Your Friday scroll has been interrupted by six people who know an alarming amount about how agents, attackers, and third-party apps are creating new paths to your data. That’s good news for you. In our mini-series "Agents, Attackers & Third-Party Apps: the New Path to Your Data," we get straight to it: what’s changing, where access and risk are expanding, and what security teams should be watching now. 📅 August 18, 26 & 31 11 AM PT | 2 PM ET 6 experts. 3 short sessions. 1 mini-series. The first session airs live Tuesday. RSVP here: https://lnkd.in/gVBdn8gW #ThirdPartyAccess #SaaSDataSecurity #NonHumanIdentity
Obsidian Security
Computer and Network Security
Palo Alto, California 78,787 followers
Comprehensive Security for your Enterprise Applications
About us
Every enterprise runs on software it doesn't own: third-party apps, AI copilots, and agents logging in with OAuth tokens nobody's reviewing. Obsidian Security secures all of it, discovering every third-party app and AI feature connected to your business, governing risky permissions, and detecting threats in real time. Trusted by the world's most regulated, highest-scale enterprises. If you're adopting AI, you're adopting third-party software faster than ever we make sure that doesn't mean adopting its risk. SPECIALTIES AI Security Posture Management, AI Security, SaaS Security Posture Management, Identity Threat Detection & Response, AI & Agentic Security, Continuous Governance, OAuth & API Risk, Supply Chain Integration Risk, App-to-App Security Subscribe to our newsletter: https://www.linkedin.com/newsletters/true-positives-7435782529825038336/ Get a demo: https://www.obsidiansecurity.com/get-a-demo Sign up for a trial: https://www.obsidiansecurity.com/trial
- Website
-
http://www.obsidiansecurity.com
External link for Obsidian Security
- Industry
- Computer and Network Security
- Company size
- 51-200 employees
- Headquarters
- Palo Alto, California
- Type
- Privately Held
- Founded
- 2017
- Specialties
- Advanced Threat Protection, Insider Threat Protection, Threat Detection, Threat Response, Automated Intelligence, Machine Learning, Information Security Software, SaaS Security , Incident Response, Visibility and Monitoring, and compliance
Locations
-
Primary
Get directions
Palo Alto, California, US
-
Get directions
Newport Beach, California, US
-
Get directions
Cheltenham, GB
Employees at Obsidian Security
Updates
-
Obsidian Security reposted this
The OpenAI-Hugging Face incident and Anthropic’s disclosure that Claude models reached real systems during cyber evaluations have put a sharper point on the question: Once an agent, app, or user crosses the first boundary, what else can it reach? On Aug. 18, Carl Shimel, Head of Threat Intelligence at Obsidian Security, and Farah Iyer will break down how to surface inherited access paths, understand why the access exists, and enforce the right boundary. If those incidents have your team revisiting agent access, third-party relationships, or what your logs can and cannot prove, join us live next week! Register here: https://lnkd.in/gsaNm3Yx
-
Why does a user, app, or integration still have access when the obvious permissions and logs don’t explain it? That's inherited access: the path that forms when one app trusts another, a role carries privilege it was never meant to keep, or an agent or integration quietly extends access across your enterprise apps. On Aug. 18, join Carl Shimel, Head of Threat Intelligence at Obsidian, and Farah I., PMM, for a live session "The Access Path Logs Won't Show: How to Make Inherited Access Visible, Enumerable, and Enforceable." They'll walk through how to: → Surface inherited access most tools never surface → Enumerate the paths that lead to sensitive data → Enforce the boundary your policies intended in the first place It's the first session in a new mini-series called Agents, Attackers, and Third-Party Apps — The New Path to Your Data. Your logs show the login. They don't show the chain or the user behind it. If you own app security or access and you can't answer that first question with confidence, this one's for you. Registration link in the comments. 👇
-
-
This month in True Positives, Obsidian Security’s monthly newsletter, the theme is co-operation. In our hyper connected world with the speed at which AI and attackers move, you are only as secure as your weakest link. Ensuring your vendors, partners, and users are all rowing in the same direction and focused on solving the same security gaps is how we can make sure no one vulnerability can cascade and impact the larger industry. Here are three stories that capture the urgency in adopting this shared mindset.
-
Coverage continues to roll in on our Series D announcement! FinTech Global has a good breakdown of not just the raise, but the "why now": non-human identities now outnumber human identities by 144 to 1 inside the third-party applications enterprises run on and that gap keeps widening as more agents get deployed. fintech More than 70% of our customers already let agents into third-party apps, and that number is only going up. This funding is about making sure that access doesn't come at the cost of control. Read the full piece 👇 https://lnkd.in/eCxXiEZ8
-
-
CEO, Hasan Imam talks to CNBC's Jon Fortt about today's Series-D announcement and how we are scaling AI security growth with world's largest and most complex organizations including major financial institutions, the largest social network and top telecom providers trusting us to securely deploy agents within their third-party applications. Thank you Jon for having us on Fortt Knox!
In a Fortt Knox update, Obsidian Security CEO Hasan Imam tells me about an $85M Series D, with 13+ customers paying $1M/year and 100+ at $100K/year. He frames the raise around securing agent access to third-party apps – 65% of customers now let agents reach that data. Citing recent OpenAI/Anthropic incidents (misconfigurations, weak passwords, no MFA), he says enterprises must guard both apps and their own agents against going rogue, model-agnostically. Full Fortt Knox conversation linked in the comments:
-
-
In a Fortt Knox update, Obsidian Security CEO Hasan Imam tells me about an $85M Series D, with 13+ customers paying $1M/year and 100+ at $100K/year. He frames the raise around securing agent access to third-party apps – 65% of customers now let agents reach that data. Citing recent OpenAI/Anthropic incidents (misconfigurations, weak passwords, no MFA), he says enterprises must guard both apps and their own agents against going rogue, model-agnostically. Full Fortt Knox conversation linked in the comments:
-