Sonrai

What the company sells

Sonrai sells identity, access, and permissions security for companies running on AWS, Azure, and Google Cloud platforms. Sonrai is a public cloud identity and access management solutions provider. Sonrai Security states a mission to empower enterprises of all sizes to innovate securely and confidently. Sonrai Security has offices in New York and New Brunswick, Canada.

Guardrails are described as action-based, covering AWS, Azure, and GCP. Deployment is described as covering agents, humans, and machines. The Cloud Permissions Firewall removes dangerous permissions before an attack can use them. The Cloud Permissions Firewall blocks unused privileges, services, and regions with automated global policies.

Controls come from SCPs and RCPs, Azure RBAC, and GCP deny policies, with no proxy, no broker and no bastion host. Policies are built from usage data, anything in use is exempted before a policy is written, and nothing enforces until deployment. Blocked usage attempts open a request that is routed in Slack, and the policy is updated. An automated just-in-time workflow is routed through a ChatOps tool when an agent, human or machine needs new access. Access is automatically revoked when the allocated time is over, and everything is logged. WALLy is an AI-powered companion inside the Cloud Permissions Firewall app.

Permissions analytics involve ongoing analysis of over 42,000 cloud permissions to categorize and risk rank them. Patented intelligence prioritizes actions and identifies toxic combinations. Cloud expertise extends to policy strategy, deployment and management. Further analysis reveals toxic combinations of permissions and policies, and remediation options break down attack paths.

Only read-only access to the cloud is needed, and controls can be deployed where the customer chooses. Sonrai does not possess customer data or install agents in the customer's cloud, and gathers metadata from the role provided.

Sonrai Dig enabled a customer's CCOE team to establish a baseline and continuously monitor identities and data across multiple public cloud resources. Sonrai Dig shows IAM relationships in a single picture. World Fuel Services is a global fuel provider. Sonrai provides security controls for World Fuel's 200+ AWS accounts and Azure subscriptions. Sonrai helped a bank customer rebuild its custom policies in a cloud-centric way, using prebuilt frameworks and nightly categorization of all new cloud actions. Sonrai replaced a customer's CSPM with a solution powered by identity and data analytics and a history of cloud activities. Sonrai sees the exact identity chain that enables an action in cloud to be performed, including through multiple trust relationships.

Banks in the US and Canada use Sonrai to secure their cloud, alongside customers from other highly regulated industries. Sonrai is a SOC2 Type-2 compliant organization. Sonrai offers a monthly contract with monthly payments, and monthly contracts can be cancelled at any time with 30 days notice.^{[1][2][7][8][10][11][12]}

Categories

• Cloud identity entitlements (CIEM) (primary category)
• Non-human identity security
• Cloud security posture management
• Compare Sonrai with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

Not yet on our record. Send a verified source

Website

sonraisecurity.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Cloud Permissions Firewall^{[2][3][4][6][8]}

  Removes dangerous permissions and blocks unused privileges, services, and regions with automated global policies.

  The Cloud Permissions Firewall removes dangerous permissions before an attack can use them. Policies are built from usage data, and anything in use is exempted before a policy is written.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Sonrai's categories, then alphabetical. A list from the record, never a ranking.

• On cloud identity entitlements (ciem), Sonrai competes with Act Security, Britive, Cyscale and Veza.

• On non-human identity security, Sonrai competes with Aembit, Akeyless, Astrix Security, AuthMind, Clutch Security, Cygrid, Infisical, NewCore, Oasis Security, Token Security and 30 more.

• On cloud security posture management, Sonrai competes with Cyscale, Intruder, Lacework, RAD Security, SAIC, Sysdig and Upwind.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.5 out of 5 · 26 reviews^[5]seen November 10, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]sonraisecurity.comSonrai · sonraisecurity.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]Cloud permissions firewallSonrai · sonraisecurity.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
3. [3]Cloud Identity and Access Management IAM Solution Platform - SonraiSonrai · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
4. [4]Customer Product Email Subscription | SonraiSonrai · undated page, accessed October 28, 2026 · Tier A: the company, a regulator or a filing
5. [5]Sonrai Security Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 28, 2026 · Tier C
6. [6]Sonrai Company Story - Enterprise IAM & PAM Cloud SecuritySonrai · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]Why Choose Sonrai for Cloud Security & Identiy Access Management - SonraiSonrai · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Cloud IAM & PAM Pricing | Sonrai Security - SonraiSonrai · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Case Study: Fortune 100 Insurance CompanySonrai · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]Case Study: World Fuel ServicesSonrai · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]Case Study: Top 5 Canadian Bank - Sonrai | Enterprise Cloud Security PlatformSonrai · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]Case Study: Top 10 US Bank - Sonrai | Enterprise Cloud Security PlatformSonrai · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Sonrai? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.