Ermetic - a Tenable company

High-Level Overview

Ermetic, now a Tenable company, is a cloud security startup that developed a cloud-native application protection platform (CNAPP) and leading cloud infrastructure entitlement management (CIEM) solution.[1][2][3] It serves organizations of all sizes, including Fortune 50 companies, by providing contextual risk visibility, prioritization, and remediation for cloud infrastructure and identities, addressing access risks, data security, compliance, and complex cloud management challenges.[2][3] Acquired by Tenable in late 2023 for approximately $265 million ($240 million cash plus $25 million in stock), Ermetic's technology integrates into Tenable's One Exposure Management Platform, enhancing unified protection across on-premises and multi-cloud environments with identity-centric insights.[1][2][4] This bolsters Tenable's capabilities in proactive security, simplifying remediation without requiring deep cloud expertise.[1]

Prior to acquisition, Ermetic demonstrated strong growth, emerging from stealth in 2019 and achieving an estimated $19.2 million in annual revenue by 2023 with high per-employee efficiency (~$115,000), underscoring its momentum in the fast-expanding cloud security market.[5]

Origin Story

Ermetic was founded in 2019 in Israel by a team of seasoned cybersecurity experts: CEO and co-founder Shai Morag (previously co-founded Secdo, acquired by Palo Alto Networks for $82.7 million), CBO Arick Goomanovsky (co-founder of Sygnia), CTO Michael Dolinsky (ex-Microsoft), and CPO Sivan Krigsman (also ex-Microsoft).[2][5] Headquartered in Tel Aviv with a Boston office, the company employed 163 people, predominantly in Israel (86 workers, over 55% of staff), with the rest in the US and other regions.[5]

The idea emerged from the founders' expertise in identity and access management, targeting the growing complexities of cloud entitlements and risks in multi-cloud setups. Ermetic quickly gained traction, serving diverse clients including Fortune 50 enterprises, by automating risk analysis, entitlement mapping, prioritization, and remediation—positioning it as a leader in identity-centric cloud security just 40 months post-stealth.[2][3][5] This momentum led to Tenable's acquisition announcement in September 2023, closing later that year.[1][3]

Core Differentiators

Ermetic stands out in cloud security through these key strengths:

• Unified CNAPP and CIEM Leadership: Delivers integrated protection with in-depth contextual analysis of identities, entitlements, and toxic risk combinations (e.g., privileged access to vulnerable workloads), enabling prioritization without cloud expertise.[1][2][4]
• Seamless Integration and User Experience: Provides simple, actionable insights that integrate into platforms like Tenable One, consolidating visibility across hybrid environments for faster remediation and cost reduction.[1][3]
• Identity-Centric Risk Prioritization: Automates analysis of user entitlements, attack paths, and compliance, offering a holistic attack surface view that shifts security from reactive to preventive.[1][3][4]
• Proven Scalability: Serves Fortune 50 to smaller firms with high-efficiency operations (e.g., $19.2M revenue from 163 employees), now amplified by Tenable's install base.[2][5]

Post-acquisition, these enhance Tenable's ExposureAI with deeper cloud data relationships, competing strongly against players like Palo Alto Networks and Lacework.[4]

Role in the Broader Tech Landscape

Ermetic rides the explosive growth of multi-cloud adoption and the CNAPP market, where organizations face escalating identity-based risks amid hybrid infrastructures—trends accelerated by post-2020 cloud migrations and rising breaches via over-privileged access.[1][4] Its timing aligns perfectly with industry consolidation, as security teams demand unified platforms over point tools, favoring vendors like Tenable that bundle vulnerability management with cloud-native protections.[4]

Market forces like regulatory compliance pressures (e.g., data sovereignty) and the shift to proactive exposure management work in its favor, with Ermetic's CIEM filling critical gaps in entitlement sprawl.[2][3] Now part of Tenable—post-IPO acquirer of five prior firms—it influences the ecosystem by enabling broader CNAPP adoption, reducing vendor fragmentation, and setting standards for contextual, AI-driven remediation in a market projected for rapid expansion.[1][4][5]

Quick Take & Future Outlook

Integrated into Tenable, Ermetic will likely deepen CNAPP dominance, with upcoming enhancements to Tenable One delivering AI-powered, identity-first protections across expanding cloud footprints.[1][4] Trends like zero-trust maturity, generative AI vulnerabilities in clouds, and further M&A consolidation will shape its path, potentially driving Tenable's cloud revenue surge amid a cybersecurity spending boom.

As cloud risks evolve, Ermetic's foundational innovations—once a standalone Israeli powerhouse—now empower Tenable to simplify security at scale, turning complex exposures into prioritized actions and redefining proactive defense for enterprises worldwide.[1][2]