All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Founded in 2017, Obsidian Security sells large enterprises a platform that secures their third-party business apps and the AI agents in them. It flags risky app settings, detects account takeovers and blocks AI agent actions beyond their permissions. Its named customers include T-Mobile, General Motors, S&P Global, Snowflake and Figma. It reports 60 Fortune 500 customers and more than 14 customers paying it over $1 million a year. It has raised over $200 million, including an $85 million Series D led by Crescent Cove Advisors at a $1.1 billion valuation. KuppingerCole rates Obsidian an Overall Leader in SaaS security and AI governance. Microsoft, CrowdStrike and Okta share that rating and could bundle rival products into their existing contracts with Obsidian's buyers.
| Description | Obsidian Security sells a platform that secures third-party business applications and the AI agents working inside them, with visibility, governance, threat detection, and runtime controls over identities, integrations, and agents. | [f1] |
|---|---|---|
| Founded | 2017 | [f2] |
| HQ | Palo Alto, California, United States | [f3] |
| Funding | $200M total | [f4] |
| Latest funding | Series D ($85M, August 2026) | [f5] |
| Product | What it does |
|---|---|
| Obsidian Third-Party App Security | Secures third-party SaaS applications by fixing misconfigurations, scoring and removing risky app integrations, monitoring configuration drift, and detecting account takeover. |
| Obsidian AI Security | Discovers unsanctioned AI tools through a browser extension, blocks sensitive prompts before they leave the browser, and maps and governs the permissions of AI agents. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Obsidian Third-Party App Security detects account compromise and lets security teams investigate threats within and across SaaS applications. This SaaS security product defends conventional application, identity, and data assets and is mapped to the Cyber Defense Matrix. [f6]
AI Defense Matrix
| Govern | Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|---|
| AI-Workload Platforms Inference servers, training platforms, vector DB platforms, and the model-loading supply chain. | ||||||
| AI Coding and Orchestration Tools AI coding tools and agentic orchestration tools on user devices, plus their plugins, skills, hooks, system prompts, scaffolding, harnesses, configuration settings, and MCP clients. | ||||||
| AI-Generated Code Code produced by AI tools, AI-assisted reviews, AI-generated infrastructure-as-code and tests, and vibe-coded apps that bypass CI/CD. | ||||||
| AI Traffic Paths to external and self-hosted AI services, MCP tool channels, agent-to-agent calls, model-registry downloads, and egress to unapproved AI services. AI gateways, LLM routers, and MCP gateways steer traffic along those paths. The steering decisions and their inputs belong here too: routing policies, MCP server registries, and agent naming and discovery services. | ||||||
| AI Model Model weights, fine-tuning checkpoints, model cards, registries, an AI bill of materials (AIBOM), and the third-party LLMs your enterprise consumes. | ||||||
| Training Data Datasets used for training, fine-tuning, and continued learning. | ||||||
| Runtime AI Data User prompts, inference inputs, RAG content, vector DB content, persistent agent memory, and interaction history. | ||||||
| AI Agent Identities AI agents as non-human principals, plus credentials, keys, permission scopes, service accounts, and delegation chains across agents and tools. |
Obsidian AI Security inventories AI agents, MCP servers, and shadow AI tools across enterprise apps, enforces runtime guardrails on agent actions, and blocks sensitive data in AI prompts. It is mapped to the AI Defense Matrix. [f7]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 4/5 | Obsidian names security teams who need to see who accesses what across connected applications and to detect identity-based threats. KuppingerCole cites Cloud Security Alliance research that 56 percent of organizations report employees uploading sensitive data to unauthorized SaaS apps. MITRE ATT&CK documents APT29 using repeated MFA requests to gain access to victim accounts, an incident record with its own provenance. Research plus incident history meets rung 4. No source shows confirmation at a level close peers cannot reach, which rung 5 needs. [s6, s18, s19] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | Obsidian's product pages describe concrete mechanisms, including risk scores for each app integration, configuration-drift monitoring, browser-level discovery of unsanctioned AI tools, and runtime guardrails that block risky agent actions. The captured product pages carry no architecture or technical documentation. The KuppingerCole page shows a rating without its evaluation detail, so the depth is concrete on the vendor's own pages but not independently validated. [s3, s4, s5, s18] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | KuppingerCole's September 2026 compass estimates the market at about 8,000 to 9,000 customers and $700 million in revenue. It says demand is moving into early majority for SaaS security and accelerating for AI governance, an estimate from one analyst. The other demand evidence, such as 14 customers paying over $1 million a year, is the chief executive's own account relayed by SiliconANGLE. [s18, s14] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 4/5 | MITRE ATT&CK credits Obsidian Security as a contributor to two separate techniques, Multi-Factor Authentication Request Generation and Cloud Service Dashboard, both in cloud identity and application security. Those formal credits from an independent knowledge base meet rung 4 through community standing, multiply evidenced. Obsidian says its founders came from Carbon Black and Cylance, but no captured source names a product they built or an exit they led, and two credits fall short of the category-defining record rung 5 needs. [s19, s20, s13] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 4/5 | Obsidian's customers page names T-Mobile, Wyndham Hotels & Resorts, S&P Global and General Motors beside quotes from those customers. SiliconANGLE reported Snowflake and Figma as customers in 2022, so multiple named references are on the record. The scale figures, 60 Fortune 500 customers and more than 14 paying over $1 million a year, are the company's own. [s8, s15, s12, s14] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | Obsidian raised a $90 million Series C in April 2022, reaching $119.5 million in total. It raised an $85 million Series D in August 2026 at a $1.1 billion post-money valuation, after shipping an AI security line in 2025. Its Form D records $81,463,045 sold and declines to disclose revenue. The raises look proportional to enterprise sales and the 2025 AI security launch, while efficiency itself is unconfirmed. [s15, s13, s14, s17, s2, s12] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | KuppingerCole's 2026 Leadership Compass rates Obsidian an Overall Leader in SaaS security and AI governance, alongside CrowdStrike, Grip Security, Microsoft and Okta. SiliconANGLE's 2022 coverage describes it as alerting companies to configuration weaknesses in their cloud applications. Several vendors share the leader rating, and the analyst writes that SaaS security posture management is being subsumed into a broader market. Obsidian is a recognized leader rather than the definer of the category. [s18, s15, s14] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Obsidian says its Knowledge Graph correlates identity and activity data from SaaS apps, browsers and identity providers, and that it normalizes more than 29 billion third-party application events a month. A Wyndham testimonial says 60 to 70 percent of what the team acts on each day comes out of Obsidian. That is real friction to absorption. All of it comes through Obsidian's own pages, and KuppingerCole rates Microsoft and CrowdStrike Overall Leaders in the same market, so no structural moat beyond bundling is shown. [s6, s7, s8, s18] |
Obsidian addresses the risk that enterprise data now sits in third-party applications that security teams do not run. Its company page says enterprise data lives in Salesforce, Workday, ServiceNow and more than 35,000 other third-party apps, and its product page cites a 300% increase in monthly breaches of third-party apps, a figure the company itself supplies.
Obsidian argues that AI agents extend the same exposure. Its homepage says agents need access to third-party apps to do real work, and KuppingerCole's 2026 Leadership Compass describes SaaS applications, AI agents, OAuth integrations and non-human identities as one interconnected risk surface.
The analyst also sizes the buyer base. KuppingerCole estimates the market at about 8,000 to 9,000 customers and $700 million in revenue, with demand moving into early majority for SaaS security and accelerating for AI governance. [s2, s3, s1, s18]
Obsidian sells application and AI security on one platform. Obsidian's application security software fixes misconfigurations, scores the risk of each app integration, monitors configuration drift for compliance reporting, and detects account takeover. Obsidian AI Security discovers unsanctioned AI tools through a browser extension, blocks sensitive prompts before they leave the browser, and maps the permissions of each AI agent.
Obsidian's newest capabilities act on agents at runtime. Obsidian says its guardrails block privilege escalation and excessive data access before an agent action executes, and its August 2026 announcement described that enforcement for agents built with Microsoft Copilot and Anthropic Claude.
Beneath both products, Obsidian describes a knowledge graph that correlates identity and activity data from SaaS apps, browsers and identity providers. Its platform page reports more than 1.5 billion events processed a day. Obsidian describes these mechanisms on its own pages, and none of the captured sources evaluates them independently. [s3, s4, s5, s12, s6]
Obsidian competes in a market that KuppingerCole says is consolidating SaaS security and AI governance into one category. The analyst's September 2026 Leadership Compass rates Obsidian an Overall Leader, and it gives the same rating to CrowdStrike, Grip Security, Microsoft and Okta.
KuppingerCole's roster puts large platform vendors such as Microsoft and Okta beside specialists such as Grip Security, so a buyer evaluating Obsidian can pick an incumbent's product in the same evaluation.
Obsidian's answer is the AI agent line and a detection network it describes as shared across customers. KuppingerCole writes that SaaS security posture management is being subsumed by broader SaaS and AI governance capabilities, which is the direction Obsidian's 2025 and 2026 launches take. [s18, s7, s2]
Obsidian sells to large enterprises and names many of them. Obsidian quotes customers including T-Mobile, Wyndham Hotels & Resorts, S&P Global and General Motors on its customers page, and SiliconANGLE reported in 2022 that Snowflake and Figma relied on Obsidian.
The company's own figures describe scale. Its Series D announcement says 60 of the Fortune 500 use Obsidian, more than 100 customers spend over $100,000 a year, and more than 14 spend over $1 million. SiliconANGLE relays the spending figures in the chief executive's words.
Obsidian pairs enterprise sales with a free entry point. Its pricing page offers a free tier for up to 1,000 users, and the paid Foundations and Advanced tiers are sold by quote. [s8, s15, s12, s14, s11]
Obsidian's founding team came from Carbon Black and Cylance. Its 2022 funding announcement says industry experts from Carbon Black and Cylance, including Ben Johnson, Glenn Chisholm and Matt Wolff, founded it in 2017.
Hasan Imam leads the company as chief executive. Matt Wolff remains as co-founder and chief AI officer, and Glenn Chisholm sits on the board of directors while working as a partner at SYN Ventures.
Independent credit attaches to the company's research. MITRE ATT&CK, the public catalog of attacker techniques, lists Obsidian Security among the contributors to two attack technique entries. [s13, s2, s19, s20]
Obsidian publishes a broad set of third-party attestations. Its trust page lists SOC 2 Type 2, ISO 27001, ISO 27701 and IRAP attestations or certifications, and its trust center lists SOC 2, ISO/IEC 27001, ISO/IEC 27701, IRAP and ISO/IEC 42001:2023.
Obsidian's two trust pages give different status for one standard. The trust page still describes ISO 42001 as coming soon, while the trust center lists ISO/IEC 42001:2023 among its compliance documents, so Obsidian's own pages leave that certification's status unclear.
Obsidian offers regional hosting for data-residency needs. The trust page lists AWS regions in Oregon, Frankfurt and Sydney plus a data center in Saudi Arabia, and the trust center offers its SOC 2 report and penetration test report to visitors who request access. [s9, s10]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Grip Security | competes with | ||
| AppOmni | competes with | ||
| Adaptive Shield | competes with | ||
| CrowdStrike | competes with | KuppingerCole rates CrowdStrike's Falcon Shield an Overall Leader in the same SaaS security and AI governance compass as Obsidian. | |
| Microsoft | competes with | KuppingerCole rates Microsoft an Overall Leader in the same SaaS security and AI governance compass as Obsidian. | N/AMicrosoft is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product. |
| Okta | competes with | KuppingerCole rates Okta an Overall Leader in the same SaaS security and AI governance compass as Obsidian. | |
| Vorlon | competes with | ||
| Valence Security | competes with | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. |
Add analyzed competitors to compare them side by side with Obsidian Security.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
press the advantage
Obsidian gathers threat intelligence across its customers, an accumulated asset that a newcomer would need time and deployments to match. The company says more than 29 billion third-party application events a month, and over 500 breach responses it led, feed detections it shares across every customer environment. Its buyers are large regulated enterprises in financial services and telecommunications, and an IRAP assessment adds a hurdle for Australian government work. Microsoft, CrowdStrike and Okta sell products KuppingerCole rates as leaders in the same market, so buyers have leader- rated alternatives from larger vendors. Customers who leave must rebuild the integrations and workflows their teams built on Obsidian.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Obsidian sells software modules, from a free tier to quoted Foundations and Advanced tiers, that the customer's security team operates, and that team owns the outcomes. The delivered artifact is the software product. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | A Wyndham security leader says 60 to 70 percent of what his team acts on each day comes out of Obsidian. Leaving would mean rebuilding integrations and the workflows a security team built around the product. The cited record does not size the migration or show a network, residency or other mechanism that binds the customer. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 2/3 | Obsidian lists an IRAP attestation. IRAP is an independent assessment of a system's security against Australian government policies, which a replacement vendor would need to complete for buyers who require one. SOC 2 and the ISO marks are entry cost a funded rival can obtain. The hurdle applies to one segment and replacement stays feasible. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Obsidian processes more than 1.5 billion events a day and correlates them across more than 59 million mapped identities. It says self- learning models sharpen its detections and that it blocks AI agent actions before they execute, which is real-time systems work. MITRE ATT&CK credits Obsidian Security as a contributor to its attack- technique entries. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Obsidian's customers page names T-Mobile and S&P Global, and its company page claims 10 of the top 12 financial services firms. Its Series D announcement says 60 of the Fortune 500 use the product. Those buyers are regulated enterprises in telecommunications and financial services, though the counts are the company's own. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 | The captured pages describe Obsidian's core work, discovering apps and agents, scoring integrations and detecting threats, as monitoring and governance. Its newer runtime guardrails and browser prompt blocking act on agent actions and prompts. No captured source shows a customer routing real agent traffic through them, so Obsidian is a platform with some application features. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 2/3 | Obsidian says more than 29 billion third-party application events a month, and its work on over 500 breach responses, feed detections that it shares across every customer environment it protects. That names a retained, cross-customer intelligence asset that accrues to Obsidian and is not shown public. The evidence is the vendor's own, and a funded rival could accumulate comparable signals with time, so the asset is replicable with time and effort. |
Obsidian sells to large enterprises whose data sits in third-party applications. Its company page says Obsidian serves 10 of the top 12 financial services firms, its Series D announcement says 60 of the Fortune 500 use it, and its customers page names T-Mobile, S&P Global, General Motors and Wyndham Hotels & Resorts.
The buyer is the security team that has to govern applications and AI agents it did not build. KuppingerCole's 2026 Leadership Compass describes those applications, agents and OAuth integrations as one interconnected risk surface, and it estimates the market at about 8,000 to 9,000 customers.
Obsidian also offers a free tier below the enterprise deal. The pricing page offers the free tier for up to 1,000 users, while the larger tiers are sold by quote.
Obsidian sells application and AI security on one platform. Obsidian's application security software scores the risk of each app integration, monitors configuration drift, and detects account takeover. Obsidian AI Security discovers unsanctioned AI tools through a browser extension, blocks sensitive prompts before they leave the browser, and maps what each AI agent can access.
The newest capabilities act on agents as they work. Obsidian says its runtime guardrails block privilege escalation and excessive data access before an agent action executes, and its August 2026 announcement described guardrails for agents built with Microsoft Copilot and Anthropic Claude.
Obsidian builds both products on shared data. It describes a knowledge graph that correlates identity and activity data from SaaS apps, browsers and identity providers, and it says more than 29 billion third-party application events a month feed its detections.
Obsidian sells to large enterprises and backs the motion with named customer voices. It publishes customer quotes from T-Mobile, Wyndham Hotels & Resorts, S&P Global and General Motors, and it lists customer stories about T-Mobile and other accounts.
The company reports growth in large accounts. Its Series D announcement says more than 100 customers spend over $100,000 a year and more than 14 spend over $1 million, figures the chief executive repeated to SiliconANGLE.
Obsidian pairs its launches with customer endorsements and new agent coverage. The Series D announcement extended Obsidian's agent controls to Anthropic's Claude Code and Cowork agents, and coverage of the supply chain launch quoted Seagate's chief information officer.
Obsidian prices in modules with a free starting tier. The pricing page offers a free tier for up to 1,000 users that discovers unsanctioned AI and shadow SaaS, and it sells Foundations and Advanced tiers by quote.
Under this structure a buyer can start with discovery before paying for governance, detection and runtime controls. Obsidian sells those later capabilities, including runtime guardrails and incident response features, in the paid tiers.
Obsidian publishes no paid price or metering unit on that page. A buyer can try discovery at no cost, and the committed enterprise spend stays behind a quote.
Obsidian delivers a hosted service with regional data placement. Its trust page lists AWS regions in Oregon, Frankfurt and Sydney and a data center in Saudi Arabia, and it reports 99.99% historical availability over 12 months.
Customers onboard by connecting applications and rolling out a browser extension. The platform page says customers can connect and see every user, app and AI connection in hours, and the AI Security product relies on the extension for browser-level discovery.
Obsidian operates the service itself. By its own count it processes more than 1.5 billion events a day and draws on more than 200 enterprise application integrations.
Obsidian publishes a broad set of third-party attestations. Its trust page lists SOC 2 Type 2, ISO 27001, ISO 27701 and IRAP attestations or certifications, and its trust center lists SOC 2, ISO/IEC 27001, ISO/IEC 27701, IRAP and ISO/IEC 42001:2023.
Obsidian's two trust pages give different status for ISO 42001. The trust page still calls it coming soon, while the trust center lists ISO/IEC 42001:2023 among its compliance documents, so Obsidian's own pages leave that certification's status unclear.
IRAP matters to one buyer segment. Microsoft's compliance documentation describes IRAP as an independent assessment of a system's security against Australian government policies, so the attestation is relevant to Australian public-sector buyers. No captured source names an Australian government customer.
Obsidian presents one platform whose products share a data foundation. Its platform page says a knowledge graph correlates identity and activity data from SaaS apps, browsers and identity providers, and that this context covers both SaaS and generative AI tools.
The integration surface is the enterprise application estate. Obsidian names Salesforce, Workday and ServiceNow among the apps where enterprise data lives, and its network effects page describes signals shared across every customer environment it protects.
Obsidian competes as a platform against larger platforms. KuppingerCole rates it an Overall Leader in a market where Microsoft, CrowdStrike and Okta hold the same rating.
Obsidian's founders came from endpoint security companies. Its 2022 funding announcement says industry experts from Carbon Black and Cylance, including Ben Johnson, Glenn Chisholm and Matt Wolff, founded it in 2017.
Hasan Imam leads the company as chief executive, with co-founder Matt Wolff as chief AI officer. Glenn Chisholm sits on the board of directors with partners from Greylock and Menlo Ventures.
The company's research carries independent credit. MITRE ATT&CK, the public catalog of attacker techniques, lists Obsidian Security among the contributors to two attack technique entries.
Obsidian added capital in 2026. It raised an $85 million Series D at a $1.1 billion post-money valuation, and its Form D records 22 investors in the offering.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | https://www.obsidiansecurity.com/ | official | 2026-10-03 |
| f2 | https://www.obsidiansecurity.com/news/obsidian-security-raises-90-million-series-c-round | official | 2026-10-03 |
| f3 | SEC EDGAR: Obsidian Security, Inc. Form D notice of exempt offering | regulatory | 2026-10-03 |
| f4 | Unite.AI: Obsidian Security Raises $85 Million Series D at $1.1 Billion Valuation | press | 2026-10-03 |
| f5 | SiliconANGLE: Obsidian Security raises $85M as AI agents create cybersecurity's next major attack surface | press | 2026-10-03 |
| f6 | MSSP Alert: SaaS Security and Posture Management Company Obsidian Security Raises $90M | press | 2026-06-24 |
| f7 | AI Defense Matrix Catalog mapping | other | 2026-10-03 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.