What Saporo does

Saporo is a Swiss cybersecurity company founded in 2021 in Lausanne by brothers Olivier Eyries (CEO) and Guillaume Eyries (CPO) together with cybersecurity professor Dr. Eric Blavier (CTO). It sells a graph-native Identity Security Posture Management (ISPM) platform that uses an in-memory graph engine to continuously model identity relationships and compute all viable attack paths across hybrid environments — Active Directory, ADCS, SMB shares, Azure, Entra ID, M365, AWS, and Okta — and prioritizes remediation by chokepoint impact via its Attack Path Resistance Score, Propagation Score, and Attack Opportunity Score. The platform is agentless, deployable on-prem or in the cloud, and exposed via a Swagger-based API for SIEM/XDR/SOAR/GRC/ITSM integration; current GA is Saporo v4.1 (October 2025) and Saporo v5 is announced for mid-2026 with AI-driven remediation workflows aligned to the Mobilization stage of Gartner's CTEM. Saporo is ISO 27001 certified (2025, AssuranceLab) and maps 500+ controls across ISO 27001, ANSSI, CIS, and MITRE ATT&CK.

The company makes money through enterprise SaaS subscriptions on a quote-based, multi-year contract basis, complemented by professional services delivered through certified partners (one-time assessments and ongoing managed services). Go-to-market combines direct enterprise sales (request-demo motion, HubSpot CRM, LinkedIn Sales Navigator BDR outreach) with a channel-first partner program spanning MSSPs, IT providers, and consultancies (Bechtle, Orange Cyberdefense, Thales, iC Consult, Sword, Ontrex, and others), a flagship Thales strategic alliance in Belgium, and a North American motion executed via an OH.io embedded-operators partnership in Columbus, Ohio. Target customers are mid-market and large enterprises with 500–30,000 employees in healthcare, financial services, government, manufacturing, and technology; stated metrics include 140% net customer retention, 100% year-on-year growth since the prior round, and 5.9 million attack paths eliminated across the customer base.

Saporo has raised approximately €13.6M across three venture rounds — €2.6M pre-seed (Jan 2022, Session VC and Lightbird Ventures), €4M seed (Dec 2022, XAnge-led), and €7M Series A (Dec 2025, TIN Capital-led with G+D Ventures, CDP Venture Capital, XAnge, Lightbird VC, and Session VC) — and was ranked #82 in Sifted 250 Europe 2025 (#1 in Switzerland). The company employs people across Switzerland, France, and the US and plans to scale R&D, sales, and marketing throughout 2026.

Name

Saporo

Legal name

Saporo S.A.

Website

https://saporo.io

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

Saporo is a Swiss cybersecurity company providing a graph-native Identity Security Posture Management platform that maps attack paths across hybrid Active Directory, Entra ID, AWS, and Okta for mid-market and large enterprises in healthcare, financial services, government, manufacturing, and technology.

Ownership category

akta.pro rank

Product category

Identity Security Posture Management (ISPM)

NAICS

Computer Systems Design Services (541512), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Identity Threat Detection & Response (ITDR) (HDAEAJAH)

akta.pro secondary industry

Security Analytics & Detection Engineering (HDADAGAE)

Keywords

• Identity security posture management
• Attack path management
• Hybrid identity security
• Active directory hardening
• Identity threat detection

Headquarters

HQ city

Lausanne

HQ country

Switzerland

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Saporo Partner Program (channel-driven revenue): Channel-first model: MSSPs, IT providers, and consultants deliver Saporo to end customers. Supports both one-time assessments (audits) and ongoing managed-service offerings, with a global partner network bringing advanced attack path analysis to AD, Azure, O365, AWS, and beyond. Partners can resell, implement, and operate Saporo within customer environments.
2. US revenue via OH.io shared-revenue partnership: North American operations are run via the OH.io performance-venture partnership: OH.io embeds go-to-market operators to lead sales, marketing, and demand generation for Saporo in the US and Canada, with both parties working on a shared-revenue basis. Saporo's Lausanne team continues product development.
3. Enterprise SaaS subscriptions for hybrid ISPM: Enterprise subscription model with >140% net customer retention, sold primarily to large regulated customers in healthcare, financial services, manufacturing, government, and technology. Funds raised are reinvested into R&D and one-click/assisted remediation workflows. Customer base tripled in 2022 following product launch; 100% year-on-year growth since the previous round.
4. Professional services via delivery partners: Professional-services revenue delivered through certified partners (e.g., Identity Attack Path Assessments offered by Ontrex). Partner program explicitly supports one-time audits as well as ongoing managed services, which serve as a non-SaaS revenue path into the Saporo platform.

Pricing tiers

Go-to-market motion4 records

Distribution channels5 records

Marketing channels6 records

Core offering

Saporo provides a graph-native Identity Security Posture Management (ISPM) platform that continuously maps, diagnoses, and helps fix identity weak points across hybrid Active Directory, Entra ID, ADCS, SMB shares, AWS, Okta, and M365 environments. An in-memory graph engine computes millions of exploitable attack paths and prioritizes the smallest set of changes (chokepoints) that deliver the greatest risk reduction, with optional AI-assisted remediation. The platform is delivered agentlessly, deployable on-prem or in the cloud, and is exposed through a Swagger-based API for integration with SIEM, XDR, SOAR, GRC, ITSM, and vulnerability management tools.

Product overview

Saporo offers a single unified graph-native Identity Security Posture Management (ISPM) platform rather than a suite of separate products — every capability ships under one continuous platform anchored by an in-memory graph engine that maps identity relationships across hybrid Active Directory, ADCS, SMB shares, Azure, Entra ID, M365, AWS, and Okta. Within that unified platform, customers access dedicated solution modules for On-Prem Identity Hardening (covering AD, ADCS and SMB shares), Cloud Identity Hardening (covering Azure, Entra ID, M365, AWS and Okta), and Compliance & Risk (mapping 500+ controls across ISO 27001, ANSSI, CIS and MITRE ATT&CK). The platform is exposed through a Swagger-based Saporo API for SIEM/XDR/SOAR/GRC integrations, and is delivered as versioned releases — the current GA version is Saporo v4.1 (released October 13, 2025), with Saporo v5 (mid-2026) announced to add AI-driven remediation workflows.

Differentiator

Problem solved

Functional benefit

Products and services

• Saporo Platform Graph-native Identity Security Posture Management (ISPM) platform that continuously maps, diagnoses, and helps fix identity weak points across hybrid Active Directory, Entra ID, ADCS, SMB shares, AWS, Okta, and M365 environments, using an in-memory graph engine to compute millions of attack paths and prioritize the smallest set of changes that deliver the greatest risk reduction.
• Saporo On-Prem Identity Hardening Hardens Microsoft Active Directory (AD), Active Directory Certificate Services (ADCS), and SMB shares, providing deep graph mapping of AD/ADCS/SMB objects (templates, enrollment abuse, secrets), uncovering excessive privileges, dangerous delegation paths, weak GPOs and certificate templates, and prioritizing misconfigurations by propagation risk and exposure of high-value targets.
• Saporo Cloud Identity Hardening
• Saporo Compliance & Risk
• Saporo API

Quantifiable outcome

• 5.9 million attack paths eliminated (customer-aggregated)
• +6 more outcomes

Named customers4 records

Segments5 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration13 records

AI capability10 records

Feature8 records

Partnerships

17 partnerships are on record, tiered flagship, minor, core and strategic.

• OH.ioflagshipStrategic or Co-development Partner · 28 May 2026Strategic partnership to launch Saporo's North American operations out of Columbus, Ohio. OH.io is a Columbus-based performance-venture platform founded by Ratmir Timashev (backed by a $100M personal investment), with a goal of anchoring 100 high-growth AI/software startups in Central Ohio over five years. Under the agreement, OH.io embeds go-to-market operators (sales, marketing, demand generation) directly into Saporo's North American operations on a shared-revenue basis. Marks OH.io's first international portfolio company.
• TrachetminorOthers · 2 December 2025Trachet advised Saporo on the €7M Series A transaction (M&A and fundraising advisory). Trachet supports founders from Series A to exit with hands-on execution and communications.
• Thales CybersecurityflagshipStrategic or Co-development Partner · 29 March 2024Strategic partnership announced in March 2024 to empower organizations in Belgium with combined Thales cybersecurity services and Saporo's attack path management platform. Announced by Geoffrey Lucas, Country Manager in Belgium for Thales cybersecurity activities. Thales also appears as a certified Saporo Partner.
• BechtlecoreChannel Partner/ Reseller/ DistributorCertified Saporo Partner listed on the "Find a partner" directory; Bechtle is a large European IT security provider delivering a 360° security strategy covering application, cloud, infrastructure, data center, and workplace security.
• CloudEdgeminorChannel Partner/ Reseller/ DistributorCertified Saporo Partner based in Yverdon-les-Bains (canton of Vaud), founded 2024; provides Cloud & Edge infrastructure, Cyber Security, Modern Workplace, and Service Management to organizations with internal IT departments.
• iC ConsultstrategicImplementation/ SI/ Consulting PartnerCertified Saporo Partner; iC Consult is described as "the trusted partner of choice for Identity-driven Cybersecurity," with 850+ experts globally delivering advisory, architecture, implementation, integration, support, and managed services for IAM, zero trust, and ITDR.
• KidanminorChannel Partner/ Reseller/ DistributorCertified Saporo Partner; Swiss IT services company established in 2016 providing end-to-end IT services and solutions to organizations worldwide.
• KyosminorChannel Partner/ Reseller/ DistributorCertified Saporo Partner; Swiss IT security specialist with 20 years of experience in security, networks, and information systems.
• MAGNAminorImplementation/ SI/ Consulting PartnerCertified Saporo Partner; cybersecurity, privacy, and AI consulting firm with offices in Canada, USA, Hong Kong, and Switzerland, specializing in SOC2 and ISO certifications.
• MeanquestminorChannel Partner/ Reseller/ DistributorCertified Saporo Partner; founded 1995, 120+ employees, offices in Ecublens, Meyrin, and Givisiez. ISO 27001 certified in September 2023; serves 400+ customers in French-speaking Switzerland.
• NeoEdgeminorChannel Partner/ Reseller/ DistributorCertified Saporo Partner; French cloud provider, outsourcer, and integrator specializing in Microsoft (Azure, M365, Active Directory) and identity management.
• OntrexstrategicChannel Partner/ Reseller/ DistributorCertified Saporo Partner; Swiss IT provider (50+ employees, 400+ customers) headquartered in Brüttisellen with a Munich branch. Ontrex offers Saporo-led Identity Attack Path Assessments with stated outcomes of up to 70% attack surface reduction in the first year and 100% visibility of internal attack paths.
• Orange CyberdefensestrategicChannel Partner/ Reseller/ DistributorCertified Saporo Partner; cybersecurity business unit of the Orange Group with 3,000+ security professionals and global reach across Europe, Americas, Africa, Middle East, and Asia Pacific.
• SambusminorChannel Partner/ Reseller/ DistributorCertified Saporo Partner; IT solutions provider with 25+ years of experience.
• SecuLabsminorImplementation/ SI/ Consulting PartnerCertified Saporo Partner; Swiss information security firm supporting public and private organizations across offensive security, GRC, security architecture, forensics, and incident response.
• SwordstrategicImplementation/ SI/ Consulting PartnerCertified Saporo Partner; global technology transformation firm providing platform & security services including hybrid cloud, cyber security, hardware, and network services.
• TebicomminorChannel Partner/ Reseller/ DistributorCertified Saporo Partner; since 2004, supports French-speaking enterprises with IT transformation, infrastructure, and security services in CHANGE and RUN modes.

Scale indicators13 records

Recent moves7 records

Expansion highlights7 records

Direct peers

• SpecterOps: SpecterOps builds BloodHound Enterprise, the most direct competitor in attack-path management for Active Directory and Azure/Entra ID. Both products use graph theory to map and prioritize identity attack paths against hybrid AD/cloud environments, serving enterprise security teams with comparable buyer profiles.
• Tenable Identity Exposure: Tenable's Identity Exposure (formerly Tenable.ad) is a direct peer in AD attack-path and misconfiguration analysis. Both target the same identity-driven attack-surface problem in hybrid AD/Azure environments, with Saporo competing on graph-native scale and Tenable leveraging its broader vulnerability-management installed base.
• Obsidian Security: Obsidian Security offers identity threat detection and response (ITDR) and SaaS security posture management, overlapping with Saporo on identity-driven risk prioritization for cloud and SaaS environments including Entra ID and M365.
• Silverfort: Silverfort provides unified identity protection across AD, Entra ID, and cloud environments, with a strong overlap on identity attack-path discovery and remediation. Targets similar enterprise security buyers, often competing in identity-driven detection-and-response RFPs.

Emerging players

• Push Security: Push Security focuses on identity and SaaS attack-surface reduction for the modern workforce, with comparable targeting of Entra ID, Okta, and browser-based identity threats. Less mature than Saporo but addressing overlapping buyer needs around hybrid identity hardening.
• Saviynt: Saviynt offers identity governance and cloud privilege management with overlap on hybrid AD/Azure/Entra ID entitlement analysis. Targets similar enterprise identity-security buyers, often appearing alongside Saporo in identity-governance-plus-posture evaluations.

Broad incumbents

• Microsoft (Entra ID / Defender for Identity): Microsoft Entra ID and Defender for Identity provide native identity security across Azure AD, AD, and M365 — the same data sources Saporo ingests. As a broad incumbent, Microsoft is the default identity stack and the most strategically important competitor and ecosystem partner for any ISPM vendor.
• CrowdStrike (Falcon Identity Protection / Adaptive Shield): CrowdStrike bundles identity protection (including via the Adaptive Shield acquisition) into its Falcon platform. As a broad incumbent, CrowdStrike competes on consolidation and endpoint-tied identity visibility, putting pricing pressure on standalone ISPM players like Saporo.
• BeyondTrust: BeyondTrust provides privileged access management and identity security with overlapping capabilities on AD/Entra ID privilege analysis and attack-path reduction. Serves similar regulated enterprise buyers and competes for identity-security budget.
• CyberArk: CyberArk is a leader in identity security and privileged access management with an expanding portfolio across ITDR and identity governance. As an incumbent with a much larger installed base, it competes with Saporo for enterprise identity-security spend in regulated verticals.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks6 records

Key highlights8 records

Customer concentration

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds4 records

Investors9 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Saporo