All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Clutch's most defensible feature is the one its public customers are not yet shown using. The company finds and governs the machine identities that outnumber people in most enterprises: service accounts, API keys, tokens, and the credentials AI agents carry. Its lasting hold on a customer would come from migrating workloads to short-lived credentials in place of the static secrets they carry. What actually opens deals is discovery and posture, software a funded rival can ship as features. The enterprise logos are real but vendor-displayed, with no public reference describing results. The zero-knowledge design keeps each customer's data in its own network, and the cited record names no cross-customer data asset that would compound between accounts.
| Description | Identity security platform for non-human identities, AI agents, and secrets, providing visibility, governance, posture and risk management, and detection and response across cloud, SaaS, and on-prem environments. | [f1] |
|---|---|---|
| Founded | 2023 | [f2] |
| HQ | Tel Aviv, Israel | [f2] |
| Funding | $28.5M total | [f3] |
| Latest funding | Series A, $20 million (January 2025), led by SignalFire | [f3] |
| Deployment | SaaS | [f4] |
| Compliance | ISO 27001, SOC 2 Type 2 | [f4] |
| Product | What it does |
|---|---|
| Clutch | Identity security platform for non-human identities, AI agents, and secrets: discovery, governance, posture and risk management, and threat detection and response across cloud, SaaS, and on-prem. |
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Orchestration Tools Agentic orchestration tools, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients on user devices. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Gateways & Routers MCP proxies and gateways, LLM routers, outbound AI-service traffic, shadow AI egress, and model-registry traffic. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, AIBOM, and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Clutch is an identity security platform for non-human identities, AI agents, and secrets, providing discovery, governance, posture and risk management, and threat detection and response across cloud, SaaS, and on-prem. It is mapped to the AI Defense Matrix. [f5]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score |
|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 4/5 |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs, demos, and third-party validation. | 3/5 |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 3/5 |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
pivot urgently
| Dimension | Score |
|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 2/3 |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 |
Unlock the Full Analysis
The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.
One-time purchase: $20 per profile.
UnlockReading several? Unlock the entire catalog.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | Clutch Security: The Identity Security Platform for Everything That Isn't a Person | official | 2026-07-08 |
| f2 | SecurityWeek on the Clutch Series A (January 31, 2025) | press | 2026-06-11 |
| f3 | Calcalist CTech on the Clutch Series A (January 29, 2025) | press | 2026-06-11 |
| f4 | AI Defense Matrix Catalog entry | other | 2026-06-13 |
| f5 | AI Defense Matrix Catalog mapping | other | 2026-06-23 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Clutch Security homepage “Introducing The Identity Security Platform for the AI Era. Powered by Identity Lineage ® Graph, which connects every entity to its origin, the people behind it, where it's stored, what consumes it. Trusted by world-recognized brands: NTT Data, Fluidra, OpenWeb, Cedar.” | official | 2026-07-01 |
| s2 | Clutch platform overview “Clutch connects to your cloud providers, SaaS applications, code repositories, CI/CD pipelines, vaults, password managers, endpoints, and AI platforms.” | official | 2026-06-12 |
| s3 | About Clutch page with leadership roster | official | 2026-06-12 |
| s4 | Clutch integrations catalog | official | 2026-06-12 |
| s5 | Clutch trust center “Our certifications include: SOC 2 Type II and ISO 27001” | official | 2026-06-12 |
| s6 | Agentic AI governance page | official | 2026-06-12 |
| s7 | Agent guardrails page “Behind every agent is a chain: the person who deployed it, the agent itself, the tools it uses, the Non-Human Identities it authenticates with, and the resources it reaches.” | official | 2026-06-12 |
| s8 | NHI lifecycle management page | official | 2026-06-12 |
| s9 | Why Clutch positioning page | official | 2026-06-12 |
| s10 | Shadow AI discovery use case page “MCP servers operate locally on developer machines, outside traditional security controls.” | official | 2026-06-12 |
| s11 | Clutch careers page | official | 2026-06-12 |
| s12 | Clutch Series A announcement post (company blog, January 30, 2025) “Clutch Security has raised $20M in a Series A funding round led by SignalFire, with participation from our existing investors, Lightspeed Venture Partners and Merlin Ventures, bringing our total funding to $28.5M.” | official | 2026-06-12 |
| s13 | Shadow AI discovery launch post (company blog, September 11, 2025) “Last month, we worked with a financial services customer who worked with us as a design partner on this new capability. We discovered 847 unknown MCP servers across their developer environment.” | official | 2026-06-18 |
| s14 | Company blog response to the Anthropic GTG-1002 report (November 18, 2025) | official | 2026-06-12 |
| s15 | Clutch Security GitHub organization “federator (Updated Jun 28, 2026), AWSKeyLockdown (last pushed Nov 23, 2024), clutch-vscode-extension (last pushed Sep 24, 2025).” | official | 2026-07-01 |
| s16 | SecurityWeek on the Clutch Series A (January 31, 2025) “Founded in 2023, the Tel Aviv-based company aims to help organizations protect NHIs such as API keys, tokens, certificates, and secrets, which are central to modern IT and automation, but also increasingly targeted in attacks.” | press | 2026-06-18 |
| s17 | TechCrunch on the Clutch Series A (January 29, 2025) “Astrix Security, which raised $45 million this past December; Oasis, a buzzy Israeli startup that raised $40 million a year ago; CyberArk, which acquired machine-to-machine security firm Venafi for over $1.5 billion last year” | press | 2026-06-12 |
| s18 | Calcalist CTech on the Clutch Series A (January 29, 2025) “has raised $20 million in a Series A round. The round was led by SignalFire, with participation from existing investors Lightspeed Venture Partners and Merlin Ventures. This brings the company’s total funding to $28.5 million.” | press | 2026-06-12 |
| s19 | IT Security Guru on a Keeper Security NHI survey (June 11, 2026) “More than two-thirds of respondents (68%) reported that AI agents or AI-powered tools exist as privileged identities within their organisations. However, only 15% of those respondents said they have full visibility into NHIs across cloud, on-premises and SaaS environments.” | press | 2026-06-12 |
| s20 | Calcalist CTech on the Clutch founders' backgrounds “Clutch Security was founded in late 2023 by Ofir Har-Chen (CEO), the former COO at Hunters, and a cybersecurity expert at Sygnia, and Sagi Haas (CTO) and Tal Kimhi (VP of R&D), both formerly of Axonius.” | press | 2026-06-13 |
| s21 | Israel Registrar of Companies record for CLUTCH SECURITY LTD, company number 516887171, active private company incorporated 07/11/2023, Tel Aviv-Yafo “"שם באנגלית":"CLUTCH SECURITY LTD","סוג תאגיד":"ישראלית חברה פרטית","סטטוס חברה":"פעילה","תאריך התאגדות":"07/11/2023","שם עיר":"תל אביב - יפו"” | regulatory | 2026-06-29 |
| s22 | OWASP Non-Human Identities Top 10 for 2025 “The Non-human identity (NHI) top 10 is a comprehensive list of the most pressing security risks and vulnerabilities that non-human identities present to organizations.” | research | 2026-06-29 |
| s23 | NVD CVE-2025-30066: tj-actions changed-files exposes CI/CD secrets in action logs “tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. (The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which contained malicious updateFeatures code.)” | regulatory | 2026-06-29 |
| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | Clutch Security: Every Identity, Every Agent, Every Secret (homepage) “Zero Knowledge Architecture keeps all data within your network. No credentials are ever stored or transmitted.” | official | 2026-07-08 |
| s2 | Clutch Security: The Identity Security Platform for Everything That Isn't a Person “Visibility, governance, and security for every Non-Human Identity, AI Agent, and Secret across your environment” | official | 2026-07-08 |
| s3 | Clutch Security: Taking the Lead in Non-Human Identity Security (about) “We are on a mission to secure all Non-Human Identities. Everywhere.” | official | 2026-07-08 |
| s4 | Clutch Security: Integrations “Clutch facilitates numerous integration options. All to ensure the entire Non-Human Identity realm is covered” | official | 2026-07-08 |
| s5 | Clutch Security: Trust Center “certifications include: SOC 2 Type II and ISO 27001” | official | 2026-07-08 |
| s6 | Clutch Security: Agentic AI Governance “Discover and govern AI agents before they become your biggest security blindspot, with complete visibility into NHI usage by AI systems.” | official | 2026-07-08 |
| s7 | Clutch Security: Why Clutch “Understand every NHI: where it lives, what it does, what it's touching” | official | 2026-07-08 |
| s8 | Clutch Security on GitHub “Terraform templates for CI/CD to Cloud federation and Cloud2Cloud IAM federations” | official | 2026-07-08 |
| s9 | SecurityWeek: Clutch Security Raises $20 Million for Non-Human Identity Protection Platform “announced raising $20 million in a Series A funding round that brings the total raised by the company to $28.5 million. The new funding round was led by SignalFire, with additional investment from Lightspeed Venture Partners and Merlin Ventures.” | press | 2026-07-08 |
| s10 | TechCrunch: Clutch grabs $20M to build out its non-human security ID platform “The crowded market includes the likes of Semperis, which last year raised at a $1 billion valuation to focus just on that legacy issue of Active Directory; Astrix Security, which raised $45 million” | press | 2026-07-08 |
| s11 | Calcalist: Clutch Security secures $20 million Series A as non-human identity threats surge “Clutch Security was founded in late 2023 by Ofir Har-Chen (CEO), the former COO at Hunters, and a cybersecurity expert at Sygnia, and Sagi Haas (CTO) and Tal Kimhi (VP of R&D), both formerly of Axonius. The company currently employs 30 people across its offices in Tel Aviv and the U.S.” | press | 2026-07-08 |
| s12 | CrowdStrike Marketplace: Clutch Security Universal Non-Human Identity Security Platform “Clutch Security integrates seamlessly with CrowdStrike's Falcon platform, providing comprehensive visibility into Non-Human Identities” | official | 2026-07-08 |
| s13 | OWASP Non-Human Identities Top 10 for 2025 “Secret Leakage refers to the leakage of sensitive NHIs such as API keys, tokens, encryption keys, and certificates to unsanctioned data stores throughout the software development lifecycle” | research | 2026-07-08 |
| s14 | NVD: CVE-2025-30066 (tj-actions changed-files secret disclosure) “tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs.” | regulatory | 2026-07-08 |
| s15 | Israel Corporations Authority registry: Clutch Security Ltd (company 516887171) “מספר חברה: 516887171, שם באנגלית: CLUTCH SECURITY LTD, סטטוס חברה: פעילה, תאריך התאגדות: 07/11/2023” | regulatory | 2026-07-08 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Do not republish its content or share access without the operator's permission.