Permiso Security

Overview

Permiso Security focuses on identity threat detection and response (ITDR) across human and non-human identities, tracking identity behavior and activity across cloud environments at runtime. Founded in 2020 in Palo Alto, it bridges the NHI and ITDR worlds, watching how identities actually behave rather than only cataloging them. It is detection-focused by design.

What it is good at

The strength is runtime detection of risky identity behavior across both human and non-human identities, correlating activity to surface compromise, privilege abuse, and anomalous access. Governance and audit visibility score highest, with authentication and authorization analysis close behind. For cloud security teams, having one runtime lens across human and machine identity activity is genuinely useful for investigation and response.

Where it falls short

It is detection-focused, so it complements rather than replaces governance and vaulting; it will not provision, certify, or vault credentials for you. It is not a governance-only tool either, so teams wanting static reviews alone may find it broader than needed, and it is not traditional PAM. As with the category, integration breadth and agent coverage keep evolving.

Pricing

No public pricing. Quote-based subscription through a sales-led process. Model identity volume and connected clouds with the TCO calculator before comparing.

Best for, and who should look elsewhere

A fit for cloud security teams that want runtime identity-threat detection spanning human and non-human identities. Look elsewhere if you want a governance-only tool or traditional PAM vaulting. Pair it with governance tools like Astrix Security or access governance like P0 Security, and see the wider AI identity category.

Bottom line

A strong runtime identity-threat detection option spanning human and non-human identities. Best paired with a governance or vaulting layer.