Ermes - Cyber Security S.p.A.

What Ermes - Cyber Security S.p.A. does

Ermes - Cyber Security S.p.A. is a privately held Italian cybersecurity software vendor founded in 2018 as a spin-off from Politecnico di Torino and headquartered in Turin. The company specializes exclusively in browser security, providing a Zero Trust Browser Extension that operates across Chrome, Firefox, Safari, and Edge without requiring VPN, SSL inspection, or proxy infrastructure. Its platform is organized around two main security modules — Session Protection (covering web DLP, business credentials protection, browser extension protection, advanced web filtering, and browsing risk assessment) and AI-Based Protection (covering zero-day phishing, cybersquatting, anti-tracking, and malvertising) — with a Contextual DLP add-on scheduled for Q1 2026.

Underpinning the product is a patented detection algorithm and more than ten proprietary AI methodologies, complemented by a public Phishing Live Reporting feed that surfaces real-time phishing campaigns. The company is ISO 27001 certified, certified as a Cybersecurity Made in Europe product, and was recognized as a Top 10 Gartner Browser Security Vendor in 2024. R&D is supported by the AI4CTI joint research initiative with Politecnico di Torino, funded by EUR 6.2 million through the Italian Ministry of University and Research FISA program for 2025–2028.

Ermes monetizes through enterprise subscription licenses, selling primarily via direct enterprise sales with demo-led conversion and via listings on AWS, Microsoft Azure, and Google Cloud Marketplaces. The customer base spans more than 30 named enterprises across verticals including energy (MAIRE, SOL GROUP, Sorgenia), telecommunications (TIM), retail (Carrefour, Tigros), consulting (KPMG), pharmaceuticals (IBSA), automotive (IVECO, Dumarey), legal (Bonelli Erede, Chiomenti), aviation (Air Dolomiti, Aeroporto Bologna), and food and beverage (Balocco, Gruppo Cremonini, Antinori, Disaronno), with reported protection of more than 100,000 devices. Total cumulative funding is cited at over $8 million, including a EUR 1 million seed round in July 2021 and a 2023 round led by Alkemia Capital.

Name

Ermes - Cyber Security S.p.A.

Legal name

Ermes Cyber Security S.p.A.

Website

https://ermes.company

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

Ermes is an Italian cybersecurity software vendor that provides an AI-powered Zero Trust browser security extension for enterprises, protecting users from phishing, credential theft, and web-based threats across Chrome, Firefox, Safari, and Edge without VPN or proxy infrastructure.

Ownership category

akta.pro rank

Product category

Browser Security Software

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Browser & Web Isolation Security (HDADAEAK)

akta.pro secondary industry

Endpoint Security for End Users (EDR/XDR, Patch/Vuln, Zero Trust Endpoint) (BPAEAIAG)

Keywords

• Browser security software
• Web threat protection
• Phishing detection platform
• Zero trust browser
• Data loss prevention

Headquarters

HQ city

Torino

HQ country

Italy

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations

Revenue model

1. Browser Security Software Subscription: Enterprise browser security software sold as subscription licenses, with products including Session Protection and AI-based threat detection. The company offers per-device protection through browser extensions.

Go-to-market motion3 records

Distribution channels3 records

Marketing channels4 records

Core offering

Ermes develops and sells an AI-powered browser security platform delivered through a Zero Trust browser extension. The software protects enterprise end-users from web-borne cyber threats such as phishing, scareware, social engineering attacks, and data leakage in real time, without requiring VPN tunneling or SSL traffic inspection.

Product overview

Ermes is a browser security platform providing enterprise-grade protection through a unified product architecture. The core offering is the Zero Trust Browser Extension, complemented by two main security modules: Session Protection (for DLP, credentials, and web filtering) and AI-Based Protection (for zero-day phishing and real-time threat detection). A Contextual DLP module is scheduled for Q1 2026 launch. The platform operates without requiring VPN or SSL inspection, offering full visibility across Chrome, Firefox, Safari, and Edge browsers.

Differentiator

Problem solved

Functional benefit

Products and services

• Zero Trust Browser Extension
• Session Protection
• AI Based Protection
• Contextual DLP

Quantifiable outcome

• 90% of cyberattacks start from a web page
• +4 more outcomes

Named customers31 records

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability2 records

Feature4 records

Partnerships

Four partnerships are on record, tiered core and minor.

• Politecnico di TorinocoreStrategic or Co-development Partner · 1 January 2025Founding academic partner and ongoing strategic research collaborator. Ermes was founded as a spin-off from Politecnico di Torino in 2018. Active joint research through AI4CTI project developing intelligent systems for detecting and preventing cyber threats using AI.
• AWS MarketplaceminorChannel Partner/ Reseller/ DistributorCloud marketplace listing enabling AWS customers to purchase and deploy Ermes browser security solutions through their existing AWS infrastructure.
• Microsoft Azure MarketplaceminorChannel Partner/ Reseller/ DistributorCloud marketplace listing enabling Azure customers to procure Ermes browser security products through Microsoft's marketplace.
• Google Cloud MarketplaceminorChannel Partner/ Reseller/ DistributorCloud marketplace listing for Google Cloud customers to access Ermes browser security solutions.

Scale indicators5 records

Recent moves7 records

Expansion highlights6 records

Direct peers

• Menlo Security: Menlo Security is a direct peer offering browser/web isolation and zero-trust browsing protection for enterprises, addressing the same browser-based attack surface that Ermes targets through isolation rather than an extension.
• Island: Island pioneered the Enterprise Browser category, providing native browser-level security controls (DLP, credential protection, web filtering) — a close functional comparison to Ermes' Zero Trust Browser Extension approach.

Broad incumbents

• Zscaler: Zscaler's ZIA/ZPA SSE platform includes Secure Web Gateway, CASB, and browser-style protection as part of a broader cloud security stack — a broad incumbent that competes for the same browser/web-security budget Ermes targets.
• Netskope: Netskope's SSE/SASE platform provides cloud-delivered web security, DLP, and threat protection overlapping with Ermes' Session Protection and AI-Based Protection modules.
• Palo Alto Networks (Prisma Access / Browser): Palo Alto Networks offers browser security capabilities within Prisma Access SASE and has signaled native browser strategies — a broad incumbent competing for the same enterprise browser-security wallet.
• Proofpoint: Proofpoint is a leading incumbent in email and web security, with anti-phishing, DLP, and credential protection products that overlap with Ermes' session and AI-based protection modules.
• Cloudflare (Browser Isolation / Area 1): Cloudflare offers Browser Isolation and email security (Area 1) as part of its broader zero trust platform, competing for the same enterprise browser/web security budgets as Ermes.

Emerging players

• SlashNext: SlashNext focuses specifically on zero-hour phishing, social engineering, and BEC detection across email, web, and messaging — a focused emerging player overlapping directly with Ermes' AI-based phishing detection capabilities.
• Cofense: Cofense specializes in phishing detection and response, addressing a key threat vector that Ermes' AI-based protection targets through web/browser-based phishing simulation and credential theft detection.
• SquareX: SquareX is an early-stage browser security startup delivering consumer- and enterprise-grade protection against web-based threats via a browser extension, very similar in architecture and target use cases to Ermes.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/@ermes-browsersecurity
• LinkedInlinkedin.com/company/ermescybersecurity
• Xx.com/ErmesCyberSec
• Facebookfacebook.com/Ermes.company

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds4 records

Investors2 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Ermes - Cyber Security S.p.A.