The Rising Threat of Machine Identity
Cybersecurity is shifting its focus from human users to the growing web of non-human entities. With breaches frequently originating from compromised API keys, service accounts, and tokens, securing machine identity has become a critical enterprise priority. Addressing this urgent market demand, Tel Aviv-based startup Clutch Security announced today that it has raised $20 million in new funding.
The investment round was led by SignalFire, with continued participation from existing backers Lightspeed Venture Partners and Merlin Ventures. This capital infusion follows the company’s previous $8.5 million seed round and will be used to accelerate R&D, product innovation, and business development.
Scaling Security in a Zero-Trust World
As enterprises transition to cloud-native architectures, the number of machine identities has exploded. According to research from Venafi, the average large organization managed 1 million machine identities in 2024, up from 320,000 just two years prior.
Clutch’s platform addresses this complexity by offering visibility, posture management, and risk assessment through a zero-trust framework. The startup currently integrates with nearly 60 popular infrastructure services and identity providers, providing a unified layer to manage sensitive credentials like API keys, service accounts, and digital tokens.
Rapid Development Under Pressure
Founded in October 2023, Clutch was born during a period of intense instability in Israel. CEO Ofir Har-Chen, who established the firm alongside co-founders Sagi Haas and Tal Kimhi, noted that the startup environment was challenging as initial recruitment efforts were delayed by the regional conflict. Despite these hurdles, the team built its first minimum-viable product in just three months, leveraging a deep bench of cybersecurity talent with backgrounds at firms like Axonius and various government intelligence roles.
The AI Frontier and Market Competition
While legacy systems like Windows Active Directory have long been vulnerable to credential exploitation, the emergence of AI agents has introduced a new, complex attack surface. Har-Chen warns that the industry is experiencing a “pendulum swing,” where non-human entities are becoming the primary target for malicious actors as they replace manual human tasks.
Clutch enters a highly competitive landscape that includes established players and well-funded startups such as:
- Astrix Security, which recently raised $45 million.
- Oasis, an Israeli startup focused on machine identity.
- CyberArk, which recently acquired Venafi in a deal valued at over $1.5 billion.
- Token Security, another firm that secured $20 million in recent days.
Investors remain bullish on Clutch due to its rapid execution. Guru Chahal, partner at Lightspeed Venture Partners, emphasized that the firm is not merely building a new tool, but is actively reshaping the industry as enterprises look to secure their expanding agentic AI ecosystems.