CISO Tribune

Vendor comparison · 2 companies

Material Security vs Permiso

Material Security is the company behind Material, an automated cloud workspace security platform for lean security teams that need to protect the email, files, and accounts that live in Google Workspace and Microsoft 365. Permiso's Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time. CISO Tribune files both under Identity threat detection and response. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Material Security
  • Permiso
Material Security vs Permiso: Products, Customers and Funding Compared
Material SecurityMaterial Security is the company behind Material, an automated cloud workspace security platform for lean security teams that need to protect the email, files, and accounts that live in Google Workspace and Microsoft 365.material.securityPermisoPermiso's Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time.permiso.io
What it sells
  • Email Security[2][3][5][8]Remediates email attacks that bypass traditional controls in Google Workspace and Microsoft 365.
  • File Security[2][6][8][13]Finds sensitive data in files and remediates excessive permissions and sharing.
  • Account Security[2][7][8]Detects account takeovers, contains their impact and hardens accounts.
  • OAuth Remediation Agent[8]Watches third-party clients and AI agents across Google Workspace.
  • Drive Agent[9][10]Investigates and remediates over-shared sensitive documents in Google Drive.
  • Permiso Discover[3]Provides an inventory of human, non-human and AI identities wherever they live.
  • Permiso Protect[3]Evaluates the risk posture of identities based on usage patterns, exposure and entitlements.
  • Universal Identity Graph[3][11]Connects every identity to the credentials it owns, the machines it creates and the agents it runs.
  • Identity Threat Detection and Response[7]Detects threats to human and non-human identities across environments.
  • Identity Runtime Attribution[3]Ties agent runs, events and tool calls to the identity behind them.
  • SandyClaw[11]Runs agent skills in a controlled sandbox.
Categories
Headquarters
Redwood City, United States[1]Not stated on its pages
Founded
2017[1][13]Not stated on its pages
Ownership and funding
Not stated on its pagesOwned by Okta since 2026[2][5]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • July 30, 2026Okta said it signed a definitive agreement to acquire Permiso Security, a startup whose software detects attackers abusing identities across cloud, SaaS and AI agent environments.[14]
G2 and Gartner Peer Insights
  • G2: listed, seen November 4, 2026[12]
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetIts platform is described for identities across cloud, SaaS and on-prem environments. Permiso presents its tools to security teams. Its watchlist capability is aimed at threats from employees, contractors and other trusted individuals.
Last verified
September 27, 2026November 2, 2026

Where they overlap

  • Material Security and Permiso are both filed under Identity threat detection and response.

Where they differ, field by field

  • Material Security's primary category is Email security; Permiso's is Identity threat detection and response.
  • Material Security is also filed under Data security posture management and SaaS security posture. Permiso is also filed under Non-human identity security and Cloud detection and response.
  • Material Security lists Email Security, File Security, Account Security, OAuth Remediation Agent and Drive Agent. Permiso lists Permiso Discover, Permiso Protect, Universal Identity Graph, Identity Threat Detection and Response, Identity Runtime Attribution and 1 more.
  • Material Security is headquartered in Redwood City, United States.
  • Material Security was founded in 2017.
  • Permiso is owned by Okta, since 2026.

What it sells: Material Security

What Email Security does[2][3][5][8]
Material runs on auto-pilot to remediate sophisticated email attacks that bypass traditional controls. It automates user report triage with AI-powered investigation and response workflows. It connects through native APIs rather than acting as a gateway.
What File Security does[2][6][8][13]
Material detects sensitive content in files and includes tools to automatically remediate excessive permissions and inappropriate sharing. It discovers and classifies sensitive data across Google Drive and maps it to every sharing permission.
What OAuth Remediation Agent does[8]
The agent classifies risk in real time and revokes access tokens the moment behavior turns suspicious. It can message the user in Slack to confirm whether an authorization was legitimate.

What it sells: Permiso

What Permiso Discover does[3]
Permiso Discover gives enterprises an inventory of human, non-human and AI identities wherever they live. Permiso inventories identities and assesses exposure risk in identity providers, cloud service providers and SaaS applications.
What Permiso Protect does[3]
Permiso Protect continuously evaluates the risk posture of identities based on usage patterns, exposure and entitlements. Permiso Protect surfaces and quantifies high-risk identities, stale access and toxic combinations across human, vendor, AI and non-human accounts.
What Universal Identity Graph does[3][11]
The Universal Identity Graph connects every identity to the credentials it owns, the machines it creates, the agents it runs and every action it takes in real time. Permiso states that the chain stays unbroken from a human SSO login to a Lambda function to an MCP tool call. Permiso's Universal Identity Graph inventories identities in all cloud environments and assesses exposure risk.
What Identity Threat Detection and Response does[7]
Permiso provides identity threat detection and response for human and non-human identities across environments. The detection engine has 1500+ detection rules engineered by the P0 Labs team. Permiso detects access and behavioral anomalies in environments such as AWS, Azure, GCP, GitHub, Slack and Salesforce.
What Identity Runtime Attribution does[3]
Permiso launched AI agent runtime security, bringing Identity Runtime Attribution to every agent in production. Permiso ties every run, event and tool call to the identity behind it in real time. Every agent action is tied to a specific human, non-human or AI identity in real time and is preserved as a complete audit trail.
What SandyClaw does[11]
SandyClaw runs every skill in a controlled sandbox before it touches the environment. SandyClaw records every action, every tool call and every downstream request.

Questions about Material Security and Permiso

What do Material Security and Permiso sell?
Material Security sells Email Security, File Security, Account Security, OAuth Remediation Agent and Drive Agent. Permiso sells Permiso Discover, Permiso Protect, Universal Identity Graph, Identity Threat Detection and Response, Identity Runtime Attribution and 1 more.
Are Material Security and Permiso in the same category?
They share Identity threat detection and response. Material Security's primary category is Email security and Permiso's is Identity threat detection and response.
Where are Material Security and Permiso headquartered?
Material Security is headquartered in Redwood City, United States.
When were Material Security and Permiso founded?
Material Security was founded in 2017.
Who owns Material Security and Permiso?
Permiso is owned by Okta, since 2026.
Who are Material Security and Permiso sold to?
Its platform is described for identities across cloud, SaaS and on-prem environments.
What have Material Security and Permiso announced recently?
July 30, 2026: Okta said it signed a definitive agreement to acquire Permiso Security, a startup whose software detects attackers abusing identities across cloud, SaaS and AI agent environments.

About Material Security

Material Security is the company behind Material, an automated cloud workspace security platform for lean security teams that need to protect the email, files, and accounts that live in Google Workspace and Microsoft 365. Material Security says it secures the productivity suite by stopping attacks and reducing risk across Microsoft 365 and Google Workspace with unified cloud email and file security, data loss prevention and posture management.[2][3][5][7]

Material Security says point solutions and home-grown detections create gaps and drain efficiency. Material replaces that patchwork with a single platform that combines threat detection and response across email, files, and accounts. The company describes modern attacks as deliberately spanning email, identities, data, and connected apps.[3][7][9]

On email, Material remediates sophisticated email attacks that bypass traditional controls. Material automates user report triage with AI-powered investigation and response workflows. Material says it stops VIP impersonations, BEC attacks, and sophisticated phishing that slips past native defenses, including vendor email compromise, invoice fraud, quishing, and ransomware. Material says teams using its automated user report response have cut phishing triage by up to 91 percent at companies like Gusto.[3][5]

On files and accounts, Material detects sensitive content in files and includes tools to automatically remediate excessive permissions and inappropriate sharing. Material detects account takeovers, contains their impact, and hardens accounts. Material monitors signals across the cloud office, from forwarding rules and mailbox rule changes to brute force logins and credential stuffing.[3][7]

Material sells two agents for specific workspace risks. For business-critical clients, customers can require analyst approval before revocation happens. Material's Drive Agent finds and investigates PHI, PII, and sensitive documents shared too broadly in Drive. When over-sharing is identified, the Drive Agent enforces policy and remediates in bulk.[8][9]

On deployment, Material connects to Microsoft 365 and Google Workspace in minutes via native APIs, with no network changes and zero downtime. Material lets customers implement protections for just the users or teams that need them, and syncs groups from Active Directory, Google, or IdPs for targeted deployments and staged rollouts. No agents, plug-ins, or other end-user installs are required. Material can be operated by Material while the customer's team has full access to and ownership of the underlying infrastructure. Material links with SIEM or SOAR platforms to bring cloud workspace visibility and protection under the broader security ecosystem.[3]

On security assurance, Material states it has received a SOC 2 Type II Report through an independent third-party auditor. Material undergoes regular external pentests and runs a private bug bounty program through HackerOne. Material keeps immutable audit logs of all admin activity and application events, and access to the Material admin console can be gated through Single Sign-On.

On pricing, Essentials starts at $4 per user/month, billed annually. Advanced is $6 per user/month, billed annually. ATO Resilience can be added to either plan for an additional $3 per user/month, or bought as a standalone license for $5 per user/month.[14]

Ryan co-founded Material in 2017 and has served as Chairman since 2023. Abhishek co-founded Material in 2017. Chris has been VP of Engineering at Material Security since 2017 and co-founded the company. Material Security says it has raised venture capital from Martin Casado at Andreessen Horowitz, Elad Gil, and Trae Stephens at Founders Fund.[2][3][5][6][7][8][9][10][11][14]

Material Security on the record

Sources

Material Security full record

  1. [1]Material Security Raises $40 Million Series B To Protect the Worlds Email From the Next SolarWinds AttackMaterial Security via Business Wire · businesswire.com · published May 26, 2021 · Tier A
  2. [2]ProductMaterial Security · material.security · undated page, accessed September 27, 2026 · Tier A
  3. [3]Cloud Workspace Security Platform | Material SecurityMaterial Security · undated page, accessed October 26, 2026 · Tier A
  4. [4]Deployment and Security | Material SecurityMaterial Security · undated page, accessed October 26, 2026 · Tier A
  5. [5]Email Security Solutions for Google Workspace and Microsoft 365 | MaterialMaterial Security · undated page, accessed October 26, 2026 · Tier A
  6. [6]File Security for Google Drive and Gmail | MaterialMaterial Security · undated page, accessed October 26, 2026 · Tier A
  7. [7]Account Takeover Prevention & Detection | Material SecurityMaterial Security · undated page, accessed October 26, 2026 · Tier A
  8. [8]OAuth Security That Stops Malicious Apps | Material SecurityMaterial Security · undated page, accessed October 26, 2026 · Tier A
  9. [9]Material Security | Security for Google Workspace and Microsoft 365Material Security · undated page, accessed October 26, 2026 · Tier A
  10. [10]Google Drive Security for the Agentic AI Era | MaterialMaterial Security · undated page, accessed October 26, 2026 · Tier A
  11. [11]Helping Secure Our Customers | Material SecurityMaterial Security · undated page, accessed October 26, 2026 · Tier A
  12. [12]Material Security Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 26, 2026 · Tier C
  13. [13]About Us and Leadership | Material SecurityMaterial Security · undated page, accessed November 4, 2026 · Tier A
  14. [14]Our Pricing Packages | Material SecurityMaterial Security · undated page, accessed November 4, 2026 · Tier A

Permiso full record

  1. [1]permiso.ioPermiso · permiso.io · undated page, accessed September 27, 2026 · Tier A
  2. [2]Okta signs definitive agreement to acquire permiso securityOkta · okta.com · published August 26, 2026 · Tier A
  3. [3]Detect and protect against human and non-human identity threats in real-timePermiso · undated page, accessed October 27, 2026 · Tier A
  4. [4]Identity Security Posture Management + Identity Threat Detection & ResponsePermiso · undated page, accessed October 27, 2026 · Tier A
  5. [5]Coverage across cloud environments to better secure the attack surfacePermiso · undated page, accessed November 10, 2026 · Tier A
  6. [6]Human and Non-Human Identity Inventory, Risk Posture and GovernancePermiso · undated page, accessed November 10, 2026 · Tier A
  7. [7]Identity Threat Detection and Response (ITDR) for Human and Non-Human IdentitiesPermiso · undated page, accessed November 10, 2026 · Tier A
  8. [8]How Permiso Detects Compromised Credentials In Your EnvironmentPermiso · undated page, accessed November 10, 2026 · Tier A
  9. [9]What Are Non-Human Identities? Complete Guide to NHI Security for 2025Permiso · undated page, accessed November 10, 2026 · Tier A
  10. [10]Non-Human Identity (NHI) Threat Detection and ResponsePermiso · undated page, accessed November 10, 2026 · Tier A
  11. [11]Secure Every AI Agent, Skill, and Action | PermisoPermiso · undated page, accessed November 10, 2026 · Tier A
  12. [12]Security - At Permiso, we don't take security lightlyPermiso · undated page, accessed November 10, 2026 · Tier A
  13. [13]Learn about how we make cloud zeros into cloud heroes | PermisoPermiso · undated page, accessed November 10, 2026 · Tier A
  14. [14]Okta to acquire Permiso Security in reported $200M identity security deal - SiliconANGLESiliconANGLE · published July 30, 2026 · Tier B

Spot a factual error? Request a correction.