Pathlock
Pathlock provides AI-native identity and application access governance for Global 2000 enterprises running SAP, Oracle, Workday, and 150+ business applications, covering SoD analysis, continuous controls monitoring, ERP cybersecurity, and non-human identity governance across 1,400+ customers.
- Company typePrivate
- Founded2006
- HeadquartersDenver, United States
- Headcount501–1,000
- GTM typeB2B
- OfferingSoftware
What Pathlock does
Pathlock is a Denver-headquartered, privately held software vendor providing identity and application access governance for Global 2000 enterprises that operate complex SAP, Oracle, Workday, and adjacent ERP landscapes. Founded in 2006, the company grew significantly through a May 2022 consolidation that merged it with Appsian and Security Weaver, acquired CSI Tools and SAST SOLUTIONS, and was funded with a $200 million capital raise led by Vertica Capital Partners; a subsequent September 2022 acquisition of the UK-based Grey Monarch added SAP process automation capabilities. Pathlock now operates offices in Denver and Hamburg and serves 1,400+ enterprise customers including Aramco, P&G, Chevron, Toyota, Siemens, Microsoft, Electrolux, Jabil, the University of California, and Linde.
The core technology is Pathlock Nexus, an AI-native governance platform delivering real-time transaction monitoring, access risk analysis, continuous controls monitoring, cybersecurity application controls, and dynamic access control (data masking, scrambling, attribute-based authorizations) across 150+ business applications. The platform maintains one of the broadest integration footprints in the industry, anchored by SAP-endorsed status, 500+ out-of-the-box compliance rules, 4,000+ customizable vulnerability checks, and a controls library refined over nearly 20 years. A distinguishing capability is the governance of non-human identities (NHI) — AI agents, RPA bots, and service accounts — operating at machine speed in modern ERP environments, alongside quantified risk scoring tied to actual financial impact rather than qualitative designations.
Pathlock operates a subscription SaaS revenue model (enterprise, quote-based, with no public pricing), supplemented by professional services for implementation and partner-delivered managed services. Go-to-market is channel-first: direct enterprise field sales complemented by all Big Four GSIs (KPMG, PwC, Deloitte, EY) plus Accenture and Protiviti, technology partnerships with ServiceNow (Build partner), Microsoft (Sentinel integration), and NTT DATA Business Solutions (managed SAP cybersecurity), and presence in the ServiceNow Store. Holdco structure: Pathlock, Inc. (Delaware), with acquired brands retained as wholly-owned subsidiaries.
Pathlock firmographics
Firmographics- Name
- Pathlock
- Legal name
- Pathlock, Inc.
- Website
- https://pathlock.com
- Company type
- Private
- Founded year
- 2006
- Operating status
- Operating
- Headcount range
- 501–1,000 employees
- Short description
- Pathlock provides AI-native identity and application access governance for Global 2000 enterprises running SAP, Oracle, Workday, and 150+ business applications, covering SoD analysis, continuous controls monitoring, ERP cybersecurity, and non-human identity governance across 1,400+ customers.
- Ownership category
- akta.pro rank
Pathlock industry classification
Industry- Product category
- Identity and Application Access Governance (ERP Security & GRC Software)
- NAICS
- Software Publishers (5132)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Identity Lifecycle & Provisioning Automation (SCIM, JML, Provisioning) (HDADAAAK)
- akta.pro secondary industry
- Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK)
Keywords
Where Pathlock is headquartered
LocationHeadquarters
- HQ city
- Denver
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
Pathlock business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS/Cloud Platform Subscription: Annual or multi-year subscription licensing for access to the Pathlock Cloud Platform, covering identity governance, access governance, continuous controls monitoring, and cybersecurity application controls. Subscription tiers likely vary by number of applications, users, or transaction volumes monitored.
- Expert Services and Professional Services: Professional services including implementation, configuration, deployment, training, and certification services provided alongside the SaaS platform to enterprise customers.
- Partner-Delivered Managed Services: Managed SAP cybersecurity services delivered through partners such as NTT DATA Business Solutions, extending Pathlock's technology to customers via partner-operated Security Operations Centers with 24/7 SAP threat monitoring.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise tier with full platform access |
Go-to-market motion1 record
Distribution channels4 records
Marketing channels9 records
Pathlock product offering
Product offeringCore offering
Pathlock sells an AI-native governance platform (Pathlock Nexus) that delivers identity governance, application access governance, continuous controls monitoring, cybersecurity application controls, and dynamic data masking across SAP, Oracle, Workday, and more than 150 business applications. The platform automates segregation-of-duties analysis, user access reviews, compliant provisioning (JML), and vulnerability/threat detection for ERP environments, while uniquely governing non-human identities such as AI agents and RPA bots. Delivered primarily as annual or multi-year enterprise SaaS subscriptions, complemented by professional services and partner-delivered managed SAP cybersecurity services.
Product overview
Pathlock is a unified AI-native governance platform for business-critical applications, comprising the Pathlock Nexus core platform plus multiple integrated modules. The platform includes Application Access Governance (covering Access Risk Analysis, Compliant Provisioning, User Access Reviews, Elevated Access Management, and Role Management), Continuous Controls Monitoring (Controls Management, Risk Quantification, Change Monitoring), Cybersecurity Application Controls (Vulnerability Management, Code Scanning, Transport Control, Threat Detection, Application Profiler), and Dynamic Access Control (Discovery and Classification, Dynamic Data Masking, Data Scrambling, Dynamic Authorizations, Logging and Alerts). The portfolio spans over 150 integrated business applications including SAP, Oracle, Workday, and Salesforce, serving 1,400+ customers with capabilities for SOX compliance, GDPR, CCPA, HIPAA, and NIST frameworks.
Differentiator
Problem solved
Functional benefit
Brands
- Pathlock Nexus: The AI-native governance fabric for business-critical applications — continuously governing identity, controls, and security.
Products and services
- Pathlock Nexus AI-native governance fabric that delivers continuous identity governance, controls monitoring, and security across SAP, Oracle, Workday, and over 150 business applications for enterprise customers; embedded AI agents drive non-human identity (NHI) governance alongside human-user controls.
- Application Access Governance Provides fine-grained visibility and control over application access for security and compliance across multiple ERP and business applications, covering access risk analysis, compliant provisioning, user access reviews, elevated access management, and role management for Global 2000 enterprises.
- Continuous Controls Monitoring Automates and monitors business process and financial controls across ERP and business applications to reduce risk in real time; centralizes controls management, quantifies material impact of violations across 100% of transactions, and continuously tracks changes to key application and access-related data for SOX/UK-SOX compliance.
- Cybersecurity Application Controls Proactive and reactive security controls for critical SAP applications, including vulnerability management with 4,000+ customizable checks, automated ABAP/UI5 code scanning, transport control, threat detection at scale, and application profiling for custom transactions.
- Dynamic Access Control Real-time, attribute-based security for SAP with automated discovery and classification of sensitive data, dynamic field-level data masking, data scrambling for non-production environments, dynamic authorizations, and comprehensive logging and alerts for every data access attempt.
- Access Risk Analysis Identifies role conflicts and manages Segregation of Duties (SoD) across critical business applications with customizable rulesets and cross-application conflict correlation (e.g., SAP + Ariba + Salesforce).
- Compliant Provisioning Automates Joiner/Mover/Leaver (JML) provisioning workflows using fine-grained user-risk analysis to ensure access changes remain compliant across ERP and business applications.
- User Access Reviews Automates periodic and continuous user access reviews across enterprise applications and produces evidence for compliance and audit, enabling reviewers to confirm or revoke access with full audit trails.
- Elevated Access Management Provides automated and audit-proof elevated/privileged access management for ERP admins, including secure break-glass access with full session monitoring and auditor-ready proof.
- Role Management Streamlines designing, updating, and maintaining roles for ERP applications by automatically grouping and assigning permissions based on job titles and enabling secure, compliant role build and testing.
- Threat Detection for SAP Detects and responds to SAP security threats at scale through real-time monitoring of SAP transactions and logs, identifying zero-day vulnerabilities, insider misuse, and data exfiltration, with integration into the Microsoft Sentinel SIEM for unified SOC workflows.
- Connector Studio Discovery and integration platform exposing pre-built connectors to 150+ business applications, identity management solutions, and workflow management solutions, including no-code tools for building custom integrations.
Quantifiable outcome
- 10x increase in JML (Joiner/Mover/Leaver) automation
- +3 more outcomes
Companies that use Pathlock
Customer profileNamed customers10 records
Segments3 records
Ideal customer profiles2 records
Pathlock technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration21 records
AI capability5 records
Feature6 records
Pathlock partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core.
- NTT DATA Business SolutionscoreGlobal strategic partnership with NTT DATA Business Solutions, an SAP Platinum partner, to deliver managed SAP cybersecurity services worldwide. The collaboration combines Pathlock's Cybersecurity Application Controls technology and AI-native Pathlock Nexus platform with NTT DATA Business Solutions' Security Operations Center capabilities to provide 24/7 SAP threat monitoring, detection, and response. The partnership helps enterprises address rising ransomware attacks, insider threats, and fraud risks while reducing operational complexity and dependence on scarce SAP security expertise.
- ServiceNowcoreIntegration with ServiceNow embeds risk-aware access governance capabilities directly into the ServiceNow AI Platform, enabling enterprises to manage access requests through the ServiceNow Service Portal and Service Catalog. The integration performs automated Segregation of Duties analysis and risk checks before provisioning access across ERP, financial, cloud, and line-of-business applications, while enforcing least privilege access and logging actions for audit readiness. Pathlock is a Build partner in the ServiceNow Partner Program and has developed an application available in the ServiceNow Store.
- MicrosoftcoreIntegration between Pathlock's Cybersecurity Application Controls (CAC) solution and Microsoft Sentinel Solution for SAP enables Security Operations Centers (SOCs) to consolidate SAP and non-SAP threat data in a single view, addressing visibility gaps that previously required separate specialized tools for SAP monitoring. SOC teams can identify and respond to threats including zero-day vulnerabilities, insider misuse, and data exfiltration attempts in real time, directly from the Microsoft Sentinel SIEM platform.
- KPMGcorePathlock collaborates with KPMG, one of the world's leading systems integrators, to ensure seamless deployments and expert implementation, delivering rapid time-to-value, maximum security, and continuous compliance for joint enterprise customers.
- PwCcorePathlock partners with PwC for deployment and implementation services, leveraging PwC's GRC and cybersecurity consulting expertise to deliver the Pathlock platform to enterprise customers.
- DeloittecorePathlock partners with Deloitte for deployment and implementation services, leveraging Deloitte's management consulting expertise to deliver Pathlock's access governance and compliance solutions to enterprise customers.
- ProtiviticorePathlock partners with Protiviti for deployment and implementation services, leveraging Protiviti's internal audit and GRC consulting capabilities to deliver Pathlock's platform to enterprise customers.
- EYcorePathlock partners with EY for deployment and implementation services, leveraging EY's risk and compliance consulting expertise to deliver Pathlock's access governance solutions.
- AccenturecorePathlock partners with Accenture for deployment and implementation services, leveraging Accenture's global systems integration capabilities to deliver Pathlock's platform to enterprise customers worldwide.
Scale indicators8 records
Recent moves6 records
Expansion highlights7 records
Pathlock competitors and assessment
Company assessmentDirect peers
- SailPoint: SailPoint is the leading pure-play identity governance and administration (IGA) platform serving large enterprises. It is directly comparable to Pathlock as both compete for the same IGA budget, with Pathlock differentiated by deep ERP (SAP/Oracle/Workday) access governance versus SailPoint's broader workforce IGA footprint.
- Saviynt: Saviynt is a cloud-native identity governance and privileged access management platform competing for the same enterprise IGA wallet as Pathlock. It is highly comparable as both target large enterprises with cross-application SoD and access risk use cases, though Pathlock is more ERP-centric while Saviynt is broader across cloud and SaaS.
- One Identity (Quest Software): One Identity provides identity governance, access management, and privileged access solutions to mid-market and enterprise customers. It is comparable to Pathlock as both sell IGA and access governance platforms; Pathlock differentiates through ERP depth, while One Identity offers a broader AD/IAM heritage.
Broad incumbents
- SAP (SAP GRC / SAP Access Control): SAP Access Control is SAP's native governance, risk, and compliance offering tightly bundled with the SAP ERP suite. It is comparable because SAP Access Control is the incumbent Pathlock extends and replaces for cloud and non-SAP applications, making SAP both a critical partner and the most direct competitive threat to Pathlock's SAP footprint.
- Microsoft (Entra ID Governance / Purview): Microsoft Entra ID Governance and Microsoft Purview provide identity governance, access reviews, and data security capabilities embedded across the Microsoft cloud stack. It is comparable because Microsoft is both a strategic integration partner (Entra ID, Sentinel) for Pathlock and a broad incumbent that could subsume entry-level IGA workloads.
- IBM Security (Verify Governance, Guardium): IBM Security offers a portfolio of identity governance (Verify Governance) and data security (Guardium) products serving large regulated enterprises. It is comparable to Pathlock as both target Fortune 500 compliance and ERP/data security buyers, though IBM is a broader portfolio play versus Pathlock's ERP-focused platform.
- Oracle Risk Management & Compliance: Oracle offers native GRC and access governance capabilities tightly coupled to Oracle ERP Cloud and E-Business Suite. It is comparable because Oracle is both a deep integration partner and a competing platform for Oracle-centric Pathlock customers, particularly for SoD and access risk analysis in Oracle ERP environments.
- RSA Security: RSA provides identity governance, access, and cybersecurity products to large regulated enterprises, historically strong in financial services. It is comparable as a broad incumbent IGA and access risk player, though RSA's portfolio is more general-purpose versus Pathlock's ERP-specialized approach.
Emerging players
- ServiceNow (IRM / Integrated Risk Management): ServiceNow Integrated Risk Management and its workflow-based access request capabilities compete for the same GRC and access governance budget. It is comparable because ServiceNow is both a deep integration/distribution partner for Pathlock (Build partner, ServiceNow Store) and an emerging workflow-driven competitor targeting the same enterprise risk owners.
Others
- Okta (Okta Identity Governance): Okta is primarily known for identity and access management (SSO, MFA, lifecycle management) and has been extending into identity governance. It is comparable as an adjacent identity platform that both competes for governance budgets and integrates with Pathlock as part of joint customer deployments.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Pathlock social profiles
Digital presencePathlock compliance and trust
Trust signalCompliance6 records
Pathlock financial estimates
Financial estimateRevenue estimate
Valuation estimate
Pathlock leadership team
Management profileNumber of profiles
Profiles2 records
Pathlock subsidiaries and ownership
Company hierarchySubsidiaries5 records
Pathlock funding detail
Funding detailFunding overview
Funding rounds3 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Pathlock M&A and investment
M&A and investmentM&A5 records
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Pathlock
What does Pathlock do?
Pathlock sells an AI-native governance platform (Pathlock Nexus) that delivers identity governance, application access governance, continuous controls monitoring, cybersecurity application controls, and dynamic data masking across SAP, Oracle, Workday, and more than 150 business applications. The platform automates segregation-of-duties analysis, user access reviews, compliant provisioning (JML), and vulnerability/threat detection for ERP environments, while uniquely governing non-human identities such as AI agents and RPA bots. Delivered primarily as annual or multi-year enterprise SaaS subscriptions, complemented by professional services and partner-delivered managed SAP cybersecurity services.
Is Pathlock a public or private company?
Pathlock is a private company. It is classified as private equity controlled and is currently operating.
When was Pathlock founded?
Pathlock was founded in 2006. It employs 501 to 1,000 people.
Where is Pathlock based?
Pathlock is headquartered in Denver, United States, in the North America region.
How does Pathlock make money?
Three revenue lines are on record. SaaS/Cloud Platform Subscription is the primary driver. The others are expert Services and Professional Services and partner-Delivered Managed Services.
Who are Pathlock's main competitors?
Direct peers on record are SailPoint, Saviynt and One Identity (Quest Software). Broad incumbents are SAP (SAP GRC / SAP Access Control), Microsoft (Entra ID Governance / Purview), IBM Security (Verify Governance, Guardium), Oracle Risk Management & Compliance and RSA Security. ServiceNow (IRM / Integrated Risk Management) is listed as an emerging player. Okta (Okta Identity Governance) is listed as an others.
Does Pathlock have an API?
No public API is recorded for Pathlock.
What industry is Pathlock in?
Pathlock's product category is Identity and Application Access Governance (ERP Security & GRC Software). Its primary akta.pro industry code is HDADAAAK, Identity Lifecycle & Provisioning Automation (SCIM, JML, Provisioning), with a secondary code of HDABAHAK, Data Security & Privacy for Cloud (DLP, DSPM, Tokenization). Its NAICS code is 5132 and its SIC code is 7372.