Trustle is an access governance company. It helps security and IT teams remove standing permissions across cloud platforms and SaaS applications by granting people, service accounts and AI agents only the access a task needs, for only as long as it is needed, and then taking it away automatically.
It is aimed at organisations whose cloud and SaaS estates have grown faster than their ability to review who holds which permission, and that want human and non-human identities managed under one set of policies.
At A Glance
| Vendor | Trustle |
|---|---|
| Category | Access governance, just in time access and CIEM |
| Identities covered | Human users, non-human identities, service accounts and AI agents |
| Agentic AI | Agent discovery, named owners, scoped and expiring access, kill switch |
| Market classification | Application Security |
What Trustle Does
Permissions tend to outlive the reason they were granted. Engineers keep admin rights after an incident, leavers keep accounts, and agents are created with broad access that nobody reviews. Trustle replaces that standing access with grants tied to a task or a time window. Requests are easier to make, privileges have a limited life, and provisioning and deprovisioning happen without manual tickets, which moves an organisation towards zero standing privileges and away from slow periodic permission reviews. The same model applies to workforce users, service accounts and AI agents alike, so one set of policies and one audit trail cover them all.
Products
Just-In-Time Access
Teams that want to stop handing out permanent admin rights use Just-in-Time Access to grant temporary access instead. Users ask for access and reviewers approve it inside Slack or Microsoft Teams, with suggested actions shown alongside the request.
- Approve once, then let a user provision access for a few minutes whenever it is needed
- Time-bound on-call access driven by PagerDuty schedules
- Break-glass access with auto approval and a revocation toggle
CIEM
Cloud environments accumulate service accounts, apps and agents with more permissions than they use. Trustle’s CIEM discovers them across cloud platforms, shows each identity’s permissions and actual usage, removes excess access, aligns permissions to roles and revokes entitlements that go unused.
Identity Lifecycle Management
This product handles joiners, movers and leavers. New starters receive predefined packs of privileges spanning several cloud platforms and SaaS applications, access is added or removed as a person’s role changes, and privileged access is revoked immediately when someone leaves. Disabling a user in the identity provider triggers deprovisioning everywhere, and continuous access certifications replace one-off review campaigns.
Securing Agentic AI
Organisations adopting AI agents use this product to bring agents under the same governance as staff.
| Identity and ownership | Every agent receives a verified identity and a named human owner. Trustle discovers agents that were never registered, including shadow AI and OAuth grants made without IT approval, assigns owners and revokes entitlements the agent does not use. |
|---|---|
| Task-scoped access | Permissions are granted per task and duration and then expire automatically. Over-privileged agents are cut back to their role, and regular reviews of agent and human access catch privilege creep. |
| Kill switch | Agent requests follow the same risk-based routing as human ones, and if an agent misbehaves a kill switch revokes all of its credentials at once. |
How It Works
Trustle connects to the systems where access is granted, such as AWS, Okta and GitHub, and uses those connectors to discover identities and to provision or revoke access. When a request arrives, policy decides the route: low-risk access is approved automatically, while higher-risk requests go to a person for approval in Slack or Microsoft Teams. On-call schedules in PagerDuty and Rootly can drive time-bound access automatically. Approved permissions are granted for a defined task or duration and removed when it ends, so nothing is left standing. Each step is logged for audit.
Identities And Systems Covered
| Human users | Workforce users governed from joining to leaving. |
|---|---|
| Non-human identities | Service accounts and apps discovered across cloud platforms. |
| AI agents | Each with an owner, scope and expiry, including agents in AWS AgentCore and Azure Foundry, MCP servers and Amazon Bedrock. |
| Cloud platforms | AWS, Microsoft Azure and Google Cloud Platform. |
| Identity providers | Microsoft Entra ID, Okta, Google Workspace, Cisco Duo and JumpCloud. |
| Business applications | Workday, Rippling, Salesforce, Snowflake, HubSpot and Databricks. |
| Developer platforms and edge | GitHub, GitLab, Azure DevOps and Cloudflare. |
Company Background
| Founder | Emiliano Berenbaum, founder and CTO. |
|---|---|
| Leadership | Gant Redmon, CEO since 2024. |
| Funding | Seed round led by Glasswing Ventures. |
| Trust | Holds an AICPA SOC for Service Organizations attestation and publishes a Trust Center. |
Note: This overview is compiled from Trustle’s publicly available information as of 4 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.