Elevate Security
Elevate Security is a cloud-based human attack surface management platform that uses API-first integrations with enterprise security stacks to score individual user risk, automate behavioral coaching, and enforce risk-based access controls for large enterprise customers in financial services, healthcare, energy, and technology.
- Company typePrivate
- Founded2017
- HeadquartersBerkeley, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Elevate Security does
Elevate Security is a cloud-based human attack surface management (HASMat) platform founded in 2017 by former Salesforce security executives Robert Fly and Masha Sedova to address the dominant role of human error in cybersecurity incidents. The company's core thesis is that risk is unevenly distributed across workforces, with its own research finding approximately 8% of users driving 80% of security incidents. The platform ingests telemetry from email, web, IAM, SIEM, endpoint, device, DLP, and HR systems via an API-first architecture and produces individual-level Human Risk Scores that feed three modules: Elevate Engage (personalized behavioral coaching and security awareness), Elevate Control (injection of user risk intelligence into SecOps tooling and automated response), and Elevate Identity (risk-based conditional access and governance within IAM/IGA systems).
The company operates a B2B SaaS model with annual subscription pricing quoted per enterprise, targeting large organizations in financial services, healthcare, pharmaceuticals, energy/utilities, technology, and consumer goods. Go-to-market relies on enterprise field sales to CISOs and security decision-makers, augmented by technology partnerships with CrowdStrike, Cisco, Zscaler, and Microsoft, and value-add resellers including Booz Allen, CrossCountry Consulting, and Novacoast. In October 2024, Mimecast acquired Elevate Security to integrate its human risk capabilities into Mimecast's Human Risk Management Platform, gaining access to Mimecast's 45,000-customer distribution channel. The company continues to operate under the Elevate Security brand as a wholly-owned subsidiary, is SOC 2 Type 2 certified, and is headquartered in San Francisco with a fully remote workforce.
Elevate Security firmographics
Firmographics- Name
- Elevate Security
- Legal name
- Elevate Security, Inc.
- Website
- https://elevatesecurity.com
- Company type
- Private
- Founded year
- 2017
- Operating status
- Acquired
- Headcount range
- 1–10 employees
- Short description
- Elevate Security is a cloud-based human attack surface management platform that uses API-first integrations with enterprise security stacks to score individual user risk, automate behavioral coaching, and enforce risk-based access controls for large enterprise customers in financial services, healthcare, energy, and technology.
- Ownership category
- akta.pro rank
Elevate Security industry classification
Industry- Product category
- Cybersecurity Human Risk Management Software
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Security Information & Event Management (SIEM), SOAR & SOC Platforms (HLACAJAE)
- akta.pro secondary industries
- User Lifecycle Provisioning & SCIM Automation (HDAEAJAK), Cybersecurity & Identity Consulting (BPAHAEAG)
Keywords
Where Elevate Security is headquartered
LocationHeadquarters
- HQ city
- Berkeley
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Elevate Security business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations
Revenue model
- SaaS Subscription: Subscription-based SaaS platform with fees set forth on Order Form. Payment terms typically 30 days from invoice. Non-refundable fees with 1.5% monthly late fee on overdue payments.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise SaaS platform - custom pricing based on organization size and requirements |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels6 records
Elevate Security product offering
Product offeringCore offering
Elevate Security provides a cloud-based Human Attack Surface Management platform that scores each employee on individual security risk using behavioral data ingested from email, web, IAM, SIEM, endpoint, DLP, and HR systems. Its three modules — Elevate Engage, Elevate Control, and Elevate Identity — deliver personalized security training, inject user-risk intelligence into SecOps and IAM/IGA workflows, and automate safeguards such as conditional access and dynamic controls for high-risk individuals. The platform is sold as an enterprise SaaS subscription and targets CISOs, security awareness, SecOps, and identity teams seeking to address the 74–98% of breaches involving human error.
Product overview
Elevate Security offers a unified cloud-based workforce risk intelligence platform comprising three integrated modules: Elevate Engage for security awareness and behavioral coaching, Elevate Control for security operations automation, and Elevate Identity for risk-based access management. The platform is built on the finding that approximately 8% of users cause 80% of security incidents, and provides organizations with individual Human Risk Scores derived from analyzing billions of cyber events across email, web, endpoint, and identity systems. Customers can engage riskiest employees with personalized nudges and training, automate incident response based on user risk, and enforce conditional access policies.
Differentiator
Problem solved
Functional benefit
Brands
- Elevate Engage: Security awareness and human risk management platform that delivers personalized feedback nudges, scorecards, and direct targeted training based on individual computing behaviors and current security risk.
- Elevate Control
- Elevate Identity
Products and services
- Elevate Engage
Quantifiable outcome
- Up to 70% reduction in account compromise, data loss, and phishing events
- +2 more outcomes
Companies that use Elevate Security
Customer profileNamed customers7 records
Segments9 records
Ideal customer profiles6 records
Elevate Security technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration10 records
AI capability5 records
Feature6 records
Elevate Security partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core, flagship and minor.
- Booz Allen HamiltoncoreBooz Allen Hamilton is listed as a technology partner, indicating integration with Elevate Security's human risk intelligence platform. Partnership enables Booz Allen to leverage Elevate's human attack surface management capabilities for their enterprise security consulting engagements.
- CiscocoreCisco is listed as a technology partner and customer. VP Corporate Development at Cisco (Janey Hoe) has provided endorsement of Elevate's user risk management capabilities, noting importance for ransomware, phishing, and lateral attacker movement protection.
- CrossCountry ConsultingcoreCrossCountry Consulting is listed as a technology partner, integrating with Elevate Security's platform to deliver human risk management consulting services to their clients.
- MimecastflagshipMimecast acquired Elevate Security in October 2024, making Elevate a Mimecast company. Mimecast plans to introduce Elevate's human risk dashboard to its 45,000 customers. Recognition in Forrester's Human Risk Management Solutions Wave Q3 2024 was based in part on this acquisition. Mimecast is both a strategic partner and parent company.
- NovacoastcoreNovacoast is a value-add partner that delivers Elevate Security's human risk evaluation capabilities to their customers. Director of Data Analytics and Integration at Novacoast noted: 'Our customers can use this to focus their resources on their highest risk individuals to mature their security programs.'
- ZscalercoreZscaler is listed as a technology partner, indicating integration between Elevate's human risk intelligence and Zscaler's security platform for combined risk-based security controls.
- CrowdStrikecoreCrowdStrike is listed as a technology partner, integrating endpoint and security data with Elevate's human risk scoring for comprehensive workforce risk visibility.
- Cyentia InstitutecoreResearch partnership with Cyentia Institute for annual studies on human attack surface and workforce cybersecurity risk. Published 'High Risk Users and Where to Find Them' report and 'The Size and Shape of Workforce Risk' study. Ben Edwards, Cyentia Partner and Data Scientist, contributed research finding that 'some users represent orders of magnitude more risk than others.'
- Defending Digital CampaignsminorElevate Security was among the first partners with Defending Digital Campaigns, an organization focused on protecting election campaigns from cyber threats.
Scale indicators4 records
Recent moves6 records
Expansion highlights6 records
Elevate Security competitors and assessment
Company assessmentDirect peers
- KnowBe4: The dominant security awareness training platform serving enterprise CISOs with phishing simulation, training content, and a growing human risk layer. Most directly comparable to Elevate Engage and competes for the same security awareness budget.
- Proofpoint Security Awareness: Proofpoint's security awareness and threat intelligence offerings target the same enterprise buyer as Elevate Engage, with overlapping phishing simulation, risk scoring, and user behavior analytics capabilities.
- Exabeam: AI-driven security analytics platform combining SIEM and user behavior analytics with risk scoring. Competes with Elevate Control for SOC budget focused on detecting risky user behavior across enterprise environments.
- Securonix: Cloud-native SIEM with user entity behavior analytics (UEBA) and insider threat detection capabilities. Directly overlaps with Elevate Control on SOC-driven human risk management use cases.
- CyberArk: Identity security platform with risk-based authentication, privileged access management, and identity threat detection. Competes most directly with Elevate Identity for risk-based access governance budgets.
Broad incumbents
- Microsoft Defender for Identity / Purview Insider Risk: Microsoft's bundled identity threat detection and insider risk management capabilities embedded in the Defender and Purview suites. Represents a major competitive threat as it ships natively with Microsoft 365 enterprise licenses.
- CrowdStrike Falcon User Behavior Analytics: CrowdStrike's Falcon platform includes user behavior analytics and identity threat detection modules. Listed as an Elevate technology partner, but also a competitor as CrowdStrike bundles similar capabilities into its broader endpoint security platform.
- SANS Security Awareness: SANS Institute's security awareness training and professional certification programs represent an incumbent approach to human risk that Elevate Engage explicitly positions against as a data-driven alternative.
Emerging players
- Living Security: Human risk management platform combining security awareness training with behavior analytics. A more direct emerging competitor in the HRM category, smaller than KnowBe4 but with comparable positioning to Elevate Engage.
- Hoxhunt: AI-powered security awareness and human risk platform with personalized phishing simulation and behavior change measurement. A closely comparable emerging player in the enterprise HRM category with similar metrics-driven approach.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Elevate Security social profiles
Digital presenceElevate Security compliance and trust
Trust signalCompliance2 records
Elevate Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
Elevate Security leadership team
Management profileNumber of profiles
Profiles4 records
Elevate Security funding detail
Funding detailFunding overview
Funding rounds4 records
Investors8 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Elevate Security M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Elevate Security
What does Elevate Security do?
Elevate Security provides a cloud-based Human Attack Surface Management platform that scores each employee on individual security risk using behavioral data ingested from email, web, IAM, SIEM, endpoint, DLP, and HR systems. Its three modules — Elevate Engage, Elevate Control, and Elevate Identity — deliver personalized security training, inject user-risk intelligence into SecOps and IAM/IGA workflows, and automate safeguards such as conditional access and dynamic controls for high-risk individuals. The platform is sold as an enterprise SaaS subscription and targets CISOs, security awareness, SecOps, and identity teams seeking to address the 74–98% of breaches involving human error.
Is Elevate Security a public or private company?
Elevate Security is a private company. It is classified as corporate owned and is currently acquired.
When was Elevate Security founded?
Elevate Security was founded in 2017. It employs 1 to 10 people.
Where is Elevate Security based?
Elevate Security is headquartered in Berkeley, United States, in the North America region.
How does Elevate Security make money?
One revenue line is on record: saaS Subscription.
Who are Elevate Security's main competitors?
Direct peers on record are KnowBe4, Proofpoint Security Awareness, Exabeam, Securonix and CyberArk. Broad incumbents are Microsoft Defender for Identity / Purview Insider Risk, CrowdStrike Falcon User Behavior Analytics and SANS Security Awareness. Emerging players are Living Security and Hoxhunt.
Does Elevate Security have an API?
Yes. Elevate Security offers an API-first design with pre-integrated APIs for non-intrusive integration with security tools. The platform uses APIs to ingest inbound risk data signals from email, web, IAM, SIEM, Endpoint, Device, DLP, and HR platforms. API support documentation is available at https://elevate-security.stoplight.io/. Developer documentation is at elevate-security.stoplight.io.
What industry is Elevate Security in?
Elevate Security's product category is Cybersecurity Human Risk Management Software. Its primary akta.pro industry code is HLACAJAE, Security Information & Event Management (SIEM), SOAR & SOC Platforms, with a secondary code of HDAEAJAK, User Lifecycle Provisioning & SCIM Automation. Its NAICS code is 54151 and its SIC code is 7372.