Otterize

Otterize provides a security platform focused on automating Identity and Access Management (IAM) for workloads within cloud-native environments, particularly Kubernetes. The company was established in 2022 by co-founders Tomer Greenwald (CEO), Uri Sarid, and Ori Shoshan. The founding team's motivation was to redesign service-to-service access to be both secure and effortless for developers.

The company's core offering addresses the complexities and manual effort involved in securely connecting different software services. Otterize operates in the cloud security market, targeting DevOps and platform engineers who manage the infrastructure for distributed development teams. Its business model includes a foundational open-source offering supplemented by a commercial SaaS product, Otterize Cloud, which provides additional features like a visual access graph and advanced insights. The company utilizes a freemium model with various pricing tiers, including a plan that starts at a per-developer rate.

The platform's central technology is Intent-Based Access Control (IBAC). This approach allows developers to declare the intended communication needs of their code directly. Otterize then automates the configuration of existing security controls—such as Kubernetes Network Policies, AWS IAM policies, and Kafka ACLs—to permit only these declared interactions and block any unintended calls. This process helps organizations implement a zero-trust security model by minimizing excessive permissions. Key features include the discovery and visualization of network traffic, automated policy creation, and integrations with tools like Istio, GitHub, and GitLab. In April 2023, Otterize announced it had raised $11.5 million in a seed funding round led by Index Ventures, Dig Ventures, and Vine Ventures. Subsequently, in June 2025, the company was acquired by Cyera, a data security posture management firm.

Keywords: Intent-Based Access Control, IBAC, Kubernetes security, workload IAM, cloud-native security, DevOps security, service-to-service communication, zero-trust network, access control automation, network policy automation, identity and access management, cloud security, microservices security, open source security, Cyera, Tomer Greenwald, Uri Sarid, Ori Shoshan, Kubernetes network policies, AWS IAM, Kafka ACLs, Istio security, CI/CD security