Stack Identity is an identity security company that helps cloud security teams find and remove Shadow Access: the unauthorised or unintended access that builds up across cloud accounts, SaaS applications and data platforms.
The platform looks at human users and at the far larger population of non-human identities, such as service accounts, API keys, tokens and secrets, that are generated by APIs, workloads and microservices and often keep permanent access to sensitive assets.
At A Glance
| Vendor | Stack Identity |
|---|---|
| Category | Identity access risk management (CIEM, Cloud IGA and ITDR) |
| Identities covered | Human and non-human identities, including service accounts, API keys, tokens and secrets |
| Deployment | Platform sold through AWS Marketplace; SARA runs inside the customer’s own cloud account |
| Funding | Seed, from WestWave Capital and Benhamou Global Ventures |
| Market classification | Identity Security Posture Management; also Authorisation |
What Stack Identity Does
Shadow Access is the risk posed by unauthorised access to IT resources and systems. It grows quietly as teams adopt new cloud services and AI tools, each of which hands out entitlements and privileges to people and to machines, and it is easy to miss when identity tools only manage the accounts they provisioned themselves. Stack Identity’s approach is to detect, remove and govern Shadow Access in one place rather than across separate tools, with a shared live data attack map so security and identity teams look at the same picture of risk.
Products
Identity Access Risk Management Platform
The core platform brings the three functions below together, with a patent-pending Breach Prediction Index (BPI) that ranks risks and picks out ten types of Shadow Access pattern. It also checks cloud environments for compliance violations against frameworks such as HIPAA, SOC2 and AWS-FTR, which helps teams that need to show auditors their cloud access is under control.
CIEM
Cloud Identity Entitlements Management gives teams a handle on cloud permissions spread across multiple clouds and SaaS applications, where access is granted in many places and rarely revoked. It feeds the ITDR and IGA modules, so the entitlements it finds can be watched for misuse and taken through review.
IGA
Identity and Access Governance turns those findings into action. It gives insight into who can access what, runs automated workflows and targets access reviews at high-risk scenarios rather than asking reviewers to certify everything. Notifications and recertifications run automatically.
ITDR
ITDR watches for identity threats including posture risks, account takeovers, insider threats and privileged access abuse. It maps how attackers could use an identity for ransomware or data theft and produces recommendations to prioritise, investigate, remediate and govern each threat.
Shadow Access Risk Assessment (SARA)
SARA is an assessment utility for organisations that want to see their exposure before committing to the full platform. It produces a daily report of Shadow Access and Shadow Identity risks across AWS deployments.
How It Works
| Component | What it does |
|---|---|
| Platform delivery | The identity access risk management platform is bought through AWS Marketplace or directly from Stack Identity. |
| SARA deployment | SARA deploys directly into the customer’s cloud environment and runs inside the customer’s own trust boundary, because many security controls block outside SaaS monitoring tools from reaching cloud data. It installs in the customer’s AWS accounts without granting any third party access, and checks cloud events to spot new Shadow Access risks as they appear. |
| Hand-off | Findings, review tasks and alerts are sent out to Jira, Slack and PagerDuty, where security and identity teams already work. |
Identities And Systems Covered
| Human identities | Users whose entitlements and privileges are assessed alongside machine access |
|---|---|
| Machine identities | Service accounts, API keys, tokens and secrets with standing access to sensitive assets |
| Generated identities | Identities created automatically by APIs, cloud workloads, data stores, microservices and other multi-cloud services |
| Privileged access | Admin permissions and privileged access abuse |
| Environments | Multi-cloud and multi-SaaS estates, with SARA built for AWS |
| Assets | Infrastructure, applications, cloud services, databases, data platforms and software supply chains |
Integrations
| Area | Integrations |
|---|---|
| Ticketing and chat | Jira, Slack |
| Alerting | PagerDuty |
Company Background
| Headquarters | Menlo Park, California, United States |
|---|---|
| Leadership | Venkat Raghavan, founder and CEO |
| Funding | A reported $4 million seed round co-led by WestWave Capital and Benhamou Global Ventures, with Plug and Play also taking part |
| Research | The Shadow Access Impact Report found that “Only 4% of identities are human while the remaining are non-human identities”, and that 5% of identities in the cloud have admin permissions |
Note: This overview is compiled from Stack Identity’s publicly available information as of 4 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.