Axonius

• ServiceNow could fold Armis-based asset visibility into its CMDB and ITSM franchise, turning the reconciliation Axonius sells into a feature of a suite buyers already run.
• Security platform vendors could ship good-enough asset inventory inside their suites, confirming Gartner's call that CAASM capabilities get absorbed and shrinking the standalone budget line Axonius depends on.
• The renaming of the market from CAASM to asset intelligence could slow procurement if buyers cannot map the self-coined category to an existing budget line.
• A valuation flat since 2022 and two layoff rounds could force a sale below the 2.6 billion dollar mark, as the reported 2 billion dollar Cisco interest suggests, rather than the IPO the company says it is preparing for.
• Tool vendors could restrict or monetize the APIs the adapter network depends on, raising maintenance costs and degrading the coverage that justifies the purchase.
• AI-assisted development could lower the cost of building connectors, eroding the adapter library's value as the barrier that keeps rivals from reaching integration parity.

Axonius sells the answer to a foundational question: which assets an organization actually has, and whether each one is covered by the controls the security program assumes. The company's framing is that agents, cloud providers, and scanners each report a partial inventory and none of them agree, so teams cannot secure, manage, or govern what they cannot see. Its platform page compresses the pitch into coverage gaps, exposures, and fixes driven from one place.

Independent signals confirm the problem is real rather than vendor-manufactured. Gartner coined and tracked the Cyber Asset Attack Surface Management category, PeerSpot ranks Axonius first in it with an 8.4 rating, and CISA made automated asset discovery a federal requirement. The placement and the mandate come from analysts and government, not the vendor's own framing.

The buyer spans Security, IT, and GRC teams in large organizations, plus federal agencies under explicit mandates. The Axonius Federal Systems page lists NIST 800-53, CISA BOD 23-01, FISMA, CDM, and CMMC as the drivers it makes easier, and CISA's Binding Operational Directive 23-01 made automated asset discovery a compliance obligation in 2022, so part of the addressable market is required by regulation to keep the inventory Axonius sells. [s8, s19, s15, s11, s27]

The Axonius Asset Cloud is an aggregation and reconciliation engine wearing several product modules. Adapters connect to the customer's existing tools through APIs, and the platform correlates, normalizes, deduplicates, and enriches the records into one asset model without deploying agents or running scans. The Cyber Assets page reports more than 1,400 integrations across devices, identities, SaaS, software, cloud, IoT, and OT.

Each module extends the same asset model into a neighboring job. Cyber Assets verifies coverage, configuration, and ownership; Software Assets flags End-of-Support packages and unapproved titles; SaaS Applications discovers shadow SaaS; Exposures consolidates scanner findings into one prioritized view; and Identities correlates human and machine identities with the assets they touch. The newest module, Cyber-Physical Assets, came out of the July 2025 Cynerio acquisition and brings passive OT and IoT discovery into the same model.

Action, not just visibility, is the load-bearing claim of the current positioning. Bi-directional integrations push fixes outward, enforcing policy, opening tickets, updating software, disabling accounts, and enriching CMDBs and SIEMs. Western Union's published deployment grounds the claim, reporting a 50 percent reduction in manual security workload and asset coverage reaching 99 percent after consolidating 38 tools.

AI shows up two ways. The company positions reconciled asset data as the foundation agentic security systems need, a vendor-stated claim, and more concretely ships a June 2026 Anthropic adapter that pulls Claude Enterprise users, groups, and API keys into the inventory through the Claude Compliance API, extending the shadow-IT discovery mechanic to shadow AI. [s2, s3, s4, s5, s6, s7, s13, s24, s16, s17]

Axonius positions itself as the layer above everyone else's consoles, what its CEO calls the platform of platforms. The pitch is deliberately non-rivalrous toward the tools it connects, since every security product in the customer's stack is a data source rather than a target, and the company claims more than 45 asset classes unified into a single source of truth.

Within the category it helped define, Axonius holds more mindshare than any tracked rival. PeerSpot ranks Axonius first in the CAASM category at 29.3 percent mindshare, ahead of specialists such as runZero at 5.8 percent. ServiceNow poses a larger threat than those specialists: it agreed to acquire Armis for 7.75 billion dollars and owns the CMDB estate Axonius enriches.

Axonius's own category is being declared obsolete, and its response is to rename it. Axonius relays Gartner's 2025 verdict that CAASM is obsolete before plateau and argues the category graduated into asset intelligence, where reconciliation and automated action distinguish it from single-pane aggregation. Reported Cisco acquisition interest near 2 billion dollars, which Axonius denied, suggests platform vendors see the position as strategic enough to buy rather than rebuild. [s8, s19, s25, s15, s23]

Axonius runs an enterprise sales motion with no public pricing and a demo-gated front door. The website routes buyers to a demo or product tour, with no free tier or self-service path on reviewed pages, which fits negotiated contracts at Fortune 1000 deal sizes. The AWS Marketplace listing discloses the unit the site does not, pricing 500 assets at 90,625 dollars and 700 SaaS users at 88,000 dollars.

Traction is press-verified at a scale few security startups reach. CTech reports 200 million dollars in ARR as of fiscal 2027's opening quarter, 35 percent year-over-year growth, and a doubling of revenue in two years. The company counts close to 1,000 customers including more than 100 of the Fortune 1000, and the Western Union release quantifies outcomes rather than offering testimonial praise.

The federal channel is a second, structurally distinct motion that government records corroborate. Axonius Federal Systems, a FOCI-mitigated subsidiary, sells through resellers on vehicles including the CISA CDM approved products list and the GSA Multiple Award Schedule, holds FedRAMP Moderate certification, and reports deployments across more than 90 agencies. In its own press release the company says it was selected to modernize a Department of Homeland Security asset-inventory program, a claim without independent corroboration in the cited record.

Demand generation leans on category education. The company runs the Adapt conference, commissions an Actionability Report survey of more than 600 security leaders, and publicizes a commissioned Forrester study reporting a positive multi-year return, the motion of a vendor that must teach the market its category before selling into it. [s1, s18, s20, s12, s13, s26, s11, s15]

The founding team built and ran the company for nine years before handing over the CEO seat. Press identifies Dean Sysman, Ofri Shur, and Avidor Bartov as the 2017 founders. Ofri remains CTO and Avidor chief architect, but a non-founder now runs the product organization: Moshe Ben Simon joined as chief product officer in June 2026 from Fortinet, where he led the Security Operations product group, with TrapX Security founding experience behind him.

The leadership transition is the open credibility question. Joe Diamond, president since August 2025, became interim CEO in February 2026 and permanent CEO in May 2026, while Dean moved to executive chairman, and CTech records roughly 40 job cuts around the CEO change on top of about 100 the prior November. Diamond arrived from Okta, where the company says he helped scale revenue from 100 million to 2.2 billion dollars, a relevant pedigree for the public-company chapter Axonius says it is preparing.

External validation of the team is long-running. Investors including Accel, Lightspeed, and Bessemer funded rounds totaling nearly 600 million dollars, and the Axonius Federal Systems board adds former federal technology leaders including a retired DISA director and a former Department of Defense chief information security officer. [s20, s10, s14, s22, s11, s21]

Axonius publishes a security program page that reads like a procurement reviewer wrote it. The company structures its program on SOC 2 and ISO 27001, holds an ISO 27001 certificate and SOC 2 Type 2 attestation from Schellman, adds a HIPAA attestation for health-data customers, and runs a trust center with reports available after an NDA. A public statement welcomes vulnerability reports from researchers, and a search of the National Vulnerability Database returns no CVEs recorded against Axonius as of July 2026.

The deployment model addresses the obvious objection to an aggregator. Axonius hosts each customer in a dedicated, single-tenant AWS environment with a choice of regions, encrypts adapter credentials at rest, and offers a customer-hosted option for organizations that will not send asset metadata to a vendor. These choices matter because the platform holds credentials to a customer's entire tool estate, 38 tools in Western Union's case, making Axonius itself a concentration of access that buyers must underwrite.

Federal accreditation extends the trust posture beyond commercial table stakes. The FedRAMP Marketplace lists the Axonius Asset Cloud as certified at the Moderate class as of April 2025, and the company's federal page describes a FOCI-mitigating Special Security Agreement, NIAP Common Criteria validation, and a CISA CDM approved-products entry, a stack of gates competitors cannot clear quickly, though the page's items are vendor-stated. [s9, s29, s13, s26, s11, s28]

Add analyzed competitors to compare them side by side with Axonius.

Axonius targets large, tool-heavy organizations where fragmented inventories are most painful. The company counts close to 1,000 customers, including more than 100 of the Fortune 1000, and its 200 million dollar recurring revenue milestone names Fortune 1000 customers including Western Union. The 2025 acquisition of medical-device security specialist Cynerio bought a healthcare entry point, and Axonius Cyber-Physical Assets extends that into OT and IoT environments across manufacturing, utilities, and energy.

The U.S. federal government is a deliberately separated second segment, and since 2022 a federal directive has underwritten demand. CISA's Binding Operational Directive 23-01, issued in October 2022, requires Federal Civilian Executive Branch agencies to run automated asset discovery every seven days, turning the visibility Axonius sells into a compliance obligation for covered agencies. It compels the outcome, not a purchase, and exempts national security and certain defense and intelligence systems. Axonius Federal Systems, a FOCI-mitigated subsidiary under a Special Security Agreement, reports deployments across more than 90 agencies, and the company says it was selected to modernize the Department of Homeland Security's Continuous Diagnostics and Mitigation Data Services Program.

Three buyers evaluate the same platform for different reasons. The company page names Security, IT, and GRC teams: security operations buys coverage verification, IT buys inventory and CMDB accuracy, and GRC buys audit evidence such as the accelerated audit readiness Western Union describes. There is no visible small-business motion, no free tier, and no self-service entry, so the segmentation is enterprise and government by design.

Demand evidence stays recent even as the original category label ages. The 200 million dollar milestone with 35 percent annual growth arrived in May 2026, the Anthropic adapter that inventories Claude Enterprise assets reached general availability in June 2026, and the company reports the platform now spans more than 45 asset classes. Platform vendors are moving to close the window, with Gartner calling the original CAASM label obsolete, ServiceNow buying overlapping rival Armis, and Cisco reportedly exploring a purchase of Axonius itself.

The technical core is reconciliation of data the customer's other tools already collect. Adapters pull asset records from existing tools through APIs, and the platform correlates, normalizes, and deduplicates conflicting records into one model, with the Cyber Assets page reporting more than 1,400 integrations across devices, identities, SaaS, software, cloud, IoT, and OT. For those adapter-based products the agentless approach means Axonius sees only what other tools see, a structural trade the company converts into a strength by scoring coverage gaps among those same tools. Cyber-Physical Assets is the exception, discovering OT and IoT devices itself through passive network analysis, with active techniques used where appropriate for devices that do not announce themselves on the network.

Several products exercise the same asset fabric against different jobs. Cyber Assets verifies agent coverage and configuration, Software Assets flags End-of-Support and unapproved software, SaaS Applications uncovers shadow SaaS and wasted spend, Exposures prioritizes findings by asset criticality and business impact, and Identities correlates human and machine identities. Cyber-Physical Assets, built on the Cynerio acquisition, adds passive OT and IoT discovery, and Axonius Verified Assets positions a data trust standard for the records AI agents and workflows consume.

The AI story splits into a concrete capability and a positioning argument. The concrete side is the Anthropic adapter, generally available in June 2026, which connects to the Claude Compliance API and pulls each Claude Enterprise asset, its users, groups, and API keys, into inventory to surface shadow AI. The positioning argument is that agentic security systems are only as effective as the asset data they operate on, which casts Axonius as the foundation other AI runs on rather than a competitor to it.

The data advantage is accumulated integration engineering rather than a proprietary dataset. Customer asset data stays in dedicated single-tenant environments and remains re-derivable from the customer's own tools, and no cross-customer model or telemetry pool appears in fetched pages. The latent opening Axonius has not taken is to turn the asset and integration metadata it reconciles across close to a thousand estates into cross-customer benchmarks or correlation heuristics a single tenant could not match, an advantage the public record does not yet evidence.

Axonius sells top-down to enterprises through a demo-gated, sales-assisted motion. The website publishes no pricing, no free tier, and no self-service path, and buyers move through demos, product tours, and named-customer proof such as Western Union's 50 percent reduction in manual security workload. Customer stories function as the practitioner evidence base in place of a community edition.

A hired go-to-market organization now fronts the selling, which fits the company's revenue stage. Joe Diamond, president from August 2025 and interim chief executive from February 2026, became permanent CEO in May 2026, with co-founders Ofri Shur and Avidor Bartov staying on as CTO and chief architect and Moshe Ben Simon joining from Fortinet as chief product officer in June 2026. The company built the sales organization its customer count justifies, even as it cut staff across two rounds ahead of an IPO or a sale.

Axonius also distributes through channels its direct team does not touch. It lists the Axonius Asset Cloud on AWS Marketplace with public contract pricing, and sells to the federal government through authorized resellers on vehicles its federal page names, including the CISA CDM approved products list, the GSA Multiple Award Schedule, and NASA SEWP V. A feature-copying incumbent would still need to clear the same accreditations and earn the same contract paths.

Marketing is category education, the expensive kind. Axonius pioneered the CAASM label, and now that Gartner has declared the category obsolete the company is teaching the market a replacement, asset intelligence, through its Adapt conference, an Actionability Report survey of more than 600 security leaders, and a commissioned Forrester study reporting a positive multi-year return on investment. The PeerSpot buyer directory ranked Axonius first in the category at 29.3 percent mindshare when checked in July 2026, a continuously recomputed figure and a lead built on the old label as the label itself fades.

Axonius gates every purchase path on its own site behind a demo or sales contact, with no tiers and no calculator, which fits negotiated contracts sized to Fortune 1000 and federal budgets. Federal buyers procure through reseller contract vehicles, which implies schedule pricing exists inside those channels without appearing on the company website.

The AWS Marketplace listing discloses the unit the website does not. Its 12-month contract dimensions list 500 assets with unlimited queries, adapters, and enforcements at 90,625 dollars, and 700 SaaS users at 88,000 dollars, so Axonius charges by the assets and users under management. That unit matches how buyers count the problem, the strong version of the pricing signal, and it puts the published annual price for a 500-asset contract close to 100,000 dollars before negotiation.

Axonius anchors deals on quantified outcomes rather than list prices. The company leads with a commissioned Forrester study reporting a positive multi-year return on investment, plus customer-published numbers such as Western Union's 50 percent workload reduction, the classic apparatus of pricing against risk reduction and operational savings.

The unresolved tension is the asset-based unit itself. Charging by the asset means a customer's coverage win becomes a billing event, an awkward fit for the ephemeral cloud workloads the product is praised for tracking, and fetched pages do not say how attach of the newer products is priced against the platform fee or how the marketplace dimensions map to negotiated enterprise deals.

Axonius delivers a single-tenant SaaS with an unusual amount of customer control for the segment. The security program page states the company hosts each customer in a dedicated, isolated AWS environment with a choice of available regions, encrypts adapter credentials at rest, and supports a customer-hosted deployment for organizations that keep asset metadata in-house, a meaningful option for the federal and financial buyers it targets.

Customers spend their deployment effort on credentials rather than infrastructure. For the core inventory the agentless model needs no endpoint rollout, and the OT line leans on passive discovery with selective active enrichment, so onboarding is the work of connecting adapters to tools already in place, and Western Union reached 99 percent coverage, up from 85 percent and including the ephemeral AWS instances that previously created blind spots, through 38 such connections. Accuracy then depends on continuous syncs, which the platform pages describe as constant state checkpoints.

The vendor's heaviest operational burden is invisible to customers. A catalog of more than 1,400 adapters against third-party APIs that change without notice is a perpetual maintenance load, and stale adapters would undermine the core promise faster than any competitor could. For the customer, an Axonius outage degrades visibility and automation rather than production systems, though enforcement actions that disable accounts or update software write into live environments and need the same change discipline as any management tool.

The public security posture matches what Axonius's own buyers would demand. The company holds an ISO 27001 certificate and a SOC 2 Type 2 attestation from Schellman, adds a HIPAA attestation for health-data customers, operates a trust center that releases reports after an NDA, and publishes a Vulnerability Disclosure Policy inviting researcher reports. A search of the National Vulnerability Database returns no CVEs recorded against Axonius as of July 2026.

An asset aggregator must answer for concentration of access, and Axonius mostly does. The platform holds credentials into a customer's entire tool estate, which makes the vendor a single point whose compromise would expose the map of everything, including each customer's coverage gaps. Published mitigations are credential encryption at rest, dedicated single-tenant environments, and the customer-hosted option, while liability terms and breach-scenario specifics remain, as expected, in private contracts.

Axonius backs its federal pitch with accreditations beyond commercial table stakes. The FedRAMP Marketplace lists the Axonius Asset Cloud as certified at the Moderate class as of April 2025, and the company's own federal page adds NIAP Common Criteria validation and a CISA CDM approved-products entry, the latter vendor-stated rather than independently confirmed. The marketplace event log dates that certification to an authorization process entered in November 2023, and these third-party gates open federal procurement to Axonius while leaving any uncertified rival the same multi-year accreditation work to complete.

Axonius claims the platform position explicitly, and the architecture partly earns it. Its products run on one reconciled asset fabric spanning more than 45 asset classes, so each addition enriches the data every other product consumes, which is compounding behavior rather than bolt-on consolidation. Integrations run in both directions, more than 1,400 adapters pulling data inward and enforcement, ticketing, CMDB, and SIEM connections pushing outward, which makes Axonius a hub in the customer's operational graph.

What is missing is the supply side of a true platform. The reviewed pages evidence no public API marketplace and no third-party developers building on the asset fabric, so the record documents an adapter catalog Axonius maintains and no external extension ecosystem. The channel ecosystem is further along, with reseller distribution and an AWS Marketplace listing, though the reviewed material shows partners distributing the product rather than extending it. The company calls itself the platform of platforms, but by its own architecture it is a deeply integrated suite whose shared data layer creates the compounding.

The AI positioning is an attempt to become infrastructure for other people's automation. The Anthropic adapter brings AI assets into inventory, Axonius Verified Assets is pitched as the data trust standard AI agents require, and the company argues that agentic security tooling needs its verified asset data as a foundation. If customers wire their AI workflows to consume Axonius data, the company graduates from console to dependency, which is the single most consequential open move on the board.

The founding team ran Axonius from 2017 into 2026, and the founders remain with the company. Dean Sysman, Ofri Shur, and Avidor Bartov founded the company in 2017, Ofri remains CTO and Avidor chief architect, and Dean moved to executive chair. The newest product leader is a non-founder: Axonius appointed Moshe Ben Simon, a former Fortinet product executive and TrapX Security co-founder, as chief product officer in June 2026, reporting to CEO Joe Diamond and based in Tel Aviv.

Axonius handed the CEO seat to a non-founder while keeping the founders on product. Joe Diamond moved from president to interim CEO in February 2026 and to permanent CEO in May 2026, having joined the company as chief marketing officer in May 2024. BankInfoSecurity reported that he came to Axonius after seven and a half years at Okta, ending as global vice president of demand marketing. CTech reported two workforce cuts, roughly 100 people in November and 40 more in February, framed as IPO preparation with industry estimates reading efficiency ahead of a possible sale, and separately reported Cisco explored acquiring the company near 2 billion dollars, which Axonius denied.

The execution record is long and specific. The team carried the company to a press-verified 200 million dollar recurring revenue base growing 35 percent a year, raised nearly 600 million dollars from investors including Accel, Lightspeed, and Bessemer, and built a separately led federal subsidiary whose board includes a retired DISA director and a former Department of Defense chief information security officer. Whether the post-founder configuration sustains the growth that carried the company this far is the live test for the leadership Axonius has assembled.