Non-human Identity (NHI) lifecycle firm Entro Security has raised $18 million in a Series A funding round led by Dell Technologies Capital and including angel investors.
The funds will be used to scale the firm’s global operations. This will include increasing the firm’s headcount from 35 to around 80 by the end of 2024.
Entro’s platform is designed to bring order to the increasingly chaotic management of non-human identities. Identity management has always been problematic; but the growth of digital transformation and expansion of cloud infrastructures has led to a massive and increasing use of non-human, machine identities. Entro suggests there are approximately 45 non-human identities for every human identity in use, and these are scattered across multiple vaults and secrets stores.
Managing the lifecycle of these identities is hard. “Both IBM and Verizon reports ranked NHI and secrets breaches as the second most frequent attack and the costliest one,” comments Itzik Alvas, CEO and co-founder of Entro Security. There are thousands of unmanaged NHIs in each organization, with more permissions than needed resulting in widespread vulnerabilities, says the firm.
The recent compromise of Dropbox Sign, discovered April 24, 2024 and announced May 1, 2024, is an example of an NHI breach. “The actor compromised a service account that was part of Sign’s back end, which is a type of non-human account used to execute applications and run automated services,” announced Dropbox.
The Entro platform automates governance for secrets and NHI management: recognizing them at creation, vaulting and rotating them automatically, and eventually decommissioning idle or stale identities.
It provides detection and response in real time on premise, in the cloud, and across SaaS applications. It provides visibility at creation, in storage, and at exposure locations, enriching that visibility with business context. It identifies risk for remediation and can detect and respond to abnormal behavior. It also helps to ensure compliance with regulations such as SOC2 and GDPR.
Entro Security emerged from stealth with $6 million seed funding in May 2023. It was founded by Adam Cheriki (CTO) and Itzik Alvas (CEO), both alumni of Israel’s IDF cyber units. The firm is headquartered in Boston, Mass. With this Series A round, it has now raised a total of $24 million.
Related: CyberArk to Acquire Machine Identity Firm Venafi for $1.54 Billion
Related: Venafi Leverages Generative AI to Manage Machine Identities
Related: Machine Identity Management Firm AppViewX Raises $20 Million
