Corsha
- Company typePrivate
- Founded2018
- HeadquartersVienna, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
Corsha firmographics
Firmographics- Name
- Corsha
- Legal name
- Corsha, Inc.
- Website
- https://corsha.com
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Ownership category
- akta.pro rank
Corsha industry classification
Industry- Product category
- Machine Identity Management / OT Cybersecurity Software
- NAICS
- Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ)
- akta.pro secondary industries
- Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA) (HDABAHAF), Federation & Identity Standards (SAML/OIDC/OAuth, Federation Hubs) (HDADAAAG), Identity & Access Management (IAM) Managed Services (BPAEADAE)
Keywords
Where Corsha is headquartered
LocationHeadquarters
- HQ city
- Vienna
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Corsha business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Corsha Cloud SaaS subscription: Recurring subscription to Corsha's multi-tenant SaaS Identity Provider for Machines, with tiered pricing based on number of Managed Machines (Corsha Authenticators deployed) and Corsha Credential Checks, plus automatic True-Up when usage exceeds tier parameters.
- Corsha Enterprise license: Customer-dedicated, on-premise Enterprise license for the Corsha IdP Software system, sold as subscription/license with tier-based pricing and Additional Support Services for integration into customer-controlled infrastructure.
- Additional Support Services / Integration: Professional services for integration of Corsha Enterprise into customer infrastructure and contracted support, billed separately on the order form.
- Federal government contracts (DLA IDIQ, AFWERX SBIR): Multi-year federal IDIQ contracts (e.g., $50M sole-source IDIQ from DLA) plus SBIR/Air Force task orders; enables faster task orders (weeks vs. 12-24 months) with potential multi-year revenue visibility tied to defense and OT modernization programs.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Tiered subscription/license pricing for Corsha Cloud SaaS and Corsha Enterprise, scaled by number of Managed Machines (Authenticators) and Credential Checks, with automatic True-Up to next tier on sustained higher usage. |
| Usage-based | Monthly | Usage-based True-Up: tier moves up automatically when monthly Credential Checks or Managed Machines exceed current tier thresholds. |
| Other | Multi-year contract | Federal sole-source IDIQ contracts (e.g., $50M DLA) with task-order pricing issued in weeks rather than the 12-24 month traditional cycle. |
Go-to-market motion4 records
Distribution channels5 records
Marketing channels7 records
Corsha product offering
Product offeringCore offering
Corsha provides a patented Machine Identity Provider (mIDP) that issues dynamic cryptographic identities to every machine and continuously verifies machine-to-machine communication across OT and IT environments. The platform is delivered as Corsha Cloud (multi-tenant SaaS) or Corsha Enterprise (on-premise license) and replaces static API keys, tokens, and certificates with single-use MFA credentials enforced via a Distributed Ledger Network. Built on top of the mIDP are solution packages for OT Identity & Access, Zero Trust for Machines, and Manufacturing, plus the Corsha Labs innovation initiative for AI/ML-driven M2M security.
Product overview
Corsha offers a single unified platform anchored by the Corsha Machine Identity Provider (mIDP), its core product that gives every machine a dynamic, cryptographically verifiable identity and continuously authenticates machine-to-machine connections. Built on top of the mIDP are three solution offerings addressing distinct use cases: OT Identity & Access (for securing OT-to-IT connectivity in industrial environments), Zero Trust for Machines (for applying zero trust to API and service traffic), and Manufacturing (for protecting production-line and shop floor operations). The platform is delivered through two deployment models, Corsha Cloud (multi-tenant SaaS) and Corsha Enterprise (on-premise or customer-dedicated), and incorporates core capabilities including Dynamic Machine Identities, Connection Discovery, Dynamic Authentication, Intelligent Access Control, and flexible deployment options. Adjacent to the core platform, Corsha Labs extends Corsha's machine identity work into robotics and AI ecosystems with AI/ML capabilities for M2M communication.
Differentiator
Problem solved
Functional benefit
Brands
- Corsha mIDP: The Corsha Machine Identity Provider (mIDP) platform — the company's core commercial offering that provides dynamic machine identities, connection discovery, dynamic authentication, and identity-driven access control for operational technology environments.
- Corsha Labs
Products and services
- Corsha Machine Identity Provider (mIDP) Core purpose-built platform that delivers dynamic, cryptographically verifiable identities for every machine and continuously verifies machine-to-machine communication across legacy and modern operational systems. Available as Corsha Cloud (multi-tenant SaaS) and Corsha Enterprise (on-premise).
- OT Identity & Access Solution built on the Corsha mIDP that secures OT-to-IT connectivity for industrial environments, enabling dynamic and continuous verification of machine-to-machine communications between OT equipment and IT networks without requiring modifications to legacy manufacturing systems.
- Zero Trust for Machines Solution that applies zero trust principles to machine identities by delivering automated, single-use MFA credentials and dynamic verification for every automated API call, replacing static long-lived API keys, tokens, and certificates.
- Manufacturing Solution tailored for manufacturing environments that secures machine-to-machine communications across controllers, sensors, robots, and industrial workloads to enable Industry 4.0 modernization while protecting critical production systems from cyber threats.
- Corsha Labs Innovation initiative launched to expand the Corsha machine identity platform with AI/ML capabilities for machine-to-machine communication in robotics and AI ecosystems.
Quantifiable outcome
- Procurement cycle compressed from 12–24 months to weeks via the DLA IDIQ contract structure
- +4 more outcomes
Companies that use Corsha
Customer profileNamed customers14 records
Segments5 records
Ideal customer profiles4 records
Corsha technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration8 records
AI capability6 records
Feature7 records
Corsha partnerships and signals
Strategic signalPartnerships
Seven partnerships are on record, tiered core, flagship and minor.
- Booz Allen HamiltoncoreFeatured joint content 'Booz Allen and Corsha Secure Every Machine-to-Machine Connection in the Age of AI' on the Corsha blog, indicating a strategic co-marketing / co-development relationship to deliver machine identity security in AI-era federal and defense programs.
- ClarotyflagshipClaroty and Corsha partnered to enhance federal operational technology cybersecurity by integrating Claroty's threat detection with Corsha's machine access control capabilities. The collaboration improves asset visibility, machine authentication, and threat mitigation to prevent operational disruptions and cyberattacks in federal OT environments, and is part of Claroty's expansion into the federal cybersecurity market alongside its $150M Series F funding.
- DragosflagshipCorsha and Dragos joined forces to integrate their platforms for enhanced OT cybersecurity focused on zero trust architecture. The integration combines Corsha's machine identity verification with Dragos' ICS threat detection to improve threat response, prevent unauthorized machine activity, and strengthen defenses for industrial systems amid increasing complexity.
- F5 (BIG-IP)coreCorsha integrates with F5 BIG-IP using BIG-IP's Local Traffic Manager (LTM), Access Policy Manager (APM), and SSL Orchestrator via an HTTP Connector and iRule. BIG-IP serves as the Corsha Gatekeeper, performing per-request credential checks against Corsha's Identity Provider and forwarding only valid single-use MFA requests to upstream API services.
- Kong (Kong Gateway)coreCorsha released a Kong Gateway plugin (built using Kong's Go PDK) that brings MFA to non-human identities. The Corsha Authenticator adds a Corsha credential to each request; the Kong custom plugin validates it against Corsha's Distributed Ledger Network before Kong forwards the request to upstream services.
- Carahsoft TechnologycoreDistribution agreement with Carahsoft Technology to expand Corsha's federal cybersecurity market presence alongside its partnership with Claroty. Carahsoft acts as the federal contracting/distribution channel.
- Second Front SystemsminorListed as a 'Trusted By' partner on the Corsha website; Second Front Systems is a defense technology enabler for software delivery to DoD, suggesting an ecosystem relationship for federal OT deployments.
Scale indicators8 records
Recent moves6 records
Expansion highlights6 records
Corsha competitors and assessment
Company assessmentBroad incumbents
- CyberArk: CyberArk is the dominant privileged access management (PAM) and machine/secret credential management vendor. While its core focus is human and privileged credentials, it has expanded into machine identity and secrets management, making it the closest broad incumbent competing with Corsha's machine identity mission across both IT and OT.
- Microsoft Entra ID (Azure AD): Microsoft Entra ID (formerly Azure AD) is the dominant cloud identity provider and now includes workload identities and managed identities for machines. Its scale and bundling position it as a broad incumbent competitor that could pressure Corsha's enterprise IT-side IAM motion, though it lacks OT specialization.
- Palo Alto Networks (Prisma Cloud / IoT Security): Palo Alto Networks offers IoT/OT security (via the Zingbox acquisition / Prisma Cloud) and a broad security platform that includes identity, API security, and zero trust. As a broad incumbent, it competes for federal OT and enterprise zero trust budgets that Corsha targets.
Direct peers
- HashiCorp Vault: HashiCorp Vault is the leading secrets management and dynamic credential platform for API keys, tokens, and certificates. Vault's dynamic secrets and short-lived credentials compete directly with Corsha's single-use MFA for machines in cloud and microservices environments, even though Vault lacks Corsha's OT specialization.
- Venafi (now CyberArk Machine Identity Security): Venafi is the established machine identity management leader for certificates, keys, and TLS, recently acquired by CyberArk. It addresses machine identity at the certificate layer; Corsha competes at the API/authentication layer for machines, making Venafi a direct adjacent peer for non-human identity budgets.
- Keyfactor: Keyfactor provides machine identity and PKI management for IoT, OT, and connected products. It is one of the closest direct peers in the OT/IoT machine identity space and competes for the same federal and industrial machine identity budgets as Corsha.
Emerging players
- Claroty: Claroty is a leading OT visibility, segmentation, and threat detection platform that recently partnered with Corsha. While primarily a visibility/threat-detection competitor in OT, its $150M Series F and expansion into federal make it both a peer and a channel partner, competing for federal OT security wallet share.
- Dragos: Dragos is a leading ICS/OT cybersecurity platform focused on threat detection and incident response for industrial environments. It partners with Corsha on joint integrations but competes for the same federal/industrial OT security budgets and customer mindshare.
- Nozomi Networks: Nozomi Networks provides OT and IoT visibility, asset discovery, and threat detection for industrial environments. It overlaps with Corsha on the OT security buyer, with complementary rather than identical product capabilities, and competes for the same federal and critical infrastructure budgets.
- Xage Security: Xage Security offers zero trust access and identity for OT/ICS environments. It is one of the closest direct competitors to Corsha's OT identity and zero trust positioning, especially in federal and critical infrastructure accounts.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Corsha social profiles
Digital presenceCorsha compliance and trust
Trust signalCompliance3 records
Corsha financial estimates
Financial estimateRevenue estimate
Valuation estimate
Corsha leadership team
Management profileNumber of profiles
Profiles10 records
Corsha funding detail
Funding detailFunding overview
Funding rounds8 records
Investors11 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Corsha M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Corsha
What does Corsha do?
Corsha provides a patented Machine Identity Provider (mIDP) that issues dynamic cryptographic identities to every machine and continuously verifies machine-to-machine communication across OT and IT environments. The platform is delivered as Corsha Cloud (multi-tenant SaaS) or Corsha Enterprise (on-premise license) and replaces static API keys, tokens, and certificates with single-use MFA credentials enforced via a Distributed Ledger Network. Built on top of the mIDP are solution packages for OT Identity & Access, Zero Trust for Machines, and Manufacturing, plus the Corsha Labs innovation initiative for AI/ML-driven M2M security.
Is Corsha a public or private company?
Corsha is a private company. It is classified as venture growth investor backed and is currently operating.
When was Corsha founded?
Corsha was founded in 2018. It employs 11 to 50 people.
Where is Corsha based?
Corsha is headquartered in Vienna, United States, in the North America region.
How does Corsha make money?
Four revenue lines are on record. Corsha Cloud SaaS subscription is the primary driver. The others are corsha Enterprise license, additional Support Services / Integration and federal government contracts (DLA IDIQ, AFWERX SBIR).
Who are Corsha's main competitors?
Broad incumbents on record are CyberArk, Microsoft Entra ID (Azure AD) and Palo Alto Networks (Prisma Cloud / IoT Security). Direct peers are HashiCorp Vault, Venafi (now CyberArk Machine Identity Security) and Keyfactor. Emerging players are Claroty, Dragos, Nozomi Networks and Xage Security.
Does Corsha have an API?
Yes. Corsha's Machine Identity Provider (mIDP) is a partner- and customer-facing identity validation service. The Corsha IdP exposes a credential validation endpoint that customers call to verify single-use machine credentials before allowing API requests to reach upstream services. Integration is achieved through API gateway plugins (Kong, F5 BIG-IP, Apigee, Mulesoft) and connectors to cloud identity providers (AWS Cognito, Azure AD). Each machine API request is authenticated against the Corsha Identity Provider using one-time-use MFA credentials enforced via an HTTP Connector or custom plugin. Developer documentation is at docs.corsha.com/integrations/kong-gateway.
What industry is Corsha in?
Corsha's product category is Machine Identity Management / OT Cybersecurity Software. Its primary akta.pro industry code is HDAEAJAJ, Secrets Management & Machine Identity (API keys, certificates, workload identity), with a secondary code of HDABAHAF, Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA). Its NAICS code is 54151 and its SIC code is 7372.