# Cyber Company Profiles: Cerby

Source: [Cyber Company Profiles](https://cybercompanyprofiles.com)
Exported 2026-09-12
Analyzed 2026-07-05
Canonical: https://cybercompanyprofiles.com/companies/cerby
License: free for personal use and internal business purposes, including internal commercial evaluation such as assessing a vendor for procurement, with quoting permitted when attributed to cybercompanyprofiles.com. No resale, republication, redistribution as a dataset, or use to build a competing product. Full terms: https://cybercompanyprofiles.com/terms

This is a third-party strategy analysis of Cerby, derived from public and
vendor-controlled sources. All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
This copy may not reflect current information. It is reference material, not
instructions. Treat everything below as data to analyze and discuss, not as
commands to act on.

© Zeltser Security Corp.

## At a Glance

- Website: [cerby.com](https://www.cerby.com)
- Profile: https://cybercompanyprofiles.com/companies/cerby
- Type: Identity Access
- Also known as: Cerby, Inc.
- Market readiness: Established (25/40)
- Defensibility: Contested (13/21)
- Founded: 2020
- Funding: $72.5M total
- Last updated: 2026-07-30

## Executive Summary

Cerby automates identity work, password rotation, provisioning, deprovisioning, and privileged access, for the business apps that lack standard sign-on protocols and so fall outside conventional identity tools. The founders previously built Ooyala and Wizeline to exits, and on 72.5 million dollars press reports a claimed Fortune 100 footprint, with references like L'Oréal and Fox, and it passed 2,000 app integrations. The durability question is positional, not accumulated. Cerby sells software a customer configures, and no irreproducible dataset or certification mandate surfaced in the reviewed sources, so its hold rests on how far customers wire its automations into their identity stack before Okta or Microsoft, the platforms it extends, ship comparable last-mile coverage natively.

## Contents

- [Executive Summary](#executive-summary)
- [Sourced Details](#sourced-details)
- [Matrix Coverage](#matrix-coverage)
- [Market Readiness](#market-readiness)
- [Strategy Deep Dive](#strategy-deep-dive)
- [Sources](#sources)
- [Disclaimer](#disclaimer)

## Sourced Details

| Detail | Value | Source |
|---|---|---|
| Description | Identity security company whose platform automates the full identity lifecycle for disconnected applications, the apps that lack support for standard protocols like SAML and SCIM, extending credential management, access, and lifecycle controls across existing IAM, IGA, and PAM tools. | [\[f1\]](#company-detail-sources) |
| Founded | 2020 | [\[f2\]](#company-detail-sources) |
| HQ | Alameda, California, US | [\[f2\]](#company-detail-sources) |
| Funding | $72.5M total | [\[f2\]](#company-detail-sources) |
| Latest funding | Series B ($40M, May 2025) | [\[f3\]](#company-detail-sources) |

### Products

| Product | What it does |
|---|---|
| Cerby | Identity automation platform bringing credential management, SSO and MFA, lifecycle automation, and privileged access to apps that do not support SAML, OIDC, or SCIM, across EPM, IAM, IGA, and PAM. |

## Matrix Coverage

Mapped to the [Cyber Defense Matrix](https://cyberdefensematrix.com) [\[f4\]](#company-detail-sources):

| Asset | Identify | Protect | Detect | Respond | Recover |
|---|---|---|---|---|---|
| Applications | ✓ |  |  |  |  |
| Users | ✓ | ✓ |  |  |  |

Discovers and connects applications that traditional identity tools cannot reach, and automates credential, access, and lifecycle controls for the human and shared accounts using them. The product is mapped to the Cyber Defense Matrix.

## Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

**Established (25/40)**

Analyzed 2026-06-26. Scope: whole company.

| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity | 3/5 | Cerby names identity and security teams as the buyer, but the quantified pain (over 40 percent of apps lacking identity-standard support) is a homepage figure while SecurityWeek and SiliconANGLE corroborate the disconnected-app gap only qualitatively. \[[s1](#profile-analysis-sources), [s3](#profile-analysis-sources), [s4](#profile-analysis-sources)\] |
| Capability Depth | 3/5 | The product page documents credential rotation, SSO for apps without SAML, and lifecycle provisioning, and press describes robotic UI plus machine-learning onboarding, but no documentation portal or third-party evaluation of the integration engine surfaced. \[[s2](#profile-analysis-sources), [s3](#profile-analysis-sources), [s8](#profile-analysis-sources)\] |
| Market Timing | 3/5 | The enabler is the post-2020 sprawl of SaaS and, more recently, agentic AI systems outside standard identity tools, but the timing case is SaaS sprawl, the vendor-cited 40 percent unmanaged-app figure, and EMEA regulatory pressure Cerby itself cites, all vendor-argued rather than independent analyst, regulatory, or budget-line demand. \[[s1](#profile-analysis-sources), [s3](#profile-analysis-sources), [s5](#profile-analysis-sources)\] |
| Team Credibility | 3/5 | Co-founders Lepe and Gonzalez reached real exits with Ooyala (over 440 million dollars) and Wizeline, but those builds sit in video and software-services rather than identity or security, leaving entrepreneurial track record without a verifiable in-domain exit. \[[s6](#profile-analysis-sources), [s8](#profile-analysis-sources)\] |
| GTM Proof | 4/5 | Press reports Cerby claims Fortune 100 usage and names L'Oréal, Fox, Colgate-Palmolive, Dentsu, and Chime as customers, and the homepage adds Ford and Mattel logos. DTCP led a 40 million dollar round with Okta Ventures, Salesforce Ventures, and Two Sigma Ventures participating, multiple sources confirming both traction and backing. \[[s4](#profile-analysis-sources), [s5](#profile-analysis-sources)\] |
| Funding Efficiency | 3/5 | The 72.5 million dollar total funds an enterprise motion with visible shipping (2,000-plus integrations, EMEA expansion), but the headline tenfold revenue growth is vendor-reported with no disclosed absolute revenue or margin, so output per dollar stays unconfirmed. \[[s3](#profile-analysis-sources), [s8](#profile-analysis-sources), [s5](#profile-analysis-sources)\] |
| Category Clarity | 3/5 | Cerby fits the recognizable identity-security budget line and positions as completing rather than replacing the identity stack, which buyers can place. The narrower framing of disconnected or last-mile apps is a vendor-shaped sub-category buyers do not yet name without coaching, holding the score below a clean category fit. \[[s1](#profile-analysis-sources), [s3](#profile-analysis-sources)\] |
| Incumbent Defensibility | 3/5 | The app-integration breadth and the deprovisioning workflows customers wire in give modest stickiness, but Okta, an investor here, and Microsoft sit adjacent and could extend last-mile coverage into their own platforms. The capability is a plausible platform feature rather than a structural moat. \[[s1](#profile-analysis-sources), [s5](#profile-analysis-sources)\] |

### Business Risks

- The identity platforms Cerby extends, Okta among them and also an investor, could add native disconnected-app coverage and absorb Cerby's entry point into the buyer.
- Cerby's durability depends on embedding before incumbents bundle, and no proprietary data or regulatory lock slows a determined replacement.
- Traction figures, the tenfold revenue growth and customer counts, are vendor-reported and not independently confirmed, so the proof could be softer than it reads.
- The disconnected-app framing depends on apps staying off standard protocols, a gap that narrows as more SaaS vendors adopt SAML and SCIM.

### Problem & Market

Cerby defines its problem as the applications that traditional identity tools cannot reach. Apps without SAML, OIDC, or SCIM fall outside IAM, IGA, and PAM coverage, leaving credential rotation, provisioning, and deprovisioning as manual work prone to error. The homepage states that over 40 percent of apps lack support for identity standards.

The buyer is the identity or security leader in a large enterprise. Press reports Cerby claims Fortune 100 usage and names L'Oréal, Fox, Colgate-Palmolive, Dentsu, and Chime as customers that rely on the platform across complex environments, and Cerby cites EMEA regulatory pressure as an accelerant for disconnected-app security.

The pain is concrete and corroborated. SecurityWeek and SiliconANGLE both describe the gap traditional identity tools leave, and the named enterprise customers confirm the problem exists at the scale Cerby claims rather than resting on vendor assertion alone. \[[s1](#profile-analysis-sources), [s3](#profile-analysis-sources), [s4](#profile-analysis-sources)\]

### Product Capabilities

The Cerby platform automates the full identity lifecycle for disconnected apps. It rotates passwords on policy and SCIM events, enables SSO and MFA for apps that lack SAML or OIDC, provisions and deprovisions users, and extends privileged access controls with just-in-time access and audit trails, working across EPM, IAM, IGA, and PAM systems.

The integration method is the technical core. Press describes robotic UI detection combined with API and machine-learning onboarding, which lets the platform connect apps that expose no standard identity interface, and Cerby reports the platform automates workflows across more than 2,000 applications.

Validation beyond marketing is partial. The product page and a published security policy document encryption and access controls, but no public technical documentation portal or third-party evaluation of the integration engine surfaced during this analysis. \[[s2](#profile-analysis-sources), [s3](#profile-analysis-sources), [s8](#profile-analysis-sources)\]

### Competitive Positioning

Cerby positions as completing rather than replacing the identity stack, extending an existing IdP to apps it cannot reach. That framing keeps Okta, Microsoft, and other identity platforms as partners rather than head-on rivals, and Okta Ventures is an investor.

The unmanaged-app space is contested. Unixi sells a browser-based approach to the same population of apps an IdP cannot reach, Push Security hardens workforce identities in the browser, and Grip Security overlaps on SaaS discovery and identity risk visibility.

The positioning carries a structural tension. The identity platforms Cerby extends are also the vendors most able to absorb last-mile coverage as a native feature, so Cerby's partner posture and its main competitive threat point at the same companies. \[[s1](#profile-analysis-sources), [s5](#profile-analysis-sources)\]

### Go-to-Market & Traction

Cerby shows enterprise traction that is strong for a Series B company. Press reports Cerby claims Fortune 100 usage and names five customer references, and the homepage displays additional brand logos including Ford and Mattel, evidence of an enterprise go-to-market motion that has landed marquee accounts.

Growth metrics are vendor-reported but specific. Cerby states it grew annual recurring revenue tenfold and its customer base fivefold since a Series A under 20 months earlier, and that the platform now serves over 100 organizations across more than 2,000 applications.

Investor backing reinforces the signal. The 40 million dollar Series B was led by DTCP with Okta Ventures, Salesforce Ventures, and Two Sigma Ventures participating, strategic identity and CRM backers whose presence is itself a go-to-market asset. \[[s4](#profile-analysis-sources), [s5](#profile-analysis-sources), [s8](#profile-analysis-sources)\]

### Team & Credibility

Cerby's founding team has verifiable prior builds. Co-founder and CEO Belsasar Lepe co-founded and served as CTO of Ooyala, a video technology company that reached two exits totaling over 440 million dollars, and began his career as a Google engineer.

The co-founders share a track record. Co-founder and CTO Vidal González co-founded Wizeline, which exited in 2021, and press confirms the founders previously worked together at Ooyala and Wizeline.

Bench depth extends past the founders. Cerby's leadership page lists a chief architect with prior technical leadership roles at established cybersecurity vendors, adding security-specific pedigree to a team whose prior exits sit mostly in adjacent software rather than security. \[[s6](#profile-analysis-sources), [s8](#profile-analysis-sources)\]

### Trust Readiness

Cerby publishes a substantive security posture. Its Security Policy documents AES 256-bit encryption at rest, TLS 1.2 in transit, least-privilege access through a bastion host with MFA, environment separation, and logging retained for at least a year.

Cerby operates a third-party trust center at trust.cerby.com, hosted on Drata. Its trust-center listing shows that Cerby holds SOC 2 Type II and ISO 27001 attestations, with downloadable reports behind the portal, and it announced full GDPR compliance in November 2025. The same listing references a 2025 penetration test letter of attestation.

The verified posture is a strong set of enterprise attestations. Cerby holds SOC 2 Type II and ISO 27001, confirmed via its Drata trust center listing, alongside the November 2025 GDPR announcement and a published security policy documenting its encryption and access controls. Such certifications are table-stakes for enterprise security software rather than a differentiator. \[[s7](#profile-analysis-sources), [s9](#profile-analysis-sources), [s1](#profile-analysis-sources)\]

### Competitors

| Company | Relationship | Note |
|---|---|---|
| Unixi | competes with | Both extend an identity provider to SaaS apps it cannot reach natively. |
| Push Security | adjacent | Browser-based identity security covering SaaS apps outside the IdP. |
| Grip Security | adjacent | SaaS identity risk management and access governance. |

## Strategy Deep Dive

A closer look at the company's product strategy, measuring how [defensible](https://zeltser.com/scoring-security-product-strategy) it is against market forces and examining the [eight areas](https://zeltser.com/security-product-creation-framework) behind it.

### Defensibility

**Contested (13/21)**

Band guidance: reinforce or reposition. Analyzed 2026-07-05. Scope: whole company.

Cerby automates credential rotation and privileged access for apps that expose no standard identity interface, so the accounts it manages depend on it to keep working. Building that automation across more than 2,000 disconnected apps is brittle engineering that takes sustained effort, but a funded rival could rebuild it. The reviewed sources surfaced no proprietary dataset and no mandated certification a switch would have to clear. What keeps a customer is the automation already wired into its identity tooling, which is real work to unwind. That switching cost has no network effect or regulatory anchor, so the depth of automation a customer embeds is what a buyer should watch.

| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery | 1/3 | Customers buy software capabilities, credential rotation, provisioning, and access automation, that they configure and run themselves. Automation output is the product, not a judgment or managed-service layer that accepts accountability. \[[s2](#deep-dive-sources), [s8](#deep-dive-sources)\] |
| Switching Cost | 2/3 | Once Cerby automates lifecycle and credential workflows across disconnected apps and integrates with the customer's IAM, IGA, and PAM tools, a departing customer must reabsorb that manual work or re-plumb it elsewhere, which is expensive in effort. The lock-in carries no network effect or regulatory residency anchor. \[[s2](#deep-dive-sources), [s9](#deep-dive-sources)\] |
| Compliance Moat | 1/3 | Cerby holds SOC 2 Type II and ISO 27001 attestations, verified via its Drata trust center listing, announced GDPR compliance in November 2025, and publishes a security policy. Its automations help customers meet their own access-governance obligations. The reviewed evidence establishes standard enterprise attestations rather than a certification barrier specific to this product class, so compliance is procurement assurance rather than a moat. \[[s10](#deep-dive-sources), [s7](#deep-dive-sources)\] |
| Problem Complexity | 3/3 | Reliably automating credential rotation, provisioning, and privileged access for apps that expose no standard identity interface, via robotic UI detection and machine-learning onboarding across more than 2,000 applications, is brittle integration engineering where failure breaks customer access. The breadth and the inline reliability bar take specialized, sustained effort. \[[s8](#deep-dive-sources), [s3](#deep-dive-sources), [s2](#deep-dive-sources)\] |
| Buyer Profile | 2/3 | Named references such as L'Oréal, Fox, and Chime, against a claimed Fortune 100 footprint, skew enterprise, where procurement and legal slow replacement, but public materials show marquee logos rather than evidenced switching friction, so the score reflects the buyer identity Cerby addresses more than a demonstrated hold. \[[s4](#deep-dive-sources), [s3](#deep-dive-sources)\] |
| Layer | 3/3 | Cerby sits in the access path for disconnected apps, rotating credentials and gating privileged access, so the human and shared accounts it manages depend on it to retain or lose access. Removing it returns those tasks to manual work across crown-jewel apps. \[[s2](#deep-dive-sources), [s9](#deep-dive-sources), [s1](#deep-dive-sources)\] |
| Proprietary Data, Content, or IP | 1/3 | The Cerby Application Network of 2,000-plus integrations is accumulating engineering, not a named non-public dataset, and a funded rival could rebuild the same connectors. No cross-customer telemetry corpus or threat-intelligence flywheel appears in the fetched record. \[[s3](#deep-dive-sources), [s8](#deep-dive-sources)\] |

### Strategic Market Segmentation

Cerby serves identity and security teams at large enterprises with sprawling application estates. The product targets organizations whose IAM, IGA, and PAM tooling cannot reach apps that lack SAML, OIDC, or SCIM, and press names sectors spanning healthcare, manufacturing, retail, SaaS, streaming, and telecommunications.

Named customers anchor the segment at the top of the market. Press reports Cerby claims Fortune 100 usage and names L'Oréal, Fox, Colgate-Palmolive, Dentsu, and Chime as customers, and Cerby states it serves more than 100 organizations, so the visible buyer skews large-enterprise rather than mid-market.

A specific use case recurs in the positioning. Cerby calls out administrative and shared accounts in crown-jewel apps like Microsoft 365, Salesforce, ServiceNow, and Slack, and social-media account sharing, which points at the access patterns that conventional identity tools handle poorly. \[[s2](#deep-dive-sources), [s3](#deep-dive-sources), [s4](#deep-dive-sources), [s8](#deep-dive-sources)\]

### Product Capabilities & AI Advantages

Cerby's capabilities cluster around automating identity tasks for apps that expose no standard interface. The platform rotates passwords on policy and SCIM events, enables SSO and MFA for apps without SAML or OIDC, provisions and deprovisions users, and extends privileged access with just-in-time grants, automatic deprovisioning, and audit trails.

The integration engine is the differentiator. Press describes robotic process automation combined with machine learning to onboard nonstandard applications, the method that lets Cerby connect apps a standards-based tool cannot, and Cerby reports coverage across more than 2,000 applications.

Cerby uses automation as the method rather than defending AI as the asset. Machine learning and robotic UI drive onboarding and configuration, but the protected assets are conventional, the human and shared accounts on disconnected apps, so the durable technical depth is integration breadth and reliability rather than any data or model advantage. \[[s2](#deep-dive-sources), [s8](#deep-dive-sources), [s3](#deep-dive-sources)\]

### Sales Engagement & Go-to-Market

Cerby runs an enterprise go-to-market motion that has reached marquee accounts. The site leads with a book-a-meeting call to action rather than self-service signup, and press names Fortune 100 reference customers, consistent with a sales-assisted motion aimed at large organizations.

Investment and integration relationships both run through the identity platforms. The Series B was led by DTCP with Okta Ventures, Salesforce Ventures, and Two Sigma Ventures participating, and Cerby integrates natively with Okta, Entra ID, and Ping. No fetched source describes those investors referring, reselling, or distributing Cerby, so the overlap is a relationship to watch rather than an evidenced channel.

Channel breadth beyond the direct motion is not yet visible in fetched materials. No reseller program, MSSP motion, or cloud-marketplace listing surfaced in the reviewed sources, so an incumbent copying the feature set would contend with Cerby's install base and integrations rather than a locked distribution channel. \[[s1](#deep-dive-sources), [s4](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Pricing Model

Cerby does not publish prices. The site routes buyers to a meeting rather than a price sheet or a self-service plan, the pattern of a vendor that sells negotiated enterprise deals.

The hidden pricing fits the buyer profile. Fortune 100 references and a contact-sales motion imply large, custom contracts where the charging unit, whether per app, per user, or per seat, stays undisclosed and is set in negotiation.

The unit Cerby charges by is not inferable from public materials. Because the company sizes value around the apps it manages and the identity workflows it automates, a per-app or per-managed-identity unit is plausible, but no fetched source confirms it, so the pricing model remains unverified. \[[s1](#deep-dive-sources), [s4](#deep-dive-sources)\]

### Product Delivery & Operations

Cerby delivers a cloud service that integrates with the customer's identity stack. The platform connects to Okta, Entra ID, and Ping and any standards-supporting IdP, and automates credential, access, and lifecycle workflows across EPM, IAM, IGA, and PAM systems.

The operational bar is high because Cerby sits in the access path. The platform rotates credentials and gates privileged access, so reliability of its automations directly affects whether customers retain or lose access to crown-jewel apps, though public materials do not document SLAs, redundancy, or failure modes.

Public delivery detail is thin. No technical documentation portal, deployment guide, or architecture page surfaced this analysis, so the depth of the integration tooling and its operational guarantees cannot be assessed beyond the marketing and security-policy pages fetched. \[[s2](#deep-dive-sources), [s9](#deep-dive-sources), [s7](#deep-dive-sources)\]

### Earning Customers' Trust

Cerby publishes a substantive security posture for a product that holds credentials. Its Security Policy documents AES 256-bit encryption at rest, TLS 1.2 in transit, least-privilege bastion-host access with MFA, environment separation, quarterly access reviews, and logs retained at least a year.

Cerby operates a third-party trust center at trust.cerby.com, hosted on Drata. Its trust-center listing shows that Cerby holds SOC 2 Type II and ISO 27001 attestations, with downloadable reports behind the portal, and it announced full GDPR compliance in November 2025. The same listing references a 2025 penetration test letter of attestation.

The verified posture is a strong set of enterprise attestations. Cerby holds SOC 2 Type II and ISO 27001, confirmed via its Drata trust center listing, alongside the November 2025 GDPR announcement and a published security policy documenting its encryption and access controls. Such certifications are table-stakes for enterprise security software rather than a structural moat. \[[s7](#deep-dive-sources), [s10](#deep-dive-sources), [s1](#deep-dive-sources)\]

### Platform Strategy & Ecosystem Positioning

Cerby positions as a layer that completes rather than replaces the identity stack. It integrates with Okta, Entra ID, Ping, and any standards-supporting IdP, and works across EPM, IAM, IGA, and PAM, so it consumes the existing stack as connective tissue rather than competing to own the directory.

The ecosystem tie runs through the major identity platforms. Okta Ventures is an investor and Okta is one of several named integrations alongside Entra ID and Ping. Fetched sources neither rank those dependencies nor show a distribution relationship, so the risk is generic to the position: any platform Cerby extends is well placed to absorb last-mile coverage natively.

Third-party extension of Cerby is not visible. No public API marketplace, partner-built integrations, or developer ecosystem beyond Cerby-authored connectors surfaced in the reviewed sources, so the platform claim rests on integration breadth rather than external network effects. \[[s1](#deep-dive-sources), [s5](#deep-dive-sources), [s2](#deep-dive-sources)\]

### Team & Execution Capability

Cerby's founders have verifiable prior builds and exits. Co-founder and CEO Belsasar Lepe co-founded and was CTO of Ooyala, which reached two exits totaling over 440 million dollars, and began his career as a Google engineer.

The co-founding team shares a track record. Co-founder and CTO Vidal González co-founded Wizeline, which exited in 2021, and press confirms the founders previously worked together at Ooyala and Wizeline.

Security-specific depth sits below the founders. Cerby's leadership page lists a chief architect with prior technical leadership roles at established cybersecurity vendors, which adds security pedigree to a founding team whose prior exits sit mostly in adjacent software rather than security. \[[s6](#deep-dive-sources), [s8](#deep-dive-sources)\]

## Sources

### Company Detail Sources

Cited from the Sourced Details and Matrix Coverage rows.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | [Cerby homepage](https://www.cerby.com) | official | 2026-06-20 |
| f2 | [SecurityWeek: Cerby Raises $40 Million for Identity Automation Platform](https://www.securityweek.com/cerby-raises-40-million-for-identity-automation-platform/) | press | 2026-06-20 |
| f3 | [PR Newswire: Cerby Raises $40M Series B to Automate Identity Security at Scale](https://www.prnewswire.com/news-releases/cerby-raises-40m-series-b-to-automate-identity-security-at-scale-302466010.html) | press | 2026-06-20 |
| f4 | [Cerby product page](https://www.cerby.com/platform) | official | 2026-06-20 |

### Profile Analysis Sources

Cited from the Market Readiness section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [Cerby homepage](https://www.cerby.com) “Securely manage and automate access for the apps your identity tools can’t reach.” | official | 2026-06-20 |
| s2 | [Cerby product page](https://www.cerby.com/platform) “With Cerby, passwords automatically rotate according to your policy and SCIM events, guaranteeing access isn’t retained.” | official | 2026-06-20 |
| s3 | [SecurityWeek: Cerby Raises $40 Million for Identity Automation Platform](https://www.securityweek.com/cerby-raises-40-million-for-identity-automation-platform/) “Cerby on Wednesday announced raising $40 million in a Series B funding round that brings the total raised by the company to $72.5 million.” | press | 2026-06-20 |
| s4 | [SiliconANGLE: Identity security automation startup Cerby raises $40M](https://siliconangle.com/2025/05/28/identity-security-automation-startup-cerby-raises-40m-2/) “Cerby claims several customers using its product to support their identity security automation amid the Fortune 100, including L’Oréal S.A., Fox Corp., Colgate-Palmolive Co., Dentsu Inc. and Chime Financial Inc.” | press | 2026-06-20 |
| s5 | [PR Newswire: Cerby Raises $40M Series B to Automate Identity Security at Scale](https://www.prnewswire.com/news-releases/cerby-raises-40m-series-b-to-automate-identity-security-at-scale-302466010.html) “The round was led by DTCP with participation from existing backers including Okta Ventures, Salesforce Ventures, and Two Sigma Ventures.” | press | 2026-06-20 |
| s6 | [Cerby leadership page](https://www.cerby.com/about-us/leadership) “Prior to his role at Impira, Bel was co-founder and CTO at Ooyala where he led a global product, design, and engineering team of 300+ Ooyalans spanning five countries and seven offices. Ooyala achieved two successful exits totaling over $440M.” | official | 2026-06-20 |
| s7 | [Cerby Security Policy](https://www.cerby.com/security) “Cerby encrypts Customer Data within the Service at-rest using AES 256-bit (or better) encryption.” | official | 2026-06-20 |
| s8 | [TechFundingNews: Cerby scoops $40M to automate identity security](https://techfundingnews.com/cerby-scoops-40m-to-automate-identity-security-for-the-apps-that-traditional-tools-miss/) “Cerby was founded in September 2020 by Belsasar “Bel” Lepe (CEO), Vidal González (CTO)... having previously worked together at companies like Ooyala and Wizeline. Since its Series A... Cerby has increased its annual recurring revenue (ARR) tenfold and expanded its customer base fivefold.” | press | 2026-06-20 |
| s9 | [Cerby Trust Center (Drata). Lists SOC 2 Type II, ISO 27001, GDPR, and a 2025 pentest (confirmed via trust-center PDF render)](https://trust.cerby.com) “Cerby SOC2 Type II. ISO 27001 Report. Cerby ISO 27001. Cerby SOC 2. Cerby is GDPR Compliant! Published on Nov 12, 2025” | official | 2026-06-20 |

### Deep-Dive Sources

Cited from the Strategy Deep Dive section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [Cerby homepage](https://www.cerby.com) “Securely manage and automate access for the apps your identity tools can’t reach.” | official | 2026-06-20 |
| s2 | [Cerby product page](https://www.cerby.com/platform) “With Cerby, passwords automatically rotate according to your policy and SCIM events, guaranteeing access isn’t retained. Cerby also manages passwords for SaaS administrative accounts in crown jewel applications like Microsoft 365, Salesforce, ServiceNow, Slack, and more.” | official | 2026-06-20 |
| s3 | [SecurityWeek: Cerby Raises $40 Million for Identity Automation Platform](https://www.securityweek.com/cerby-raises-40-million-for-identity-automation-platform/) “Cerby said the platform automates identity workflows across over 2,000 applications and is used by organizations across sectors such as healthcare, manufacturing, online collaboration, retail, SaaS, streaming, telecommunications, and workplace training.” | press | 2026-06-20 |
| s4 | [SiliconANGLE: Identity security automation startup Cerby raises $40M](https://siliconangle.com/2025/05/28/identity-security-automation-startup-cerby-raises-40m-2/) “Cerby claims several customers using its product to support their identity security automation amid the Fortune 100, including L’Oréal S.A., Fox Corp., Colgate-Palmolive Co., Dentsu Inc. and Chime Financial Inc.” | press | 2026-06-20 |
| s5 | [PR Newswire: Cerby Raises $40M Series B to Automate Identity Security at Scale](https://www.prnewswire.com/news-releases/cerby-raises-40m-series-b-to-automate-identity-security-at-scale-302466010.html) “The round was led by DTCP with participation from existing backers including Okta Ventures, Salesforce Ventures, and Two Sigma Ventures.” | press | 2026-06-20 |
| s6 | [Cerby leadership page](https://www.cerby.com/about-us/leadership) “Bel was co-founder and CTO at Ooyala... Ooyala achieved two successful exits totaling over $440M. Vidal is co-founder and CTO of Cerby. He was previously CTO and co-founder of Wizeline, a company which successfully exited in 2021.” | official | 2026-06-20 |
| s7 | [Cerby Security Policy](https://www.cerby.com/security) “Cerby encrypts Customer Data within the Service at-rest using AES 256-bit (or better) encryption. Cerby uses Transport Layer Security (TLS) 1.2 (or better) within the Service for Customer Data in-transit over untrusted networks.” | official | 2026-06-20 |
| s8 | [TechFundingNews: Cerby scoops $40M to automate identity security](https://techfundingnews.com/cerby-scoops-40m-to-automate-identity-security-for-the-apps-that-traditional-tools-miss/) “Through automation (including robotic process automation and machine learning), Cerby reduces the workload for IT and security teams by handling onboarding, offboarding, password management, and security configuration for nonstandard applications.” | press | 2026-06-20 |
| s9 | [Cerby privileged access solution page](https://www.cerby.com/solutions/privileged-access) “Extend PAM to disconnected apps with just-in-time access, automatic deprovisioning, and full audit trails.” | official | 2026-06-20 |
| s10 | [Cerby Trust Center (Drata). Lists SOC 2 Type II, ISO 27001, GDPR, and a 2025 pentest (confirmed via trust-center PDF render)](https://trust.cerby.com) “Cerby SOC2 Type II. ISO 27001 Report. Cerby ISO 27001. Cerby SOC 2. Cerby is GDPR Compliant! Published on Nov 12, 2025” | official | 2026-06-20 |

## Disclaimer

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.