What Opal Security does

Opal Security, legally Perma Security Incorporated (DBA Opal), is a San Francisco-based identity and access governance vendor founded in 2020. The company operates an AI-native platform that builds a unified access graph across 250+ systems — spanning identity providers (Okta, Azure AD/Entra ID, Google Workspace), cloud infrastructure (AWS, GCP, Azure with granular resource-level coverage), SaaS applications, databases, ITSM, and AI platforms (Anthropic, OpenAI, Cursor, Devin AI). On top of this access graph, Opal delivers three proprietary AI capabilities: Paladin, an AI agent that autonomously evaluates access requests and revokes entitlements; OpalQuery, a natural-language interface for surfacing risk and entitlement questions; and OpalScript, a policy-as-code language that can be generated by AI from natural-language descriptions. Adjacent workflow modules include Just-In-Time Access, AI-Guided Access Reviews, and Security for AI Agents. Deployment options cover hosted SaaS on AWS, customer VM, Kubernetes, or AWS ALB, with US/EU data residency, SOC 2 Type II, GDPR, CCPA, and FedRAMP High configurations.

The platform is sold via a sales-led enterprise GTM with quote-based annual subscriptions executed through an Order Form under the Opal SaaS Agreement, supported by Forward Deployed Engineers, Solutions Engineers, and Technical Customer Success Managers. Customer segments are primarily security engineering and IAM/IGA leaders at regulated enterprises and AI-forward platform teams, with strong traction in fintech (Blend, Valon, Merge, Mercari, CoinList), cloud-native and AI infrastructure (Databricks, Cloudflare, CoreWeave, Scale AI, Figma), and cybersecurity buyers (Palo Alto Networks, Sophos, Elastic, Obsidian). Total disclosed funding is $59M across a 2021 seed ($1.8M, Greylock), a 2023 Series B ($22M, Battery Ventures led), and a June 2026 round ($23M, Greylock and Battery Ventures co-led, Cambium Capital participating). Opal is a privately held, venture-backed company with no parent entity; its most recent CEO appointment (Howard Ting, December 2025) and a June 2026 leadership expansion including CPO Sameer Mehta from Veza coincide with the AI-native product launches.

Name

Opal Security

Legal name

Perma Security Incorporated

Website

https://opal.dev

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

11–50 employees

Short description

Opal Security is an AI-native access governance platform that builds a unified access graph across 250+ systems and uses autonomous AI agents, policy-as-code, and natural-language queries to enforce least-privilege access for enterprise security engineering, IAM, and AI-platform teams.

Ownership category

akta.pro rank

Product category

Identity and Access Governance

NAICS

Security Systems Services (except Locksmiths) (561621)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Privileged Access Management (PAM) (HDADAAAC)

akta.pro secondary industries

Identity Orchestration & Policy (Zero Trust Access, Conditional Access) (HDADAAAL), Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG)

Keywords

• Identity governance
• Access management
• Privileged access
• Zero trust security
• Cloud access governance

Headquarters

HQ city

San Francisco

HQ country

United States

HQ region

North America

Offices4 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Opal Security SaaS Subscription: Recurring SaaS subscription paid under an Order Form governed by the Opal Security SaaS Agreement (Perma Security Incorporated dba Opal). Customers access the hosted Opal product and documentation. Initial terms renew automatically in 12-month increments unless 60 business days' notice is given. Includes optional self-hosted deployment under an Opal license. Fees paid within 30 days of invoice; 1.5% per month finance charges on overdue balances. Includes professional services-style deployment support (Forward Deployed Engineer function evidenced by hiring and customer case studies).
2. Professional Services / Deployment Engineering: Forward Deployed Engineer, Solutions Engineer, and Technical Customer Success Manager roles are staffed to deliver hands-on deployment, integration, and ongoing customer success — supporting implementation-heavy enterprise rollouts alongside the core subscription.

Pricing tiers

Go-to-market motion5 records

Core offering

Opal Security provides an AI-native access governance platform that models an organization's permissions as a real-time access graph across 250+ systems (cloud, identity, SaaS, databases, AI platforms). It enforces fine-grained access policies through a policy-as-code engine (OpalScript), a natural-language query interface (OpalQuery), and an autonomous AI agent (Paladin) that makes access decisions, automates access reviews, and governs human, service, and AI agent identities.

Product overview

Opal Security offers a single unified identity security and access governance platform that combines a real-time access graph, a policy-as-code engine (OpalScript), a natural-language query interface (OpalQuery), and an autonomous AI agent (Paladin) for access decisions. Built on this core platform are workflow modules including AI-Guided Access Reviews, Just-In-Time Access, Security for AI Agents, and Programmable Governance, which extend the platform into certification, time-bound provisioning, AI-agent identity governance, and code-driven automation respectively.

Differentiator

Problem solved

Functional benefit

Brands

• Paladin: AI agent that evaluates access requests, applies policy, evaluates risk, approves safe requests, and escalates to humans when needed; branded as part of the Opal product line.
• OpalScript
• OpalQuery

Named customers17 records

Segments6 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration57 records

AI capability9 records

Feature9 records

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Veza: AI-native identity security and access governance platform that maps permissions across cloud and SaaS systems. Most direct comparable given shared AI-native positioning and overlapping customer base (Opal's CPO Sameer Mehta joined from Veza).
• ConductorOne: Cloud-native identity governance and access automation platform offering just-in-time access, access reviews, and provisioning across SaaS and infrastructure. Closely comparable in target buyer, use cases (JIT, reviews, least-privilege), and stage.

Broad incumbents

• SailPoint: Legacy IGA market leader offering identity governance, access certifications, and provisioning across enterprise environments. Represents the established incumbent Opal positions against with its AI-native, API-first approach.
• Saviynt: Cloud-native IGA platform focused on identity governance, privileged access management, and access reviews for large enterprises. Competes head-to-head with Opal in regulated, multi-cloud identity governance deals.
• Okta: Identity and access management platform whose IGA, privileged access, and governance capabilities increasingly overlap with Opal. Functions both as Opal's primary identity source (via Okta integration) and as a competitor for the same enterprise IAM budget.
• CyberArk: Privileged access management leader that has expanded into identity governance and just-in-time access. Directly competes in the privileged-access and least-privilege enforcement use cases that anchor Opal's product.
• Microsoft Entra ID (Azure AD) Governance: Microsoft's cloud identity governance and access management suite bundled into the broader Microsoft security platform. Competes on enterprise access reviews and lifecycle workflows, often displacing point-tool purchases in Microsoft-heavy estates.
• BeyondTrust: Privileged access management and identity security vendor covering password vaulting, session management, and just-in-time elevation. Overlaps with Opal's privileged access and JIT capabilities for enterprise security buyers.

Emerging players

• Pomerium: Open-core zero trust access proxy focused on identity-aware proxying and context-based access policy. Adjacent to Opal on the access enforcement layer, particularly for engineering-forward buyers who prefer code-first policy.
• StrongDM: Infrastructure access platform providing just-in-time, audited access to databases, servers, and cloud resources. Competes with Opal's JIT and break-glass capabilities for engineering and SRE personas in mid-market and enterprise.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/opal_sec

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds4 records

Investors5 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Opal Security