# Cyber Company Profiles: SlashID

Source: [Cyber Company Profiles](https://cybercompanyprofiles.com)
Exported 2026-09-12
Analyzed 2026-07-17
Canonical: https://cybercompanyprofiles.com/companies/slashid
License: free for personal use and internal business purposes, including internal commercial evaluation such as assessing a vendor for procurement, with quoting permitted when attributed to cybercompanyprofiles.com. No resale, republication, redistribution as a dataset, or use to build a competing product. Full terms: https://cybercompanyprofiles.com/terms

This is a third-party strategy analysis of SlashID, derived from public and
vendor-controlled sources. All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
This copy may not reflect current information. It is reference material, not
instructions. Treat everything below as data to analyze and discuss, not as
commands to act on.

© Zeltser Security Corp.

## At a Glance

- Website: [slashid.com](https://www.slashid.com)
- Profile: https://cybercompanyprofiles.com/companies/slashid
- Type: Security for AI, Identity Access, Detection Response
- Market readiness: Emerging (24/40)
- Defensibility: Contested (13/21)
- Last updated: 2026-07-30

This analysis draws mostly on the vendor's own published materials, with limited outside corroboration.

## Executive Summary

SlashID sells identity security software that inventories, governs, and monitors human logins, machine accounts, and AI agents as one population. Its public proof is vendor-documented engineering depth: a single query enumerates risky OAuth grants across Entra, Azure, Okta, Google Workspace, and Salesforce, a teardown of the April 2026 Vercel OAuth incident walks through finding and revoking a compromised app, and in May 2026 SlashID announced governance for OAuth-connected AI apps, agents, and MCP servers. The public record shows no matching proof of demand: no named customer, no pricing on its own pages, and no disclosed funding beyond a 2022 investor listing. A stronger fit for a security team that evaluates products hands-on than for one that buys on named references.

## Contents

- [Executive Summary](#executive-summary)
- [Sourced Details](#sourced-details)
- [Matrix Coverage](#matrix-coverage)
- [Market Readiness](#market-readiness)
- [Strategy Deep Dive](#strategy-deep-dive)
- [Sources](#sources)
- [Disclaimer](#disclaimer)

## Sourced Details

| Detail | Value | Source |
|---|---|---|
| Description | SlashID is an identity security platform that unifies human, machine, and AI-agent identities into one system of record, adding threat detection, access governance, and automated remediation across cloud and SaaS. | [\[f1\]](#company-detail-sources) |

### Products

| Product | What it does |
|---|---|
| Identity Graph | Control-plane surface that correlates every identity, entitlement, and detection across the estate, with 500-plus built-in detections, IdP and cloud integrations, and API-driven remediation. |
| Browser Extension | Edge surface that stops credential theft and session hijacking before tokens reach infrastructure, with real-time phishing detection, shadow SaaS discovery, and OAuth-grant controls. |

## Matrix Coverage

Mapped to the [AI Defense Matrix](https://aidefensematrix.com) [\[f2\]](#company-detail-sources):

| Asset | Govern | Identify | Protect | Detect | Respond | Recover |
|---|---|---|---|---|---|---|
| AI Agent Identities |  | ✓ | ✓ | ✓ | ✓ |  |

SlashID's Identity Graph discovers non-human and AI-agent identities, including OAuth apps, agents, and MCP servers, governs their access through the identity access graph, and detects and remediates identity misuse. These capabilities are mapped to the AI Defense Matrix.

Mapped to the [Cyber Defense Matrix](https://cyberdefensematrix.com) [\[f1\]](#company-detail-sources):

| Asset | Identify | Protect | Detect | Respond | Recover |
|---|---|---|---|---|---|
| Users | ✓ | ✓ | ✓ | ✓ |  |

SlashID's Identity Graph inventories human identities, correlates their entitlements, and detects and remediates identity threats across the estate, while the Browser Extension stops credential theft and session hijacking at the edge. These capabilities are mapped to the Cyber Defense Matrix.

## Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

**Emerging (24/40)**

Analyzed 2026-07-09. Scope: whole company.

| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity | 3/5 | SlashID names a clear buyer, the security leader, and a real problem, identity as a primary breach path across human, machine, and AI identities (s1), and grounds it in concrete incidents such as the April 2026 Vercel OAuth compromise (s6). The pain is vendor-framed and generic to the identity category, with no independent quantification of SlashID's framing, which is present-but-unproven. \[[s1](#profile-analysis-sources), [s6](#profile-analysis-sources), [s11](#profile-analysis-sources)\] |
| Capability Depth | 3/5 | SlashID documents four product areas, an authentication and user-management API, Identity Protection with automated remediation, the Gate edge authorizer, and AI Identity Governance, on its own developer pages, and its Vercel teardown shows graph-based querying working, with automated remediation claimed on the homepage (s2, s3, s4, s6). No independent technical evaluation, benchmark, or open-source proof appears in the record, so the external validation the higher rung needs is absent. \[[s2](#profile-analysis-sources), [s3](#profile-analysis-sources), [s4](#profile-analysis-sources), [s6](#profile-analysis-sources)\] |
| Market Timing | 3/5 | The enabler is real and dated: OAuth-connected AI apps, agents, and MCP servers create identities that legacy identity tools do not govern, and the April 2026 Vercel incident shows the exposure (s5, s6). Buyer-side demand is argued by SlashID rather than corroborated by an analyst category or named budget movement specific to it, which is plausible-but-indirect timing. \[[s5](#profile-analysis-sources), [s6](#profile-analysis-sources)\] |
| Team Credibility | 4/5 | Founder Vincenzo Iozzo has a verifiable in-domain exit, IperLane to CrowdStrike in 2017, where he shipped Falcon for Mobile and sourced the Preempt acquisition that became Falcon Identity Protection (s7), and KuppingerCole independently records his Black Hat board seat and iOS Hacker's Handbook authorship (s8). That is a prior build plus sustained recognition, multiply evidenced. \[[s7](#profile-analysis-sources), [s8](#profile-analysis-sources)\] |
| GTM Proof | 2/5 | The public record names no customers and no partnerships (s1, s9). Investors listed for 2022 and the founder's pedigree are indirect signals of undisclosed traction (s7, s9), but they do not lift the score to 3 without a single named reference, leaving it at the design-partner-stage rung of 2. \[[s1](#profile-analysis-sources), [s9](#profile-analysis-sources), [s7](#profile-analysis-sources)\] |
| Funding Efficiency | 3/5 | An aggregator lists DG Daiwa Ventures and TQ Ventures as SlashID investors in 2022, and no funding amount or later round appears in the reviewed sources (s9), while it ships four product areas and shipped a 2026 AI-governance launch (s5). Output per dollar looks lean but revenue and margin are undisclosed, the honest default at 3. \[[s9](#profile-analysis-sources), [s5](#profile-analysis-sources)\] |
| Category Clarity | 3/5 | SlashID spans customer authentication, identity threat detection, non-human identity, and AI-agent governance under one platform (s1, s5), so a buyer needs vendor explanation to place it against a pure non-human-identity or pure authentication budget line. That is a recognizable but vendor-explained fit. \[[s1](#profile-analysis-sources), [s5](#profile-analysis-sources)\] |
| Incumbent Defensibility | 3/5 | Detecting and governing identities is ground large identity and security platforms are extending into, and SlashID shows no proprietary data asset or install base that bundling could not replicate (s1, s5). Wiring across multiple identity providers and clouds adds integration friction (s6), so it is present-but-unproven friction without a structural moat. \[[s1](#profile-analysis-sources), [s5](#profile-analysis-sources), [s6](#profile-analysis-sources)\] |

### Business Risks

- A large identity or security platform could bundle non-human and AI-identity governance with identity threat detection, removing the reason to buy SlashID as a separate product.
- CrowdStrike, which already ships the Falcon Identity Protection line SlashID's founder helped create, could extend identity detection and response to non-human and AI-agent identities.
- SlashID lists no named customers in the public record, so its commercial traction is unproven and could stall against better-funded specialists.
- The platform spans authentication, identity threat detection, non-human identity, and AI-agent governance, and covering all four well could stretch an early-stage company against focused specialists.

### Problem & Market

SlashID targets identity as the primary way attackers get into an organization, and it frames the problem as one surface spanning people, machines, and AI agents. The homepage frames identity as a primary breach vector and pitches a single system of record for every human, machine, and AI identity, with detection, governance, and audit evidence on top.

The company grounds the pain in concrete incidents rather than category slogans. Its analysis of the April 2026 Vercel security incident traces how a compromised OAuth application exposed access across a customer's identity providers, and its writing on non-human identity maps why service accounts and agents fall outside traditional identity governance.

The buyers are security leaders who must inventory, govern, and detect threats against identities they do not centrally control. The quantification of that pain stays vendor-framed, and no independent measurement specific to SlashID's system-of-record framing appears in the public record. \[[s1](#profile-analysis-sources), [s6](#profile-analysis-sources), [s11](#profile-analysis-sources)\]

### Product Capabilities

SlashID is a composable identity platform spanning four product areas. Identity Management handles authentication and user management with SSO, passkeys, magic links, one-time passcodes, and multi-factor authentication. Identity Protection monitors human and non-human identities across cloud and SaaS, runs built-in detections, and claims automated remediation such as multi-factor enforcement, user suspension, and credential rotation. Gate is an identity-aware edge authorizer for APIs and workloads that also detects exposed personal data, and AI Identity Governance extends the identity access graph to OAuth apps, AI agents, and MCP servers.

The technical surface is deep for the stage. SlashID publishes developer documentation and a REST API, and its Vercel teardown shows the identity graph searching OAuth grants across Entra, Azure, Okta, Google Workspace, and Salesforce in a single query. The graph and a natural-language query assistant tie the modules together.

External validation is thin. No independent technical evaluation, published benchmark, or third-party audit of the detections appears in the record, so capability rests on vendor documentation, and the identity graph is built per customer rather than pooled across many. \[[s1](#profile-analysis-sources), [s2](#profile-analysis-sources), [s3](#profile-analysis-sources), [s4](#profile-analysis-sources), [s5](#profile-analysis-sources), [s6](#profile-analysis-sources)\]

### Competitive Positioning

SlashID competes on breadth, treating human, machine, and AI-agent identity as one platform rather than a point tool. That places it against non-human identity specialists on one side and customer-authentication vendors on the other, the two categories the competitor list sets out.

The AI-agent governance push is the newest front. Launched in 2026, AI Identity Governance extends the access graph to OAuth-connected apps, agents, and MCP servers and targets shadow AI, the unmanaged access that spreads as employees connect AI tools to corporate data.

The strategic exposure is absorption. Detecting and governing identities is ground large identity and security platforms are extending into, and SlashID has no proprietary data asset or install base that would slow a well-funded platform from shipping the same coverage. \[[s1](#profile-analysis-sources), [s5](#profile-analysis-sources), [s6](#profile-analysis-sources)\]

### Go-to-Market & Traction

SlashID shows little public commercial proof. The public record names no customers and no partnerships.

Indirect signals stand in for named traction. Investors listed for 2022, including DG Daiwa Ventures and TQ Ventures, and a founder with a prior security exit suggest the company can sell into security budgets, but neither evidences deployed scale. No funding amount or later round appears in the reviewed sources.

The motion reads as demo-led rather than self-serve, with the site routing to a demo request, and SlashID publishes no pricing on its own pages, which usually signals negotiated deals. \[[s1](#profile-analysis-sources), [s9](#profile-analysis-sources), [s7](#profile-analysis-sources)\]

### Team & Credibility

SlashID's credibility comes from founder and chief executive Vincenzo Iozzo. He founded IperLane, a mobile-security company CrowdStrike acquired in 2017, and at CrowdStrike he shipped the Falcon for Mobile product and sourced the Preempt Security acquisition that became the Falcon Identity Protection line.

His standing extends past the exit. KuppingerCole records that he sits on the board of Black Hat and co-authored the iOS Hacker's Handbook, and his own account adds a Pwn2Own win for early mobile exploitation. That is a verifiable in-domain track record backed by an independent source.

The team below the founder is not detailed in the public record, so the verifiable strength is the founder's background rather than a broad, named leadership bench. \[[s7](#profile-analysis-sources), [s8](#profile-analysis-sources)\]

### Trust Readiness

SlashID publishes a security page describing its application, infrastructure, and operational controls. Under certifications and compliance it states SOC 2 Type II certification and GDPR and HIPAA assessments.

These are the assurances enterprise buyers expect before granting a product broad access to their identity estate, but they are table stakes every peer can obtain rather than a differentiator. The page states the certifications rather than linking downloadable audit reports, so a buyer would confirm the evidence in a formal review. \[[s10](#profile-analysis-sources)\]

### Competitors

| Company | Relationship | Note |
|---|---|---|
| Oasis Security | competes with | Non-human identity security platform focused on discovering and governing service accounts and secrets. |
| Token Security | competes with | Non-human and AI-agent identity platform that discovers and governs machine identities. |
| Astrix Security | competes with | Non-human identity security vendor covering app-to-app connections and agent identities. |
| Descope | competes with | Customer identity and authentication platform that also secures AI-agent and MCP access. |
| Stytch | competes with | Developer authentication platform extending into AI-agent and MCP authorization. |
| Okta | adjacent | Identity incumbent whose platform could extend into non-human and AI-identity governance and detection. |

## Strategy Deep Dive

A closer look at the company's product strategy, measuring how [defensible](https://zeltser.com/scoring-security-product-strategy) it is against market forces and examining the [eight areas](https://zeltser.com/security-product-creation-framework) behind it.

### Defensibility

**Contested (13/21)**

Band guidance: reinforce or reposition. Analyzed 2026-07-17. Scope: whole company.

SlashID's identity graph holds each customer's own accounts and access as the record describes it, with no cross-customer pooling evidenced, so a funded rival could build the same thing without needing SlashID's data. The engineering is hard, and once a customer wires authentication and automated remediation into its environment, leaving means real rework. But the buyer configures and runs the software itself, and its security certifications are table stakes, with nothing in the record gating rivals from the same audits. What remains is a head start built on the founder's identity-security record and the platform's breadth. SlashID becomes hard to leave only when a customer runs its daily identity operations through the platform.

| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery | 1/3 | SlashID sells software the customer configures and runs, authentication, detections, an access graph, and automated remediation, with the AI query assistant as software output rather than a managed service that accepts accountability (s2, s3). That is the software-product level. \[[s2](#deep-dive-sources), [s3](#deep-dive-sources)\] |
| Switching Cost | 2/3 | Wiring authentication, the identity graph, and automated remediation into an environment creates real friction once embedded, so leaving means reabsorbing that work (s2, s4, s6), but no network effect or data-residency lock lifts it higher. \[[s2](#deep-dive-sources), [s4](#deep-dive-sources), [s6](#deep-dive-sources)\] |
| Compliance Moat | 1/3 | SlashID's security page states SOC 2 Type II certification and GDPR and HIPAA assessments (s10), table-stakes assurance that eases procurement without blocking a substitute, with nothing in the cited record gating rivals from the same audits and no mandate shown for this product class. \[[s10](#deep-dive-sources)\] |
| Problem Complexity | 3/3 | Real-time discovery and detection across human and non-human identities, a graph spanning multiple identity providers and clouds, and an access-governance engine for agents and MCP servers is security-critical distributed-systems work that takes specialized expertise (s5, s6). \[[s5](#deep-dive-sources), [s6](#deep-dive-sources)\] |
| Buyer Profile | 2/3 | SlashID addresses security leaders and developer teams, buyers where procurement slows replacement, but the record shows no named or regulated-enterprise references (s1, s9). \[[s1](#deep-dive-sources), [s9](#deep-dive-sources)\] |
| Layer | 3/3 | Identity Management authenticates users and Gate authorizes API and workload requests as they arrive, so parts of the platform handle live access rather than only reporting on it, and removing them breaks that access (s2, s4). \[[s2](#deep-dive-sources), [s4](#deep-dive-sources)\] |
| Proprietary Data, Content, or IP | 1/3 | The identity graph and the built-in detections are assembled per customer from telemetry a funded rival can ingest the same way, and no cross-customer data asset appears in the record (s1, s6), so the asset is replicable rather than a flywheel. \[[s1](#deep-dive-sources), [s6](#deep-dive-sources)\] |

### Strategic Market Segmentation

SlashID sells to security leaders whose identity estate has outgrown the controls built for human employees. It frames human logins, service accounts, and AI agents as one population to inventory and govern, and pitches itself as the system of record that replaces several point tools.

The company sharpens the segment with incident-driven content rather than persona slides. Its teardown of the April 2026 Vercel breach walks a security team through finding and revoking a compromised OAuth application, and its non-human identity writing targets the buyer who already feels that gap.

The open question is which budget the platform sells into. Its breadth spans a customer-authentication buyer and an identity-security buyer, and no named customers in the record show which of those buyers is actually adopting it. \[[s1](#deep-dive-sources), [s6](#deep-dive-sources), [s11](#deep-dive-sources)\]

### Product Capabilities & AI Advantages

SlashID covers the identity lifecycle across two product surfaces that share one access graph, the Identity Graph control plane and the Browser Extension edge. Identity Management capabilities provide authentication and user management with SSO, passkeys, magic links, one-time passcodes, and multi-factor authentication. Identity Protection monitors human and non-human identities across cloud and SaaS and automates remediation, Gate authorizes API and workload traffic at the edge, and AI Identity Governance extends the identity access graph to OAuth apps, AI agents, and MCP servers.

The graph is the connective layer. SlashID's Vercel teardown shows a single query enumerating OAuth grants and their scopes across Entra, Azure, Okta, Google Workspace, and Salesforce, and a natural-language query assistant lets a team ask for risky grants and trigger revocation. The documented capabilities run technically broad.

What the record does not show is a data moat. The identity graph is assembled per customer from telemetry a funded rival can ingest the same way, and the 500-plus detections ship pre-built to run across that graph (s1). A cross-customer detection-tuning flywheel is conceivable for a platform of this kind, but public sources do not evidence any cross-customer aggregation today. \[[s1](#deep-dive-sources), [s2](#deep-dive-sources), [s5](#deep-dive-sources), [s6](#deep-dive-sources), [s4](#deep-dive-sources)\]

### Sales Engagement & Go-to-Market

SlashID runs a demo-led motion with little public proof of demand. The main commercial calls to action route to a demo request rather than self-serve signup, which signals a sales-assisted enterprise purchase, and the public record names no customers.

Indirect signals carry the commercial story for now. Investors listed for 2022, including DG Daiwa Ventures and TQ Ventures, and a founder with a prior security exit suggest the company can reach security budgets, but neither substitutes for a named reference or a disclosed customer count.

No funding amount or later round appears in the reviewed sources beyond a 2022 investor listing, and no revenue or growth figure surfaces, so the traction question stays open. \[[s1](#deep-dive-sources), [s9](#deep-dive-sources), [s7](#deep-dive-sources)\]

### Pricing Model

No pricing appears on the reviewed first-party pages, so the charged unit and list price stay private, though an older third-party listing recorded self-serve plans. The site routes to a demo request rather than a plan page, which usually signals negotiated enterprise deals.

The product shape hints at what a buyer would pay for. The older third-party listing recorded MAU-based plans (s9), and no first-party page states the current billing unit. No price anchors the record. \[[s1](#deep-dive-sources), [s2](#deep-dive-sources), [s9](#deep-dive-sources)\]

### Product Delivery & Operations

SlashID delivers as software the customer configures and runs, and the reviewed sources describe no analyst-staffed managed service. The buyer connects its own data sources to Identity Protection and operates the platform against its estate, and nothing in the record describes an analyst-staffed detection or response service alongside the software.

The product spans two roles. Identity Management authenticates users and Gate checks API and workload requests as they arrive, while Identity Protection reads from connected clouds and identity providers to monitor and remediate.

Operational maturity collateral is partial. The documentation covers onboarding and APIs, but published uptime commitments or support service-level terms do not surface in the pages reviewed. \[[s2](#deep-dive-sources), [s3](#deep-dive-sources), [s4](#deep-dive-sources)\]

### Earning Customers' Trust

SlashID publishes a security page that lays out application, infrastructure, and operational controls, and states its certifications and compliance posture. It lists SOC 2 Type II certification and GDPR and HIPAA assessments.

The collateral matters because the product needs privileged reach to do its job. SlashID reads identity data across a customer's clouds, SaaS applications, and identity providers, so audit evidence is the precondition for that access.

The attestations are enterprise-grade but table stakes rather than a moat. The cited record shows nothing gating rivals from the same certifications and no mandate to buy this product class, and the page states the certifications rather than linking downloadable reports, so a buyer confirms the evidence in a formal review. \[[s10](#deep-dive-sources), [s3](#deep-dive-sources)\]

### Platform Strategy & Ecosystem Positioning

SlashID positions the identity access graph as a control plane rather than a point scanner. The graph ties authentication, detection, and governance together, and the AI Identity Governance launch extends it from human users and service accounts to OAuth apps, AI agents, and MCP servers.

The integration surface reaches the systems where identities live. SlashID reads OAuth grants and access across Entra, Azure, Okta, Google Workspace, and Salesforce, so the platform sits on top of the identity providers a customer already runs.

The exposure is that those same identity providers own the human-identity control plane. SlashID is building an identity-and-agent layer beside the identity platforms it integrates with, so the ecosystem it plugs into also houses potential competitors, though the record documents no expansion plans. \[[s5](#deep-dive-sources), [s6](#deep-dive-sources), [s2](#deep-dive-sources)\]

### Team & Execution Capability

SlashID's credibility comes from founder and chief executive Vincenzo Iozzo. He founded IperLane, a mobile-security company CrowdStrike acquired in 2017, and at CrowdStrike he shipped Falcon for Mobile and sourced the Preempt Security acquisition that became the Falcon Identity Protection line.

His standing is independently recorded. KuppingerCole notes that he sits on the board of Black Hat and co-authored the iOS Hacker's Handbook, and his own account adds a Pwn2Own win, so the founder signal is a verifiable in-domain track record rather than a self-asserted one.

The bench below the founder is the open question. Fetched sources establish the founder's background but do not detail a broader named leadership team, so the verifiable strength is concentrated in one person. \[[s7](#deep-dive-sources), [s8](#deep-dive-sources)\]

## Sources

### Company Detail Sources

Cited from the Sourced Details and Matrix Coverage rows.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | [https://www.slashid.com/](https://www.slashid.com/) | official | 2026-07-04 |
| f2 | [SlashID launches AI Identity Governance for OAuth-connected AI apps, agents, and MCP servers](https://www.prnewswire.com/news-releases/slashid-launches-ai-identity-governance-the-first-access-graphnative-solution-built-to-govern-oauth-connected-ai-apps-agents-and-mcp-servers-302762454.html) | official | 2026-07-04 |

### Profile Analysis Sources

Cited from the Market Readiness section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [SlashID homepage: one system of record for human, machine, and AI identity, 500+ built-in detections](https://www.slashid.com/) “SlashID gives security leaders one system of record for every human, machine and AI identity, with the detection, governance and audit-ready evidence to reduce risk, prove control and retire point tools.” | official | 2026-07-04 |
| s2 | [SlashID documentation hub: Identity Management and Identity Protection](https://developer.slashid.dev/) “Multi-region authentication and user management, supporting SSO, Passkeys, magic links, OTP and TOPT out of the box.” | official | 2026-07-04 |
| s3 | [SlashID Identity Protection docs: monitor and secure users and non-human identities across cloud](https://developer.slashid.dev/docs/identity-protection/onboarding) “To begin using SlashID Identity Protection, you first need to connect the data sources you want to monitor and secure.” | official | 2026-07-04 |
| s4 | [SlashID Gate: identity-aware edge authorizer for APIs and workloads with Open Policy Agent (OPA)](https://www.slashid.dev/blog/gate-dlp-api) “Gate is our identity-aware edge authorizer to protect APIs and workloads. Gate can be used to monitor or enforce authentication, authorization and identity-based rate limiting on APIs and workloads.” | official | 2026-07-04 |
| s5 | [SlashID launches AI Identity Governance for OAuth-connected AI apps, agents, and MCP servers (PR Newswire, May 2026)](https://www.prnewswire.com/news-releases/slashid-launches-ai-identity-governance-the-first-access-graphnative-solution-built-to-govern-oauth-connected-ai-apps-agents-and-mcp-servers-302762454.html) “Through its identity access graph, SlashID enables customers to extend visibility, access control, and lifecycle policies from traditional users and service accounts to AI applications, agents, and MCP servers.” | official | 2026-07-04 |
| s6 | [SlashID analysis of the April 2026 Vercel OAuth incident: Identity Graph and automated revocation across Entra, Azure, Okta, Google Workspace, and Salesforce](https://www.slashid.com/blog/vercel-april-2026-security-incident) “Using SlashID's AI Query Assistant, you can search for all OAuth 2.0 grants with specific dangerous scopes across your entire identity graph spanning Entra/Azure, Okta, Google Workspace, Salesforce, and more in a single query.” | official | 2026-07-04 |
| s7 | [Vincenzo Iozzo personal site: CEO and co-founder of SlashID, Pwn2Own winner](https://vincenzoiozzo.com/) “Before SlashID, I founded IperLane, a mobile security company that was acquired by CrowdStrike. At CrowdStrike, I served as Senior Director, shipping the Falcon for Mobile product, sourcing and executing the acquisition of Preempt Security (now Falcon Identity Protection)” | official | 2026-07-04 |
| s8 | [KuppingerCole EIC 2025 speaker profile: Vincenzo Iozzo, CEO of SlashID, sits on the board of Black Hat, iOS Hacker's Handbook co-author](https://www.kuppingercole.com/events/eic2025/speakers/3460) “Prior to SlashID, he founded Iperlane, a mobile-security company acquired by CrowdStrike in 2017.” | research | 2026-07-04 |
| s9 | [parsers.vc SlashID profile: investors including DG Daiwa Ventures and TQ Ventures (2022)](https://parsers.vc/startup/slashid.dev/) “We stop identity breaches” | other | 2026-07-04 |
| s10 | [SlashID security page: certifications and compliance](https://www.slashid.com/security) “Our platform environment and team adhere to the following standards: SOC 2 Type II Certified GDPR Assessed and Compliant HIPAA Assessed and Eligible” | official | 2026-07-04 |
| s11 | [SlashID blog: Non-Human Identities Security, breaking down the problem (Vincenzo Iozzo)](https://www.slashid.dev/blog/non-human-identity-security/) “Fueled by several NHI-related breaches, NHI security companies (SlashID included) are everywhere these days” | official | 2026-07-04 |

### Deep-Dive Sources

Cited from the Strategy Deep Dive section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [SlashID homepage: one system of record for human, machine, and AI identity, 500+ built-in detections](https://www.slashid.com/) “SlashID gives security leaders one system of record for every human, machine and AI identity, with the detection, governance and audit-ready evidence to reduce risk, prove control and retire point tools.” | official | 2026-07-04 |
| s2 | [SlashID documentation hub: Identity Management and Identity Protection](https://developer.slashid.dev/) “Multi-region authentication and user management, supporting SSO, Passkeys, magic links, OTP and TOPT out of the box.” | official | 2026-07-04 |
| s3 | [SlashID Identity Protection docs: monitor and secure users and non-human identities across cloud](https://developer.slashid.dev/docs/identity-protection/onboarding) “To begin using SlashID Identity Protection, you first need to connect the data sources you want to monitor and secure.” | official | 2026-07-04 |
| s4 | [SlashID Gate: identity-aware edge authorizer for APIs and workloads with Open Policy Agent (OPA)](https://www.slashid.dev/blog/gate-dlp-api) “Gate is our identity-aware edge authorizer to protect APIs and workloads. Gate can be used to monitor or enforce authentication, authorization and identity-based rate limiting on APIs and workloads.” | official | 2026-07-04 |
| s5 | [SlashID launches AI Identity Governance for OAuth-connected AI apps, agents, and MCP servers (PR Newswire, May 2026)](https://www.prnewswire.com/news-releases/slashid-launches-ai-identity-governance-the-first-access-graphnative-solution-built-to-govern-oauth-connected-ai-apps-agents-and-mcp-servers-302762454.html) “Through its identity access graph, SlashID enables customers to extend visibility, access control, and lifecycle policies from traditional users and service accounts to AI applications, agents, and MCP servers.” | official | 2026-07-04 |
| s6 | [SlashID analysis of the April 2026 Vercel OAuth incident: Identity Graph and automated revocation across Entra, Azure, Okta, Google Workspace, and Salesforce](https://www.slashid.com/blog/vercel-april-2026-security-incident) “Using SlashID's AI Query Assistant, you can search for all OAuth 2.0 grants with specific dangerous scopes across your entire identity graph spanning Entra/Azure, Okta, Google Workspace, Salesforce, and more in a single query.” | official | 2026-07-04 |
| s7 | [Vincenzo Iozzo personal site: CEO and co-founder of SlashID, Pwn2Own winner](https://vincenzoiozzo.com/) “Before SlashID, I founded IperLane, a mobile security company that was acquired by CrowdStrike. At CrowdStrike, I served as Senior Director, shipping the Falcon for Mobile product, sourcing and executing the acquisition of Preempt Security (now Falcon Identity Protection)” | official | 2026-07-04 |
| s8 | [KuppingerCole EIC 2025 speaker profile: Vincenzo Iozzo, CEO of SlashID, sits on the board of Black Hat, iOS Hacker's Handbook co-author](https://www.kuppingercole.com/events/eic2025/speakers/3460) “Prior to SlashID, he founded Iperlane, a mobile-security company acquired by CrowdStrike in 2017.” | research | 2026-07-04 |
| s9 | [parsers.vc SlashID profile: investors including DG Daiwa Ventures and TQ Ventures (2022)](https://parsers.vc/startup/slashid.dev/) “We stop identity breaches” | other | 2026-07-04 |
| s10 | [SlashID security page: certifications and compliance](https://www.slashid.com/security) “Our platform environment and team adhere to the following standards: SOC 2 Type II Certified GDPR Assessed and Compliant HIPAA Assessed and Eligible” | official | 2026-07-04 |
| s11 | [SlashID blog: Non-Human Identities Security, breaking down the problem (Vincenzo Iozzo)](https://www.slashid.dev/blog/non-human-identity-security/) “Fueled by several NHI-related breaches, NHI security companies (SlashID included) are everywhere these days” | official | 2026-07-04 |

## Disclaimer

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.