Silverfort

• Silverfort's April 2026 announcement targeted the second half of 2026 for most of the capabilities the Fabrix purchase is meant to bring, and the reviewed sources record no delivery against that schedule.
• The customer and revenue figures in the public record originate with Silverfort, and the growth rates among them were last published in November 2024, so a reader has no independent way to check current traction.
• Microsoft holds an Overall Leader placement in KuppingerCole's 2025 evaluation and makes the directory products Silverfort enforces on top of, which puts the coverage gap Silverfort sells against inside Microsoft's own reach.
• The product enforces on top of identity infrastructure Silverfort does not control, so a change to how Active Directory or Entra ID handles authentication can force re-engineering on someone else's timetable.
• Silverfort has absorbed two companies within eighteen months, and the reviewed record shows no independent assessment of how completely the Rezonate technology was integrated on the mid-2025 schedule the company published.

Enterprises run authentication through several systems at once, and the controls each system offers stop at its own edge. Active Directory authenticates domain logins, a cloud identity provider handles modern applications, and between them sit legacy applications, homegrown systems, command-line tools and OT infrastructure that ordinary multi-factor authentication cannot reach.

The gap is well documented by parties other than Silverfort. KuppingerCole reports that identity misuse has become the predominant mode of intrusion, with over 80% of data breaches linked to it, and that non-human identities such as service accounts and API keys widen the problem further.

What the analyst record does not establish is that this particular coverage gap, rather than identity security generally, is what enterprises are budgeting against. The pain Silverfort names is real and widely attested; its specificity to Silverfort's slice of it rests on the company's own framing. [s6, s7, s18]

Silverfort's mechanism is placement. Its Runtime Access Protection technology sits in the authentication path alongside existing identity infrastructure rather than replacing it, which is how a control can reach a system the vendor never integrated with. Universal MFA extends multi-factor authentication to legacy applications, homegrown systems, command-line tools, OT infrastructure and local Windows logins without modifying them.

The platform sells as four packages, each carrying the runtime engine and an identity inventory, with detection, privileged access and access analytics added at higher tiers. Non-Human Identity Security discovers service accounts, baselines how they behave and fences their activity. AI Agent Security discovers agents, ties each to a human owner and controls agent actions before they execute.

Silverfort bought capabilities as well as building them. It announced the Rezonate acquisition in November 2024 and scheduled the combined cloud identity offering for mid-2025, and the reviewed sources do not record whether that date held. Fabrix Security followed in April 2026, bringing an authorization engine whose joint capabilities the announcement targeted for the second half of 2026. [s1, s5, s6, s7, s8, s10, s11]

KuppingerCole's 2025 evaluation of the identity threat detection market rates Silverfort a Product/Innovation Leader and names seven others Overall Leaders: BeyondTrust, CrowdStrike, CyberArk, Delinea, Microsoft, Okta and Saviynt. That is a placement to read closely, because Microsoft makes the directory products Silverfort's own announcement says it enforces on top of.

The architectural argument cuts both ways. Silverfort enforces controls on top of identity infrastructure from several vendors at once, so it sells into a budget its own dependencies also compete for. In April 2026 it announced a strategic alliance with SentinelOne. [s4, s11, s18]

The named-customer evidence is solid. Silverfort's trust portal names Agoda, Payoneer, Kayak, UPS, Singtel and Airbus among the organizations that trust it, and IT and security leaders at Kayak, Singtel and Womble Bond Dickinson are quoted by name on the company's site.

The scale figures are weaker than they look, because Silverfort is the source of all of them. TechCrunch reported in January 2024 that the company was signing customers at 100 per quarter with revenue growing 100% annually and recurring revenue in the tens of millions, and SecurityWeek reported hundreds of new enterprise customers the same week, both attributing the numbers to the company. Silverfort restated the same quarterly and revenue figures in its November 2024 acquisition announcement, and the 1,000-plus customer count it cites today appears only on its own pages.

An independent record of a different kind exists: a Coller secondaries fund's SEC filing lists Silverfort, Inc. among its equity holdings, at 159,276 shares. That records a holding under the Silverfort name and nothing about commercial scale. [s1, s9, s10, s11, s12, s13, s17]

The founding team is identifiable and two of the three still hold operating titles. Globes names Hed Kovetz, Yaron Kassner and Matan Fattal as the 2016 founders, all previously in the Israel Defense Forces' 8200 unit, and the company page lists Kovetz as chief executive, Kassner as chief technology officer and Fattal as a co-founder. Kovetz came from product leadership at Verint and Fattal from Intucell, which Cisco acquired.

The commercial bench was hired for scale. Howard Greenfield joined as president in June 2025 from the venture firm Canaan, after earlier revenue leadership at Centrify, now Delinea, and at SailPoint, both of them identity vendors.

What the record does not show is a prior identity-security exit among the founders. Their claim to domain standing is this company: a decade of building it, and an analyst evaluation that rates the product against the biggest vendors in the market. [s3, s15, s18]

Silverfort publishes a SafeBase trust center listing SOC 2, ISO/IEC 27001:2022, GDPR, CCPA, CPRA, the EU-US Data Privacy Framework, Microsoft SSPA and NIST Cybersecurity Framework alignment, with a document library covering penetration test reports, architecture diagrams and a shared responsibility model behind an access request.

The security posture of the product itself gets unusual attention on that portal, which matters for a product that sits in the authentication path. Silverfort states that its platform does not extract passwords, hashes, session keys or other secrets from Active Directory, and that the core can run on-premises as a hardened virtual appliance.

No federal authorization appears in the reviewed sources. For a vendor selling to global enterprises across finance, manufacturing and retail that is an ordinary posture, and what it does hold, a SOC 2 report, an ISO 27001 certification and privacy-framework alignments, is the baseline set enterprise buyers expect. [s9, s12]

Add analyzed competitors to compare them side by side with Silverfort.

Silverfort's coverage argument addresses enterprises that run more than one identity system and still depend on older ones. Its trust portal names UPS, Airbus, Singtel, Agoda, Payoneer and Kayak among the organizations that trust it, and Silverfort told SecurityWeek at the Series D that its customer additions came from global financial services, manufacturing and retail.

The segment is defined by a constraint rather than an industry. KuppingerCole describes organizations facing fragmented identity management ecosystems built from separate tools for privileged access, governance and monitoring, which is the shape of estate Silverfort's coverage argument addresses. The coverage half of that argument speaks loudest to buyers who still run the older systems.

The packaging lets a buyer enter at a smaller commitment. The Core package carries posture management and multi-factor authentication, while enforcement capabilities such as the authentication firewall and threat detection sit in higher tiers.

The core mechanism is inline placement rather than an agent. Silverfort describes Runtime Access Protection as integrating with existing identity infrastructure and enforcing before the authentication completes, and Help Net Security in 2022 described the same approach as requiring no modification to endpoints, servers or applications. That is what lets Universal MFA reach legacy applications, command-line tools, OT systems and local Windows logins.

The newer capabilities extend the same placement to non-human and agent access. Non-Human Identity Security discovers service accounts, establishes behavioral baselines and fences their activity, and AI Agent Security discovers agents, binds each to a human owner and controls agent actions before they execute.

The artificial-intelligence claims deserve separating into what ships and what is announced. AI Agent Security is a capability inside the Plus package on the pricing page. The runtime authorization engine, in which each request is evaluated against a knowledge graph with artificial intelligence in the loop when needed, comes from the Fabrix purchase, and Silverfort dated most of those joint capabilities to the second half of 2026, a window the reviewed sources do not report against.

The motion is quote-led enterprise selling, with a channel the company set out to expand. SecurityWeek reported in January 2024 that the Series D capital would go toward product modules and channel go-to-market partnerships, and the company today runs a partner network with a portal, channel partners and a cyber-insurance partner program.

A hired executive now leads the go-to-market organization. Howard Greenfield joined as president in June 2025 from the venture firm Canaan, after earlier revenue leadership at Centrify, now Delinea, and at SailPoint, and the company page says he leads its go-to-market strategy and execution and oversees sales and marketing.

Public proof of demand is a mix of strong names and old numbers. The names on the trust portal are current and checkable, while the growth figures reported by TechCrunch and SecurityWeek in January 2024 came from the company, which restated the same quarterly and revenue figures in its November 2024 acquisition announcement. The reviewed sources carry no newer growth rate, though Silverfort's own pages now count more than a thousand organizations.

Silverfort publishes its packaging but not its prices. Four packages named Core, Plus, Advanced and Enterprise stack capabilities, each including the runtime engine and an identity inventory, and the route forward on the page is a quote request. A la carte purchase of individual capabilities is offered as an alternative.

The stated unit is organization size rather than seats, assets or events. That choice fits a control meant to cover everything, since a per-resource price would penalize the coverage the product is sold on, and it also means a buyer cannot estimate cost from the site.

Support is tiered on top, with a standard level included, a premier level at ten percent of license cost and a diamond level at twenty percent. Silverfort publishes no license figure at all, so a buyer reaches a number only through a sales conversation.

Deployment is designed to avoid touching protected systems. Silverfort states that the core of its platform can be delivered on-premises as a hardened virtual appliance and that it integrates with Active Directory by installing an adapter, and its MFA capability page repeats that no agents or application changes are required.

The company makes a speed claim about rollout, saying customers achieve identity security across the organization within days, which appears in its own acquisition announcement and is not independently corroborated in the reviewed sources.

The operational risk of the design is the flip side of its reach. A control that decides inside authentication has to be available whenever logins happen, and the reviewed sources do not describe what the product does when it cannot reach its own decision path.

The trust surface is real and reasonably complete. A SafeBase portal at trust.silverfort.com lists SOC 2, ISO/IEC 27001:2022, GDPR, CCPA, CPRA, the EU-US Data Privacy Framework, Microsoft SSPA and NIST Cybersecurity Framework alignment, with penetration test reports, architecture diagrams, a shared responsibility model and CISO attestations behind an access request.

For a product inside the authentication path, the more interesting disclosure is architectural. Silverfort states that it does not extract passwords, hashes, session keys or other secrets from Active Directory, so, by the company's own account, a compromise of the appliance would not hand over directory secrets. The sub-processor list names Amazon Web Services, Microsoft Azure, Snowflake, Coralogix and Firebase.

No federal authorization appears in the reviewed sources, which leaves United States government buyers outside what the record shows the company can serve.

Silverfort's platform strategy is to attach to identity systems rather than replace them, and the Rezonate announcement lists Active Directory, Entra ID and other identity and access management products as the infrastructure it enforces on top of. Microsoft is therefore both a dependency and a rival.

The partner answer to that tension is visible in the newsroom. April 2026 brought a strategic alliance with SentinelOne, and June 2026 an integration placing agent identity controls into Microsoft Copilot Studio, both of which extend reach without asking the buyer to leave an existing stack.

The dependency is genuine and worth naming plainly. Silverfort's controls work by enforcing on top of identity infrastructure that Microsoft makes, and Microsoft holds an Overall Leader placement in the same analyst evaluation that rates Silverfort a Product and Innovation Leader.

Two of the three founders hold operating titles a decade in. Globes names Hed Kovetz, Yaron Kassner and Matan Fattal as the 2016 founders, all alumni of the Israel Defense Forces' 8200 unit, and the company page lists Kovetz as chief executive, Kassner as chief technology officer and Fattal as a co-founder. Kovetz came from product leadership at Verint, Kassner worked on machine learning at Microsoft and Cisco, and Fattal built real-time systems at Intucell before Cisco acquired it.

Hiring has been aimed at scale, and one purchase added a team as well as technology. The president joined in 2025 with earlier revenue leadership at two identity vendors, and Calcalist reported that fourteen Fabrix employees would join Silverfort, a group whose leaders came from Run:ai, Orca Security and Microsoft Entra.

The gap in the record is a prior exit in this domain among the founders. They can point to this company and to an analyst evaluation that rates its product in the same market as Microsoft, CrowdStrike and CyberArk.