SlashID
- Company typePrivate
- Founded2014
- HeadquartersChicago, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What SlashID does
SlashID is a private identity security company headquartered in Chicago and operated under the legal entity IRD Holdings Corp., founded in 2014 by Vincenzo Iozzo. The company sells an identity security platform organized around a central Identity Graph that correlates every human, machine, and AI identity, entitlement, and detection across hybrid and multi-cloud environments. The platform includes 500+ MITRE ATT&CK-mapped built-in detections, a Browser Extension for edge protection against phishing and session hijacking, and Gate — an identity-aware edge authorizer deployable as a proxy, sidecar, or Envoy ExtAuth service. Underlying the platform is a globally replicated, field-level encrypted data store with envelope encryption and per-region HSM-rooted key hierarchies supporting crypto-shredding.
SlashID serves enterprise security leaders (CISOs and identity security teams) as its primary segment, with secondary use-case segments covering organizations managing AI/non-human identities and those vulnerable to social engineering. Go-to-market combines an enterprise field sales motion built around personalized demo sessions mapped to prospect environments (Entra, Okta, AWS, GitHub, SaaS) with a developer-first PLG motion via developer.slashid.com, SDKs in JavaScript/React/Remix, and downloadable Gate binaries. The company generates revenue through annual platform subscriptions with quote-based custom pricing; no public pricing is disclosed. The platform is SOC 2 Type II, GDPR, and HIPAA eligible.
The product surface spans Identity Threat Detection and Response (ITDR), Identity Security Posture Management (ISPM), Identity Governance and Administration (IGA), AI Identity Governance, and Mutual TOTP (cryptographic human-to-human verification against deepfakes). Notable 2026 launches include Mutual TOTP in March and AI Identity Governance in May 2026, the latter offered at no additional cost to existing customers in response to the April 2026 Vercel OAuth breach. The company has raised approximately $10.65M across three disclosed funding rounds since 2022, operates with 11-50 employees, and has not disclosed customer logos or revenue figures. A February 2026 reputational event involving CEO Vincenzo Iozzo's removal from Black Hat and Code Blue review boards following DOJ disclosures is a material execution risk factor.
SlashID firmographics
Firmographics- Name
- SlashID
- Legal name
- IRD Holdings Corp.
- Website
- https://slashid.com
- Company type
- Private
- Founded year
- 2014
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Ownership category
- akta.pro rank
SlashID industry classification
Industry- Product category
- Identity Security Software
- NAICS
- Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Identity Threat Detection & Response (ITDR) (HDAEAJAH)
- akta.pro secondary industries
- Directory Services & Identity Data Platforms (BPAMAEAG), Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ), Authorization & Permissions (delegation, allowances, capability-based access, session keys) (FSAPACAJ), Credential Stuffing & Password Attack Protection (HDADALAC)
Keywords
Where SlashID is headquartered
LocationHeadquarters
- HQ city
- Chicago
- HQ country
- United States
- HQ region
- North America
Markets served
SlashID business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Revenue model
- Platform Subscription: SlashID provides an identity infrastructure platform through a subscription model. The Master Services and Software Agreement describes licensing the Platform with associated services including hosting and support. Fees are reconciled and paid according to procedures in Schedule 2 of the agreement.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise platform with personalized pricing |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels5 records
SlashID product offering
Product offeringCore offering
SlashID sells a B2B identity security platform that unifies Identity Threat Detection and Response (ITDR), Identity Security Posture Management (ISPM), and Identity Governance and Administration (IGA) on a single access graph across hybrid and multi-cloud environments. The platform secures human, machine, and AI identities through 500+ built-in detections mapped to MITRE ATT&CK, a Browser Extension for edge protection, Gate for API authorization, Mutual TOTP for human verification, and AI Identity Governance for AI agents and MCP servers.
Product overview
SlashID is an identity security platform organized around a central Identity Graph, with two primary product surfaces (Identity Graph and Browser Extension), augmented by a developer-facing edge authorizer called Gate, and multiple integrated modules covering threat detection (ITDR), posture management (ISPM), governance (IGA), AI governance, and cryptographic human verification (Mutual TOTP). The platform secures humans, machines, and AI agents across hybrid and multi-cloud environments with 500+ built-in detections, automated remediation, and an AI-powered natural-language query engine. Developer-facing products include Identity Management (Access) APIs and SDKs (JavaScript, React, Remix) for authentication and user management, and Gate for API authorization and rate limiting. Newer capabilities include AI Identity Governance to govern AI applications, agents, and MCP servers.
Differentiator
Problem solved
Functional benefit
Products and services
- Identity Graph The control plane of the SlashID platform: a unified identity graph correlating every human, machine, and AI identity, entitlement, and detection across hybrid and multi-cloud environments. Provides 500+ out-of-the-box detections, automated remediation via APIs or SIEM/SOAR, and an AI assistant for natural-language queries. Sold to enterprise security leaders.
- Browser Extension An edge protection module that stops credential theft and session hijacking before tokens reach the infrastructure. Provides real-time phishing detection, shadow SaaS discovery and access control, social engineering and vishing prevention, and prevents session hijacking, token exfiltration, and dangerous OAuth grants. Sold to enterprise security teams.
- Gate An identity-aware edge authorizer for APIs and workloads. Gate performs authentication, authorization, and rate limiting on incoming traffic and can be deployed as a proxy, sidecar, or Envoy-compatible ExtAuth service. Supports RBAC, ABAC, Open Policy Agent (OPA) scripting, token enrichment, and PII detection in transit. Sold to developers and platform engineers.
- Identity Protection Secures human and non-human identities with 500+ out-of-the-box detections, automated remediation, and an AI-powered query engine. Covers onboarding to connect identity sources (Active Directory, Entra, Okta, AWS, GCP, Azure, Google Workspace) and investigation through natural-language queries. Sold to enterprise security teams.
- Identity Management (Access) A user authentication and identity management API and SDK platform. Provides APIs and SDKs (JavaScript, React, Remix) for managing persons, attributes, credentials (including Passkeys/WebAuthn), organizations, and SSO — enabling user migration, attribute enrichment, and cross-service authentication without re-authentication. Sold to developers and product teams.
- AI Identity Governance An extension of the Identity Graph and Identity Governance and Administration product that governs AI applications, agents, and MCP servers beyond traditional human and service account identities. Addresses Shadow AI by providing visibility, access control, and lifecycle policies for OAuth-connected AI apps and non-human identities. Informed by the April 2026 Vercel security incident. Sold to enterprise security leaders.
- Mutual TOTP A cryptographic human-to-human identity verification mechanism built on RFC 6238 TOTP, enabling bidirectional real-time verification between two participants during phone calls or video meetings to defend against deepfake impersonation attacks. Both parties prove possession of a registered device using time-based one-time passwords before sensitive actions are performed. Sold to enterprises vulnerable to social engineering and vishing.
Quantifiable outcome
- Sub-second detection to remediation (<1s)
- +3 more outcomes
Companies that use SlashID
Customer profileSegments3 records
Ideal customer profiles2 records
SlashID technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration14 records
AI capability6 records
Feature9 records
SlashID partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered core.
- AWS (Amazon Web Services)coreAWS is integrated with SlashID's identity security platform, allowing visibility and threat detection across AWS environments.
- Google CloudcoreGoogle Cloud is integrated with SlashID's identity security platform, enabling protection across GCP environments.
- Microsoft AzurecoreMicrosoft Azure is integrated with SlashID's identity security platform for identity threat detection and posture management.
- OktacoreOkta is integrated as an identity provider, enabling SlashID to monitor and govern Okta-based identities and applications.
- ServiceNowcoreServiceNow integration enables identity governance and automated workflow remediation within ServiceNow workflows.
- SalesforcecoreSalesforce integration provides visibility into Salesforce-based identities and OAuth grants.
- Google WorkspacecoreGoogle Workspace integration enables monitoring of OAuth app grants, user access, and threat detection across Google Workspace environments.
- Microsoft Entra IDcoreMicrosoft Entra ID (Azure AD) integration is central to SlashID's platform, enabling detection of OAuth supply chain attacks, AiTM phishing, and Intune abuse.
- SnowflakecoreSnowflake integration enables identity governance across Snowflake data warehouse environments.
- Active DirectorycoreActive Directory integration enables SlashID to monitor and govern on-premises identity environments alongside cloud identity.
Scale indicators5 records
Recent moves6 records
Expansion highlights5 records
SlashID competitors and assessment
Company assessmentDirect peers
- Silverfort: Silverfort is a closely aligned identity threat detection and response specialist that consolidates ITDR across hybrid environments including AD, Entra ID, and Okta — overlapping with SlashID's Identity Graph and ITDR product positioning.
- Push Security: Push Security provides browser-based identity threat detection, SaaS shadow IT discovery, and OAuth/app governance — directly mirroring SlashID's Browser Extension approach and identity attack surface coverage.
- SailPoint: SailPoint is a leading identity governance and administration platform with AI-driven access reviews — a direct competitor to SlashID's IGA module and AI Identity Governance for non-human identities.
- Saviynt: Saviynt provides cloud-native identity governance and administration with strong privileged access and NHI coverage — directly competing with SlashID's IGA, ITDR, and AI Identity Governance offerings for enterprise CISOs.
- Obsidian Security: Obsidian Security delivers ITDR and SaaS security posture management with deep focus on identity threats and OAuth app governance — overlapping closely with SlashID's ITDR, OAuth scope detection, and ISPM modules.
Broad incumbents
- CyberArk: CyberArk is a leading identity security platform spanning privileged access management, ITDR, and secrets management — a broader incumbent whose identity threat detection capabilities overlap with SlashID's ITDR and NHI modules.
- CrowdStrike: CrowdStrike's Falcon Identity Threat Protection delivers ITDR as part of its broader XDR platform — a much larger incumbent that competes for the same identity security budget as SlashID while bundling it into endpoint security spend.
- Microsoft (Entra ID Protection & Defender for Identity): Microsoft bundles ITDR, ISPM, and identity governance into Entra ID P2 and Defender for Identity — competing with SlashID's core modules through deep integration with the identity providers SlashID monitors.
- Okta: Okta is both a SlashID integration partner and an incumbent competitor: Okta Identity Threat Protection and its governance/governance products compete directly with SlashID's ITDR and IGA capabilities for the same buyer.
Emerging players
- Transmit Security: Transmit Security is an identity and fraud prevention platform with passwordless authentication, identity verification, and orchestration — a partial overlap with SlashID's authentication API/SDK layer and Mutual TOTP human verification.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
SlashID social profiles
Digital presenceSlashID compliance and trust
Trust signalCompliance5 records
SlashID financial estimates
Financial estimateRevenue estimate
Valuation estimate
SlashID leadership team
Management profileNumber of profiles
Profiles2 records
SlashID funding detail
Funding detailFunding overview
Funding rounds3 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
SlashID M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about SlashID
What does SlashID do?
SlashID sells a B2B identity security platform that unifies Identity Threat Detection and Response (ITDR), Identity Security Posture Management (ISPM), and Identity Governance and Administration (IGA) on a single access graph across hybrid and multi-cloud environments. The platform secures human, machine, and AI identities through 500+ built-in detections mapped to MITRE ATT&CK, a Browser Extension for edge protection, Gate for API authorization, Mutual TOTP for human verification, and AI Identity Governance for AI agents and MCP servers.
Is SlashID a public or private company?
SlashID is a private company. It is classified as venture growth investor backed and is currently operating.
When was SlashID founded?
SlashID was founded in 2014. It employs 11 to 50 people.
Where is SlashID based?
SlashID is headquartered in Chicago, United States, in the North America region.
How does SlashID make money?
One revenue line is on record: platform Subscription.
Who are SlashID's main competitors?
Direct peers on record are Silverfort, Push Security, SailPoint, Saviynt and Obsidian Security. Broad incumbents are CyberArk, CrowdStrike, Microsoft (Entra ID Protection & Defender for Identity) and Okta. Transmit Security is listed as an emerging player.
Does SlashID have an API?
Yes. SlashID offers a REST API for configuring and managing identity data. The API is divided into sections covering Persons (managing users, authentication policies, migrations), Attributes (attaching arbitrary data to persons), Credentials (creating/deleting public key credentials for Passkeys), and Organizations (setting authentication policies, token duration, permitted origins, email templates). Developers can interact via SDKs (JavaScript/React, Remix) or direct API calls. The API reference is available at developer.slashid.com/docs/api. Developer documentation is at developer.slashid.com/docs/api.
What industry is SlashID in?
SlashID's product category is Identity Security Software. Its primary akta.pro industry code is HDAEAJAH, Identity Threat Detection & Response (ITDR), with a secondary code of BPAMAEAG, Directory Services & Identity Data Platforms. Its NAICS code is 5182 and its SIC code is 7370.