources

Company Detail Sources (7)
Id Source Tier Accessed
f1 Akeyless: Identity Security for Machines, AI Agents and Humans official 2026-07-09
f2 CTech on the Akeyless Series B (founded 2019) press 2026-09-15
f3 Akeyless unified platform announcement (New York and Tel Aviv) press 2026-06-14
f4 SecurityWeek on Akeyless Series B (total raised 80 million) press 2026-09-15
f5 AI Defense Matrix Catalog entry other 2026-06-13
f6 AI Defense Matrix Catalog mapping other 2026-06-23
f7 Akeyless platform official 2026-06-14
Profile Analysis Sources (25)
Id Source Tier Accessed
s1 Akeyless: homepage official 2026-09-15
s2 Akeyless: secrets management product page official 2026-09-15
s3 Akeyless documentation: What Is Akeyless? official 2026-09-15
s4 Akeyless: pricing page official 2026-09-15
s5 Akeyless: trust center official 2026-09-15
s6 Akeyless: about page official 2026-09-15
s8 Akeyless blog: Thales and Akeyless partnership announcement official 2026-09-15
s9 SecurityWeek: article on the Akeyless Series B press 2026-09-15
s10 SiliconANGLE: article on the Akeyless Series B press 2026-09-15
s11 CTech: article on the Akeyless Series B press 2026-09-15
s12 Akeyless blog: Deutsche Bank strategic investment announcement official 2026-09-15
s13 KuppingerCole: Leadership Compass, Enterprise Secrets Management research 2026-09-15
s15 NIST CMVP: certificate 5227 record research 2026-09-15
s16 Akeyless documentation: Zero-Knowledge Encryption official 2026-09-15
s17 Akeyless documentation: Distributed Fragments Cryptography overview official 2026-09-15
s18 Help Net Security: industry news item on Akeyless AI Agent Identity Security press 2026-09-15
s19 Help Net Security: industry news item on Agentic Runtime Authority press 2026-09-15
s20 Akeyless: Agentic Runtime Authority general availability press release official 2026-09-15
s21 Akeyless: Cimpress case study official 2026-09-15
s22 Akeyless: Agentic Runtime Authority product page official 2026-09-15
s24 Thales blog: post on its 2025 KuppingerCole secrets management placement official 2026-09-15
s25 Akeyless: chief strategy officer appointment press release official 2026-09-15
s26 Akeyless: AI agent identity security page official 2026-09-15
s27 Akeyless: SecretlessAI launch press release official 2026-09-15
s28 Akeyless: Distributed Fragments Cryptography technology page official 2026-09-15
Deep-Dive Sources (25)
Id Source Tier Accessed
s1 Akeyless: homepage official 2026-09-15
s2 Akeyless: secrets management product page official 2026-09-15
s3 Akeyless documentation: What Is Akeyless? official 2026-09-15
s4 Akeyless: pricing page official 2026-09-15
s5 Akeyless: trust center official 2026-09-15
s6 Akeyless: about page official 2026-09-15
s8 Akeyless blog: Thales and Akeyless partnership announcement official 2026-09-15
s9 SecurityWeek: article on the Akeyless Series B press 2026-09-15
s10 SiliconANGLE: article on the Akeyless Series B press 2026-09-15
s11 CTech: article on the Akeyless Series B press 2026-09-15
s12 Akeyless blog: Deutsche Bank strategic investment announcement official 2026-09-15
s13 KuppingerCole: Leadership Compass, Enterprise Secrets Management research 2026-09-15
s15 NIST CMVP: certificate 5227 record research 2026-09-15
s16 Akeyless documentation: Zero-Knowledge Encryption official 2026-09-15
s17 Akeyless documentation: Distributed Fragments Cryptography overview official 2026-09-15
s18 Help Net Security: industry news item on Akeyless AI Agent Identity Security press 2026-09-15
s19 Help Net Security: industry news item on Agentic Runtime Authority press 2026-09-15
s20 Akeyless: Agentic Runtime Authority general availability press release official 2026-09-15
s21 Akeyless: Cimpress case study official 2026-09-15
s22 Akeyless: Agentic Runtime Authority product page official 2026-09-15
s24 Thales blog: post on its 2025 KuppingerCole secrets management placement official 2026-09-15
s25 Akeyless: chief strategy officer appointment press release official 2026-09-15
s26 Akeyless: AI agent identity security page official 2026-09-15
s27 Akeyless: SecretlessAI launch press release official 2026-09-15
s28 Akeyless: Distributed Fragments Cryptography technology page official 2026-09-15

Disclaimer

This content is provided "as is" with no warranties.

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.