YAXA

What YAXA does

YAXA is a private cybersecurity company founded around 2017 (with the firmographic record indicating 2015 as the company's inception year, though the website and corporate history reference 2017 as the operational launch), headquartered in Concord, United States. The company operates with a team of 1-10 employees and targets enterprise organizations running critical web-based applications that need protection against insider threats, credential theft, and zero-day vulnerabilities — problems that bypass traditional signature-based perimeter defenses such as firewalls, IPS, and IDS. Its flagship product, the YAXA Analysis Engine, employs a "reinforced ML" approach that combines an ensemble of machine learning algorithms (developed with a technology university partner) with four integrated modules: Behavioral Fingerprinting (per-user trait extraction from packet headers, IAM data, and access metadata), Anomaly Detection (real-time deviation from learned behavioral baselines), Automated Incident Response (real-time step-up authentication), and Adaptive Learning (unsupervised model refinement from user feedback). The product can be deployed as an appliance on-premises or in cloud environments, and YAXA provides demonstrations for both custom/internal applications and major SaaS platforms including Salesforce, Office 365, Dropbox, Gmail, and Box.

YAXA's business model is enterprise SaaS with subscription-based recurring revenue. The company sells exclusively through direct enterprise field sales, with a demo-driven acquisition motion (a "Request a demo" CTA on its website), and pricing is quote-based and not publicly disclosed — typical for negotiated enterprise security contracts. Its only disclosed go-to-market channels are the corporate website (for demand capture) and a LinkedIn corporate page. The leadership team consists of co-founders Kalpesh Sheth (CEO) and Ramesh Gupta (CTO), supported by advisors Bill Seifert, Chris Klaus (founder of Internet Security Systems), and Gunter Ollmann — all respected security-industry figures. The company's value proposition centers on a "trust but verify" identity-aware approach to web application monitoring that operates even on encrypted traffic and does not require static rule tuning.

The company has participated in three funding events spanning 2015-2018 (the most recent being admission to the Startupbootcamp FinTech London accelerator in June 2018), though no funding amounts have been publicly disclosed. There are no disclosed institutional investors, no disclosed revenue or ARR figures, no named customer logos, no patent portfolio, and no third-party benchmark validations. The data footprint suggests YAXA is a small, narrowly positioned startup in a competitive behavioral analytics / UEBA market segment, with its primary differentiator being ML-based behavioral fingerprinting for insider threat protection on web applications.

Name

YAXA

Legal name

Yaxa

Website

https://yaxa.io

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

1–10 employees

Short description

YAXA is a private cybersecurity company that provides an ML-driven behavioral analytics platform for real-time insider threat and credential-based attack detection on enterprise web applications, sold through direct enterprise sales with subscription-based pricing.

Ownership category

akta.pro rank

Product category

Cybersecurity Software

NAICS

Computer Systems Design and Related Services (54151), Other Computer Related Services (541519)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Identity Threat Detection & Response (ITDR) (HDAEAJAH)

akta.pro secondary industries

Security Analytics & Detection Engineering (HDADAGAE), Cloud Security Logging, SIEM/SOAR & Threat Detection (HDABAHAL)

Keywords

• User behavior analytics
• Insider threat detection
• Anomaly detection platform
• Behavioral security analytics
• Identity-aware security

Headquarters

HQ city

Concord

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Enterprise Security Software: YAXA appears to operate as an enterprise SaaS security platform. The company deploys appliances in data centers or cloud environments and sells through enterprise direct sales with demo-based engagement. Revenue is generated through software licensing and subscription arrangements for behavioral-based insider threat detection services.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels2 records

Core offering

YAXA provides a real-time risk monitoring and threat remediation platform for web-based applications. The Yaxa Analysis Engine uses proprietary reinforced machine learning to monitor user traffic, build behavioral profiles from live packet data and IAM identity information, detect real-time anomalies, and automatically trigger authentication challenges to block insider threats and credential-based attacks. The platform follows a four-step process: Behavioral Fingerprinting, Anomaly Detection, Automated Incident Response (Blocking Attacks), and Adaptive Learning.

Product overview

YAXA offers a unified security platform centered on the Yaxa Analysis Engine, which uses proprietary reinforced machine learning to monitor and protect web applications from insider threats. The platform comprises four integrated modules: Behavioral Fingerprinting (which establishes user behavioral baselines), Anomaly Detection (which identifies deviations in real-time), Automated Incident Response/Blocking (which enforces authentication controls), and Adaptive Learning (which continuously refines models based on user feedback). The solution operates as an inline identity-aware security layer that monitors live user activity including file-access and download information, replacing traditional signature-based perimeter defenses.

Differentiator

Problem solved

Functional benefit

Products and services

• Yaxa Analysis Engine

Quantifiable outcome

• 81% of web-based applications are compromised as a result of stolen credentials or rogue users

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability3 records

Feature4 records

Scale indicators2 records

Recent moves4 records

Expansion highlights4 records

Direct peers

• Teramind: Teramind delivers user behavior analytics and insider threat detection with automated response workflows — covering similar web and SaaS application monitoring use cases with comparable behavioral profiling technology.
• Vectra AI: Vectra AI applies ML to detect attacker behaviors across cloud, network, and identity, including credential misuse. Its AI-driven detection and automated response map directly to YAXA's behavioral fingerprinting and blocking attacks model.
• Exabeam: Exabeam is a direct competitor in the user and entity behavior analytics (UEBA) and security analytics market, offering ML-driven insider threat detection and automated incident response that closely parallels YAXA's behavioral fingerprinting and anomaly detection approach.
• DTEX Systems: DTEX specializes in insider threat and behavioral analytics for endpoints, using ML to surface anomalous user behavior — directly addressing the same insider threat use case YAXA targets, with overlapping technology and buyer.
• Gurucul: Gurucul provides a UEBA-driven fraud and insider threat platform using ML on identity and behavior data, operating in the same enterprise behavioral analytics niche as YAXA.
• Securonix: Securonix offers a UEBA- and SIEM-driven insider threat detection platform with behavior analytics, automated response, and pre-built integrations — a closely overlapping competitive set targeting the same enterprise security buyer.

Broad incumbents

• Microsoft Defender for Identity: Microsoft Defender for Identity is a bundled identity-threat detection capability integrated with the broader Defender/Sentinel ecosystem — addressing the same use case as YAXA with much greater distribution and platform leverage.
• Rapid7 (InsightIDR / InsightConnect): Rapid7 offers broader SIEM/EDR/XDR capabilities with UEBA baked in, targeting the same enterprise security buyer as YAXA but as part of a much wider security and analytics portfolio.
• Splunk (Enterprise Security): Splunk's Enterprise Security platform includes UEBA and behavioral analytics as part of a much broader SIEM/SOAR portfolio, competing for the same anomaly detection and insider threat use case YAXA addresses.
• Proofpoint (Insider Threat Management / ObserveIT): Proofpoint's Insider Threat Management (formerly ObserveIT) provides user behavior analytics and insider risk workflows for enterprise compliance and security teams, overlapping directly with YAXA's insider threat focus.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/yaxa
• Xx.com/yaxa_io
• Facebookfacebook.com/yaxa-1661685207422359

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds3 records

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments1 record

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about YAXA