Loading story…
Defakto, a Silicon Valley-based startup specializing in non-human identity management, has raised $30.75 million in a Series B funding round to accelerate its growth in the artificial intelligence (AI) identity detection space. The company, led by co-founder and CEO Danny Oliveri, aims to expand its platform's capabilities for discovering and governing AI workloads and agents. The new funding will be used to enhance product development, particularly in the areas of AI identity capabilities and deeper integrations with major cloud providers and AI frameworks. Defakto's platform is designed to manage the entire lifecycle of machine identities, with a strong focus on governance, discovery, and eradication of unnecessary or risky non-human identities. The company emphasizes the critical nature of non-human identity management as organizations increasingly adopt AI and automated systems, which can introduce new security risks if not properly governed. Defakto was originally founded in 2022 under the name Spirl and has since grown to employ 32 people. The company previously closed a $13 million Series A funding round in April 2024, demonstrating strong investor confidence in its mission and technology. CEO Danny Oliveri, who took the helm in December 2024, brings significant experience from his previous roles at Oracle, where he was responsible for cloud monetization in North America, and at other security firms such as TopSpin Security and Lacoon Mobile Security. The company plans to use the new capital to further educate the market about the importance of non-human identity security, which is becoming increasingly relevant as organizations deploy more AI agents and machine-to-machine communications. Defakto's approach includes not only the detection of non-human identities but also the governance and, when necessary, the eradication of those identities to reduce attack surfaces. The platform's integration with cloud and adjacent technology platforms is seen as a key differentiator, enabling organizations to manage machine identities across complex, hybrid environments. The funding will also support the company's efforts to build out its go-to-market strategy and expand its presence in the rapidly growing identity and access management sector. As AI adoption accelerates, the risks associated with unmanaged machine identities are expected to rise, making solutions like Defakto's increasingly vital for enterprise security. The company is positioning itself as a leader in the emerging field of non-human identity governance, aiming to set standards and best practices for the industry. With this latest investment, Defakto is well-placed to address the evolving security challenges posed by AI and automation in the enterprise.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Defakto announced that it raised $30.75 million to expand its position in the non-human identity security market. The two references report the same funding event and do not provide an earlier or more specific event date than publication.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Descope, an identity security startup founded in 2022 and led by the former CEO of Demisto, has secured $35 million in additional seed funding to enhance its solutions for managing and securing artificial intelligence-powered agents. The company aims to address the growing need for robust identity controls as AI agents increasingly operate autonomously within digital environments. With this new funding, Descope plans to expand its capabilities in agent identity life cycle management, implement fine-grained access controls, and integrate with emerging protocols such as the Mode Context Protocol (MCP). Co-founder Rishi Bhargava emphasized that CISOs are particularly concerned about the permissions granted to AI agents, preferring to start with more restrictive access than typically given to human users and gradually increasing trust and permissions over time. The funding will also support the development of governance, auditing, and secure integration features tailored to the unique challenges posed by agentic and machine identities. Descope currently employs 92 people and has now raised a total of $88 million, following a previous $53 million seed round led by Lightspeed Venture Partners and GGV Capital in February 2023. The company’s leadership, including Slavic Markovich, brings experience from the successful sale of Demisto to Palo Alto Networks for $560 million in 2019. Descope’s focus on AI agent identity security reflects a broader industry trend as organizations seek scalable frameworks to manage the risks associated with autonomous digital agents. The company’s solutions are designed to provide dynamic adjustment of agent permissions, ensuring that access rights evolve in line with organizational trust and operational requirements. The integration with protocols like MCP is intended to facilitate secure and auditable interactions between AI agents and enterprise systems. Descope’s approach also includes comprehensive governance tools to monitor and control agent activities, addressing compliance and risk management needs. The funding will enable further research and development to stay ahead of emerging threats in the AI identity landscape. By prioritizing secure onboarding, continuous monitoring, and adaptive access controls, Descope aims to set a new standard for AI agent identity governance. The company’s efforts are expected to help enterprises mitigate the risks of unauthorized access and privilege escalation by autonomous agents. As AI adoption accelerates, Descope’s solutions are positioned to become critical components of modern identity security architectures. The investment underscores investor confidence in Descope’s vision and the growing market demand for advanced AI identity management tools.
Jul 12, 2026
Security leaders and new research warn that **generative AI** is accelerating a shift toward **identity-based compromise**—notably phishing, social engineering, and impersonation—because traditional controls have reduced the effectiveness of brute-force and other “old-style” attacks. Thales’ Americas CISO Eric Liebowitz argues organizations should respond with stronger identity-focused defenses, including sustained employee training that goes beyond “red flag” spotting, **user behavior baselining** to detect anomalies, and technical controls such as internal AI-assisted defenses and **DLP** to counter increasingly capable *agentic* adversaries. Separate reporting highlights how the same trend is being monetized at scale: AMLTRIX research found an industrialized dark web market for **stolen and fabricated identities**, with “full identity packages” (ID scans plus matching selfies) priced as low as **$30**, enabling repeated account creation for laundering before detection; **pre-verified accounts** command a premium (e.g., verified crypto accounts at **$200–$400**), reflecting the difficulty of defeating live verification. Nametag’s 2026 workforce impersonation findings similarly warn that **deepfake-as-a-service** and readily available AI tooling are making high-value corporate fraud (e.g., spear-phishing and CEO fraud) more accessible, and that **consumer-grade identity verification** will be insufficient against injected deepfakes—driving a need for more continuous, hardware-backed verification and controls that account for emerging risks such as **prompt-injection-based poisoning of AI agent memory**.
Jun 29, 2026
Major identity and access management vendors are introducing new platforms and making strategic acquisitions to address the security challenges posed by the rapid adoption of autonomous AI agents in enterprise environments. Ping Identity has launched "Identity for AI," a platform designed to register, manage, and monitor AI agents as non-human identities, providing features such as agent authentication, authorization, least-privilege enforcement, real-time monitoring, and threat detection. This solution aims to ensure accountability and compliance as organizations scale their use of agentic automation, with general availability expected in early 2026. Meanwhile, Twilio has acquired Stytch to develop an intelligent identity layer that verifies trust between humans and AI agents in real time. Additional industry developments include Nuggets' release of a privacy-preserving verification plugin for ElizaOS and Akeyless' expansion of its security suite with identity provider and privileged access management features tailored for AI agents. Industry leaders warn that unsecured AI agents could become a major source of enterprise breaches, highlighting the urgent need for robust identity and security controls as AI-driven automation becomes ubiquitous.
Jun 29, 2026