CISO Tribune

Vendor comparison · 2 companies

Cygrid vs Ketch

Cygrid sells a platform that finds shadow AI, over-scoped tokens and leftover admin rights across SaaS, checks every action by humans, service accounts and AI agents, and secures actions by applying customer policy. Ketch sells privacy management software that keeps data clean, permissioned, and AI-ready. CISO Tribune files both under AI governance. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Cygrid
  • Ketch
Cygrid vs Ketch: Products, Customers and Funding Compared
CygridCygrid sells a platform that finds shadow AI, over-scoped tokens and leftover admin rights across SaaS, checks every action by humans, service accounts and AI agents, and secures actions by applying customer policy.cygrid.ioKetchKetch sells privacy management software that keeps data clean, permissioned, and AI-ready.ketch.com
What it sells
  • Identity Intelligence Graph[1][4]Holds humans, non-human identities, AI agents, tokens, MCP servers and resources in one graph.
  • MCP Gateway[3][8]Sits in the tool-call path and audits, allows, rewrites or blocks every agent tool call at runtime.
  • AI Sentry[4][8]Intercepts prompts, detects PII, enforces consent in AI workflows, and blocks data leakage in real time.
  • Data Sentry[6][9]A privacy pentest for a website that reveals privacy vulnerabilities.
  • Ketch Data Mapping[13]Turns a tech stack into a data map that is the ROPA.
  • Ketch Agent Network[7][11][14]The orchestration layer that powers every product in the Ketch platform.
  • Ketch Identity Sync[7]Stitches identifiers across browsers, devices, and platforms into a unified identity graph.
Categories
Headquarters
Berlin, Germany[2]San Francisco, United States[2]
Founded
2026[2][3]2020[2]
Ownership and funding
Not stated on its pagesPrivately held[12]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • March 11, 2026Ketch announced enhanced capabilities for its Marketing Preference Management product, aimed at helping enterprise brands collect and activate permissioned zero-party data.[18]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 3, 2026[12]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Finance teams whose AI agents work with ledger and bank data are among the audiences it addresses. Mid-sized retailers that run several stores are among the audiences it addresses. IT operations teams dealing with unused accounts, standing admin rights and forgotten tokens across SaaS are an audience, as are security and compliance teams that need evidence for NIS2, DORA and the EU AI Act.From its own pages, Ketch sells mainly to legal, marketing, and security teams. Ketch says retailers use its software to create privacy-focused experiences that mobilize responsibly gathered data. Ketch says educational institutions rely on it to responsibly activate student data. Ketch describes its software as easy for legal and marketing teams to use, and says it helps security teams observe Shadow AI and detect risky data flows. Ketch says its customers range from global retailers to media networks, fintechs, and AI-native companies.
Last verified
October 23, 2026September 27, 2026

Where they overlap

  • Cygrid and Ketch are both filed under AI governance.

Where they differ, field by field

  • Cygrid's primary category is Non-human identity security; Ketch's is Privacy management.
  • Cygrid is also filed under AI firewalls and guardrails and Identity threat detection and response. Ketch is also filed under Data security posture management.
  • Cygrid lists Identity Intelligence Graph and MCP Gateway. Ketch lists AI Sentry, Data Sentry, Ketch Data Mapping, Ketch Agent Network and Ketch Identity Sync.
  • Cygrid is headquartered in Berlin, Germany. Ketch is headquartered in San Francisco, United States.
  • Cygrid was founded in 2026. Ketch was founded in 2020.
  • Ketch is privately held.

What it sells: Cygrid

What Identity Intelligence Graph does[1][4]
Cygrid models the action, meaning the permission actually in play, in full context. The graph models access as SaaS actions rather than roles, so risk can be compared across tools.

What it sells: Ketch

What AI Sentry does[4][8]
Ketch AI Governance is anchored by AI Sentry. AI Sentry sits directly inside AI applications, intercepting prompts before they reach the LLM, detecting personal data leakage, and blocking or redacting PII at the point of use.
What Data Sentry does[6][9]
Data Sentry is a privacy pentest for a website, revealing privacy vulnerabilities before regulators or plaintiffs' attorneys find them. Data Sentry works alongside any CMP.
What Ketch Data Mapping does[13]
Ketch Data Mapping turns a sprawling tech stack into a defensible data map without months of interview cycles. AI agents continuously detect systems, read contracts, and classify data, and that map is the record of processing activities (ROPA).
What Ketch Agent Network does[7][11][14]
The Ketch Agent Network does the actual work, turning insights to actions in real time. The Ketch Agent Network drafts answers based on prior evidence, so reviewers focus on the decisions that actually need a human.
What Ketch Identity Sync does[7]
Ketch Identity Sync stitches together the many identifiers representing a person across browsers, devices, and platforms to build a unified identity graph. Ketch links cookies, device IDs, hashed emails, and account IDs using deterministic connections only.

Questions about Cygrid and Ketch

What do Cygrid and Ketch sell?
Cygrid sells Identity Intelligence Graph and MCP Gateway. Ketch sells AI Sentry, Data Sentry, Ketch Data Mapping, Ketch Agent Network and Ketch Identity Sync.
Are Cygrid and Ketch in the same category?
They share AI governance. Cygrid's primary category is Non-human identity security and Ketch's is Privacy management.
Where are Cygrid and Ketch headquartered?
Cygrid is headquartered in Berlin, Germany. Ketch is headquartered in San Francisco, United States.
When were Cygrid and Ketch founded?
Cygrid was founded in 2026. Ketch was founded in 2020.
Who owns Cygrid and Ketch?
Ketch is privately held.
Who are Cygrid and Ketch sold to?
Finance teams whose AI agents work with ledger and bank data are among the audiences it addresses. From its own pages, Ketch sells mainly to legal, marketing, and security teams.
What have Cygrid and Ketch announced recently?
March 11, 2026: Ketch announced enhanced capabilities for its Marketing Preference Management product, aimed at helping enterprise brands collect and activate permissioned zero-party data.

About Cygrid

Cygrid sells a platform that finds shadow AI, over-scoped tokens and leftover admin rights across SaaS, checks every action by humans, service accounts and AI agents, and secures actions by applying customer policy. Cygrid puts humans, service accounts, API connections and AI agents in one Identity Intelligence Graph. Cygrid connects identity, SaaS, cloud and AI sources into the Identity Intelligence Graph and secures every identity at three enforcement points: before first use, while access exists and at runtime. Cygrid offers one platform to discover, clean up, audit and secure access across SaaS.[1][4][5][6][9]

Cygrid models the action, meaning the permission actually in play, in full context. The graph records what each identity may do, what it actually does and on whose behalf, and policy rules and AI-driven analysis score the risk together. Cygrid discovers the AI agents, MCP servers and connected apps across SaaS, maps each one to the person it acts for, and records who approved what.[4][5][7]

The Cygrid MCP Gateway sits in the tool-call path and audits, allows, rewrites or blocks every agent tool call at runtime, decided by the same graph as every other enforcement point. Every MCP tool call is authenticated through the customer identity provider, tied to the person behind the agent and checked against policy down to the tool and parameter. In the MCP Gateway, credentials are issued just in time, and every call is logged. Cygrid keeps a registry of approved MCP servers with owner, provenance and version, and pauses a server whose tools change until it is re-reviewed. Cygrid verdicts include allow, downscope, block, revoke on approval or grant just in time, and each verdict is written to an immutable decision log. Cygrid issues a scoped credential at the moment of use and lets it expire. Cygrid removes standing admin and grants elevated access on request, for a limited time.[5][8][9][10][11]

Okta, Entra ID or Google Workspace can sync users, groups and offboarding to the MCP Gateway, so access follows the person. Cygrid ingests existing security tools as feeds and does not replace them. Cygrid connectors are read-only by default, with write access only for fixes the customer approves. On approval, Cygrid revokes risky access, orphaned accounts and dormant tokens at the source, blocks unapproved MCP servers and controls which identities AI agents use. Cygrid inventories every OAuth grant, API key, service account and AI app connection, and revokes the risky ones. Cygrid works with ChatGPT, Claude, Claude agents and more, plus any agent that connects through MCP or OAuth.[5][6][8][9][12]

In a finance example, an AI assistant on Drive can read, edit and share files while every delete is blocked. When an agent asks to export 100,000 records, Cygrid blocks the call or reduces it to the 500-record limit before it reaches the app. For e-commerce, Cygrid maps staff, apps and AI agents with access in every Shopify store and flags dormant admins and over-scoped app tokens. Cygrid grants temporary staff, agencies and freelancers time-limited access and removes it automatically when the work ends.[13][14]

Cygrid audits every identity and its access, enforces customer policies on every action, and generates evidence for NIS2, DORA and the EU AI Act from one live graph. Cygrid fills in a register of ICT third parties, including OAuth apps and AI agents, automatically from the graph. Cygrid finds shadow admins whose rights come through groups and never appear in the admin list of the platform, and shows the path from user to group to role. The Cygrid gateway inspects tool calls, not content, and its logs record each action and the person behind it, never prompts. Cygrid is ISO 27001 audited, has SOC 2 Type II in progress and has passed an external penetration test. Cygrid is hosted in Frankfurt across multiple availability zones.[1][4][7][8][12][13][14]

Cygrid on the record

Sources

Cygrid full record

  1. [1]cygrid.ioCygrid · cygrid.io · undated page, accessed October 23, 2026 · Tier A
  2. [2]AboutCygrid · cygrid.io · undated page, accessed October 23, 2026 · Tier A
  3. [3]Cygrid emerges from stealthCygrid · cygrid.io · published October 22, 2026 · Tier A
  4. [4]Identity Enforcement for AI-Driven Enterprises | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  5. [5]Identity Enforcement Platform | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  6. [6]Least Privilege Across Your SaaS | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  7. [7]Identity Intelligence Graph | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  8. [8]MCP Gateway for AI Agents | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  9. [9]Secure AI Agent Rollout for AI Teams | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  10. [10]Identity Enforcement Use Cases | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  11. [11]Integrations: Okta, Entra ID, SaaS & AI | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  12. [12]Identity Policy Enforcement & Compliance | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  13. [13]Identity Enforcement for Fintech & NIS2/DORA | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  14. [14]Identity Enforcement for E-commerce | CygridCygrid · undated page, accessed November 10, 2026 · Tier A

Ketch full record

  1. [1]ketch.comKetch · ketch.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]AboutKetch · ketch.com · published May 27, 2026 · Tier A
  3. [3]Ketch: Data Privacy Software for Compliance & AI-Ready DataKetch · undated page, accessed October 26, 2026 · Tier A
  4. [4]AI data security governance | Ketch for IT & Security teamsKetch · undated page, accessed October 26, 2026 · Tier A
  5. [5]Data privacy software made for marketers | KetchKetch · undated page, accessed October 26, 2026 · Tier A
  6. [6]Data privacy software for retail and consumer goods companiesKetch · undated page, accessed October 26, 2026 · Tier A
  7. [7]Ketch Platform | AI Privacy, Data Permissioning & ConsentKetch · undated page, accessed October 26, 2026 · Tier A
  8. [8]AI Governance with Real-Time Enforcement | Ketch AI SentryKetch · undated page, accessed October 26, 2026 · Tier A
  9. [9]Website privacy compliance scan | Ketch Data SentryKetch · undated page, accessed October 26, 2026 · Tier A
  10. [10]Consent Management Platform (CMP) for the AI Era | GDPR & CCPAKetch · undated page, accessed October 26, 2026 · Tier A
  11. [11]Ketch Agent Network: Privacy Operations, Finally at AI SpeedKetch · undated page, accessed October 26, 2026 · Tier A
  12. [12]Ketch Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
  13. [13]Privacy data mapping software and ROPA | KetchKetch · undated page, accessed November 3, 2026 · Tier A
  14. [14]Privacy risk assessments (DPIA / PIA) | KetchKetch · undated page, accessed November 3, 2026 · Tier A
  15. [15]Identity-based consent and cross-device consent | KetchKetch · undated page, accessed November 3, 2026 · Tier A
  16. [16]Data privacy software made for legal teams | KetchKetch · undated page, accessed November 3, 2026 · Tier A
  17. [17]Simplified Privacy Compliance for Education & Higher Ed | KetchKetch · undated page, accessed November 3, 2026 · Tier A
  18. [18]Ketch Announces Enterprise Marketing Preference Management to Power Permissioned, AI-Ready DataBusiness Wire · published March 11, 2026 · Tier A

Spot a factual error? Request a correction.