Hush Security

Hush Security provides a policy-based access platform designed to secure machine identities without using static secrets. Founded in 2024 by Micha Rave (CEO), Chen Nisnkorn (CCO), Shmulik Ladkani (CTO), and Alon Horowitz (VP R&D), the team behind Meta Networks, which was acquired by Proofpoint in 2019, the company is headquartered in Tel Aviv. In September 2025, Hush Security emerged from stealth, announcing an $11 million seed funding round led by Battery Ventures and YL Ventures.

The company's core offering replaces traditional secrets vaults and managers by issuing just-in-time, policy-driven access controls that are enforced at runtime and expire immediately after use. This approach is designed for modern dynamic cloud environments, automated workflows, and the proliferation of AI agents, where managing static secrets like API keys and credentials creates significant operational and security risks. The platform is built on the open-source SPIFFE (Secure Production Identity Framework For Everyone) standard to provide a unified, zero-trust access model. It continuously discovers and maps all workloads, services, and AI agents from code to runtime, allowing it to assess risks and apply least-privilege access policies dynamically.

Hush Security serves enterprise clients, including Fortune 500 companies, by helping them streamline compliance and eliminate 'secret sprawl'. Its business model appears to be subscription-based, offering an enterprise edition of its platform. The company also provides a free assessment tool that detects secrets in code, identifies their owners, and maps their usage at runtime to facilitate migration to a secretless architecture. This system aims to prevent credential-based attacks by eliminating the credentials themselves, thus enhancing security without impeding developer workflows.

Keywords: secretless access management, machine identity security, just-in-time access, policy-based controls, zero trust, SPIFFE, cloud native security, runtime security, AI agent security, secrets management, credential protection, DevOps security, DevSecOps, machine-to-machine access, API security, ephemeral credentials, runtime visibility, access control, cybersecurity, infrastructure security