Ermetic - a Tenable company

What Ermetic - a Tenable company does

Ermetic is an Israeli cloud infrastructure security company founded in 2019 and headquartered in Tel Aviv, with additional offices in Boston and Palo Alto. The company was acquired by Tenable Holdings, Inc. (NASDAQ: TENB) in 2023 and now operates as a subsidiary within Tenable's cloud security portfolio under the brand 'Ermetic - a Tenable company'. Across its operating history Ermetic raised approximately $97.25 million in disclosed venture funding across three rounds (May 2020 seed/early, July 2020, and a $70 million December 2021 Series B led by Qumra Capital), plus a strategic investment from Splunk Ventures in April 2022.

The company built a unified Cloud-Native Application Protection Platform (CNAPP) that combines Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlements Management (CIEM), Just-in-Time (JIT) Access, Data Security Posture Management (DSPM), Attack Path Analysis, Cloud Detection and Response, and container/Kubernetes security into a single integrated product. The platform's differentiating design choice is identity-first security: it visualizes access paths, enforces least-privilege, eliminates standing privileges through JIT, and correlates misconfigurations, identities, vulnerabilities, and sensitive data to surface toxic combinations that constitute real attack paths across hybrid and multi-cloud environments.

Ermetic operates a subscription-based SaaS revenue model with tiered pricing (per-asset, per-user, per-FQDN) on annual and multi-year contracts. The go-to-market combines direct enterprise field sales for large deployments, a global channel partner/reseller program, inside sales for mid-market, e-commerce self-service for smaller buyers, and a co-sell motion with Splunk following Splunk Ventures' investment. Customer segmentation spans Financial Services (primary vertical), Energy, Healthcare, Technology, Education, Government Defense, and Retail — all verticals with regulatory or data-protection drivers that justify enterprise cloud security spend. Total headcount at acquisition was 101–250 employees.

Name

Ermetic - a Tenable company

Legal name

Ermetic

Website

https://ermetic.com

Company type

Private

Founded year

2019

Operating status

Acquired

Headcount range

101–250 employees

Short description

Ermetic, now a Tenable subsidiary, provides a unified CNAPP platform combining CSPM, CIEM, JIT access, DSPM, and attack path analysis to secure hybrid and multi-cloud environments for enterprise customers across Financial Services, Energy, Healthcare, Technology, Government, and other regulated verticals.

Ownership category

akta.pro rank

Product category

Cloud Security Software

NAICS

Computer Systems Design Services (541512)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Serverless & PaaS Security (Function/App Service Runtime) (HDADADAL)

akta.pro secondary industries

Cloud Data Security (DSPM, Cloud DLP) (HDADADAJ), Attack Detection & Response for Cloud/SaaS (SOC for Cloud) (HDADAGAJ)

Keywords

• Cloud security platform
• Cloud posture management
• Identity entitlement management
• Cloud-native application protection
• Exposure management platform

Headquarters

HQ city

Tel Aviv

HQ country

Israel

HQ region

Middle East

Offices3 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Subscription-based SaaS: Annual and multi-year subscription licenses for cloud security platforms including CSPM, CIEM, and CNAPP. Pricing is tiered based on assets, users, or organizational size. Customers can purchase directly or through channel partners and resellers.

Pricing tiers

Go-to-market motion3 records

Distribution channels5 records

Marketing channels8 records

Core offering

Ermetic provides a unified Cloud-Native Application Protection Platform (CNAPP) that combines Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlements Management (CIEM), Just-in-Time (JIT) Access, Data Security Posture Management (DSPM), Attack Path Analysis, and Cloud Detection and Response to deliver hybrid and multi-cloud security. The platform identifies toxic combinations of misconfigurations, vulnerabilities, identities, and sensitive data to prioritize and remediate cloud exposures. It is sold as an enterprise SaaS subscription, typically through annual or multi-year contracts.

Product overview

Ermetic, now part of Tenable, offers a unified cloud security platform as part of the Tenable One Exposure Management platform. The portfolio centers on Tenable One Cloud Exposure as the core platform, complemented by specialized modules including Cloud Security Posture Management (CSPM) for configuration monitoring, Cloud Infrastructure Entitlements Management (CIEM) for identity security, Just-in-Time (JIT) Access for privilege management, Data Security Posture Management (DSPM) for data protection, and Attack Path Analysis for threat visualization. These capabilities are delivered through the Cloud-Native Application Protection Platform (CNAPP) architecture, which unifies cloud infrastructure, identities, and workload protection from build to runtime.

Differentiator

Problem solved

Functional benefit

Products and services

• Tenable One Cloud Exposure
• Cloud-Native Application Protection Platform (CNAPP)

Quantifiable outcome

• 80% reduction in time spent on alerts
• +1 more outcomes

Segments7 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature7 records

Scale indicators4 records

Recent moves5 records

Expansion highlights6 records

Emerging players

• Aqua Security: Aqua Security specializes in cloud-native workload protection for containers, Kubernetes, and serverless, with growing CSPM/CIEM capabilities. It overlaps with Ermetic's container and Kubernetes security module and competes in DevSecOps-oriented accounts.
• Sonrai Security: Sonrai Security focuses on cloud identity and entitlement management (CIEM) with graph-based analysis of identity and data risk. It overlaps with Ermetic's CIEM and identity-driven risk prioritization capabilities in cloud-heavy enterprises.
• Sysdig: Sysdig delivers runtime security and CSPM for containers, Kubernetes, and cloud, with strong Falco-based threat detection. It overlaps with Ermetic's cloud workload protection capabilities and competes for security-conscious cloud-native buyers.
• Snyk: Snyk is a developer security platform spanning code, open source, containers, and IaC, with a growing cloud security posture story. While not a pure CNAPP, it competes with Ermetic on developer-driven cloud workload and configuration scanning.

Direct peers

• Lacework: Lacework is a CNAPP vendor offering CSPM, workload protection, identity, and anomaly detection from a single platform. It targets the same cloud-forward enterprise and mid-market buyer as Ermetic, often appearing on the same shortlists.
• Orca Security: Orca Security is an agentless CNAPP platform that combines CSPM, CIEM, vulnerability management, and DSPM in a single console. It competes directly with Ermetic's unified CNAPP value proposition and is commonly evaluated alongside it in mid-market and enterprise deals.
• Wiz: Wiz is a leading cloud-native application protection platform (CNAPP) vendor offering agentless CSPM, CIEM, CWPP, and DSPM in a unified product. It is the most direct competitor to Ermetic's CNAPP positioning and target customer base of cloud-forward enterprises.

Broad incumbents

• CrowdStrike (Falcon Cloud Security): CrowdStrike extends its Falcon endpoint and XDR platform into cloud workload protection, CSPM, and CIEM. It competes with Ermetic on unified cloud and identity threat detection for enterprises already standardizing on the Falcon platform.
• Microsoft Defender for Cloud: Microsoft Defender for Cloud (formerly Azure Security Center) provides CSPM, CIEM, and workload protection natively across Azure and increasingly multi-cloud. As a hyperscaler-bundled incumbent, it pressures Ermetic on price and procurement simplicity.
• Palo Alto Networks (Prisma Cloud): Prisma Cloud is Palo Alto Networks' CNAPP offering, covering CSPM, CIEM, CWPP, and cloud network security as part of a broader security platform. It competes head-to-head with Ermetic in enterprise CNAPP deals and bundles cloud security with Palo Alto's wider portfolio.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/ErmeticSec
• Facebookfacebook.com/ermeticsec
• LinkedInlinkedin.com/company/ermetic

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds3 records

Investors7 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Ermetic - a Tenable company