Hush Security
Hush Security is an Israeli cybersecurity company that provides a SPIFFE/SPIRE-based identity and access management platform, replacing static secrets with just-in-time, short-lived credentials for AI agents, workloads, and non-human identities across cloud and hybrid environments.
- Company typePrivate
- Founded2025
- HeadquartersTel Aviv-yafo, Israel
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Hush Security does
Hush Security is an Israeli cybersecurity company headquartered in Tel Aviv-Yafo that has built a secretless, identity-based access management platform for AI agents, workloads, service accounts, and other non-human identities (NHIs). The platform is built natively on the SPIFFE/SPIRE framework, issuing every workload a cryptographically verified SPIFFE ID derived from environmental signals (Kubernetes namespace, service account, node identity, container image). It replaces static secrets with short-lived, just-in-time, scoped credentials that are automatically revoked after task completion, and uses a lightweight eBPF-based runtime sensor to observe system calls and network activity without kernel modification. The platform operates across cloud, hybrid, and on-premises environments, with integrations spanning AWS, GCP, Azure, Kubernetes, PostgreSQL, MongoDB, Snowflake, Stripe, OpenAI, Anthropic, Bedrock, Vertex AI, Kafka, GitHub, and others, without requiring code changes on the resource side. The core commercial product is the Unified Access Management Platform (GA February 2026), supplemented by modules including Runtime Visibility and Control, Runtime Secrets Detection and Remediation, Runtime Risk and Posture Management, Identity-Based Access for Workloads and NHIs, Secure Access for Agentic AI, Identity as Code, and CI/CD Pipeline Security.
The company employs 11-50 people and was founded by four security veterans (Micha Rave as CEO, Chen Nisnkorn as CCO, Shmulik Ladkani as CTO, Alon Horowitz as VP R&D), with additional leadership including Rita Katzir (VP Product), Adi Chemoul (VP Marketing), and Yuval Lazar (Head of Security Research). It emerged from stealth in September 2025 with $11 million in seed funding co-led by Battery Ventures and YL Ventures. The go-to-market motion is hybrid: a Free Forever plan (up to 5 applications, 3 users, no time limit) drives product-led adoption, while enterprise expansion is supported by direct field sales (Request a Demo, Talk to an Expert CTAs) and a strategic partnership with SDG Corporation. Named enterprise customers include Firefly, Riskified, Kiloverse, Shift4, PlaxidityX, and Swimlane. The company holds SOC 2 Type II and ISO 27001 certifications, is a CNCF Silver Member, and was selected for the 2026 CrowdStrike/AWS/NVIDIA Cybersecurity Startup Accelerator.
Hush Security firmographics
Firmographics- Name
- Hush Security
- Legal name
- Hush Security Ltd.
- Website
- https://hush.security
- Company type
- Private
- Founded year
- 2025
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Hush Security is an Israeli cybersecurity company that provides a SPIFFE/SPIRE-based identity and access management platform, replacing static secrets with just-in-time, short-lived credentials for AI agents, workloads, and non-human identities across cloud and hybrid environments.
- Ownership category
- akta.pro rank
Hush Security industry classification
Industry- Product category
- Identity and Access Management
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD)
- akta.pro secondary industries
- Secrets Management & Credential Security (HDADACAH), Access Management & Policy Enforcement (Zero Trust) (BPAMAEAH), Confidential Computing & Hardware-backed Protection (TEE/HSM) (HDADAFAJ)
Keywords
Where Hush Security is headquartered
LocationHeadquarters
- HQ city
- Tel Aviv-yafo
- HQ country
- Israel
- HQ region
- Middle East
Offices1 record
Markets served
Hush Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription - Unified Access Management Platform: Hush Security operates as a SaaS platform providing secretless access management for AI agents and non-human identities. Revenue is generated through subscription plans (Free Forever tier, with paid enterprise plans implied for broader deployments). The platform is offered as a SaaS service with flexible deployment options including fully SaaS, on-premises, and hybrid models.
- Free Forever Plan (Lead Gen / Freemium): A free tier enables teams to shift from secrets-based access to identity-based access, providing runtime detection, posture analysis, and just-in-time identity-based access policies for up to 5 applications and 3 users with no time limit. This drives top-of-funnel conversion to paid enterprise plans.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free Forever Plan: Up to 5 applications, up to 3 users, no time limit, no forced upgrade |
| Subscription | Annual | Enterprise/Paid Plans (not publicly priced) |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels7 records
Hush Security product offering
Product offeringCore offering
Hush Security provides a Unified Access Management Platform that delivers secretless, identity-based access for AI agents, workloads, and non-human identities (NHIs). Built on the SPIFFE/SPIRE framework, the platform issues short-lived, just-in-time, ephemeral, scoped credentials at runtime, replacing static secrets, API keys, and long-lived tokens. A lightweight eBPF-based runtime sensor provides continuous visibility, risk scoring, and policy enforcement across cloud, hybrid, and on-premises environments.
Product overview
Hush Security offers a unified identity-based access management platform for agentic AI and non-human identities (NHIs). The core product is the Unified Access Management Platform, which extends identity-based access policies across enterprise infrastructure including AI agent deployments. The platform is built on the SPIFFE framework and replaces static secrets with dynamic, just-in-time, scoped credentials issued at runtime. Key modules include Runtime Visibility & Control for discovering and inventorying NHIs, Runtime Secrets Detection & Remediation for surfacing and eliminating exposed secrets, Runtime Risk & Posture Management for exploitable risk prioritization, Identity-Based Access for Workload & NHIs for eliminating standing privileges, Secure Access for Agentic AI for MCP and agent governance, Identity as Code for embedding access in developer workflows, and CI/CD Pipeline Security for injecting ephemeral credentials into build pipelines. A Free Forever tier provides access for up to 5 applications with basic monitoring capabilities.
Differentiator
Problem solved
Functional benefit
Products and services
- Unified Access Management Platform Secretless, identity-based access management platform for AI agents and non-human identities; replaces static secrets with just-in-time, ephemeral, scoped credentials issued at runtime using SPIFFE/SPIRE identity, with runtime visibility, risk scoring, and policy enforcement across cloud, hybrid, and on-premises environments.
- Free Forever Plan Free tier of the Hush Security identity platform that lets teams monitor up to 5 applications with up to 3 users, providing full platform access with runtime detection, posture analysis, and just-in-time identity-based access policies; includes 2 hours with the customer success team and no time limit.
- Runtime Certificate Intelligence with Post-Quantum Readiness Detection Capability within the platform that continuously detects, validates, and replaces cryptographic certificates across cloud, hybrid, and on-premises environments, including post-quantum compliant certificates, as part of the secretless access offering.
Quantifiable outcome
- 88% of web application attacks involve stolen credentials (Hush-cited industry statistic)
- +5 more outcomes
Companies that use Hush Security
Customer profileNamed customers6 records
Segments2 records
Ideal customer profiles2 records
Hush Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration24 records
AI capability2 records
Feature7 records
Hush Security partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core, major and minor.
- SDG CorporationcoreStrategic partnership announced June 10, 2026 to help organizations secure and govern non-human identities including secrets, service accounts, AI agents, and machine identities. The combined solution replaces static, long-lived credentials with just-in-time, ephemeral, scoped access granted at runtime to eliminate standing credentials and reduce credential exposure risk across enterprise environments. Leverages SDG's identity governance and privileged access management expertise alongside Hush Security's runtime identity platform.
- CrowdStrikemajorCo-organizer (with AWS and NVIDIA) of the 2026 Cybersecurity Startup Accelerator, an eight-week program providing mentorship, technical expertise, cloud compute resources, AI frameworks, funding, and go-to-market support to 35 selected startups including Hush Security. Culminated in a Demo Day at RSA Conference in San Francisco with potential investment from the CrowdStrike Falcon Fund.
- Amazon Web Services (AWS)majorCo-organizer (with CrowdStrike and NVIDIA) of the 2026 Cybersecurity Startup Accelerator. Provided cloud compute resources, technical enablement, and hosted the Demo Day at the AWS Startup Loft in San Francisco. AWS infrastructure is used by Hush for its own operations.
- NVIDIAmajorCo-organizer (with CrowdStrike and AWS) of the 2026 Cybersecurity Startup Accelerator through the NVIDIA Inception program for AI and deep learning startups. Provided AI frameworks and technical expertise as part of the eight-week program.
- Automat-itminorAutomat-it helped Hush Security reduce its annual cloud costs by $45,000, indicating a consulting/optimization engagement. The nature of the engagement suggests Automat-it serves as an implementation or cloud infrastructure consulting partner.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
Hush Security competitors and assessment
Company assessmentDirect peers
- HashiCorp Vault: HashiCorp Vault is the incumbent secrets management platform most directly displaced by Hush's secretless approach. Both target the same use case — issuing, rotating, and revoking credentials for workloads, services, and humans — but Hush's identity-first, no-code-change model positions it as a vault replacement rather than an alternative.
- Akeyless: Akeyless is a SaaS-native secrets management and zero-trust access platform competing head-to-head with Hush for the same buyer persona (DevOps/platform engineering and security teams). Both offer vaultless, identity-based access for workloads and machine identities without on-prem infrastructure.
- GitGuardian: GitGuardian focuses on detecting and remediating leaked secrets in code repositories, pipelines, and developer environments. It overlaps with Hush's Runtime Secrets Detection & Remediation and secret sprawl use cases and targets the same engineering-team buyer.
- Astrix Security: Astrix Security is an identity-focused startup targeting non-human identity (NHI) security and machine access governance. It competes with Hush in NHI discovery, posture management, and AI agent/MCP governance for security teams.
- Entro Security: Entro Security provides a platform for discovering, inventorying, and securing non-human identities and secrets across cloud and SaaS environments, overlapping directly with Hush's Runtime Visibility & Control and NHI risk prioritization modules.
Broad incumbents
- CyberArk: CyberArk is the established leader in Privileged Access Management (PAM) and is actively expanding into machine identities and cloud workload entitlements. It competes with Hush in the same identity-and-access-for-machines space but from a much larger installed base of enterprise credentials manager customers.
- Okta: Okta is a leading identity and access management platform spanning workforce and customer identity. It is a broad incumbent whose Workload Identity offerings converge with Hush in the identity-for-machines category but it is not specialized in secretless runtime access.
Emerging players
- Infisical: Infisical is an open-source secrets management platform for developer teams, with focus on developer experience and self-hosting. It serves the same engineering-team persona for secrets/credential management but is less focused on runtime identity and NHI governance than Hush.
- Doppler: Doppler is a developer-focused secrets management platform for syncing environment variables and application secrets. It overlaps with Hush on the developer side of secrets management but lacks the runtime NHI and AI agent governance capabilities.
- StrongDM: StrongDM provides infrastructure access management for databases, servers, and Kubernetes, with Zero Trust posture for engineers. It overlaps with Hush on identity-based access for workloads and developer access patterns.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Hush Security social profiles
Digital presenceHush Security compliance and trust
Trust signalCompliance2 records
Hush Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Hush Security leadership team
Management profileNumber of profiles
Profiles7 records
Hush Security funding detail
Funding detailFunding overview
Funding rounds3 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Hush Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Hush Security
What does Hush Security do?
Hush Security provides a Unified Access Management Platform that delivers secretless, identity-based access for AI agents, workloads, and non-human identities (NHIs). Built on the SPIFFE/SPIRE framework, the platform issues short-lived, just-in-time, ephemeral, scoped credentials at runtime, replacing static secrets, API keys, and long-lived tokens. A lightweight eBPF-based runtime sensor provides continuous visibility, risk scoring, and policy enforcement across cloud, hybrid, and on-premises environments.
Is Hush Security a public or private company?
Hush Security is a private company. It is classified as venture growth investor backed and is currently operating.
When was Hush Security founded?
Hush Security was founded in 2025. It employs 11 to 50 people.
Where is Hush Security based?
Hush Security is headquartered in Tel Aviv-yafo, Israel, in the Middle East region.
How does Hush Security make money?
Two revenue lines are on record. SaaS Subscription - Unified Access Management Platform is the primary driver. The others are free Forever Plan (Lead Gen / Freemium).
Who are Hush Security's main competitors?
Direct peers on record are HashiCorp Vault, Akeyless, GitGuardian, Astrix Security and Entro Security. Broad incumbents are CyberArk and Okta. Emerging players are Infisical, Doppler and StrongDM.
Does Hush Security have an API?
No public API is recorded for Hush Security.
What industry is Hush Security in?
Hush Security's product category is Identity and Access Management. Its primary akta.pro industry code is HDADAFAD, Secrets Management (Passwords, API Keys, Tokens), with a secondary code of HDADACAH, Secrets Management & Credential Security. Its SIC code is 7372.