Curity
Curity AB is a Stockholm-based provider of an API-first identity and access management platform built on OAuth 2.0 and OpenID Connect, deployed in customer environments. It serves enterprises in financial services, telecom, government, healthcare, and SaaS, with a 2026-extended focus on runtime authorization for autonomous AI agents.
- Company typePrivate
- Founded2015
- HeadquartersStockholm, Sweden
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Curity does
Curity AB is a Stockholm, Sweden-based private software company founded in 2015 that builds an API-first identity and access management (IAM) platform centered on the access decision itself rather than on user management. The company's core product, the Curity Identity Server, delivers authentication, authorization, and federation built on open standards (OAuth 2.0, OpenID Connect, SAML 2.0) and is deployed inside the customer's own environment (on-premises, private cloud, or hybrid) for data sovereignty and vendor neutrality. The platform is extended by Access Intelligence, launched in April 2026, which provides runtime authorization for autonomous AI agents through purpose-specific OAuth tokens, and by Token Intelligence, which embeds agent intent and permission context into tokens for just-in-time, least-privilege access decisions.
Curity generates revenue through subscription licensing of the Identity Server with tiered pricing based on deployment scale, supported by an enterprise field-sales motion targeting large organizations in financial services, government, healthcare, telecom, and SaaS. A complementary product-led growth channel exists through developer.curity.io, offering a free 14-day Enterprise trial. The company reports 11-50 employees and its only disclosed funding is a $2.1 million round led by Fairpoint Capital in June 2019, indicating an essentially bootstrapped operating posture. Named enterprise customers include Santander, PagerDuty, Dun & Bradstreet, If Insurance, Tele2, Telenor, Ikano Bank, ICA, Scandic, and Arelion, with reported end-user footprints ranging from millions to billions. In March 2026, Curity appointed Monica Enand (former Chair of Auth0 during its acquisition by Okta) as Chair of the Board, signaling preparation for a new growth phase tied to enterprise adoption of agentic AI.
Curity firmographics
Firmographics- Name
- Curity
- Legal name
- Curity AB
- Website
- https://curity.io
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Curity AB is a Stockholm-based provider of an API-first identity and access management platform built on OAuth 2.0 and OpenID Connect, deployed in customer environments. It serves enterprises in financial services, telecom, government, healthcare, and SaaS, with a 2026-extended focus on runtime authorization for autonomous AI agents.
- Ownership category
- akta.pro rank
Curity industry classification
Industry- Product category
- Identity and Access Management
- NAICS
- Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370), Services-Prepackaged Software (7372)
- akta.pro primary industry
- Secrets Management & Machine Identity (API keys, certificates, workload identity) (HDAEAJAJ)
- akta.pro secondary industries
- Authentication (MFA/Passwordless/Biometrics) Platforms (BPAMAEAE), Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD)
Keywords
Where Curity is headquartered
LocationHeadquarters
- HQ city
- Stockholm
- HQ country
- Sweden
- HQ region
- Europe
Offices1 record
Markets served
Curity business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Curity Identity Server Licensing: Subscription-based licensing of the core identity and access management platform. Deployed in customer environment (on-premises, private cloud, or hybrid). Revenue derived from annual subscriptions with tiered pricing based on deployment scale and features.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Pay-as-you-go | Enterprise Trial |
Go-to-market motion3 records
Distribution channels2 records
Marketing channels9 records
Curity product offering
Product offeringCore offering
Curity provides an API-driven identity management platform centered on the Curity Identity Server, delivering OAuth 2.0, OpenID Connect, and related authentication, authorization, and tokenization capabilities for enterprises securing APIs and digital services. The platform is extended through add-on modules such as Access Intelligence (for AI agent authorization) and Token Intelligence (for advanced token lifecycle management).
Product overview
Curity offers a unified identity and access management platform built around the access decision itself, spanning APIs, AI agents, and human users. The core platform is the Curity Identity Server, which provides authentication, authorization, and federation capabilities using open standards (OAuth 2.0, OpenID Connect, SAML). This core engine is extended by Access Intelligence, a module designed specifically for runtime authorization of autonomous AI agents that shift access control from static decisions to continuous, context-driven evaluation. Token Intelligence complements these offerings by enabling purpose-specific OAuth tokens that carry agent intent and permissions. The platform is deployed in the customer's own environment to maintain data control and avoid vendor lock-in.
Differentiator
Problem solved
Functional benefit
Brands
- Curity Identity Server: The core engine for authentication, authorization and federation across infrastructure.
- Access Intelligence
- Token Intelligence
Products and services
- Curity Identity Server Core API-driven identity management platform that provides OAuth 2.0, OpenID Connect, and related authentication, authorization, and tokenization capabilities for enterprises securing APIs and digital services.
- Access Intelligence Add-on module that enables AI agents to securely authenticate and obtain authorization tokens for accessing protected APIs and resources.
- Token Intelligence Add-on module that provides advanced token lifecycle management, introspection, and security capabilities for the Curity Identity Server.
Quantifiable outcome
- Organizations spin up 30+ agent identities within six months without proper visibility
- +1 more outcomes
Companies that use Curity
Customer profileNamed customers11 records
Segments8 records
Ideal customer profiles1 record
Curity technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration32 records
AI capability7 records
Feature8 records
Curity partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core.
- Amazon Web Services (AWS)coreAWS is a core deployment platform for Curity Identity Server. Product is available on AWS with detailed deployment guides, CloudFormation templates, and CDK examples. Customers can deploy Curity on AWS infrastructure.
- Microsoft AzurecoreAzure is a core deployment platform for Curity Identity Server. Detailed deployment guides and Azure Kubernetes Service (AKS) deployment examples available. Integration with Azure API Management documented.
- Google Cloud PlatformcoreGoogle Cloud Platform is a supported deployment platform for Curity Identity Server. Deployment guides for Google Kubernetes Engine (GKE) available.
- KongcoreKong API Gateway integration is a core part of Curity's phantom token and OAuth proxy integration ecosystem. Multiple integration patterns documented including Kong Enterprise, Kong Open Source, and Kong Developer Portal integration.
- NGINXcoreNGINX integration with phantom token approach and OAuth proxy documented. Includes reverse proxy configuration guides and integration with NGINX Plus.
- Apigee (Google)coreApigee Edge integration with phantom token and split token approaches documented. Integration guides available for enterprise API management.
- OktacoreOkta integration documented for authentication using Okta as external identity provider. Customers can authenticate using Okta in Curity Identity Server.
- Microsoft Entra IDcoreMicrosoft Entra ID (Azure AD) integration documented for authentication and credential verification. Integration guides for enterprise identity scenarios.
- If InsurancecoreIf Insurance is a customer using Curity to secure AI, APIs, and partner ecosystems. Customer case study available showing production deployment with 4M+ customers and 1 AI agent in production.
Scale indicators7 records
Recent moves6 records
Expansion highlights5 records
Curity competitors and assessment
Company assessmentDirect peers
- Auth0: OAuth/OIDC/SAML identity platform for developers and enterprises. Most direct competitor to Curity Identity Server; acquired by Okta in 2021. Targets the same enterprise and developer-first IAM buyer with similar protocols and integration patterns.
- ForgeRock: Enterprise IAM platform with strong CIAM and identity governance capabilities. Competes with Curity for large regulated buyers needing on-prem and hybrid deployments, particularly in financial services and government.
- Ping Identity: Enterprise-grade identity security with federation, SSO, and API access management. Comparable to Curity in regulated verticals (banking, healthcare, government) and on-prem/hybrid deployment models.
- WSO2 Identity Server: Open-source and commercial API-driven identity platform supporting OAuth 2.0, OIDC, and SAML with API management integration. Closely comparable to Curity's standards-based, integration-rich approach.
Broad incumbents
- Okta: Largest standalone identity vendor with Workforce Identity and Customer Identity (Auth0) product lines. Competes head-to-head with Curity across enterprise SSO, federation, and increasingly agent identity, but bundles broader workforce and CIAM capabilities.
- Microsoft Entra ID (Azure AD): Hyperscaler identity platform bundled with Microsoft 365 and Azure. Directly competes with Curity in enterprise SSO/OAuth/OIDC, and is actively extending into agent identity and runtime authorization. Massive distribution advantage.
- AWS Cognito: Hyperscaler-managed identity service from AWS for customer identity and access. Competes with Curity for AWS-native deployments, especially CIAM, but lacks equivalent runtime authorization for AI agents.
- Google Cloud Identity: Google's enterprise and consumer identity platform. Competes in OAuth/OIDC enterprise federation and is bundling identity into Google Cloud, putting it on a collision course with Curity for cloud-native buyers.
- IBM Security Verify: Enterprise identity and access management from IBM with workforce and CIAM capabilities. Overlaps with Curity in regulated industries and on-prem deployments.
Emerging players
- Keycloak: Open-source IAM platform under CNCF with OAuth/OIDC/SAML support. Competes with Curity on price-sensitive, technically capable buyers and is a credible alternative for non-regulated deployments.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
Curity social profiles
Digital presenceCurity financial estimates
Financial estimateRevenue estimate
Valuation estimate
Curity leadership team
Management profileNumber of profiles
Profiles7 records
Curity funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Curity M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Curity
What does Curity do?
Curity provides an API-driven identity management platform centered on the Curity Identity Server, delivering OAuth 2.0, OpenID Connect, and related authentication, authorization, and tokenization capabilities for enterprises securing APIs and digital services. The platform is extended through add-on modules such as Access Intelligence (for AI agent authorization) and Token Intelligence (for advanced token lifecycle management).
Is Curity a public or private company?
Curity is a private company. It is classified as venture growth investor backed and is currently operating.
When was Curity founded?
Curity was founded in 2015. It employs 11 to 50 people.
Where is Curity based?
Curity is headquartered in Stockholm, Sweden, in the Europe region.
How does Curity make money?
One revenue line is on record: curity Identity Server Licensing.
Who are Curity's main competitors?
Direct peers on record are Auth0, ForgeRock, Ping Identity and WSO2 Identity Server. Broad incumbents are Okta, Microsoft Entra ID (Azure AD), AWS Cognito, Google Cloud Identity and IBM Security Verify. Keycloak is listed as an emerging player.
Does Curity have an API?
Yes. Curity exposes OAuth 2.0, OpenID Connect, and SAML endpoints through its Identity Server. The platform provides a comprehensive API surface including RESTCONF API for administration, GraphQL APIs for database clients, dynamic client registration management, and user management with SCIM. Additional APIs include token procedures, granted authorization operations, and plugin extensibility via Java SDK. Developer documentation is at developer.curity.io.
What industry is Curity in?
Curity's product category is Identity and Access Management. Its primary akta.pro industry code is HDAEAJAJ, Secrets Management & Machine Identity (API keys, certificates, workload identity), with a secondary code of BPAMAEAE, Authentication (MFA/Passwordless/Biometrics) Platforms. Its NAICS code is 561621 and its SIC code is 7370.