Mimoto
Mimoto is an AI-powered cybersecurity company that continuously verifies the actual person behind every system interaction — not just the credential — using behavioral and contextual profiling to detect impersonation, account takeover, and bot activity in real time, serving enterprise buyers in financial services, online services, and technology verticals.
- Company typePrivate
- Founded2020
- HeadquartersSan Francisco, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Mimoto does
Mimoto, Inc. is a privately held Delaware C-corporation headquartered in San Francisco, California, operating with approximately eight employees worldwide. The company builds an AI-powered, person-based continuous identity verification platform founded on the proposition that credentials do not equal people ("user_name ≠ Person"). Its core technology is a dual ML/AI engine that ingests up to 26 behavioral, environmental, and contextual data streams to construct granular per-person profiles (Mimoto Profiles) and continuously pattern-matches live activity against these profiles to detect impersonation, account takeover, credential sharing, and agent-based access in real time. The platform is designed to be privacy-preserving — it does not capture raw keystrokes or any data that could be backward-engineered — and supports flexible deployment across SaaS, embedded web pages, browsers/extensions, workstations, VMs, servers, containers, and (planned) mobile and AI-assistant environments.
The product portfolio consists of two complementary offerings. Mimoto Continuous Verification (MCV) is the flagship enterprise subscription, priced per profile (one profile per person regardless of deployment count), sold via annual subscription and quote-based pricing supported by a 14-day free trial (up to 10 agents and 5 profiles). Mimoto Continuous CAPTCHA (MCC) is a bot/agent detection service available as a WordPress plugin with a published starter price of $5,100 per year (15% discount applied), with additional CMS/marketplace distribution being added weekly. Enforcement can be executed through Mimoto's native console policies, third-party triggers (e.g., PagerDuty), or integration with existing PAM/AD/IAM systems. The company has achieved SOC 2 Type 1 compliance, has a patent-pending Mimoto Profile creation process, and holds registered trademarks covering its wordmark, logos, tagline, and mascot.
Commercially, Mimoto runs a hybrid GTM: a sales-led motion targeting enterprise buyers in financial services, online services, and technology/cybertech verticals; a product-led 14-day trial funnel feeding an inside sales motion for mid-market conversion; and a self-serve marketplace listing for MCC on WordPress (with ongoing platform additions). All current distribution is US-focused, and revenue, customer counts, and contract values are not publicly disclosed. The company was founded by Kris Bondi (CEO) and David Charboneau (CTO), with VP of Product Management Minh Dao hired from HashiCorp, Docker, and VMware.
Mimoto firmographics
Firmographics- Name
- Mimoto
- Legal name
- Mimoto, Inc.
- Website
- https://mimoto.ai
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Mimoto is an AI-powered cybersecurity company that continuously verifies the actual person behind every system interaction — not just the credential — using behavioral and contextual profiling to detect impersonation, account takeover, and bot activity in real time, serving enterprise buyers in financial services, online services, and technology verticals.
- Ownership category
- akta.pro rank
Mimoto industry classification
Industry- Product category
- Identity and Access Management Security
- NAICS
- Software Publishers (5132), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Fraud Prevention & Identity Verification (IDV/KYC) (BPAMAEAI)
- akta.pro secondary industries
- Bot Management & Mitigation (HDADALAB), Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG), Data, Evidence & Document Verification (IDV) for KYC (FSAMAMAN)
Keywords
Where Mimoto is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices2 records
Markets served
Mimoto business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Subscription - Mimoto Continuous Verification (MCV): Subscription-based licensing for Mimoto Continuous Verification, priced per Mimoto Profile (one profile per person, no matter how many places it is deployed). Customers purchase profiles as part of their subscription/order term. The model is designed for enterprise and mid-market buyers who need persistent person-based identity verification across multiple deployment environments.
- Subscription - Mimoto Continuous CAPTCHA (MCC): Annual subscription for Mimoto Continuous CAPTCHA sold as a starter package ($5,100 per year with 15% discount applied), covering real-time bot and agent detection and diverting for account creation and asset download attempts, integration APIs and tools, analytics and reporting dashboards, and customer support.
- Professional Services: Professional services performed by Mimoto for customers pursuant to a Statement of Work (SOW) or other Order, including bug fixes, patches, new versions, or other improvements (Updates). SOC2 Type 1 compliant.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Mimoto Continuous Verification - per profile subscription |
| Subscription | Annual | Mimoto Continuous CAPTCHA - WordPress Starter Package |
| Freemium | Pay-as-you-go | 14-Day Free Trial - Mimoto Continuous Verification |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels5 records
Mimoto product offering
Product offeringCore offering
Mimoto sells an AI-powered person-based continuous identity verification platform delivered through two subscription products: Mimoto Continuous Verification (MCV) for enterprise environments and Mimoto Continuous CAPTCHA (MCC) for web-based bot detection. The platform ingests up to 26 behavioral, environmental, and contextual data streams to build unique per-person AI profiles and uses real-time pattern matching to detect impersonation, account takeover, credential sharing, and agentic AI attacks before damage occurs.
Product overview
Mimoto is an AI-powered person-based identity verification platform that operates on the principle of recognizing the actual person rather than credentials. The platform consists of two core products: Mimoto Continuous Verification (MCV) and Mimoto Continuous CAPTCHA (MCC). MCV is designed for enterprises to continuously verify users within systems, data, and applications by building AI-generated identity profiles unique to each individual and matching patterns in real-time to detect impersonation, account takeover, and credential compromise. MCC is a complementary service that specifically addresses bot and agent detection at account creation and asset download points to prevent automated attacks. Both products leverage Mimoto's dual ML/AI engine and can ingest up to 26 datastreams to create granular person-specific profiles. The platform offers flexible deployment options including SaaS applications, embedded webpages, browsers/browser extensions, workstations, VMs, servers, containers, and mobile/tablet support (early-2026).
Differentiator
Problem solved
Functional benefit
Brands
- Mimoto Continuous CAPTCHA (MCC): Web-based bot detection and prevention service that identifies and diverts agents and bots pretending to be people at account creation or asset requests.
- Mimoto Continuous Verification (MCV)
Products and services
- Mimoto Continuous Verification (MCV) AI-powered continuous identity verification platform that builds unique person-based profiles and uses real-time pattern matching to verify who is performing each action. Detects impersonation, account takeover, and credential compromise before damage occurs. Sold as an annual per-profile subscription to enterprise and mid-market security buyers.
- Mimoto Continuous CAPTCHA (MCC) Web-based bot and agent detection and prevention service that identifies and diverts bots pretending to be people at account creation or asset request points. Available as WordPress and HubSpot packages with additional platform support being added weekly. Starter package priced at $5,100/year with 15% discount.
Quantifiable outcome
- 90–98% of new accounts on websites are actually agents or bots pretending to be people, which Mimoto Continuous CAPTCHA identifies and diverts before infiltration
- +2 more outcomes
Companies that use Mimoto
Customer profileSegments4 records
Ideal customer profiles4 records
Mimoto technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration1 record
AI capability4 records
Feature8 records
Mimoto partnerships and signals
Strategic signalScale indicators5 records
Recent moves6 records
Expansion highlights6 records
Mimoto competitors and assessment
Company assessmentDirect peers
- Transmit Security: Identity and fraud prevention platform offering continuous authentication and orchestration. Closely mirrors Mimoto's real-time, AI-driven person-verification positioning against account takeover and impersonation.
- HUMAN Security: Bot management and account-abuse prevention platform focused on stopping automated attacks and fraud at the application layer. Directly comparable to Mimoto's bot/agent-detection positioning, with an enterprise SaaS model.
- HYPR: Passwordless authentication and continuous identity assurance provider using risk-based signals to verify legitimate users. Most comparable peer to Mimoto's continuous, person-based verification approach in identity/fraud prevention.
- BeyondTrust: Privileged access management leader focused on securing admin/root access and detecting misuse of credentials. Directly comparable to Mimoto's MCV use case around privilege access exploitation and credential-sharing detection.
- DataDome: AI-powered bot and online fraud protection platform that detects and blocks malicious automation across web and mobile. Comparable to MCC in product behavior and target buyers (e-commerce, online services).
- Arkose Labs: Bot management and account-takeover prevention vendor specializing in stopping fraud at account creation and login. Comparable use case to Mimoto's Continuous CAPTCHA product for new-account abuse.
Emerging players
- Sardine: AI-native fraud and identity platform focused on financial services, combining device intelligence, behavior biometrics, and KYC. Comparable to Mimoto's financial-services vertical emphasis and its behavioral/continuous verification approach.
Broad incumbents
- Okta: Identity and access management incumbent used by large enterprises for SSO, MFA, and identity governance. Competes indirectly with Mimoto's continuous verification layer and is often the established incumbent that MCV must integrate with or displace.
- Cloudflare Bot Management: Network-scale bot detection and mitigation product embedded in Cloudflare's edge platform. Most direct competitor to Mimoto's Mimoto Continuous CAPTCHA (MCC) offering for bot/agent detection at account creation.
- CyberArk: Established PAM and identity-security incumbent with broad enterprise reach. Competes with Mimoto's continuous verification positioning for privileged-user security budgets, though with a credential-centric rather than person-centric model.
Market position
Strengths5 records
Weaknesses2 records
Competitive moat4 records
Key risks5 records
Key highlights6 records
Customer concentration
Mimoto social profiles
Digital presenceMimoto compliance and trust
Trust signalCompliance1 record
Mimoto financial estimates
Financial estimateRevenue estimate
Valuation estimate
Mimoto leadership team
Management profileNumber of profiles
Profiles3 records
Mimoto funding detail
Funding detailFunding overview
Funding rounds2 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Mimoto M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Mimoto
What does Mimoto do?
Mimoto sells an AI-powered person-based continuous identity verification platform delivered through two subscription products: Mimoto Continuous Verification (MCV) for enterprise environments and Mimoto Continuous CAPTCHA (MCC) for web-based bot detection. The platform ingests up to 26 behavioral, environmental, and contextual data streams to build unique per-person AI profiles and uses real-time pattern matching to detect impersonation, account takeover, credential sharing, and agentic AI attacks before damage occurs.
Is Mimoto a public or private company?
Mimoto is a private company. It is classified as venture growth investor backed and is currently operating.
When was Mimoto founded?
Mimoto was founded in 2020. It employs 11 to 50 people.
Where is Mimoto based?
Mimoto is headquartered in San Francisco, United States, in the North America region.
How does Mimoto make money?
Three revenue lines are on record. Subscription - Mimoto Continuous Verification (MCV) is the primary driver. The others are subscription - Mimoto Continuous CAPTCHA (MCC) and professional Services.
Who are Mimoto's main competitors?
Direct peers on record are Transmit Security, HUMAN Security, HYPR, BeyondTrust, DataDome and Arkose Labs. Sardine is listed as an emerging player. Broad incumbents are Okta, Cloudflare Bot Management and CyberArk.
Does Mimoto have an API?
Yes. Mimoto offers an API (referred to as 'Mimoto API') as the foundation for its products and services. The API enables programmatic access to Mimoto's continuous verification capabilities. Additionally, a Mimoto Javascript Library is available for embedding services in applications, webpages, browsers, or browser extensions for continuous verification of person-based Profiles.
What industry is Mimoto in?
Mimoto's product category is Identity and Access Management Security. Its primary akta.pro industry code is BPAMAEAI, Fraud Prevention & Identity Verification (IDV/KYC), with a secondary code of HDADALAB, Bot Management & Mitigation. Its NAICS code is 5132 and its SIC code is 7373.