Obsidian Security

Cloud SecurityIdentity AccessDetection Response also known as Obsidian Security, Inc.

Market readinessHow well the company can compete in its security market, scored across eight dimensions against public evidence. Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
DefensibilityHow well the company holds its position if competitors catch up on features, scored across seven dimensions against public evidence. Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure.
Founded 2017
Funding $119.5M
Last updated 2026-07-08

All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.

Executive Summary

Obsidian helped define SaaS security posture management, but that category position is the copyable part of its business. Its harder-to-match asset is the threat intelligence it accumulates defending large SaaS estates, now extended across integrations and AI agents through a shared knowledge graph. New this cycle: real attestations (SOC 2 Type 2, ISO 27001, ISO 27701, IRAP), an AI-agent governance line, and a modular free-tier motion that opens a lighter path in beside enterprise sales. The unresolved question is whether that network compounds faster than the identity, cloud, and posture platforms next to the same buyer can fold SaaS and AI discovery into a bundle, with no funding disclosed since the 2022 Series C to fuel the race.

Sourced Details

Description Obsidian Security runs a platform for SaaS security posture management and AI security, giving enterprises visibility, threat detection, and governance across their SaaS applications, identities, data, and AI agents. [f1]
Founded 2017 [f2]
HQ Palo Alto, California, United States [f3]
Funding $119.5M total [f4]
Latest funding Series C ($90M, April 2022) [f4]

Products

Product What it does
Obsidian SSPM SaaS security posture management that discovers SaaS apps and the identities using them, detects account compromise and insider threats across and within apps, and flags misconfigurations.
Obsidian AI Security AI security that discovers shadow AI tools through browser-level visibility, monitors data shared with GenAI prompts, and governs autonomous AI agents acting through OAuth tokens and API keys.

Matrix Coverage

Cyber Defense Matrix

IdentifyProtectDetectRespondRecover
Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware.
Applications Software, interactions, and application flows on the devices.
Networks Connections and traffic flowing among devices and apps, plus communication paths.
Data Content at rest, in transit, or in use across devices, apps, and networks.
Users The people using the devices, apps, networks, and data.

Obsidian SSPM discovers SaaS applications and the identities using them, detects account compromise and insider threats, and flags misconfigurations for remediation. This SaaS posture product defends conventional application, identity, and data assets and is mapped to the Cyber Defense Matrix. [f5]

Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

Established 25 /40 Established: Market readiness of 25 to 30, the typical band where most analyzed companies land.
Dimension Score
Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. 3/5
Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs, demos, and third-party validation. 3/5
Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. 3/5
Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. 4/5
GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. 4/5
Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. 2/5
Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. 4/5
Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. 2/5

Unlock the Full Analysis

The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.

One-time purchase: $20 per profile.

Unlock

Reading several? Unlock the entire catalog.

Business Risks
Problem & Market
Product Capabilities
Competitive Positioning
Go-to-Market & Traction
Team & Credibility
Trust Readiness
Competitors

Strategy Deep Dive

A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.

Defensibility

Contested 14 /21 Contested: Defensibility of 13 to 14, the typical band, where a moat exists but is under pressure. reinforce or reposition

Dimension Score
Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. 1/3
Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. 2/3
Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. 2/3
Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. 2/3
Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. 3/3
Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. 2/3
Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. 2/3

Unlock the Full Analysis

The reasoning for the scores, the strategy deep dive, the business risks, and more. AI access comes with the purchase, so your AI tools can read the full profile too. You keep 12 months of access.

One-time purchase: $20 per profile.

Unlock

Reading several? Unlock the entire catalog.

Strategic Market Segmentation
Product Capabilities & AI Advantages
Sales Engagement & Go-to-Market
Pricing Model
Product Delivery & Operations
Earning Customers' Trust
Platform Strategy & Ecosystem Positioning
Team & Execution Capability

Sources

Company Detail Sources (5)
Id Source Tier Accessed
f1 https://www.obsidiansecurity.com/company official 2026-06-24
f2 https://www.obsidiansecurity.com/news/obsidian-security-raises-90-million-series-c-round official 2026-06-24
f3 https://obsidiansecurity.com/ official 2026-06-24
f4 The SaaS News: Obsidian Security Raises $90 Million in Series C press 2026-06-24
f5 MSSP Alert: SaaS Security and Posture Management Company Obsidian Security Raises $90M press 2026-06-24
Profile Analysis Sources (13)
Id Source Tier Accessed
s1 Obsidian Security: End-to-End AI and SaaS Security for Enterprises official 2026-06-24
s2 Obsidian Security: Who We Are official 2026-06-24
s3 Obsidian Security: AI Security Across the Enterprise
“With the Obsidian browser extension, we’ve got a lot of insight of how users are interacting with things like generative AI SaaS solutions out there, potentially going after what documents may be being uploaded.”
official 2026-07-02
s4 Obsidian Security Raises $90 Million Series C Round to Cement its Leadership in SaaS Security official 2026-06-24
s5 MSSP Alert: SaaS Security and Posture Management Company Obsidian Security Raises $90M press 2026-06-24
s6 The SaaS News: Obsidian Security Raises $90 Million in Series C
“Founded in 2017 by industry experts from Carbon Black and Cylance including Ben Johnson, Glenn Chisholm, and Matt Wolff.”
press 2026-06-24
s7 SiliconANGLE: Obsidian Security raises $90M to secure companies' software-as-a-service applications
“Overall, the company has raised $119.5 million since launching in 2017.”
press 2026-07-02
s8 Help Net Security: Obsidian Security raises $90 million to help businesses reduce SaaS security risk
“A leader in the SaaS Security Posture Management (SSPM) category coined by Gartner, Obsidian was founded in 2017”
press 2026-06-30
s9 Help Net Security: Obsidian Security unveils end-to-end SaaS supply chain security to stop integration-led breaches
“Obsidian Security is launching a new solution that secures the SaaS supply chain across its full lifecycle, bringing together integration risk visibility, proactive prevention, early breach detection and impact forensics, all in a single, unified platform.”
press 2026-07-02
s10 Obsidian Security: Enterprise Readiness and SaaS Security
“Supports key compliance frameworks in-product, backed by SOC 2 Type 2, ISO 27001, ISO 27701, and IRAP attestations or certifications. ISO 42001 coming soon.”
official 2026-07-08
s11 Obsidian Security Trust Center (SafeBase)
“Use this Trust Center to learn about our security posture and request access to our security documentation.”
official 2026-07-08
s12 Obsidian Security: Flexible SaaS Security Pricing
“Start free. Expand into the modules your team needs, across AI and SaaS security. No bloated bundles.”
official 2026-07-08
s13 Obsidian Security: Who We Are
“Hasan Imam Chief Executive Officer”
official 2026-07-08
Deep-Dive Sources (11)
Id Source Tier Accessed
s1 Obsidian Security: End-to-End AI and SaaS Security for Enterprises
“The threat signals we surface defending them reach every customer in our network before they become incidents.”
official 2026-07-08
s2 Obsidian Security: Who We Are
“Be the trust layer for enterprise AI adoption”
official 2026-07-08
s3 Obsidian Security: SaaS Security Posture Management
“Reduce risky integrations, detect third-party threats early, and contain the blast radius before a vendor breach becomes your breach.”
official 2026-07-08
s4 Obsidian Security: AI Security Across the Enterprise
“Enforce least privilege across every AI agent and human identity by continuously assessing and right-sizing the permissions agents actually need versus what they hold.”
official 2026-07-08
s5 Obsidian Security: Enterprise Readiness and SaaS Security
“Supports key compliance frameworks in-product, backed by SOC 2 Type 2, ISO 27001, ISO 27701, and IRAP attestations or certifications. ISO 42001 coming soon.”
official 2026-07-08
s6 Obsidian Security: Flexible SaaS Security Pricing
“Start free. Expand into the modules your team needs, across AI and SaaS security. No bloated bundles.”
official 2026-07-08
s7 Obsidian Security Raises $90 Million Series C Round official 2026-07-08
s8 The SaaS News: Obsidian Security Raises $90 Million in Series C
“Founded in 2017 by industry experts from Carbon Black and Cylance including Ben Johnson, Glenn Chisholm, and Matt Wolff.”
press 2026-07-08
s9 SiliconANGLE: Obsidian Security raises $90M to secure companies' software-as-a-service applications
“Snowflake Inc. and Figma Inc., the interface design startup valued at $10 billion, are among the companies that rely on Obsidian to protect their SaaS environments.”
press 2026-07-08
s10 MSSP Alert: SaaS Security and Posture Management Company Obsidian Security Raises $90M
“Organizations use Obsidian's platform to secure more than 4 million unique accounts around the world. Furthermore, Obsidian provides a partner program that lets MSSPs, MSPs and VARs integrate its platform into their offerings.”
press 2026-07-08
s11 Help Net Security: Obsidian Security unveils end-to-end SaaS supply chain security
“Powered by the Obsidian Knowledge Graph and threat intelligence drawn from proprietary research and real-world incident response across our customer base, Obsidian extends its network effects to SaaS integrations”
press 2026-07-08

Disclaimer

This content is provided "as is" with no warranties.

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Do not republish its content or share access without the operator's permission.