Redblock
Identity Security & Non-Human Identity
Redblock is here to supercharge your Identity Security investments.
redblock.aiopens in a new tabEstablishedIdentity Access Management - IAMIdentity Access Automation
Identity Security & Non-Human Identity
Opal Security
An AI-native access security platform unifying real-time visibility, policy-as-code, and direct control across human and non-human identities.
EmergingIdentity Access Management- IAMIdentity Access ManagementIAMIdentity Governance and Administration - IGAIdentity Governance and AdministrationIGAAccess Reviews
Back to marketplace
Best for
Security and engineering teams managing complex access across human, service, and AI-agent identities.
Overview
Opal Security is an AI-native access security platform that helps security and engineering teams manage access across employee identities, service accounts, and AI agents. Combining real-time visibility, expressive policy-as-code, and direct access controls, Opal enables organizations to govern identity in fast-moving, constantly changing environments.
Based in San Francisco, Opal serves companies including Databricks, Notion, Cloudflare, Scale AI, CoreWeave, SpaceXAI, and Superhuman. The company was named to Notable Capital’s Rising in Cyber 2026 list, selected by 150 leading CISOs, and is backed by Greylock, Battery Ventures, Silicon Valley CISO Investments (SVCI), and Cambium Capital.
The problem it solves
Organizations struggle to keep permissions aligned with actual business needs across cloud and application environments. Standing privileges, fragmented approval processes, and manual access reviews make it difficult to enforce least privilege while giving employees timely access. Opal helps teams coordinate access requests, identify risky permissions, and make access governance more repeatable.
Core capabilities
- Time-bound access requests with configurable approval workflows.
- Self-service resource discovery and access requests through the Opal interface or Slack.
- Resource ownership, designated reviewers, and escalation policies for access approvals.
- Access-risk analysis highlighting unused, permanent, outside, and irregular access grants.
- Access-review campaigns with scoped reviews, reviewer assignment, reminders, and audit reports.
Ideal customer profile
Engineer-led, cloud-native organizations whose security, identity, IT, and compliance teams need to reduce standing privileges, standardize access approvals, and make access reviews more repeatable. A strong evaluation fit is a team managing access across multiple cloud and application environments with reliable upstream identity data and clear resource ownership.
Use cases
Replace standing privileges with time-bound accessStandardize resource-access requests and approvalsIdentify excessive or unused access for remediationRun periodic user-access reviewsProduce access-review evidence for audits
Why CYBER BUYER is featuring this vendor
CYBER BUYER has signed a reseller agreement with Opal Security, adding an access-governance option for organizations seeking to reduce standing privileges without slowing down engineering teams. We are featuring Opal for its combination of time-bound access, access-risk visibility, and repeatable access reviews. Our advisory approach focuses on validating connector coverage, approval workflows, and operational fit against each buyer's environment before purchase.
Questions to ask during evaluation
- Which of our systems and permission types support discovery, provisioning, and revocation, and which require manual steps?
- How is access expiration enforced, and how are failed grants or revocations detected and resolved?
- Can approval policies reflect resource sensitivity, ownership, requester attributes, and escalation requirements?
- How does Risk Center identify unused or irregular access, and what data and remediation steps are required?
- Can access campaigns match our review scopes, reviewer assignments, evidence requirements, and remediation deadlines?
- What upstream identity attributes and ongoing administrative effort are required to keep policies accurate?
- How are service accounts and AI-agent identities discovered and governed, and which controls are available for our specific systems?
- Which capabilities are included in the proposed subscription, and what implementation, support, and renewal costs should we plan for?
Related vendors
Lumos
Identity Security & Non-Human Identity
Lumos is the first Autonomous Identity platform to automatically discover and manage access across all your apps.
lumos.comopens in a new tabEstablishedIdentity Access Management - IAMIdentity Security Posture Management - ISPM
Fabrix Security
AI Security & AI Governance
Fabrix Security builds AI agents for identity security, empowering IAM teams with the intelligence to make confident, explainable access decisions – right at the point of decision.
fabrix.ioopens in a new tabEstablishedIdentity Access Management - IAMAI Native Identity Security Platform