Orchid Security, an emerging leader in identity-first security orchestration, has successfully raised $36 million in seed funding. The round was co-led by Team8 and Intel Capital, with participation from CapitalOne and key industry figures like Jeff Williams (FireEye, Cisco, McAfee), Dror Davidoff (Aqua), and Zohar Alon (Dome9, Check Point). This significant investment will help accelerate Orchid’s innovative work, leveraging Large Language Models (LLMs) to tackle the persistent issue of fragmented identity systems that large enterprises face. With this substantial boost in capital, Orchid is set to enhance the development of its platform, expand its sales and support teams, and ramp up its marketing efforts. The company is already collaborating with top enterprises across various sectors, including finance, manufacturing, healthcare, and retail, with notable clients like Costco and Repsol among its Fortune 500 partners.
Orchid’s platform aims to address a critical challenge in identity security: its inherent complexity. On average, enterprises juggle around 1,200 different applications, whether hosted on-premises, in the cloud, or delivered as Software as a Service (SaaS). They have to manage a fragmented array of identity and access management tools that frequently evolve, adapt to improving identity protocols, comply with shifting regulatory requirements, and safeguard their data against an ever-changing threat landscape. This complex environment has made it extremely difficult to assess, let alone maintain, a robust and unified identity posture across the organization. According to a leading analyst firm, expenditures related to integration, implementation, optimization, and other identity and access management services are projected to reach approximately $5.25 billion by 2025.
Orchid’s Identity-first Security Orchestration platform is designed to continuously discover both self-hosted and SaaS applications. It assesses their authentication and authorization processes to expose vulnerabilities and facilitate remediation, ensuring a consistent and standardized posture throughout the organization’s identity ecosystem. Unlike traditional solutions that rely on lengthy, manual, and expensive processes, Orchid’s automated platform provides in-depth application-centric visibility across all environments, offering a comprehensive and real-time approach to identity security management. This positions Orchid as a dynamic, scalable, and enterprise-focused alternative to current manual solutions that often take years to implement and quickly become outdated with any change. With Orchid, customers have reported a 90% faster onboarding process and a 75% reduction in professional services costs.
“Our objective with Orchid is to transform our largely (90%) manual process of onboarding applications – which can take weeks after release from development – to one that is highly (90%) automated and accomplished in just days”, said Jon Raper, Costco’s CISO. “Orchid greatly improves our speed to delivery for business units.”
Large Language Models (LLMs) are crucial to this innovative technology, as they provide vital context and reasoning related to identity. This capability enables the solution to assess the application’s inherent identity flows and verify the consistency of those evaluations—all without needing to access or modify the application code.
“The latest LLM models include code recognition and reasoning skills that enable understanding of identity flows in running applications without requiring code access or input from the application owners. When prompted correctly, these models go beyond data processing -they comprehend context, make inferences, and deliver accurate decisions. They also provide clear justifications, ensuring the platform’s logic remains coherent and transparent.” said Roy Katmor, Co-Founder and CEO of Orchid Security. “With advancements in AI and LLM technology, we can now offer a solution that automatically assesses identity capabilities and exposures -considering target regulations, frameworks, and security best practices-offers remediations, and helps organizations elevate and ensure consistency of their identity security posture, all while significantly reducing cost and time.”
The founding team of Roy Katmor, Robert Wiseman, and Ido Kelson brings together a rich background in cybersecurity and identity management. Katmor co-founded enSilo, which was later acquired by Fortinet, while Wiseman has driven identity-focused projects at Team8 and Claroty. Kelson, also a co-founder of enSilo, is known for his innovative contributions to endpoint security. Together, they have leveraged the power of AI to develop a cybersecurity solution that effectively tackles the challenges of today’s complex identity infrastructures.
“With Orchid, Team8’s venture creation team recognized a unique opportunity to tackle one of the most pressing problems in the identity space. The integration of applications into the identity stack has long been a painful process, leading to limited posture and visibility for security teams”, said Amir Zilberstein, Managing Partner at Team8. “With their innovative approach leveraging GenAI, Orchid offers a first-of-its-kind identity fabric. This has been a top priority for our CISO village, and the traction we’ve seen for Orchid’s solution and outstanding founding team has been staggering.”
“Until now, getting the security benefits of existing identity solutions was a long, costly, and challenging process. Organizations had to locate, prioritize, and integrate all their applications into their identity systems,” said Yoni Greifman, Investment Director at Intel Capital. “Orchid changes the game by enabling companies to seamlessly identify, assess, and enhance their applications’ identity controls for stronger security and compliance-no coding required.”
“HUB completes about 65 acquisitions each year, encountering a wide variety of business-critical applications-many lacking native IAM integration capabilities,” said Jeremy Embalabala, CISO at HUB International. “Orchid’s vision of continuously discovering application authentication and authorization configurations, securing them with key IAM controls like SSO, MFA, and Identity Governance, and providing ongoing security and compliance insights is truly game-changing. By automatically enforcing these controls even when they are not natively available, Orchid is providing a critical and foundational security capability that has traditionally been challenging to achieve. This helps enterprises ensure security and compliance across every application, setting a new standard for the future of enterprise IAM.”