PlainID
PlainID is an Israel-based cybersecurity company providing a Policy-Based Access Control (PBAC) authorization platform that centralizes identity and access policy management for Fortune 500 enterprises across human and AI agent identities, APIs, microservices, and data platforms.
- Company typePrivate
- Founded2014
- HeadquartersTel Aviv, Israel
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What PlainID does
PlainID is an Israel-based cybersecurity company founded in 2014 that provides an Agentic Identity Platform powered by Policy-Based Access Control (PBAC), targeting Fortune 500 and Global 2000 enterprises with centralized authorization management for human and non-human identities. The platform is structured around three core modules, namely Discover (identity security posture management and visibility), Manage (SaaS authorization management and policy orchestration), and Authorize (dynamic real-time authorization service with coarse- and fine-grained access control), with Policy 360° providing unified lifecycle visibility. The technology combines elements of RBAC and ABAC with a business logic layer using natural language, supports Policy-as-Code with the Rego standard for CI/CD integration, and operates as an out-of-the-box Authorizer ecosystem across 20+ integrations including AWS AgentCore, Microsoft Foundry, LangChain, Snowflake, Databricks, Apigee, Kong, Azure API Management, Istio, Envoy, Auth0, and ForgeRock.
The business model is enterprise SaaS with annual or multi-year subscription contracts combined with professional services for onboarding, architecture design, and training. Go-to-market is direct field sales targeting CISOs, security engineers, and enterprise architects at large organizations, supplemented by analyst relations (Gartner, KuppingerCole), conference presence (Identiverse, Identity Week, EIC Berlin), and a self-service Agentic Identity early access program. PlainID reports 100+ customers, 10M+ identities managed, 1,000+ mission-critical applications, and 2 trillion authorization decisions annually. Named customers span Financial Services (Wells Fargo, Northern Trust, EY), Technology (Samsung, Cisco), Healthcare and Life Sciences (Bayer), Aerospace and Defense (Boeing), Telecommunications (Orange), Utilities (Dominion Energy, Sydney Water), and International Organizations (World Bank). The company has raised $100 million in total funding, including a $75 million Series C led by Insight Partners in December 2021, with headquarters in Tel Aviv and a US office in New York.
PlainID's recent strategic focus has shifted toward Agentic AI security, launching Policy Management for Agentic AI in May 2025, MCP Control in beta for the emerging Model Context Protocol standard, and AWS AgentCore and Microsoft Foundry support extensions in May 2026, alongside Policy 360° in November 2025. The platform has earned repeated analyst recognition including KuppingerCole Overall Leader in PBAM (2024, 2025), Gartner Representative Provider across Data Security Platforms, Application Security, Light IGA, and Authorization Management Platforms reports, and Representative Vendor in the 2026 Gartner Market Guide for Guardian Agents in the Agent Identity category.
PlainID firmographics
Firmographics- Name
- PlainID
- Legal name
- PlainID
- Website
- https://plainid.com
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- PlainID is an Israel-based cybersecurity company providing a Policy-Based Access Control (PBAC) authorization platform that centralizes identity and access policy management for Fortune 500 enterprises across human and AI agent identities, APIs, microservices, and data platforms.
- Ownership category
- akta.pro rank
PlainID industry classification
Industry- Product category
- Identity and Access Management (Authorization)
- NAICS
- Software Publishers (5132), Software Publishers (513210), Software Publishers (51321)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)
Keywords
Where PlainID is headquartered
LocationHeadquarters
- HQ city
- Tel Aviv
- HQ country
- Israel
- HQ region
- Middle East
Offices2 records
Markets served
PlainID business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Authorization Platform Subscription: Subscription-based access to the PlainID Authorization Platform including Discover, Manage, and Authorize capabilities. Sold as enterprise licenses typically with annual or multi-year contracts. Revenue derived from software-as-a-service delivery with cloud deployment options.
- Professional Services: Onboarding packages (Project Implementation, Jumpstart), Architecture & Design, Advanced Training & Consulting, Operational & Health Check services. Delivered by Global Services team to ensure smooth adoption and deployment.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise Platform - Full authorization capabilities |
| Subscription | Annual | Agentic Identity Early Access Program |
| Other | Multi-year contract | Onboarding and Professional Services |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels7 records
PlainID product offering
Product offeringCore offering
PlainID sells an enterprise authorization platform powered by Policy-Based Access Control (PBAC) that centralizes discovery, management, and enforcement of access policies across applications, APIs, microservices, data platforms, and AI agent workflows. The platform combines business-readable policy authoring with technical enforcement through out-of-the-box Authorizers and now extends to securing agentic AI via guardrails for prompts, data retrieval, outputs, and MCP tool invocations. Revenue is generated primarily through subscription-based platform licenses for enterprise customers, with supplementary revenue from Global Services for implementation and training.
Product overview
PlainID is an Agentic Identity Platform providing a unified authorization platform powered by Policy-Based Access Control (PBAC). The platform consists of three core modules: Discover (for visibility and identity insights), Manage (for SaaS Authorization Management and centralized policy orchestration), and Authorize (for Dynamic Authorization Service and real-time access decisions). Key capabilities include Policy 360° for comprehensive policy lifecycle visibility, Agentic AI security with guardrails for AI agents across the full AI flow, RAG Security for AI data retrieval control, and MCP Control for AI tool governance. The platform integrates with enterprise ecosystems via an Integration Hub of out-of-the-box Authorizers for API gateways (Apigee, Kong, Azure API Management), service meshes (Istio, Envoy), data platforms (Snowflake, Databricks, BigQuery, Redshift), identity providers (Auth0, ForgeRock), and AI frameworks (LangChain). The solution serves Fortune 500 organizations securing millions of human and non-human identities across 1,000+ mission-critical applications, processing over 2 trillion authorizations annually.
Differentiator
Problem solved
Functional benefit
Products and services
- The PlainID Platform Central authorization platform powered by Policy-Based Access Control (PBAC) that provides centralized discovery, management, and authorization of access control policies for enterprise data and apps. Supports 2 trillion authorizations per year across 1,000+ mission-critical applications, sold to enterprise security and identity buyers.
- Agentic AI Security Platform End-to-end solution that secures the entire AI agent flow including inputs, outputs, data retrieval, and MCP tools, with Input Guardrail, Data Retrieval Guardrail, Output Guardrail, and MCP Tools Guardrail. Covers discovery, categorization, classification, policy building, and authorization enforcement for AI agents, sold to enterprises deploying agentic AI.
- Global Services Professional services including Onboarding Packages (Project Implementation, Jumpstart), Architecture & Design, Advanced Training, Consulting, and Operational Health Checks. Delivered by PlainID Global Services team to ensure smooth adoption and deployment of the authorization platform.
Quantifiable outcome
- 2 Trillion authorization decisions per year across the platform
- +5 more outcomes
Companies that use PlainID
Customer profileNamed customers20 records
Segments8 records
Ideal customer profiles3 records
PlainID technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration18 records
AI capability8 records
Feature11 records
PlainID partnerships and signals
Strategic signalPartnerships
17 partnerships are on record, tiered core and secondary.
- AWS AgentCorecorePlainID expanded support for AWS AgentCore across its Agentic Security and Authorization Platform. PlainID's capabilities for agent registry, discovery, profile enrichment, management, and enforcement extend to AWS AgentCore.
- Microsoft FoundrycorePlainID expanded support for Microsoft Foundry across its Agentic Security and Authorization Platform. Integration enables agent registry, discovery, profile enrichment, management, and enforcement capabilities.
- LangChaincorePlainID integrates with LangChain to embed centralized, policy based access control (PBAC) directly into AI pipelines. PlainID's LangChain Authorizer enforces fine-grained authorization across prompts, data retrieval, tool usage, and response generation.
- SnowflakecorePlainID provides out-of-the-box Authorizers for Snowflake data platforms. Supports data access control, policy enforcement, and row/column-level security for Snowflake environments.
- DatabrickscorePlainID offers Authorizers for Databricks data platforms. Integration enables fine-grained authorization for data access and AI workloads on Databricks.
- ZscalercoreIntegration between PlainID and Zscaler enables policy orchestration for access to web-based applications. PlainID evaluates access requests and communicates approved entitlements to IDP for token enrichment.
- Power BIcorePlainID provides authorization management for Power BI environments. Policy Orchestration enables granular access controls and ensures users only have access to data necessary for their roles.
- ApigeecorePlainID Authorizers integrate with Google Apigee API Gateway for distributed policy enforcement across API endpoints.
- KongcorePlainID Authorizers integrate with Kong API Gateway for policy-based access control enforcement.
- Auth0corePlainID integrates with Auth0 (Okta) for identity provider enrichment and authorization decisions.
- Azure API ManagementcorePlainID Authorizers integrate with Microsoft Azure API Management for API authorization and policy enforcement in Azure environments.
- DenodocorePlainID provides data access layer protection for Denodo data virtualization platform with policy-based access controls.
- IstiocorePlainID Authorizers integrate with Istio service mesh for microservice-level authorization enforcement.
- EnvoycorePlainID Authorizers integrate with Envoy proxy for service mesh authorization.
- ForgeRockcorePlainID integrates with ForgeRock for identity and access management policy orchestration.
- ThalessecondaryPlainID and Thales co-host CIAM & Authorization webinars for joint demand generation. Thales is a global technology company in cybersecurity and digital identity.
- TAG CybersecondaryTAG Cyber interviewed PlainID CEO Oren Ohayon Harel on identity security and ISPM trends. TAG Cyber provides cybersecurity research and analyst coverage.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
PlainID competitors and assessment
Company assessmentBroad incumbents
- Auth0 (Okta): Okta's Auth0 product is a leading identity and authorization platform for applications. Comparable to PlainID as a foundational layer for access decisions across web and API applications, but operates as a much broader CIAM/IAM suite rather than specializing in PBAC and authorization management.
- SailPoint: SailPoint is a leader in identity governance and administration (IGA), competing in adjacent areas of access policy, lifecycle management, and compliance. Comparable to PlainID in addressing enterprise authorization and access policy challenges, but as a much broader governance suite rather than a PBAC specialist.
- CyberArk:
Direct peers
- Styra: Styra is the primary commercial vendor behind Open Policy Agent (OPA) and provides policy-as-code authorization for cloud-native environments. Direct competitor to PlainID's PBAC and Policy-as-Code capabilities, both targeting centralized, REGO-based policy management for distributed systems.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks7 records
Key highlights7 records
Customer concentration
PlainID social profiles
Digital presencePlainID compliance and trust
Trust signalCompliance12 records
PlainID financial estimates
Financial estimateRevenue estimate
Valuation estimate
PlainID leadership team
Management profileNumber of profiles
Profiles10 records
PlainID funding detail
Funding detailFunding overview
Funding rounds5 records
Investors9 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
PlainID M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about PlainID
What does PlainID do?
PlainID sells an enterprise authorization platform powered by Policy-Based Access Control (PBAC) that centralizes discovery, management, and enforcement of access policies across applications, APIs, microservices, data platforms, and AI agent workflows. The platform combines business-readable policy authoring with technical enforcement through out-of-the-box Authorizers and now extends to securing agentic AI via guardrails for prompts, data retrieval, outputs, and MCP tool invocations. Revenue is generated primarily through subscription-based platform licenses for enterprise customers, with supplementary revenue from Global Services for implementation and training.
Is PlainID a public or private company?
PlainID is a private company. It is classified as venture growth investor backed and is currently operating.
When was PlainID founded?
PlainID was founded in 2014. It employs 51 to 100 people.
Where is PlainID based?
PlainID is headquartered in Tel Aviv, Israel, in the Middle East region.
How does PlainID make money?
Two revenue lines are on record. Authorization Platform Subscription is the primary driver. The others are professional Services.
Who are PlainID's main competitors?
Broad incumbents on record are Auth0 (Okta), SailPoint and CyberArk. Styra is listed as a direct peer.
Does PlainID have an API?
Yes. PlainID provides REST APIs and SDKs for policy management and authorization. The Developer Portal provides access to v1 API. The platform supports Policy-as-Code integration with CI/CD pipelines, .NET library, and Spring Boot SDK for enforcement. MCP (Model Context Protocol) integration is available for AI agent governance. Developer documentation is at docs.plainid.io.
What industry is PlainID in?
PlainID's product category is Identity and Access Management (Authorization). Its primary akta.pro industry code is HDADAFAH, Privacy Management (Consent, DSAR, RoPA). Its NAICS code is 5132 and its SIC code is 7372.