What Elisity does

Elisity, founded in 2018 and headquartered in San Jose, California, provides an AI-powered identity-based microsegmentation platform that enables organizations to enforce Zero Trust network security policies without deploying endpoint agents, purchasing new hardware, or redesigning network architecture. The platform discovers, classifies, and continuously monitors users, workloads, and devices across hybrid IT, OT, IoT, and IoMT environments by leveraging existing network switching infrastructure as enforcement points. Core components include the Elisity IdentityGraph (a real-time identity visibility engine ingesting metadata from Active Directory, CrowdStrike, and Armis), the Dynamic Policy Engine (granular identity-based policy authoring and enforcement), Elisity Intelligence (risk scoring, anomaly detection, and continuous monitoring), the Elisity Virtual Edge (lightweight container software deployed on existing switches or virtual machines), and the Elisity Cloud Control Center (centralized administration). The platform supports a Simulation Mode for policy impact analysis prior to enforcement and is aligned with SOC 2 Type 2, PCI DSS 4.0, HIPAA, NIST 800-207/CSF 2.0, and IEC 62443 compliance frameworks.

The company primarily serves large healthcare systems, manufacturing and industrial organizations, and pharmaceutical enterprises. Notable named customers include St. Luke's University Health Network (85,000 medical devices across 15 hospitals and 350+ outpatient sites in 46 days with zero outages), Main Line Health (100,000+ devices protected by 6,000+ actively enforced policies across 150+ facilities), MultiCare Health System (40,000+ connected devices across 13 hospitals and 350+ clinics), GSK, Haleon, Shaw Industries, and Bupa Cromwell Hospital. The healthcare vertical addresses unpatchable legacy medical devices, IoMT attack surface expansion, HIPAA compliance, ransomware blast radius containment, and hospital acquisition onboarding. Manufacturing and OT deployments target IEC 62443 compliance and converged IT/OT protection. The company has been recognized as a Gartner Cool Vendor in Cyber-Physical Systems Security 2025, a Forrester Strong Performer in microsegmentation, #13 on the 2025 Deloitte Technology Fast 500 (with 8,860% revenue growth from 2021 to 2024), and #3 on Inc. Regionals: Pacific in 2026.

Elisity operates a software subscription model with device-based licensing on multi-year contracts. The go-to-market combines direct enterprise field sales targeting CISOs and security architects (proof-of-value-driven, focused on organizations with 1,000+ employees), channel sales through Approved Sources (value-added resellers and managed service providers), and cloud marketplace distribution including AWS. Pricing is quote-based and not publicly disclosed. Configuration, training, and implementation services are available as optional resold offerings. The company raised $26 million in Series A funding in June 2021 led by Two Bear Capital and AllegisCyber Capital with Atlantic Bridge participation, and is supported by technology integrations with Armis, CrowdStrike, Active Directory, and Medigate.

Name

Elisity

Legal name

Elisity Inc.

Website

https://elisity.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

101–250 employees

Short description

Elisity provides AI-powered identity-based microsegmentation for healthcare, manufacturing, and pharmaceutical enterprises. The agentless platform enforces Zero Trust policies using existing network infrastructure to protect IoT, OT, and IoMT devices without hardware upgrades.

Ownership category

akta.pro rank

Product category

Network Security Software

NAICS

Computer Systems Design and Related Services (5415), Software Publishers (5132)

SIC

Services-Computer Integrated Systems Design (7373), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Access Management & Policy Enforcement (Authorization, ZTNA integration) (HDAEAJAG)

akta.pro secondary industries

Edge Networking & SD-WAN Integration (SASE/SD-WAN Edge On-ramps) (HDABAGAJ), AI Application Enablement Platforms (Copilot/Agent Frameworks, SDKs) (HDAEANAJ)

Keywords

• Network microsegmentation
• Zero Trust security
• Identity-based segmentation
• OT network security
• Network access control

Headquarters

HQ city

San Jose

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Software Subscription (Cloud Control Center): Cloud-hosted management software licensed on a per-device subscription basis during the applicable Subscription Term. Subscription terms of one year or less allow continuation for up to three months on a month-to-month basis. Terms greater than one year auto-renew for additional one-year periods unless non-renewal notice is provided 60 days prior.
2. Access Software License (Virtual Edge): On-premise licensed software deployed to access layer switches and virtual machines. Licensed per device during the Subscription Term with non-exclusive, non-sublicensable, non-transferable rights limited to internal use.
3. Configuration Services: Optional configuration-related services including training, planning, design, and implementation support, available through Approved Sources on a resold basis.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

Elisity delivers an AI-powered identity-based microsegmentation platform that discovers, classifies, and monitors users, workloads, and devices across hybrid IT, OT, IoT, and IoMT environments, then enforces granular least-privilege policies to stop lateral movement. The platform uses existing network switching infrastructure as enforcement points via the Elisity Virtual Edge, requiring no agents, new hardware, or network reconfiguration. It is sold as a cloud-hosted software subscription (Elisity Cloud Control Center) with per-device licensing, complemented by optional configuration services.

Product overview

Elisity offers a unified identity-based microsegmentation platform that enables organizations to achieve Zero Trust security without replacing existing infrastructure. The core platform consists of the Elisity Cloud Control Center (admin portal), Elisity IdentityGraph (real-time identity visibility engine), Elisity Dynamic Policy Engine (policy creation and enforcement), Elisity Intelligence (risk scoring and monitoring), and Elisity Virtual Edge (lightweight container software deployed on existing switches). The platform provides specialized solutions for Healthcare Institutions, Manufacturing & Industrial Organizations, BioTech + Pharmaceuticals, and Commercial Enterprise, addressing use cases including network asset discovery, IoT/OT/IoMT segmentation, Zero Trust microsegmentation, Agentic AI Security, network segmentation compliance, and ransomware/lateral movement prevention. The platform deploys on existing network infrastructure without agents, hardware changes, or network redesign, achieving 99% device discovery within minutes and enabling policy enforcement in weeks rather than years.

Differentiator

Problem solved

Functional benefit

Brands

• IdentityGraph: A real-time, correlated visibility engine for users, workloads, and devices across networks that automatically discovers and enriches identity data through multiple sources.
• Elisity Dynamic Policy Engine
• Elisity Cloud Control Center
• Elisity Virtual Edge

Products and services

• Elisity Identity-Based Microsegmentation Platform An AI-powered identity-based microsegmentation platform that prevents lateral movement across all users, workloads, and devices without agents, hardware, or network changes, leveraging existing switching infrastructure as enforcement points. Targeted at enterprise security teams in healthcare, manufacturing, pharmaceuticals, and other commercial enterprises.
• Elisity Cloud Control Center An intuitive admin portal for configuring, monitoring, and managing the scale of network security policies, providing centralized visibility and management of installed Elisity Virtual Edge deployments. Licensed per device as cloud-hosted management software.
• Elisity IdentityGraph A real-time, correlated visibility engine that creates an identity inventory of users, workloads, and devices across the network, automatically discovering and enriching identity data through integrations with Active Directory, CrowdStrike, Armis, and other security tools.
• Elisity Dynamic Policy Engine Creates and enforces granular, context-aware dynamic and static security policies based on identity data and real-time risks, working with IdentityGraph to stop lateral movement threats and prevent unauthorized access across the network.
• Elisity Intelligence Analyzes network patterns and metadata to identify vulnerabilities and threats, providing automated risk scoring, policy recommendations, and continuous monitoring to prevent lateral movement and protect critical assets.
• Elisity Virtual Edge Lightweight container software that runs on existing switches or virtual environments, synchronizing policies to existing infrastructure to enable actionable controls and enforcement without requiring additional hardware. Licensed per device as on-premise access software.
• Network Asset Discovery Automated discovery and classification of all connected devices including IT, IoT, OT, and IoMT devices across the network environment, providing the visibility foundation for microsegmentation policy creation.
• IoT Segmentation Identity-based microsegmentation capabilities specifically designed for IoT devices, enabling granular access control without requiring agents or hardware changes in enterprise IoT environments.
• OT Segmentation Network security solution for operational technology (OT) environments, strengthening converged IT and OT environments and meeting IEC 62443 requirements for industrial automation and control systems security.
• IoMT Security Security solution specifically designed for Internet of Medical Things (IoMT) devices, protecting medical devices and patient data in healthcare environments without disrupting clinical operations.
• Zero Trust Microsegmentation Identity-based microsegmentation that enables organizations to achieve Zero Trust security architecture by enforcing least-privilege access based on identity and context across the network.
• Agentic AI Security Security capabilities designed to protect against AI agent-based threats, providing a containment layer independent of endpoint privileges that AI agents can disable or evade.
• Network Segmentation Compliance Capabilities to meet compliance requirements including PCI DSS, HIPAA, IEC 62443, and NIST through automated network segmentation with detailed audit trails and push-button reporting.
• Ransomware and Lateral Movement Prevention Microsegmentation capabilities specifically designed to block lateral movement, contain ransomware blast radius, and prevent malware propagation across the network, reducing organization-wide exposure to single switch-level containment.

Quantifiable outcome

• 99% of users, workloads, and devices discovered within one day
• +9 more outcomes

Named customers7 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration3 records

AI capability5 records

Feature6 records

Partnerships

Four partnerships are on record, tiered core.

• ArmiscoreTechnology or IntegrationElisity leverages Armis' asset intelligence platform through API integration. Armis monitors over 6.5 billion assets worldwide across IT, OT, IoT, and IoMT environments. Elisity indicated it is deepening technical integration via Armis' Developer Portal to expand platform capabilities and enhance asset visibility for joint customers.
• CrowdStrikecoreTechnology or IntegrationElisity integrates with CrowdStrike's Falcon platform to extend protection to unmanaged devices that EDR cannot protect. The integration enables identity-based microsegmentation for devices that cannot run agents, improving security and reducing costs for joint customers.
• Active DirectorycoreTechnology or IntegrationElisity integrates with existing identity providers including Active Directory. User roles defined in these systems are directly mapped to policies within Elisity's platform, eliminating redundancy and enabling streamlined security policy enforcement based on existing identity infrastructure.
• MedigatecoreTechnology or IntegrationJoint solution with Medigate deployed at Bupa Cromwell Hospital. Medigate provides award-winning device discovery and risk assessment capabilities, while Elisity provides identity-based microsegmentation. Integration streamlines device identification, asset management, and ongoing policy maintenance.

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Illumio: Closest direct competitor offering agent-based microsegmentation for Zero Trust segmentation across data center and cloud environments, serving similar enterprise CISO buyers with comparable use cases.

Broad incumbents

• Cisco (Hypershield / Tetration): Incumbent networking vendor bundling microsegmentation (Tetration legacy, Hypershield new) into its security portfolio; competing directly with Elisity on identity-based segmentation but with broader platform reach.
• Palo Alto Networks: Broad SASE/ZTNA platform vendor with Strata and Prisma microsegmentation capabilities, competing for the same enterprise Zero Trust budgets as Elisity with deeper channel and product breadth.
• Akamai (Guardicore): Akamai acquired Guardicore to add microsegmentation to its security portfolio; competes with Elisity on segmentation depth but as part of a much broader CDN/edge security stack.
• Zscaler: Zero Trust SASE leader increasingly expanding into network segmentation as part of its platform strategy; overlaps with Elisity on identity-driven policy enforcement but oriented around cloud-delivered ZTNA.
• Cloudflare: Network and Zero Trust platform expanding into segmentation-adjacent capabilities; targets similar enterprise buyers with bundled SASE/ZTNA offerings rather than a dedicated microsegmentation product.

Emerging players

• Tenable (OT Security): OT/IoT security vendor profiled alongside Elisity in OT security buyers' guides; partial overlap on asset discovery and segmentation guidance for industrial environments.
• Dragos: OT cybersecurity specialist frequently compared with Elisity in OT security evaluations; overlaps on industrial network visibility but focuses on threat detection rather than identity-based segmentation.
• Claroty: OT/IoT cybersecurity vendor competing for the same manufacturing and healthcare OT security budgets; complementary on asset discovery versus Elisity's segmentation enforcement.
• Zero Networks: Emerging microsegmentation vendor offering agent-based and network-layer segmentation; competes for the same mid-market and enterprise Zero Trust deals as Elisity.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/ElisityInc
• YouTubeyoutube.com/@elisityinc.6782
• LinkedInlinkedin.com/company/elisity-inc

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds3 records

Investors6 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Elisity