Cerby

Identity Access also known as Cerby, Inc.

Market readinessHow well the company can compete in its security market, scored across eight dimensions against public evidence. Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
DefensibilityHow well the company holds its position if competitors catch up on features, scored across seven dimensions against public evidence. Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure.
Founded 2020
Funding $72.5M
Last updated 2026-07-30

All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.

Executive Summary

Cerby automates identity work, password rotation, provisioning, deprovisioning, and privileged access, for the business apps that lack standard sign-on protocols and so fall outside conventional identity tools. The founders previously built Ooyala and Wizeline to exits, and on 72.5 million dollars press reports a claimed Fortune 100 footprint, with references like L'Oréal and Fox, and it passed 2,000 app integrations. The durability question is positional, not accumulated. Cerby sells software a customer configures, and no irreproducible dataset or certification mandate surfaced in the reviewed sources, so its hold rests on how far customers wire its automations into their identity stack before Okta or Microsoft, the platforms it extends, ship comparable last-mile coverage natively.

Sourced Details

Description Identity security company whose platform automates the full identity lifecycle for disconnected applications, the apps that lack support for standard protocols like SAML and SCIM, extending credential management, access, and lifecycle controls across existing IAM, IGA, and PAM tools. [f1]
Founded 2020 [f2]
HQ Alameda, California, US [f2]
Funding $72.5M total [f2]
Latest funding Series B ($40M, May 2025) [f3]

Products

Product What it does
Cerby Identity automation platform bringing credential management, SSO and MFA, lifecycle automation, and privileged access to apps that do not support SAML, OIDC, or SCIM, across EPM, IAM, IGA, and PAM.

Matrix Coverage

Cyber Defense Matrix

IdentifyProtectDetectRespondRecover
Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware.
Applications Software, interactions, and application flows on the devices.
Networks Connections and traffic flowing among devices and apps, plus communication paths.
Data Content at rest, in transit, or in use across devices, apps, and networks.
Users The people using the devices, apps, networks, and data.

Discovers and connects applications that traditional identity tools cannot reach, and automates credential, access, and lifecycle controls for the human and shared accounts using them. The product is mapped to the Cyber Defense Matrix. [f4]

Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

Established 25 /40 Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
Dimension Score Rationale
Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. 3/5 Cerby names identity and security teams as the buyer, but the quantified pain (over 40 percent of apps lacking identity-standard support) is a homepage figure while SecurityWeek and SiliconANGLE corroborate the disconnected-app gap only qualitatively. [s1, s3, s4]
Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. 3/5 The product page documents credential rotation, SSO for apps without SAML, and lifecycle provisioning, and press describes robotic UI plus machine-learning onboarding, but no documentation portal or third-party evaluation of the integration engine surfaced. [s2, s3, s8]
Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. 3/5 The enabler is the post-2020 sprawl of SaaS and, more recently, agentic AI systems outside standard identity tools, but the timing case is SaaS sprawl, the vendor-cited 40 percent unmanaged-app figure, and EMEA regulatory pressure Cerby itself cites, all vendor-argued rather than independent analyst, regulatory, or budget-line demand. [s1, s3, s5]
Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. 3/5 Co-founders Lepe and Gonzalez reached real exits with Ooyala (over 440 million dollars) and Wizeline, but those builds sit in video and software-services rather than identity or security, leaving entrepreneurial track record without a verifiable in-domain exit. [s6, s8]
GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. 4/5 Press reports Cerby claims Fortune 100 usage and names L'Oréal, Fox, Colgate-Palmolive, Dentsu, and Chime as customers, and the homepage adds Ford and Mattel logos. DTCP led a 40 million dollar round with Okta Ventures, Salesforce Ventures, and Two Sigma Ventures participating, multiple sources confirming both traction and backing. [s4, s5]
Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. 3/5 The 72.5 million dollar total funds an enterprise motion with visible shipping (2,000-plus integrations, EMEA expansion), but the headline tenfold revenue growth is vendor-reported with no disclosed absolute revenue or margin, so output per dollar stays unconfirmed. [s3, s8, s5]
Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. 3/5 Cerby fits the recognizable identity-security budget line and positions as completing rather than replacing the identity stack, which buyers can place. The narrower framing of disconnected or last-mile apps is a vendor-shaped sub-category buyers do not yet name without coaching, holding the score below a clean category fit. [s1, s3]
Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. 3/5 The app-integration breadth and the deprovisioning workflows customers wire in give modest stickiness, but Okta, an investor here, and Microsoft sit adjacent and could extend last-mile coverage into their own platforms. The capability is a plausible platform feature rather than a structural moat. [s1, s5]
Business Risks The identity platforms Cerby extends, Okta among them and also an investor, could add native disconnected-app coverage and absorb Cerby's entry point into the buyer…
  • The identity platforms Cerby extends, Okta among them and also an investor, could add native disconnected-app coverage and absorb Cerby's entry point into the buyer.
  • Cerby's durability depends on embedding before incumbents bundle, and no proprietary data or regulatory lock slows a determined replacement.
  • Traction figures, the tenfold revenue growth and customer counts, are vendor-reported and not independently confirmed, so the proof could be softer than it reads.
  • The disconnected-app framing depends on apps staying off standard protocols, a gap that narrows as more SaaS vendors adopt SAML and SCIM.
Problem & Market Cerby defines its problem as the applications that traditional identity tools cannot reach…

Cerby defines its problem as the applications that traditional identity tools cannot reach. Apps without SAML, OIDC, or SCIM fall outside IAM, IGA, and PAM coverage, leaving credential rotation, provisioning, and deprovisioning as manual work prone to error. The homepage states that over 40 percent of apps lack support for identity standards.

The buyer is the identity or security leader in a large enterprise. Press reports Cerby claims Fortune 100 usage and names L'Oréal, Fox, Colgate-Palmolive, Dentsu, and Chime as customers that rely on the platform across complex environments, and Cerby cites EMEA regulatory pressure as an accelerant for disconnected-app security.

The pain is concrete and corroborated. SecurityWeek and SiliconANGLE both describe the gap traditional identity tools leave, and the named enterprise customers confirm the problem exists at the scale Cerby claims rather than resting on vendor assertion alone. [s1, s3, s4]

Product Capabilities The Cerby platform automates the full identity lifecycle for disconnected apps…

The Cerby platform automates the full identity lifecycle for disconnected apps. It rotates passwords on policy and SCIM events, enables SSO and MFA for apps that lack SAML or OIDC, provisions and deprovisions users, and extends privileged access controls with just-in-time access and audit trails, working across EPM, IAM, IGA, and PAM systems.

The integration method is the technical core. Press describes robotic UI detection combined with API and machine-learning onboarding, which lets the platform connect apps that expose no standard identity interface, and Cerby reports the platform automates workflows across more than 2,000 applications.

Validation beyond marketing is partial. The product page and a published security policy document encryption and access controls, but no public technical documentation portal or third-party evaluation of the integration engine surfaced during this analysis. [s2, s3, s8]

Competitive Positioning Cerby positions as completing rather than replacing the identity stack, extending an existing IdP to apps it cannot reach…

Cerby positions as completing rather than replacing the identity stack, extending an existing IdP to apps it cannot reach. That framing keeps Okta, Microsoft, and other identity platforms as partners rather than head-on rivals, and Okta Ventures is an investor.

The unmanaged-app space is contested. Unixi sells a browser-based approach to the same population of apps an IdP cannot reach, Push Security hardens workforce identities in the browser, and Grip Security overlaps on SaaS discovery and identity risk visibility.

The positioning carries a structural tension. The identity platforms Cerby extends are also the vendors most able to absorb last-mile coverage as a native feature, so Cerby's partner posture and its main competitive threat point at the same companies. [s1, s5]

Go-to-Market & Traction Cerby shows enterprise traction that is strong for a Series B company…

Cerby shows enterprise traction that is strong for a Series B company. Press reports Cerby claims Fortune 100 usage and names five customer references, and the homepage displays additional brand logos including Ford and Mattel, evidence of an enterprise go-to-market motion that has landed marquee accounts.

Growth metrics are vendor-reported but specific. Cerby states it grew annual recurring revenue tenfold and its customer base fivefold since a Series A under 20 months earlier, and that the platform now serves over 100 organizations across more than 2,000 applications.

Investor backing reinforces the signal. The 40 million dollar Series B was led by DTCP with Okta Ventures, Salesforce Ventures, and Two Sigma Ventures participating, strategic identity and CRM backers whose presence is itself a go-to-market asset. [s4, s5, s8]

Team & Credibility Cerby's founding team has verifiable prior builds…

Cerby's founding team has verifiable prior builds. Co-founder and CEO Belsasar Lepe co-founded and served as CTO of Ooyala, a video technology company that reached two exits totaling over 440 million dollars, and began his career as a Google engineer.

The co-founders share a track record. Co-founder and CTO Vidal González co-founded Wizeline, which exited in 2021, and press confirms the founders previously worked together at Ooyala and Wizeline.

Bench depth extends past the founders. Cerby's leadership page lists a chief architect with prior technical leadership roles at established cybersecurity vendors, adding security-specific pedigree to a team whose prior exits sit mostly in adjacent software rather than security. [s6, s8]

Trust Readiness Cerby publishes a substantive security posture…

Cerby publishes a substantive security posture. Its Security Policy documents AES 256-bit encryption at rest, TLS 1.2 in transit, least-privilege access through a bastion host with MFA, environment separation, and logging retained for at least a year.

Cerby operates a third-party trust center at trust.cerby.com, hosted on Drata. Its trust-center listing shows that Cerby holds SOC 2 Type II and ISO 27001 attestations, with downloadable reports behind the portal, and it announced full GDPR compliance in November 2025. The same listing references a 2025 penetration test letter of attestation.

The verified posture is a strong set of enterprise attestations. Cerby holds SOC 2 Type II and ISO 27001, confirmed via its Drata trust center listing, alongside the November 2025 GDPR announcement and a published security policy documenting its encryption and access controls. Such certifications are table-stakes for enterprise security software rather than a differentiator. [s7, s9, s1]

Competitors Unixi, Push Security, Grip Security…
Company Relationship Note Compare
Unixi competes with Both extend an identity provider to SaaS apps it cannot reach natively.
Push Security adjacent Browser-based identity security covering SaaS apps outside the IdP.
Grip Security adjacent SaaS identity risk management and access governance.

Add analyzed competitors to compare them side by side with Cerby.

Strategy Deep Dive

A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.

Defensibility

Contested 13 /21 Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure. reinforce or reposition

Cerby automates credential rotation and privileged access for apps that expose no standard identity interface, so the accounts it manages depend on it to keep working. Building that automation across more than 2,000 disconnected apps is brittle engineering that takes sustained effort, but a funded rival could rebuild it. The reviewed sources surfaced no proprietary dataset and no mandated certification a switch would have to clear. What keeps a customer is the automation already wired into its identity tooling, which is real work to unwind. That switching cost has no network effect or regulatory anchor, so the depth of automation a customer embeds is what a buyer should watch.

Dimension Score Rationale
Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. 1/3 Customers buy software capabilities, credential rotation, provisioning, and access automation, that they configure and run themselves. Automation output is the product, not a judgment or managed-service layer that accepts accountability.
Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. 2/3 Once Cerby automates lifecycle and credential workflows across disconnected apps and integrates with the customer's IAM, IGA, and PAM tools, a departing customer must reabsorb that manual work or re-plumb it elsewhere, which is expensive in effort. The lock-in carries no network effect or regulatory residency anchor.
Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. 1/3 Cerby holds SOC 2 Type II and ISO 27001 attestations, verified via its Drata trust center listing, announced GDPR compliance in November 2025, and publishes a security policy. Its automations help customers meet their own access-governance obligations. The reviewed evidence establishes standard enterprise attestations rather than a certification barrier specific to this product class, so compliance is procurement assurance rather than a moat.
Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. 3/3 Reliably automating credential rotation, provisioning, and privileged access for apps that expose no standard identity interface, via robotic UI detection and machine-learning onboarding across more than 2,000 applications, is brittle integration engineering where failure breaks customer access. The breadth and the inline reliability bar take specialized, sustained effort.
Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. 2/3 Named references such as L'Oréal, Fox, and Chime, against a claimed Fortune 100 footprint, skew enterprise, where procurement and legal slow replacement, but public materials show marquee logos rather than evidenced switching friction, so the score reflects the buyer identity Cerby addresses more than a demonstrated hold.
Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. 3/3 Cerby sits in the access path for disconnected apps, rotating credentials and gating privileged access, so the human and shared accounts it manages depend on it to retain or lose access. Removing it returns those tasks to manual work across crown-jewel apps.
Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. 1/3 The Cerby Application Network of 2,000-plus integrations is accumulating engineering, not a named non-public dataset, and a funded rival could rebuild the same connectors. No cross-customer telemetry corpus or threat-intelligence flywheel appears in the fetched record.
Strategic Market Segmentation Cerby serves identity and security teams at large enterprises with sprawling application estates…

Cerby serves identity and security teams at large enterprises with sprawling application estates. The product targets organizations whose IAM, IGA, and PAM tooling cannot reach apps that lack SAML, OIDC, or SCIM, and press names sectors spanning healthcare, manufacturing, retail, SaaS, streaming, and telecommunications.

Named customers anchor the segment at the top of the market. Press reports Cerby claims Fortune 100 usage and names L'Oréal, Fox, Colgate-Palmolive, Dentsu, and Chime as customers, and Cerby states it serves more than 100 organizations, so the visible buyer skews large-enterprise rather than mid-market.

A specific use case recurs in the positioning. Cerby calls out administrative and shared accounts in crown-jewel apps like Microsoft 365, Salesforce, ServiceNow, and Slack, and social-media account sharing, which points at the access patterns that conventional identity tools handle poorly.

Product Capabilities & AI Advantages Cerby's capabilities cluster around automating identity tasks for apps that expose no standard interface…

Cerby's capabilities cluster around automating identity tasks for apps that expose no standard interface. The platform rotates passwords on policy and SCIM events, enables SSO and MFA for apps without SAML or OIDC, provisions and deprovisions users, and extends privileged access with just-in-time grants, automatic deprovisioning, and audit trails.

The integration engine is the differentiator. Press describes robotic process automation combined with machine learning to onboard nonstandard applications, the method that lets Cerby connect apps a standards-based tool cannot, and Cerby reports coverage across more than 2,000 applications.

Cerby uses automation as the method rather than defending AI as the asset. Machine learning and robotic UI drive onboarding and configuration, but the protected assets are conventional, the human and shared accounts on disconnected apps, so the durable technical depth is integration breadth and reliability rather than any data or model advantage.

Sales Engagement & Go-to-Market Cerby runs an enterprise go-to-market motion that has reached marquee accounts…

Cerby runs an enterprise go-to-market motion that has reached marquee accounts. The site leads with a book-a-meeting call to action rather than self-service signup, and press names Fortune 100 reference customers, consistent with a sales-assisted motion aimed at large organizations.

Investment and integration relationships both run through the identity platforms. The Series B was led by DTCP with Okta Ventures, Salesforce Ventures, and Two Sigma Ventures participating, and Cerby integrates natively with Okta, Entra ID, and Ping. No fetched source describes those investors referring, reselling, or distributing Cerby, so the overlap is a relationship to watch rather than an evidenced channel.

Channel breadth beyond the direct motion is not yet visible in fetched materials. No reseller program, MSSP motion, or cloud-marketplace listing surfaced in the reviewed sources, so an incumbent copying the feature set would contend with Cerby's install base and integrations rather than a locked distribution channel.

Pricing Model Cerby does not publish prices…

Cerby does not publish prices. The site routes buyers to a meeting rather than a price sheet or a self-service plan, the pattern of a vendor that sells negotiated enterprise deals.

The hidden pricing fits the buyer profile. Fortune 100 references and a contact-sales motion imply large, custom contracts where the charging unit, whether per app, per user, or per seat, stays undisclosed and is set in negotiation.

The unit Cerby charges by is not inferable from public materials. Because the company sizes value around the apps it manages and the identity workflows it automates, a per-app or per-managed-identity unit is plausible, but no fetched source confirms it, so the pricing model remains unverified.

Product Delivery & Operations Cerby delivers a cloud service that integrates with the customer's identity stack…

Cerby delivers a cloud service that integrates with the customer's identity stack. The platform connects to Okta, Entra ID, and Ping and any standards-supporting IdP, and automates credential, access, and lifecycle workflows across EPM, IAM, IGA, and PAM systems.

The operational bar is high because Cerby sits in the access path. The platform rotates credentials and gates privileged access, so reliability of its automations directly affects whether customers retain or lose access to crown-jewel apps, though public materials do not document SLAs, redundancy, or failure modes.

Public delivery detail is thin. No technical documentation portal, deployment guide, or architecture page surfaced this analysis, so the depth of the integration tooling and its operational guarantees cannot be assessed beyond the marketing and security-policy pages fetched.

Earning Customers' Trust Cerby publishes a substantive security posture for a product that holds credentials…

Cerby publishes a substantive security posture for a product that holds credentials. Its Security Policy documents AES 256-bit encryption at rest, TLS 1.2 in transit, least-privilege bastion-host access with MFA, environment separation, quarterly access reviews, and logs retained at least a year.

Cerby operates a third-party trust center at trust.cerby.com, hosted on Drata. Its trust-center listing shows that Cerby holds SOC 2 Type II and ISO 27001 attestations, with downloadable reports behind the portal, and it announced full GDPR compliance in November 2025. The same listing references a 2025 penetration test letter of attestation.

The verified posture is a strong set of enterprise attestations. Cerby holds SOC 2 Type II and ISO 27001, confirmed via its Drata trust center listing, alongside the November 2025 GDPR announcement and a published security policy documenting its encryption and access controls. Such certifications are table-stakes for enterprise security software rather than a structural moat.

Platform Strategy & Ecosystem Positioning Cerby positions as a layer that completes rather than replaces the identity stack…

Cerby positions as a layer that completes rather than replaces the identity stack. It integrates with Okta, Entra ID, Ping, and any standards-supporting IdP, and works across EPM, IAM, IGA, and PAM, so it consumes the existing stack as connective tissue rather than competing to own the directory.

The ecosystem tie runs through the major identity platforms. Okta Ventures is an investor and Okta is one of several named integrations alongside Entra ID and Ping. Fetched sources neither rank those dependencies nor show a distribution relationship, so the risk is generic to the position: any platform Cerby extends is well placed to absorb last-mile coverage natively.

Third-party extension of Cerby is not visible. No public API marketplace, partner-built integrations, or developer ecosystem beyond Cerby-authored connectors surfaced in the reviewed sources, so the platform claim rests on integration breadth rather than external network effects.

Team & Execution Capability Cerby's founders have verifiable prior builds and exits…

Cerby's founders have verifiable prior builds and exits. Co-founder and CEO Belsasar Lepe co-founded and was CTO of Ooyala, which reached two exits totaling over 440 million dollars, and began his career as a Google engineer.

The co-founding team shares a track record. Co-founder and CTO Vidal González co-founded Wizeline, which exited in 2021, and press confirms the founders previously worked together at Ooyala and Wizeline.

Security-specific depth sits below the founders. Cerby's leadership page lists a chief architect with prior technical leadership roles at established cybersecurity vendors, which adds security pedigree to a founding team whose prior exits sit mostly in adjacent software rather than security.

Sources

Company Detail Sources (4)
Id Source Tier Accessed
f1 Cerby homepage official 2026-06-20
f2 SecurityWeek: Cerby Raises $40 Million for Identity Automation Platform press 2026-06-20
f3 PR Newswire: Cerby Raises $40M Series B to Automate Identity Security at Scale press 2026-06-20
f4 Cerby product page official 2026-06-20
Profile Analysis Sources (9)
Id Source Tier Accessed
s1 Cerby homepage
“Securely manage and automate access for the apps your identity tools can’t reach.”
official 2026-06-20
s2 Cerby product page
“With Cerby, passwords automatically rotate according to your policy and SCIM events, guaranteeing access isn’t retained.”
official 2026-06-20
s3 SecurityWeek: Cerby Raises $40 Million for Identity Automation Platform
“Cerby on Wednesday announced raising $40 million in a Series B funding round that brings the total raised by the company to $72.5 million.”
press 2026-06-20
s4 SiliconANGLE: Identity security automation startup Cerby raises $40M
“Cerby claims several customers using its product to support their identity security automation amid the Fortune 100, including L’Oréal S.A., Fox Corp., Colgate-Palmolive Co., Dentsu Inc. and Chime Financial Inc.”
press 2026-06-20
s5 PR Newswire: Cerby Raises $40M Series B to Automate Identity Security at Scale
“The round was led by DTCP with participation from existing backers including Okta Ventures, Salesforce Ventures, and Two Sigma Ventures.”
press 2026-06-20
s6 Cerby leadership page
“Prior to his role at Impira, Bel was co-founder and CTO at Ooyala where he led a global product, design, and engineering team of 300+ Ooyalans spanning five countries and seven offices. Ooyala achieved two successful exits totaling over $440M.”
official 2026-06-20
s7 Cerby Security Policy
“Cerby encrypts Customer Data within the Service at-rest using AES 256-bit (or better) encryption.”
official 2026-06-20
s8 TechFundingNews: Cerby scoops $40M to automate identity security
“Cerby was founded in September 2020 by Belsasar “Bel” Lepe (CEO), Vidal González (CTO)... having previously worked together at companies like Ooyala and Wizeline. Since its Series A... Cerby has increased its annual recurring revenue (ARR) tenfold and expanded its customer base fivefold.”
press 2026-06-20
s9 Cerby Trust Center (Drata). Lists SOC 2 Type II, ISO 27001, GDPR, and a 2025 pentest (confirmed via trust-center PDF render)
“Cerby SOC2 Type II. ISO 27001 Report. Cerby ISO 27001. Cerby SOC 2. Cerby is GDPR Compliant! Published on Nov 12, 2025”
official 2026-06-20
Deep-Dive Sources (10)
Id Source Tier Accessed
s1 Cerby homepage
“Securely manage and automate access for the apps your identity tools can’t reach.”
official 2026-06-20
s2 Cerby product page
“With Cerby, passwords automatically rotate according to your policy and SCIM events, guaranteeing access isn’t retained. Cerby also manages passwords for SaaS administrative accounts in crown jewel applications like Microsoft 365, Salesforce, ServiceNow, Slack, and more.”
official 2026-06-20
s3 SecurityWeek: Cerby Raises $40 Million for Identity Automation Platform
“Cerby said the platform automates identity workflows across over 2,000 applications and is used by organizations across sectors such as healthcare, manufacturing, online collaboration, retail, SaaS, streaming, telecommunications, and workplace training.”
press 2026-06-20
s4 SiliconANGLE: Identity security automation startup Cerby raises $40M
“Cerby claims several customers using its product to support their identity security automation amid the Fortune 100, including L’Oréal S.A., Fox Corp., Colgate-Palmolive Co., Dentsu Inc. and Chime Financial Inc.”
press 2026-06-20
s5 PR Newswire: Cerby Raises $40M Series B to Automate Identity Security at Scale
“The round was led by DTCP with participation from existing backers including Okta Ventures, Salesforce Ventures, and Two Sigma Ventures.”
press 2026-06-20
s6 Cerby leadership page
“Bel was co-founder and CTO at Ooyala... Ooyala achieved two successful exits totaling over $440M. Vidal is co-founder and CTO of Cerby. He was previously CTO and co-founder of Wizeline, a company which successfully exited in 2021.”
official 2026-06-20
s7 Cerby Security Policy
“Cerby encrypts Customer Data within the Service at-rest using AES 256-bit (or better) encryption. Cerby uses Transport Layer Security (TLS) 1.2 (or better) within the Service for Customer Data in-transit over untrusted networks.”
official 2026-06-20
s8 TechFundingNews: Cerby scoops $40M to automate identity security
“Through automation (including robotic process automation and machine learning), Cerby reduces the workload for IT and security teams by handling onboarding, offboarding, password management, and security configuration for nonstandard applications.”
press 2026-06-20
s9 Cerby privileged access solution page
“Extend PAM to disconnected apps with just-in-time access, automatic deprovisioning, and full audit trails.”
official 2026-06-20
s10 Cerby Trust Center (Drata). Lists SOC 2 Type II, ISO 27001, GDPR, and a 2025 pentest (confirmed via trust-center PDF render)
“Cerby SOC2 Type II. ISO 27001 Report. Cerby ISO 27001. Cerby SOC 2. Cerby is GDPR Compliant! Published on Nov 12, 2025”
official 2026-06-20

Disclaimer

This content is provided "as is" with no warranties.

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.