Corsha is a machine identity security company that secures the automated connections between machines in operational technology (OT) and industrial environments. It gives each industrial machine and each machine-to-machine connection its own identity, then checks that identity every time the connection is used.
The platform is aimed at operators of factories, defence logistics systems and other critical infrastructure, where machines often talk to each other over shared secrets and long-lived credentials that are hard to rotate. Corsha replaces those secrets with identities that are checked on every connection.
At A Glance
| Vendor | Corsha |
|---|---|
| Category | Workload Identity, Secrets Management |
| Identities covered | Industrial machines, machine connections and service accounts |
| Deployment | SaaS or self-hosted, including air-gapped sites |
| Customers | Dell, U.S. Air Force, Lumen, Defense Logistics Agency |
| Market classification | Workload Identity; also Secrets Management |
What Corsha Does
Industrial networks were built to keep machines running, not to prove who a machine is. Traffic between controllers, sensors and servers is usually trusted because of where it comes from on the network or because it carries a shared secret that has not changed in years. Corsha acts as a “Machine Identity Provider (mIDP)” for this world. Instead of trusting network location or a static key, it makes every automated connection prove which machine is on each end before any data moves. The aim is to let operators connect OT systems to cloud, data and AI services without opening them to anyone who has copied a key.
Products
Corsha Platform
The platform is the identity control plane for machines. Connection discovery automatically maps every machine and every connection across an operational environment, including encrypted OT traffic, so teams start from an accurate picture rather than an outdated spreadsheet. Each machine then receives an identity that is recorded in a distributed ledger and can be attested.
| Dynamic authentication | Passwordless, one-time-use credentials for machines, checked continuously on every automated connection. |
|---|---|
| Access control | Identity-based policies applied at the connection level, so only approved machine pairs can talk. |
| Service accounts | The same one-time credentials can be enforced for service accounts, removing static secrets from scripts and integrations. |
Folio
Folio tackles a problem every OT team knows: network and compliance documentation that is out of date the day it is finished. Folio captures identities, connections and data flows on the network and keeps that record current.
- Hardware inventories built in real time through deep-packet inspection
- Live connection maps that flag new connections and drift from the known operational baseline
- Diagrams exported in Visio-compatible formats
How It Works
The deployment has two layers. An identity control plane holds machine identities and policies and can run as SaaS or be self-hosted, including on-premises at air-gapped sites. Inline Gatekeepers sit in the facilities closest to the OT systems and enforce authentication on the traffic that passes through them. Gatekeepers come as software, as hardware, or in a run-on form for existing equipment. Agents report to the control plane through heartbeats whose timing can be configured.
The Gatekeepers understand both IT and OT protocols, including BACnet, Modbus, OPC UA and Ethernet/IP, so they can be placed in front of industrial equipment without changing how that equipment communicates.
Identities And Systems Covered
| Industrial machines | Controllers, industrial IoT devices and other equipment, each with an attestable identity. |
|---|---|
| Machine connections | Every automated machine-to-machine connection, discovered and verified. |
| Service accounts and API secrets | One-time credentials replace long-lived secrets used by accounts and integrations. |
| Equipment | FANUC equipment through a native integration, and cloud-connected devices. |
Integrations
| Area | Integrations |
|---|---|
| API gateways and service mesh | Kong, Istio, F5 Networks |
| Identity provider | Microsoft Entra ID |
Company Background
| Headquarters | Vienna, Virginia, United States, in the Tysons Corner area. |
|---|---|
| Leadership | Anusha Iyer (founder and CEO), David Mazary (Chief Technology Officer), Eric Kumar (Chief Customer Officer), Kevin Bocek (Chief Product Officer) and Melissa Keohane (Chief Operating Officer). |
| Investors | Razor’s Edge, Ten Eleven Ventures, 1843 Capital, SineWave Ventures, Booz Allen and Cybernetix Ventures. |
| Government work | In April 2026 Corsha announced a $50 million sole-source IDIQ contract from the Defense Logistics Agency to bring identity-driven Zero Trust connectivity to the agency’s mission-critical operational systems. |
| Recognition | Included in the Gartner Coolest Vendor Innovations in Cyber-Physical Systems Security, 2026 report, and winner of a Globee Award for critical infrastructure and OT security and a 2025 TMCnet Zero Trust Security Excellence Award. |
Note: This overview is compiled from Corsha’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.