CISO Tribune

Vendor comparison · 2 companies

HYPR vs Permiso

HYPR sells an identity security platform that unifies phishing-resistant passwordless authentication, adaptive risk mitigation and automated identity verification. Permiso's Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time. CISO Tribune files both under Identity threat detection and response. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • HYPR
  • Permiso
HYPR vs Permiso: Products, Customers and Funding Compared
HYPRHYPR sells an identity security platform that unifies phishing-resistant passwordless authentication, adaptive risk mitigation and automated identity verification.hypr.comPermisoPermiso's Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time.permiso.io
What it sells
  • HYPR Authenticate[4][6]Passwordless authentication that turns a smartphone into a FIDO2 passkey.
  • HYPR Adapt[6]Adds risk-based adaptive authentication.
  • HYPR Affirm[9]Identity verification for enterprise KYE needs across the employee lifecycle.
  • HYPR Enterprise Passkeys[4][7][8]Non-syncable FIDO2 passkeys for workforce authentication with Microsoft Entra ID.
  • Permiso Discover[3]Provides an inventory of human, non-human and AI identities wherever they live.
  • Permiso Protect[3]Evaluates the risk posture of identities based on usage patterns, exposure and entitlements.
  • Universal Identity Graph[3][11]Connects every identity to the credentials it owns, the machines it creates and the agents it runs.
  • Identity Threat Detection and Response[7]Detects threats to human and non-human identities across environments.
  • Identity Runtime Attribution[3]Ties agent runs, events and tool calls to the identity behind them.
  • SandyClaw[11]Runs agent skills in a controlled sandbox.
Categories
Headquarters
Not stated on its pagesNot stated on its pages
Founded
2014[1]Not stated on its pages
Ownership and funding
Privately held[4][8]Owned by Okta since 2026[2][5]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • July 30, 2026Okta said it signed a definitive agreement to acquire Permiso Security, a startup whose software detects attackers abusing identities across cloud, SaaS and AI agent environments.[14]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetIts platform is described for identities across cloud, SaaS and on-prem environments. Permiso presents its tools to security teams. Its watchlist capability is aimed at threats from employees, contractors and other trusted individuals.
Last verified
November 4, 2026November 2, 2026

Where they overlap

  • HYPR and Permiso are both filed under Identity threat detection and response.

Where they differ, field by field

  • HYPR's primary category is Passwordless authentication and authenticators; Permiso's is Identity threat detection and response.
  • HYPR is also filed under Identity verification. Permiso is also filed under Non-human identity security and Cloud detection and response.
  • HYPR lists HYPR Authenticate, HYPR Adapt, HYPR Affirm and HYPR Enterprise Passkeys. Permiso lists Permiso Discover, Permiso Protect, Universal Identity Graph, Identity Threat Detection and Response, Identity Runtime Attribution and 1 more.
  • HYPR was founded in 2014.
  • HYPR is privately held. Permiso is owned by Okta, since 2026.

What it sells: HYPR

What HYPR Authenticate does[4][6]
HYPR Authenticate transforms a smartphone into a FIDO2 passkey, replacing passwords and shared secrets with secure public key cryptography. If a user already signed into a desktop using HYPR, the verified identity is automatically passed to the SSO unless step-up authentication is required. HYPR Authenticate is FIDO Certified on all components.
What HYPR Adapt does[6]
HYPR Adapt adds risk-based adaptive authentication and continuously assesses risk from a broad and diverse set of sources. HYPR's policy engine uses data from devices, browsers and other security tools to implement adaptive risk mitigation strategies.
What HYPR Affirm does[9]
HYPR Affirm identity verification was designed to meet enterprise KYE needs across the entire employee lifecycle, from new hires to long-time team members. HYPR supports identity verification from pre-interview screening for job applicants to continuous verification for long-term employees. HYPR identity verification for employees uses AI-powered chat, document verification, video and face recognition.
What HYPR Enterprise Passkeys does[4][7][8]
HYPR Enterprise Passkeys are built on device-bound FIDO passkeys, which cannot be passed amongst devices. HYPR Enterprise Passkeys are strictly non-syncable and are owned and managed entirely by the enterprise. HYPR Enterprise Passkeys extend passwordless security to the workstation login for Windows, macOS and VDI environments.

What it sells: Permiso

What Permiso Discover does[3]
Permiso Discover gives enterprises an inventory of human, non-human and AI identities wherever they live. Permiso inventories identities and assesses exposure risk in identity providers, cloud service providers and SaaS applications.
What Permiso Protect does[3]
Permiso Protect continuously evaluates the risk posture of identities based on usage patterns, exposure and entitlements. Permiso Protect surfaces and quantifies high-risk identities, stale access and toxic combinations across human, vendor, AI and non-human accounts.
What Universal Identity Graph does[3][11]
The Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time. Permiso states that the chain stays unbroken from a human SSO login to a Lambda function to an MCP tool call. Permiso's Universal Identity Graph inventories identities in all cloud environments and assesses exposure risk.
What Identity Threat Detection and Response does[7]
Permiso provides identity threat detection and response for human and non-human identities across environments. The detection engine has 1500+ detection rules engineered by the P0 Labs team. Permiso detects access and behavioral anomalies in environments such as AWS, Azure, GCP, GitHub, Slack and Salesforce.
What Identity Runtime Attribution does[3]
Permiso launched AI agent runtime security, bringing Identity Runtime Attribution to every agent in production. Permiso ties every run, event and tool call to the identity behind it in real time. Every agent action is tied to a specific human, non-human or AI identity in real time and is preserved as a complete audit trail.
What SandyClaw does[11]
SandyClaw runs every skill in a controlled sandbox before it touches the environment. SandyClaw records every action, every tool call and every downstream request.

Questions about HYPR and Permiso

What do HYPR and Permiso sell?
HYPR sells HYPR Authenticate, HYPR Adapt, HYPR Affirm and HYPR Enterprise Passkeys. Permiso sells Permiso Discover, Permiso Protect, Universal Identity Graph, Identity Threat Detection and Response, Identity Runtime Attribution and 1 more.
Are HYPR and Permiso in the same category?
They share Identity threat detection and response. HYPR's primary category is Passwordless authentication and authenticators and Permiso's is Identity threat detection and response.
When were HYPR and Permiso founded?
HYPR was founded in 2014.
Who owns HYPR and Permiso?
HYPR is privately held. Permiso is owned by Okta, since 2026.
Who are HYPR and Permiso sold to?
Its platform is described for identities across cloud, SaaS and on-prem environments.
What have HYPR and Permiso announced recently?
July 30, 2026: Okta said it signed a definitive agreement to acquire Permiso Security, a startup whose software detects attackers abusing identities across cloud, SaaS and AI agent environments.

About HYPR

HYPR sells an identity security platform that unifies phishing-resistant passwordless authentication, adaptive risk mitigation and automated identity verification. HYPR positions its platform to detect, prevent and eliminate identity-related risks at every point in the identity lifecycle, from onboarding to goodbye. HYPR's platform is aimed at confirming that employees and customers are who they claim to be.[3][9][13]

HYPR Authenticate transforms a smartphone into a FIDO2 passkey, replacing passwords and shared secrets with secure public key cryptography. The user provides a chosen verification factor, such as a TouchID, and HYPR supports hardware options such as YubiKeys. In the HYPR login flow, the verification factor gives access to the private passkey, which is used to sign the challenge. If a user already signed into a desktop using HYPR, the verified identity is automatically passed to the SSO, with no additional verification steps unless step-up authentication is required. HYPR supports biometric authentication, synced passkeys, device-bound passkeys, FIDO hardware security keys and built-in platform authenticators. HYPR Authenticate is FIDO Certified on all components. The HYPR Authenticator App provides passkey-based MFA on a smartphone to replace passwords.[3][5][6][12]

HYPR incorporates standard synced passkeys and device-bound HYPR Enterprise Passkeys into its Identity Assurance platform. HYPR Enterprise Passkeys are built on device-bound FIDO passkeys, which cannot be passed amongst devices. HYPR Enterprise Passkeys for Microsoft Entra ID are a non-syncable FIDO2 passkey built for large-scale workforce authentication. HYPR Enterprise Passkeys are strictly non-syncable and are owned and managed entirely by the enterprise. HYPR Enterprise Passkeys extend passwordless security to the workstation login for Windows, macOS and VDI environments. HYPR Enterprise Passkeys deploy phishing-resistant FIDO2-based MFA with no fallback to factors such as passwords or push notifications. HYPR Enterprise Passkeys come with audit logs for all events. HYPR provisions and manages hardware tokens such as YubiKeys and smart cards. HYPR supports deploying all types of FIDO passkeys across a business through a single solution.[3][7]

HYPR Adapt adds risk-based adaptive authentication and continuously assesses risk from a broad and diverse set of sources. HYPR's policy engine uses data from devices, browsers and other security tools to implement adaptive risk mitigation strategies. HYPR enables organizations to enforce step-up authentication and block fraudulent logins based on real-time risk intelligence. On the HYPR platform, software and hardware passkey authenticators are managed, provisioned and deployed, and user risk scores are tracked alongside adaptive authentication policies in one place.[3][6][9]

HYPR Affirm identity verification was designed to meet enterprise KYE needs across the entire employee lifecycle, from new hires to long-time team members. HYPR supports identity verification for the entire employment lifecycle, from pre-interview screening for job applicants to continuous verification for long-term employees. HYPR identity verification for employees uses AI-powered chat, document verification, video and face recognition. HYPR offers automated account recovery.[9][10]

HYPR integrates with existing IdPs and security tools. HYPR integrates FIDO2 phishing-resistant passwordless authentication with Entra ID (Azure) or other IAM environments. HYPR supports passkey-based MFA for SSO providers, including deployments with multiple providers. With HYPRspeed Desktop SSO, a verified identity from desktop authentication with HYPR is passed to the SSO provider automatically. HYPR offers mobile and web SDKs that put emphasis on rapid deployment. HYPR connects apps to existing identity providers through open standards such as SAML, OpenID Connect and OAuth. HYPR provides jailbreak and root detection that prevents compromised devices from accessing apps and services. HYPR supports passwordless transaction approvals, including step-up authentication.[3][5][10][11]

HYPR identity verification for customers uses AI-driven chat, document authentication, video analysis and facial recognition. HYPR supports PSD2 Strong Customer Authentication (SCA) and transaction signing compliance, including cryptographic signing of every transaction and unique dynamic linking. HYPR supports multiple authenticator options including smartphone app, Windows Hello, TouchID, passkeys and hardware security keys.[13]

HYPR is SOC 2 Type 2 and ISO 27001, ISO 27017 and ISO 27018 certified. HYPR is a board-level member of the FIDO Alliance. HYPR adheres to NIST AAL3. HYPR helps organizations comply with PCI DSS MFA requirements. HYPR addresses MFA and risk-based authentication requirements of the NY Department of Financial Services (NYDFS). Kinaxis deployed passwordless as part of its Zero Trust program.[2][3][6][7][10][13][14]

HYPR on the record

Sources

HYPR full record

  1. [1]CompanyHYPR · hypr.com · undated page, accessed November 4, 2026 · Tier A
  2. [2]Press releasesHYPR · hypr.com · undated page, accessed November 4, 2026 · Tier A
  3. [3]The Identity Assurance Platform | HYPRHYPR · undated page, accessed November 10, 2026 · Tier A
  4. [4]How HYPR Passwordless Authentication WorksHYPR · undated page, accessed November 10, 2026 · Tier A
  5. [5]Passwordless SSO: Extend MFA login to your SSO | HYPRHYPR · undated page, accessed November 10, 2026 · Tier A
  6. [6]Zero Trust Authentication Built on Passkeys | HYPRHYPR · undated page, accessed November 10, 2026 · Tier A
  7. [7]Deploy the Right FIDO Passkeys for Your Business | HYPRHYPR · undated page, accessed November 10, 2026 · Tier A
  8. [8]Enterprise Passkeys | HYPRHYPR · undated page, accessed November 10, 2026 · Tier A
  9. [9]Workforce Identity Verification: Secure Workforce Access | HYPRHYPR · undated page, accessed November 10, 2026 · Tier A
  10. [10]HYPR: Identity Verification & Passwordless Authentication for Identity AssuranceHYPR · undated page, accessed November 10, 2026 · Tier A
  11. [11]HYPR Passwordless SDK | SDK Documentation and APIsHYPR · undated page, accessed November 10, 2026 · Tier A
  12. [12]Modernize The Identity Experience for Your Workforce | HYPRHYPR · undated page, accessed November 10, 2026 · Tier A
  13. [13]Passwordless CIAM Security | CIAM Solution | HYPRHYPR · undated page, accessed November 10, 2026 · Tier A
  14. [14]MFA & Passwordless Authentication Compliance | HYPRHYPR · undated page, accessed November 10, 2026 · Tier A

Permiso full record

  1. [1]permiso.ioPermiso · permiso.io · undated page, accessed September 27, 2026 · Tier A
  2. [2]Okta signs definitive agreement to acquire permiso securityOkta · okta.com · published August 26, 2026 · Tier A
  3. [3]Detect and protect against human and non-human identity threats in real-timePermiso · undated page, accessed October 27, 2026 · Tier A
  4. [4]Identity Security Posture Management + Identity Threat Detection & ResponsePermiso · undated page, accessed October 27, 2026 · Tier A
  5. [5]Coverage across cloud environments to better secure the attack surfacePermiso · undated page, accessed November 10, 2026 · Tier A
  6. [6]Human and Non-Human Identity Inventory, Risk Posture and GovernancePermiso · undated page, accessed November 10, 2026 · Tier A
  7. [7]Identity Threat Detection and Response (ITDR) for Human and Non-Human IdentitiesPermiso · undated page, accessed November 10, 2026 · Tier A
  8. [8]How Permiso Detects Compromised Credentials In Your EnvironmentPermiso · undated page, accessed November 10, 2026 · Tier A
  9. [9]What Are Non-Human Identities? Complete Guide to NHI Security for 2025Permiso · undated page, accessed November 10, 2026 · Tier A
  10. [10]Non-Human Identity (NHI) Threat Detection and ResponsePermiso · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure Every AI Agent, Skill, and Action | PermisoPermiso · undated page, accessed November 10, 2026 · Tier A
  12. [12]Security - At Permiso, we don't take security lightlyPermiso · undated page, accessed November 10, 2026 · Tier A
  13. [13]Learn about how we make cloud zeros into cloud heroes | PermisoPermiso · undated page, accessed November 10, 2026 · Tier A
  14. [14]Okta to acquire Permiso Security in reported $200M identity security deal - SiliconANGLESiliconANGLE · published July 30, 2026 · Tier B

Spot a factual error? Request a correction.