Material Security
- Company typePrivate
- Founded2017
- HeadquartersRedwood City, United States
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Material Security does
Material Security is a venture-backed private cybersecurity company founded in 2017 and headquartered in Redwood City, California, that builds a unified detection and response platform purpose-built for the cloud workspace — specifically Google Workspace and Microsoft 365. The platform is delivered as an agentless, API-based SaaS that connects to provider APIs (no MX record rerouting, no endpoint agents) and is composed of four product modules: Material Email Security, Material File Security, Material Account Security, and the OAuth Remediation Agent. Underlying capabilities include AI/ML-based phishing and BEC detection, behavioral analytics for account takeover containment, automated remediation of risky file-sharing permissions, continuous OAuth monitoring with automated token revocation, and message-level data protection that limits blast radius even when an account is compromised. The platform is exposed programmatically to AI agents and SIEM/SOAR stacks through the Material MCP Server and API v1, and operates in a single-tenant architecture with SOC 2 Type 2 certification.
The company sells exclusively to enterprise and mid-market security and IT buyers via a demo-led direct sales motion, supported by a free Workspace Security Scorecard and free trial. Pricing is quote-based and not publicly disclosed; the underlying business model is recurring SaaS subscription. The customer base is broad and high-quality, with named logos including OpenAI, Anthropic, xAI, Lyft, Figma, PagerDuty, Reddit, Mars, Gusto, and HackerOne across AI, SaaS, healthcare, fintech, manufacturing, telecom, and defense. Material has raised approximately $162 million across disclosed rounds — most recently a $100 million Series C in May 2022 led by Founders Fund at a $1.1 billion valuation, with proceeds earmarked for international expansion, government-vertical product development, and extension of the platform beyond email into other SaaS applications. The company continues to ship new products into 2026 (OAuth Remediation Agent, Material MCP Server, API v1) and to publish research (notably on OAuth sprawl) that doubles as demand generation.
Material Security firmographics
Firmographics- Name
- Material Security
- Legal name
- Material Security
- Website
- https://material.security
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Ownership category
- akta.pro rank
Material Security industry classification
Industry- Product category
- Cloud Workspace Security
- NAICS
- Software Publishers (5132), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA) (HDABAHAF)
- akta.pro secondary industries
- Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK), Cloud Network Security (Microsegmentation, Cloud Firewall, WAF, DDoS) (HDABAHAJ)
Keywords
Where Material Security is headquartered
LocationHeadquarters
- HQ city
- Redwood City
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Material Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription for Cloud Workspace Security Platform: Recurring subscription revenue from selling access to the Material platform — covering Email Security, File Security, Account Security, and the OAuth Remediation Agent — to enterprise and mid-market customers running Google Workspace and Microsoft 365. Pricing is quote-based and not publicly disclosed; customers engage via demo and then convert to paid contracts. The product is described as a 'single platform to secure the cloud workspace,' indicating cross-sell across the four product areas within one account.
- Free Workspace Security Scorecard (Top-of-Funnel Lead Generation): Free 5-minute Workspace Security Scorecard offered as a lead-generation and qualification tool to drive prospects into the sales pipeline, rather than a revenue-generating product.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Pay-as-you-go | Free Workspace Security Scorecard (lead-gen / freemium) |
| Subscription | Annual | Quote-based enterprise subscription (not publicly priced) |
Go-to-market motion4 records
Distribution channels4 records
Marketing channels8 records
Material Security product offering
Product offeringCore offering
Material Security builds an API-driven, AI-native cloud workspace security platform for organizations running Google Workspace and Microsoft 365. The platform unifies email security, file security, account security, and an OAuth Remediation Agent into a single agentless product, with built-in auto-remediation and a Model Context Protocol (MCP) server that lets AI agents drive triage and response.
Product overview
Material Security offers a single, unified detection and response platform purpose-built for the cloud workspace (Google Workspace and Microsoft 365), rather than a collection of disconnected point tools. The Material Platform sits at the core and is composed of four product modules — Material Email Security, Material File Security, Material Account Security, and the OAuth Remediation Agent — which together deliver full-lifecycle threat detection, sensitive data protection, and automated remediation across email, files, and accounts. The platform is exposed programmatically to AI agents through the Material MCP Server, enabling autonomous triage and remediation without custom integration. Built-in auto-remediations and a single-tenant architecture aim to give security teams force-multiplied protection without additional headcount.
Differentiator
Problem solved
Functional benefit
Brands
- Material OAuth Remediation Agent: AI-driven agent for continuous monitoring, classification, and automated revocation of risky OAuth applications and AI agent connections in cloud workspaces.
- Material MCP Server
Products and services
- Material Platform Unified, API-driven, agentless detection and response platform purpose-built for the cloud workspace (Google Workspace and Microsoft 365), combining email security, file security, account security, posture management, and the OAuth Remediation Agent with built-in auto-remediations.
- Material Email Security Email security module that detects and remediates sophisticated malicious emails (VIP impersonation, BEC, VEC, credential harvesting, invoice fraud, quishing, ransomware) that bypass native defenses, using AI-powered user report triage and similarity matching for herd-immunity protection.
- Material File Security File security module that automatically discovers and classifies sensitive data across Google Drive, provides visibility into sharing permissions, auto-remediates excessive sharing, and correlates file activity with other signals to detect insider risk and compromise.
- Material Account Security Account security module that hardens cloud workspace identities and contains account takeovers, unifies identity and data risk posture, detects ATOs via behavioral analytics and honeypot signals, limits blast radius through message-level access controls, and remediates forwarding rules, delegated access, and malicious OAuth grants.
- OAuth Remediation Agent AI-driven agent that continuously monitors third-party OAuth clients and AI agents across Google Workspace, classifies risk in real time by severity, business impact, and runtime behavior, and revokes OAuth tokens the moment behavior turns suspicious, with Slack-based user verification.
- Material MCP Server Model Context Protocol server that enables AI agents and agentic workflows to query Material security issues, filter by type, category, and severity, drill into message-level detail, and act (update issue status, classification, or remediation) with or without a human in the loop.
Quantifiable outcome
- Up to 91% reduction in phishing triage at customers such as Gusto using automated user report response
- +5 more outcomes
Companies that use Material Security
Customer profileNamed customers33 records
Segments4 records
Ideal customer profiles4 records
Material Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
AI capability14 records
Feature7 records
Material Security partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core technology and go-to-market partner; material highlights a dedicated 'google partnership' and a google workspace provider page, and a 'workspace resources' content hub., core technology and go-to-market partner; dedicated microsoft 365 provider page., operational integration for user verification and crowdsourced triage within the oauth remediation agent., core integration category for enterprise deployments. and emerging gtm and product channel for ai-driven security automation..
- Google (Google Workspace)core technology and go-to-market partner; material highlights a dedicated 'google partnership' and a google workspace provider page, and a 'workspace resources' content hub.Material integrates natively with Google Workspace via Google's APIs to deliver email, file, account, and OAuth security across Gmail, Google Drive, Google Accounts, and Google-native labeling. Material describes itself as having 'Google Expertise' with Workspace as a 'first-class focus' and runs a dedicated Google Partnership and Google Workspace provider page.
- Microsoft (Microsoft 365)core technology and go-to-market partner; dedicated microsoft 365 provider page.Material integrates with Microsoft 365 to provide AI-native email security, mailbox data protection (PII/PHI/financial), account takeover containment, and password-reset visibility. Microsoft 365 is one of Material's two primary supported productivity platforms alongside Google Workspace.
- Slackoperational integration for user verification and crowdsourced triage within the oauth remediation agent.Material's OAuth Remediation Agent can message end users in Slack to verify whether an OAuth authorization was legitimate, and uses Slack as the primary channel for 'crowdsourced triage' of new OAuth app installations.
- SIEM and SOAR platformscore integration category for enterprise deployments.Material pushes workspace events to enterprise SIEM and SOAR platforms in real time, providing targeted intelligence to trigger playbooks. The /integrations page is positioned as a 'Connected Cloud Workspace Intelligence' hub, with the goal of bringing Material telemetry into the customer's broader security ecosystem.
- AI agent platforms and developer tooling (MCP-compatible)emerging gtm and product channel for ai-driven security automation.Material launched the Material MCP Server, an MCP endpoint that allows third-party AI agents and agentic workflows to query, triage, and remediate Material security issues without custom integration. Customers can point their existing AI tooling at the MCP endpoint to drive autonomous security operations.
Scale indicators12 records
Recent moves7 records
Expansion highlights6 records
Material Security competitors and assessment
Company assessmentBroad incumbents
- Proofpoint: Large incumbent email security, identity threat protection, and information protection vendor; competes with Material on email security and account takeover containment in the same enterprise buyer base.
- Mimecast: Established email and collaboration security vendor; provides email security, DLP, and insider risk for Microsoft 365 and Google Workspace, directly overlapping Material's core use cases.
- Microsoft Defender for Office 365: Native email and collaboration security offering from Microsoft, bundled into the M365 E5 stack; the largest incumbent Material must displace or layer atop in Microsoft 365 environments.
Direct peers
- Avanan (Check Point Software): Cloud email security platform acquired by Check Point; protects Google Workspace and Microsoft 365 from phishing, BEC, and SaaS-based attacks, directly comparable in scope and customer profile to Material.
- Perception Point: Email and collaboration security vendor combining threat detection, DLP, and incident response for Microsoft 365 and Google Workspace; overlaps Material's email, file, and account security modules.
- Abnormal Security: AI-native email security platform protecting Microsoft 365 and Google Workspace from phishing, BEC, and account takeovers; most direct competitor in the cloud-native, AI-driven email security category Material targets.
- IRONSCALES: AI-driven email security and phishing response platform with deep Microsoft 365 and Google Workspace coverage; competes head-to-head with Material on AI-powered user report triage and BEC detection.
- SlashNext: AI-driven phishing and BEC protection across email, browser, and collaboration tools; competes in the same AI-native, cloud-first email security niche as Material.
- Tessian (now Proofpoint): AI-driven email security focused on data loss prevention and inbound/outbound threat protection for M365 and Google Workspace; directly comparable in buyer profile and use cases to Material's email module.
Emerging players
- Nudge Security: SaaS security and shadow IT / OAuth discovery platform focused on Google Workspace and Microsoft 365; an emerging player that overlaps with Material's OAuth Remediation Agent and account security module.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Material Security social profiles
Digital presenceMaterial Security compliance and trust
Trust signalCompliance1 record
Material Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Material Security leadership team
Management profileNumber of profiles
Profiles7 records
Material Security funding detail
Funding detailFunding overview
Funding rounds4 records
Investors15 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Material Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Material Security
What does Material Security do?
Material Security builds an API-driven, AI-native cloud workspace security platform for organizations running Google Workspace and Microsoft 365. The platform unifies email security, file security, account security, and an OAuth Remediation Agent into a single agentless product, with built-in auto-remediation and a Model Context Protocol (MCP) server that lets AI agents drive triage and response.
Is Material Security a public or private company?
Material Security is a private company. It is classified as venture growth investor backed and is currently operating.
When was Material Security founded?
Material Security was founded in 2017. It employs 51 to 100 people.
Where is Material Security based?
Material Security is headquartered in Redwood City, United States, in the North America region.
How does Material Security make money?
Two revenue lines are on record. SaaS Subscription for Cloud Workspace Security Platform is the primary driver. The others are free Workspace Security Scorecard (Top-of-Funnel Lead Generation).
Who are Material Security's main competitors?
Broad incumbents on record are Proofpoint, Mimecast and Microsoft Defender for Office 365. Direct peers are Avanan (Check Point Software), Perception Point, Abnormal Security, IRONSCALES, SlashNext and Tessian (now Proofpoint). Nudge Security is listed as an emerging player.
Does Material Security have an API?
Yes. Material offers a public-facing Model Context Protocol (MCP) server for cloud workspace security that empowers AI agents to seamlessly manage cloud workspace security, autonomously triaging and remediating issues without the need for custom integration. As of launch, all Material customers have access to an MCP server that their agents can use to query Material security issues and filter them by type, detection category, and severity; drill into a specific issue and pull message-level detail; and act by updating issue status, classification, or remediation directly, with or without a human in the loop. Material also exposes an API v1 referenced in a May 2026 product update, and the platform is fully extensible via APIs and event hooks that integrate with SIEM/SOAR.
What industry is Material Security in?
Material Security's product category is Cloud Workspace Security. Its primary akta.pro industry code is HDABAHAF, Cloud Identity & Access Management Infrastructure (IAM/IdP/MFA), with a secondary code of HDABAHAK, Data Security & Privacy for Cloud (DLP, DSPM, Tokenization). Its NAICS code is 5132 and its SIC code is 7372.