Grip Security vs Duckie

About

Grip Security is a SaaS security risk management company founded in 2021 and headquartered in Tel Aviv, Israel. The company takes an identity-centric approach to SaaS security, arguing that since every SaaS application requires user authentication, monitoring identity activity across identity providers reveals the full scope of SaaS usage — including shadow SaaS applications that IT and security teams never approved. Grip's platform connects to identity providers and discovers every SaaS application in use by analyzing authentication logs, regardless of whether IT provisioned the app or employees signed up independently.\n\nGrip raised $41 million in funding led by YL Ventures, with participation from Intel Capital and other investors. Its platform builds a continuous inventory of all SaaS applications in use, maps each application to the users accessing it, identifies the sensitivity of data the application accesses, and scores the risk of each application based on vendor security posture, compliance certifications, and permission scope. Security and IT teams can use this inventory to enforce SaaS governance policies, accelerate offboarding by identifying all apps a departing employee accessed, and reduce the attack surface from unmanaged SaaS sprawl.\n\nGrip's offboarding automation is a standout use case: when an employee leaves, IT typically only deactivates accounts in applications it manages. Grip identifies every SaaS application the departing employee used — including those IT doesn't manage — and enables automated or guided offboarding workflows to revoke access across the full SaaS estate. This reduces the risk of former employees retaining unauthorized access to company data through forgotten SaaS accounts.