Israeli Startup Focuses on Addressing Compromised Identities and Access Management
In an ambitious effort to transform the cybersecurity landscape, Cymphony, an Israeli startup founded by Shy Dekel, has successfully raised $30 million in funding. This significant investment comes from notable entities including Sequoia Capital and SMBC Fin, as Cymphony aims to enhance governance and security measures by innovatively combining data, identity, and user activities. The firm’s unique focus is directed towards understanding the capabilities of compromised identities and the potential risks posed by legitimate user permissions once they have been hijacked.
Before establishing Cymphony, Dekel gained notable experience as the head of cyber operations in Unit 8200, the elite intelligence unit of the Israeli Military. His deep understanding of cybersecurity threats positions him as a knowledgeable leader in addressing the challenges organizations face in today’s increasingly complex data environments. With a critical emphasis on the necessity for businesses to comprehend the interconnectedness of identities, permissions, and sensitive information, Dekel articulates a growing concern: many organizations are inadequately prepared for the threats posed by attackers utilizing legitimate credentials.
Dekel emphasizes that compromised identities are not merely a question of unauthorized access; the broader implications include what attackers can accomplish using existing legitimate permissions. "If there have been gaps or cracks in data access before, now they’re being actively used," he explains. This statement underscores the complexity of cybersecurity in which the mere existence of access permissions, even if granted rightly, can lead to significant vulnerabilities.
Cymphony, which has been operational since 2024 and currently employs 29 individuals, seeks to change the paradigm from simply identifying access issues to proactively resolving them. Traditionally, security teams have conducted sporadic scans of permissions, leading to extended periods where inappropriate access could be exercised. To counter this, Cymphony employs continuous monitoring that identifies changes, determines ownership, and initiates remediation efforts effectively.
"The pace is different," Dekel asserts, arguing that utilizing weekly or monthly scans is no longer sufficient in a rapidly evolving threat landscape. Security teams often become overwhelmed by the plethora of tools generating alerts without offering practical remediation strategies. He argues that simply providing additional visibility does not tangibly mitigate risks. Instead, Cymphony’s technology aims to contextualize the data sufficiently to guide the necessary next steps toward effective remediation.
In a world where security teams are bombarded with findings and alerts from numerous systems, introducing another layer of complexity might seem counterproductive. However, Cymphony’s focus is not merely on visibility but on enabling organizations to act decisively and efficiently. Dekel emphasizes that understanding permissions requires more than just identifying problematic access; organizations need actionable insights about what should happen next.
The startup’s methodology involves interconnected insights about data, identity, and activity. Security teams need to determine who granted certain permissions, why they are necessary, and if they are actively used. If certain access rights are deemed redundant, Cymphony facilitates straightforward revocation, working closely with stakeholders to reduce risk while maintaining operational integrity.
Cymphony’s workforce graph plays a crucial role in this process, effectively linking enterprise data to various identities and forms of organizational context—ranging from human employees and non-human agents to departmental tools. Such relationships help in analyzing access patterns, pinpointing the owners of specific permissions, assessing normal access scopes, and identifying anomalous activities.
A noteworthy challenge highlighted by Dekel is the process of determining ownership for AI agents, as the creation and ownership of these systems may not align neatly. Cymphony meticulously examines how an AI agent was developed and the organizational frameworks surrounding its deployment to trace it back to an owner.
Ultimately, as instigated by Dekel, the core mission of Cymphony remains clear: protecting data, the most valuable asset for organizations. As cybersecurity threats continue to evolve, the marriage of identity governance and comprehensive access management becomes increasingly essential to combat vulnerabilities effectively. By leveraging advanced technologies and insights, organizations can not only secure their data but also ensure that their operations remain uninterrupted and resilient in the face of emerging threats.
In summary, Cymphony stands at the forefront of a pivotal shift in how businesses approach cybersecurity, acknowledging that the line between authorized access and malicious intent is increasingly blurred. As cyber threats grow more sophisticated, the startup’s vision for a proactive approach to identity and data protection may prove to be a game changer in digital security.