Valence Security

Overview

Valence Security is a SaaS and AI security platform that finds and fixes identity risk across business applications: misconfigurations, over-privileged and dormant accounts, risky SaaS-to-SaaS integrations, and now AI agents connected to corporate data. Founded in 2021 in Tel Aviv, it is privately held and venture-backed; its last disclosed round was a 25 million dollar Series A led by Microsoft's M12 in October 2022, taking total funding to 32 million dollars. No acquisition or newer round was found as of October 2026, which makes it one of the smaller independents in a category where larger platforms have been buying; see the identity consolidation report.

What it is good at

Remediation is the differentiator. Many SaaS security tools stop at a findings list; Valence's remediation module offers guided steps, one-click fixes, ticket workflows or fully automated actions, and sends targeted Slack or email requests to the business users and app admins who own each system. In companies where marketing owns HubSpot and sales owns Salesforce, that collaboration model is what actually closes findings.

Coverage of non-human identities inside SaaS is the second strength. Valence maps OAuth grants, API tokens, service accounts and app-to-app connections, the path used in the 2025 SaaS supply chain breaches through connected apps. It now extends the same model to AI tools and agents through AI security posture management, and the site lists over 200 supported SaaS and AI applications, including Microsoft 365, Google Workspace, Salesforce, Slack, GitHub, Okta, Workday, Snowflake and major AI assistants.

Where it falls short

Valence has an ITDR module, but on its own documentation the threat detection is lighter than detection-first tools such as Obsidian Security; there is no browser extension for blocking phishing or session theft in real time. Like every API-based SaaS tool, it sees only what each app's API exposes, so depth falls off past the major platforms. It has no coverage of Active Directory, endpoints or cloud infrastructure entitlements. It is also a small, Series A-funded company; check roadmap commitments and support capacity before signing a multi-year deal.

Pricing

Quote-based with no published tiers or free plan; the website offers a demo request only. The Identity Pricing Transparency Index classes it as quote-only.

Best for, and who should look elsewhere

Valence fits mid-market and enterprise security teams with decentralized SaaS ownership who need posture findings fixed, not just reported. Deployment is API-based and light: connect each application with an admin token or OAuth app, and the first inventory arrives within days. Buyers who mainly need SOC-grade detections should look at Obsidian; teams starting from shadow SaaS discovery may prefer Nudge Security or Grip Security. For machine credentials beyond SaaS, see the NHI security rankings.

Bottom line

A remediation-first SaaS and AI posture platform that turns findings into fixes by involving the people who own each app. Pair it with directory and endpoint ITDR, and expect a smaller vendor's footprint.