BREAKING AT&T Data Breach: ‘Nearly All’ Wireless Customers Exposed in Massive Hack
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybersecurity Funding

Non-human Identity Lifecycle Firm Entro Security Raises $18 Million

Entro’s platform is designed to bring order to the increasingly chaotic management of non-human identities.

Non-human Identity (NHI) lifecycle firm Entro Security has raised $18 million in a Series A funding round led by Dell Technologies Capital and including angel investors.

The funds will be used to scale the firm’s global operations. This will include increasing the firm’s headcount from 35 to around 80 by the end of 2024.

Entro’s platform is designed to bring order to the increasingly chaotic management of non-human identities. Identity management has always been problematic; but the growth of digital transformation and expansion of cloud infrastructures has led to a massive and increasing use of non-human, machine identities. Entro suggests there are approximately 45 non-human identities for every human identity in use, and these are scattered across multiple vaults and secrets stores.

Managing the lifecycle of these identities is hard. “Both IBM and Verizon reports ranked NHI and secrets breaches as the second most frequent attack and the costliest one,” comments Itzik Alvas, CEO and co-founder of Entro Security. There are thousands of unmanaged NHIs in each organization, with more permissions than needed resulting in widespread vulnerabilities, says the firm.

The recent compromise of Dropbox Sign, discovered April 24, 2024 and announced May 1, 2024, is an example of an NHI breach. “The actor compromised a service account that was part of Sign’s back end, which is a type of non-human account used to execute applications and run automated services,” announced Dropbox.

The Entro platform automates governance for secrets and NHI management: recognizing them at creation, vaulting and rotating them automatically, and eventually decommissioning idle or stale identities. 

It provides detection and response in real time on premise, in the cloud, and across SaaS applications. It provides visibility at creation, in storage, and at exposure locations, enriching that visibility with business context. It identifies risk for remediation and can detect and respond to abnormal behavior. It also helps to ensure compliance with regulations such as SOC2 and GDPR.

Entro Security emerged from stealth with $6 million seed funding in May 2023. It was founded by Adam Cheriki (CTO) and Itzik Alvas (CEO), both alumni of Israel’s IDF cyber units. The firm is headquartered in Boston, Mass. With this Series A round, it has now raised a total of $24 million.

Advertisement. Scroll to continue reading.

Related: CyberArk to Acquire Machine Identity Firm Venafi for $1.54 Billion

Related: Venafi Leverages Generative AI to Manage Machine Identities

Related: Machine Identity Management Firm AppViewX Raises $20 Million

Written By

Kevin Townsend is a Senior Contributor at SecurityWeek. He has been writing about high tech issues since before the birth of Microsoft. For the last 15 years he has specialized in information security; and has had many thousands of articles published in dozens of different magazines – from The Times and the Financial Times to current and long-gone computer magazines.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Learn how to utilize tools, controls, and design models needed to properly secure cloud environments.

Register

Event: ICS Cybersecurity Conference

The leading industrial cybersecurity conference for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Register

People on the Move

ICS and OT cybersecurity solutions provider TXOne Networks appoints Stephen Driggers as new CRO

Identity orchestration provider Strata Identity appoints Aldo Pietropaolo as Field CTO

Cybersecurity provider for the aviation industry Cyviation has appointed Eliran Almog as Chief Executive Officer.

More People On The Move

Expert Insights