Independent cybersecurity directory, built from public sources. Featured listings are paid placements and always labelled. How we work

Ermetic

Cloud identity security platform specializing in CIEM and entitlement management, now part of Tenable

ToolCloud Security & CNAPPCloud

Pricing: Custom enterprise pricing (via Tenable)

Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed February 2026 · How we review listings

What is Ermetic?

Ermetic, now part of Tenable, is a cloud identity security platform that specializes in Cloud Infrastructure Entitlement Management (CIEM) and cloud security posture management. Ermetic's core strength is analyzing and visualizing cloud identity risks, detecting overly permissive access policies, and providing automated least-privilege recommendations across AWS, Azure, and GCP. Following its acquisition by Tenable, Ermetic's CIEM capabilities are being integrated into Tenable Cloud Security.

Best for: Organizations where cloud identity and access management risk is the primary security concern, especially those already using Tenable products

Pros

  • Deepest CIEM capabilities with granular identity risk analysis
  • Automated least-privilege recommendations reduce manual IAM remediation
  • Strong cross-cloud identity correlation across AWS, Azure, and GCP
  • Now part of Tenable, benefiting from broader vulnerability intelligence
  • Effective at identifying toxic permission combinations

Things to check

  • Narrower platform scope focused primarily on identity and posture
  • Being absorbed into Tenable Cloud Security may cause product direction uncertainty
  • Lacks workload protection and container security depth
  • No runtime detection or response capabilities
  • Smaller standalone market presence following acquisition

Reported in public reviews and vendor documentation. See sources below.

Key Features

Cloud Infrastructure Entitlement Management (CIEM)
Automated least-privilege recommendations
Identity risk visualization and analysis
Cross-cloud identity correlation
Cloud Security Posture Management (CSPM)
Just-in-time access provisioning
Toxic permission combination detection
Multi-cloud IAM policy analysis

Do you work at Ermetic? to confirm the details or send us a correction.

Add the Cyber Vendor Guide badge to your site

Ermetic Comparisons

Sources & references

Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.

Spot an error, or do you represent Ermetic? Request a correction.

Key facts

Pricing
Custom enterprise pricing (via Tenable)
Model
Resource-based (per cloud identity)
Founded
2019
Cloud
Yes
Self-hosted
No

Ermetic Alternatives

  • WizAgentless cloud security platform with full-stack visibility...
  • Orca SecurityAgentless cloud security platform using SideScanning technol...
  • Prisma CloudComprehensive CNAPP from Palo Alto Networks securing applica...
  • LaceworkData-driven cloud security platform using behavioral analyti...
  • Aqua SecurityCloud-native security platform specializing in container, Ku...
View all alternatives