What Acceptto does

Acceptto is a Portland, Oregon-based cybersecurity company founded in 2013 that builds identity and access management software for enterprise customers. The company is positioned around a continuous authentication paradigm, treating identity verification not as a single event at login but as an ongoing authorization state evaluated at every action and adjusted in real time as risk signals change. The product portfolio is delivered as a unified SaaS platform with six integrated modules: Customer Authority (adaptive authentication and fraud prevention for consumer-facing flows), B2B Authority (identity orchestration across partner and supplier ecosystems), Workforce Authority (employee continuous authentication, device trust, and session-level risk monitoring), Agent Authority (cryptographic identity, lifecycle management, and continuous authorization for non-human identities and autonomous AI agents), Assurance Authority (fine-grained policy enforcement across applications, APIs, and distributed environments), and Device Trust (endpoint posture assessment).

The underlying technology combines an Agent Registry for discovery of AI agents on endpoints, an identity-aware MCP proxy that enforces per-action policies with human step-up authentication for sensitive operations, and a risk and behavioral analytics engine that performs per-instance behavioral baselining with real-time drift and anomaly scoring. The platform applies a three-tier response model (deny-all, revoke, or downscope) when anomalous behavior is detected. The company monetizes through enterprise SaaS subscriptions with no publicly disclosed pricing, supported by a demo-driven field sales motion targeting large enterprises across banking, healthcare, retail, manufacturing, public sector, and critical infrastructure verticals. Named customers include AARP, American Red Cross, ExxonMobil, Ferrari, Dish Network, Telstra, Thermo Fisher, and Raymond James, and the company claims to secure 50M+ identities across workforce, customer, and autonomous AI environments. The company has native integrations with Amazon Web Services (Bedrock Agents) and Vercel (v0 AI agent platform), and was last funded in a November 2018 round led by Aetna Ventures and Millennium Technology Value Partners.

Name

Acceptto

Legal name

SecureAuth Corporation

Website

https://acceptto.com

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

11–50 employees

Short description

Acceptto is a Portland-based cybersecurity company founded in 2013 that delivers a continuous-identity authority SaaS platform for enterprise customers, covering workforce, customer, B2B partner, device, and now autonomous AI agent identity governance with behavioral risk analytics.

Ownership category

akta.pro rank

Product category

Identity and Access Management (IAM) / Cybersecurity

NAICS

Security Systems Services (except Locksmiths) (561621)

akta.pro primary industry

Single Sign-On (SSO) & Federation (SAML/OIDC, Identity Providers) (HDAEAJAB)

akta.pro secondary industries

Authentication (MFA/Passwordless/Biometrics) Platforms (BPAMAEAE), Federation & Identity Standards (SAML/OIDC/OAuth, Federation Hubs) (HDADAAAG)

Keywords

• Identity access management
• Adaptive authentication
• Non-human identity security
• Continuous authorization
• Behavioral risk analytics

Headquarters

HQ city

Portland

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Platform/SaaS Subscription: Enterprise identity security platform delivered as SaaS with multiple product modules including Customer Authority, B2B Authority, Workforce Authority, Agent Authority, Assurance Authority, and Device Trust.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

Acceptto (operating commercially as SecureAuth) provides a Continuous Identity Authority platform that delivers adaptive authentication, fraud prevention, and behavioral risk analytics across workforce, customer, partner, and autonomous AI agent identities. The platform unifies endpoint visibility, cryptographic agent identity registration, identity-aware gateway enforcement, and risk analytics into a single enterprise control plane that continuously evaluates authority at every action rather than only at login.

Product overview

SecureAuth offers a unified Continuous Identity Authority platform comprised of six integrated product modules: Customer Authority, B2B Authority, Workforce Authority, Agent Authority, Assurance Authority, and Device Trust (plus Presence Authority). The platform is built on a single non-negotiable principle that authority must be continuous — dynamically evaluated, enforced at every action, and adjusted in real time as risk changes. All six products work in harmony to secure every identity type including customer, workforce, partner, agent/non-human, and device identities.

Differentiator

Problem solved

Functional benefit

Quantifiable outcome

• 88% of organizations report AI agent security incidents
• +3 more outcomes

Named customers19 records

Segments7 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature5 records

Partnerships

One partnership is on record.

• Amazon Web ServicescoreTechnology or IntegrationAmazon Bedrock Agents integration. SecureAuth provides agent governance and security controls for AI agents deployed on AWS infrastructure. Listed in their enterprise platforms integration examples.

Scale indicators1 record

Recent moves6 records

Expansion highlights4 records

Emerging players

• Astrix Security: Astrix Security is an emerging player focused specifically on non-human identity security and AI agent governance. It is the most direct emerging competitor in the Agent Authority category, addressing the same machine identity sprawl problem SecureAuth targets.
• Strata Identity: Strata Identity specializes in identity orchestration and continuous authorization across hybrid and multi-cloud environments. It overlaps with SecureAuth's Assurance Authority module and federated identity authority positioning.

Broad incumbents

• Okta: Okta is the leading cloud-native identity and access management platform, offering workforce and customer identity solutions. It is the most direct broad incumbent competitor, serving similar enterprise customers with SSO, MFA, and lifecycle management, though it has not built a native agentic AI governance control plane.
• Microsoft Entra ID: Microsoft Entra ID (formerly Azure AD) is the default identity provider for most enterprises via the Microsoft 365 bundle. It competes directly on workforce SSO, MFA, and conditional access, and is increasingly adding AI agent identity features through Entra's agent ID initiatives.
• SailPoint: SailPoint is a leading identity governance and administration (IGA) platform serving large enterprises. It overlaps with SecureAuth's identity authority and assurance capabilities, particularly around continuous access governance and access policy enforcement.

Direct peers

• Transmit Security: Transmit Security provides customer identity and access management (CIAM) with fraud prevention and adaptive authentication capabilities. It directly competes with SecureAuth's Customer Authority module for fraud-aware customer authentication.
• CyberArk: CyberArk specializes in privileged access management and has expanded into identity security with strong focus on non-human identities and machine credentials. It is a direct peer in the agentic AI governance space, particularly around securing machine and AI agent identities at runtime.
• Beyond Identity: Beyond Identity offers passwordless authentication and continuous device trust, with a focus on risk-based authentication and session-level verification. It competes with SecureAuth's Workforce Authority and Device Trust modules.
• Ping Identity: Ping Identity provides enterprise IAM with strong federation and SSO capabilities, serving financial services and other regulated industries. It is a direct competitor in adaptive authentication and continuous identity verification for large enterprises.
• Delinea (formerly Centrify + Thycotic): Delinea is a privileged access management vendor focused on machine identities, secrets management, and just-in-time access. It is comparable to SecureAuth's Agent Authority and Workforce Authority for non-human identity governance.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key highlights6 records

Customer concentration

• Xx.com/accepttocorp

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds1 record

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Acceptto