CISO Tribune

Vendor comparison · 2 companies

Cygrid vs Silverfort

Cygrid sells a platform that finds shadow AI, over-scoped tokens and leftover admin rights across SaaS, checks every action by humans, service accounts and AI agents, and secures actions by applying customer policy. Silverfort sells an identity security platform that enforces identity security inline and at the moment of authentication across workforce users, privileged users, third parties, non-human identities and AI agents. CISO Tribune files both under Non-human identity security and Identity threat detection and response. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Cygrid
  • Silverfort
Cygrid vs Silverfort: Products, Customers and Funding Compared
CygridCygrid sells a platform that finds shadow AI, over-scoped tokens and leftover admin rights across SaaS, checks every action by humans, service accounts and AI agents, and secures actions by applying customer policy.cygrid.ioSilverfortSilverfort sells an identity security platform that enforces identity security inline and at the moment of authentication across workforce users, privileged users, third parties, non-human identities and AI agents.silverfort.com
What it sells
  • Identity Intelligence Graph[1][4]Holds humans, non-human identities, AI agents, tokens, MCP servers and resources in one graph.
  • MCP Gateway[3][8]Sits in the tool-call path and audits, allows, rewrites or blocks every agent tool call at runtime.
  • ITDR[1][7]Silverfort monitors every authentication and access attempt of every human and machine in a hybrid environment.
Categories
Headquarters
Berlin, Germany[2]Not stated on its pages
Founded
2026[2][3]Not stated on its pages
Ownership and funding
Not stated on its pagesNot stated on its pages
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pagesNot stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Finance teams whose AI agents work with ledger and bank data are among the audiences it addresses. Mid-sized retailers that run several stores are among the audiences it addresses. IT operations teams dealing with unused accounts, standing admin rights and forgotten tokens across SaaS are an audience, as are security and compliance teams that need evidence for NIS2, DORA and the EU AI Act.Silverfort packages are available for on-prem, cloud and hybrid environments. Silverfort bases its pricing on the size of the organization. Silverfort addresses industrial networks and the risks of third-party access, and malicious access across complex telecom environments. Silverfort addresses secure access for students and staff, and the safeguarding of patient information and mission-critical applications.
Last verified
October 23, 2026November 5, 2026

Where they overlap

  • Cygrid and Silverfort are both filed under Non-human identity security and Identity threat detection and response.

Where they differ, field by field

  • Cygrid's primary category is Non-human identity security; Silverfort's is Identity threat detection and response.
  • Cygrid is also filed under AI governance and AI firewalls and guardrails. Silverfort is also filed under Privileged access management and Passwordless authentication and authenticators.
  • Cygrid lists Identity Intelligence Graph and MCP Gateway. Silverfort lists ITDR.
  • Cygrid is headquartered in Berlin, Germany.
  • Cygrid was founded in 2026.

What it sells: Cygrid

What Identity Intelligence Graph does[1][4]
Cygrid models the action, meaning the permission actually in play, in full context. The graph models access as SaaS actions rather than roles, so risk can be compared across tools.

What it sells: Silverfort

What ITDR does[1][7]
Silverfort uncovers anomalies through protocol inspection, identity behavior baselines and threat pattern detection, such as ticket misuse and credential replay. When Silverfort detects malicious identity activity, it can block or interrupt the flow by denial, MFA challenge or session termination, enforce virtual fences, or quarantine access. Silverfort enriches alerts with identity risk context and forensic detail and pushes them to SIEM, XDR, SOAR or security operations tools.

Questions about Cygrid and Silverfort

What do Cygrid and Silverfort sell?
Cygrid sells Identity Intelligence Graph and MCP Gateway. Silverfort sells ITDR.
Are Cygrid and Silverfort in the same category?
They share Non-human identity security and Identity threat detection and response. Cygrid's primary category is Non-human identity security and Silverfort's is Identity threat detection and response.
Where are Cygrid and Silverfort headquartered?
Cygrid is headquartered in Berlin, Germany.
When were Cygrid and Silverfort founded?
Cygrid was founded in 2026.
Who are Cygrid and Silverfort sold to?
Finance teams whose AI agents work with ledger and bank data are among the audiences it addresses. Silverfort packages are available for on-prem, cloud and hybrid environments.

About Cygrid

Cygrid sells a platform that finds shadow AI, over-scoped tokens and leftover admin rights across SaaS, checks every action by humans, service accounts and AI agents, and secures actions by applying customer policy. Cygrid puts humans, service accounts, API connections and AI agents in one Identity Intelligence Graph. Cygrid connects identity, SaaS, cloud and AI sources into the Identity Intelligence Graph and secures every identity at three enforcement points: before first use, while access exists and at runtime. Cygrid offers one platform to discover, clean up, audit and secure access across SaaS.[1][4][5][6][9]

Cygrid models the action, meaning the permission actually in play, in full context. The graph records what each identity may do, what it actually does and on whose behalf, and policy rules and AI-driven analysis score the risk together. Cygrid discovers the AI agents, MCP servers and connected apps across SaaS, maps each one to the person it acts for, and records who approved what.[4][5][7]

The Cygrid MCP Gateway sits in the tool-call path and audits, allows, rewrites or blocks every agent tool call at runtime, decided by the same graph as every other enforcement point. Every MCP tool call is authenticated through the customer identity provider, tied to the person behind the agent and checked against policy down to the tool and parameter. In the MCP Gateway, credentials are issued just in time, and every call is logged. Cygrid keeps a registry of approved MCP servers with owner, provenance and version, and pauses a server whose tools change until it is re-reviewed. Cygrid verdicts include allow, downscope, block, revoke on approval or grant just in time, and each verdict is written to an immutable decision log. Cygrid issues a scoped credential at the moment of use and lets it expire. Cygrid removes standing admin and grants elevated access on request, for a limited time.[5][8][9][10][11]

Okta, Entra ID or Google Workspace can sync users, groups and offboarding to the MCP Gateway, so access follows the person. Cygrid ingests existing security tools as feeds and does not replace them. Cygrid connectors are read-only by default, with write access only for fixes the customer approves. On approval, Cygrid revokes risky access, orphaned accounts and dormant tokens at the source, blocks unapproved MCP servers and controls which identities AI agents use. Cygrid inventories every OAuth grant, API key, service account and AI app connection, and revokes the risky ones. Cygrid works with ChatGPT, Claude, Claude agents and more, plus any agent that connects through MCP or OAuth.[5][6][8][9][12]

In a finance example, an AI assistant on Drive can read, edit and share files while every delete is blocked. When an agent asks to export 100,000 records, Cygrid blocks the call or reduces it to the 500-record limit before it reaches the app. For e-commerce, Cygrid maps staff, apps and AI agents with access in every Shopify store and flags dormant admins and over-scoped app tokens. Cygrid grants temporary staff, agencies and freelancers time-limited access and removes it automatically when the work ends.[13][14]

Cygrid audits every identity and its access, enforces customer policies on every action, and generates evidence for NIS2, DORA and the EU AI Act from one live graph. Cygrid fills in a register of ICT third parties, including OAuth apps and AI agents, automatically from the graph. Cygrid finds shadow admins whose rights come through groups and never appear in the admin list of the platform, and shows the path from user to group to role. The Cygrid gateway inspects tool calls, not content, and its logs record each action and the person behind it, never prompts. Cygrid is ISO 27001 audited, has SOC 2 Type II in progress and has passed an external penetration test. Cygrid is hosted in Frankfurt across multiple availability zones.[1][4][7][8][12][13][14]

Cygrid on the record

Sources

Cygrid full record

  1. [1]cygrid.ioCygrid · cygrid.io · undated page, accessed October 23, 2026 · Tier A
  2. [2]AboutCygrid · cygrid.io · undated page, accessed October 23, 2026 · Tier A
  3. [3]Cygrid emerges from stealthCygrid · cygrid.io · published October 22, 2026 · Tier A
  4. [4]Identity Enforcement for AI-Driven Enterprises | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  5. [5]Identity Enforcement Platform | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  6. [6]Least Privilege Across Your SaaS | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  7. [7]Identity Intelligence Graph | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  8. [8]MCP Gateway for AI Agents | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  9. [9]Secure AI Agent Rollout for AI Teams | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  10. [10]Identity Enforcement Use Cases | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  11. [11]Integrations: Okta, Entra ID, SaaS & AI | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  12. [12]Identity Policy Enforcement & Compliance | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  13. [13]Identity Enforcement for Fintech & NIS2/DORA | CygridCygrid · undated page, accessed November 10, 2026 · Tier A
  14. [14]Identity Enforcement for E-commerce | CygridCygrid · undated page, accessed November 10, 2026 · Tier A

Silverfort full record

  1. [1]silverfort.comSilverfort · silverfort.com · undated page, accessed November 5, 2026 · Tier A
  2. [2]Silverfort acquires fabrix securitySilverfort · silverfort.com · published April 28, 2026 · Tier A
  3. [3]Silverfort Identity Security PlatformSilverfort · undated page, accessed November 10, 2026 · Tier A
  4. [4]About Silverfort: Identity Security PlatformSilverfort · undated page, accessed November 10, 2026 · Tier A
  5. [5]Silverfort | Runtime Identity Security for AI, AD & CloudSilverfort · undated page, accessed November 10, 2026 · Tier A
  6. [6]Silverfort Pricing - SilverfortSilverfort · undated page, accessed November 10, 2026 · Tier A
  7. [7]Universal MFA | SilverfortSilverfort · undated page, accessed November 10, 2026 · Tier A
  8. [8]Authentication FirewallSilverfort · undated page, accessed November 10, 2026 · Tier A
  9. [9]Non-Human Identity SecuritySilverfort · undated page, accessed November 10, 2026 · Tier A
  10. [10]AI Agent SecuritySilverfort · undated page, accessed November 10, 2026 · Tier A
  11. [11]Identity Security Posture ManagementSilverfort · undated page, accessed November 10, 2026 · Tier A
  12. [12]Identity Threat Detection and Response – ITDR SolutionSilverfort · undated page, accessed November 10, 2026 · Tier A
  13. [13]Solutions - SilverfortSilverfort · undated page, accessed November 10, 2026 · Tier A
  14. [14]AI Agent Security: Silverfort vs. Siloed ToolsSilverfort · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.