Stream Security
Capability scores
Methodology →- Authentication
- 3.0
- SSO & Federation
- 3.0
- Authorization
- 4.0
- Lifecycle & Provisioning
- 2.5
- MFA & Passwordless
- 2.5
- Governance & Audit
- 4.0
- Developer Experience
- 4.0
- Deployment Flexibility
- 3.5
- Pricing Transparency
- 3.0
- Support & Ecosystem
- 3.5
Scored 0–5 against a published rubric. Independent analysis, no vendor sponsorship.
Overview
Stream Security, formerly Lightlytics, focuses on real-time cloud detection and response, modeling cloud infrastructure and its relationships as they change. Its identity and entitlement analysis is part of understanding cloud risk in motion.
What it is good at
Its real-time model of cloud state connects identity and permission changes to their impact on exposure, helping teams see how a new role or policy affects access and blast radius immediately, rather than in a periodic scan.
Where it falls short
As a younger vendor, it has a smaller footprint than the major CNAPP platforms, and its CIEM is part of a broader cloud detection story rather than a dedicated entitlement suite.
Pricing
Quote-based.
Best for, and who should look elsewhere
Choose Stream Security for real-time cloud detection with entitlement context. Look elsewhere for an established, broad CNAPP.
Bottom line
A real-time cloud detection platform that brings entitlement change into live risk analysis, one to watch.
More CIEM vendors
All CIEM →- Wiz4.5/5
- Prisma Cloud4.3/5
- Tenable Cloud Security4.3/5
- Orca Security4.2/5
- Sonrai Security4.2/5
Related on Start with Identity
- VendorBritive
strong
- Comparisonbritive-vs-sonrai-security
Britive and Sonrai both tackle cloud identity and entitlement risk ([CIEM](/vendors/ciem/)), but with different centers of gravity. Britive focuses on just-in-t
- VendorMicrosoft Entra Permissions Management
strong
- VendorOrca Security
strong_contender
- Comparisonwiz-vs-orca-security
Neither of these is a CIEM product. Both are cloud security platforms with entitlement analysis inside. One is now owned by Google, the other is still independe
- Comparisonwiz-vs-sonrai-security
Wiz covers cloud entitlements inside a broader CNAPP and is now part of Google Cloud. Sonrai is standalone and identity-first, built around removing unused perm
By SWI Community Team · Last evaluated 2026-07-03
Independent, community-driven analysis. No vendor sponsorship. Compiled from public research and community input and verified on a best-effort basis, so details may be incomplete or out of date. Scores are opinions, not advice. Trademarks belong to their owners; mention does not imply affiliation or endorsement. See the full disclaimer, or send corrections to community@startwithidentity.com.