E

Ermetic

Cybersecurity · Tel Aviv-Yafo, Israel · Founded 2019

Ermetic is a cybersecurity startup that specializes in securing cloud infrastructure, identities, and workloads. The company operates in the rapidly growing cloud security market, providing solutions that help organizations protect their cloud environments from potential threats and vulnerabilities. Ermetic's primary clients include enterprises and organizations that utilize cloud services such as Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure. Ermetic offers a comprehensive platform that includes Cloud Security Posture Management (CSPM) and Cloud Infrastructure Entitlement Management (CIEM). CSPM helps detect and fix misconfigurations in cloud environments, ensuring compliance with industry standards and best practices. CIEM focuses on managing and securing identities and access permissions within the cloud, aiming to achieve the principle of least privilege, which means giving users the minimum level of access necessary to perform their jobs. The company also provides an open-source tool called CNAPPgoat, which is designed to help organizations deploy cloud resources in a modular and secure manner. This tool is particularly useful for businesses that operate in multi-cloud environments, allowing them to manage and secure their cloud infrastructure more effectively. Ermetic's business model is based on a subscription service. Clients pay an annual fee to access the platform's features and receive continuous updates and support. The company also offers professional services, including consulting and training, to help organizations implement and optimize their cloud security strategies. In summary, Ermetic makes money by offering a subscription-based cloud security platform and additional professional services. The company serves enterprises and organizations that rely on cloud services, helping them secure their cloud infrastructure, identities, and workloads. Keywords: cloud security, CSPM, CIEM, least privilege, multi-cloud, AWS, GCP, Azure, subscription service, cybersecurity.