Obsidian Security vs Duckie

About

Obsidian Security is a SaaS security and identity threat detection company founded in 2017 and headquartered in Newport Beach, California. The company was founded by former executives and engineers from Carbon Black, CrowdStrike, and the NSA who applied endpoint detection and response principles to the SaaS domain. Obsidian's platform monitors user behavior across SaaS applications to detect account compromise, insider threats, and data exfiltration by analyzing activity patterns — logins, API calls, data access, sharing events — against behavioral baselines built for each user.\n\nObsidian raised $90 million across three rounds from investors including Norwest Venture Partners, IVP, and Greylock Partners. Its platform integrates with major enterprise SaaS applications including Salesforce, Microsoft 365, Google Workspace, ServiceNow, GitHub, Workday, and more than 40 other applications. Rather than relying solely on configuration checks, Obsidian focuses on runtime behavioral analytics: detecting when a compromised account is performing unusual data exports, when a user accesses records far outside their normal work patterns, or when a service account begins making API calls it has never made before.\n\nThe platform also covers SaaS identity risk management, inventorying privileged accounts, dormant accounts, and over-permissioned users across all integrated applications. Security teams can use Obsidian to reduce their SaaS attack surface by identifying and remediating excessive access, and to respond to active threats with detailed activity timelines that provide forensic evidence for incident investigations. Obsidian's combination of posture management and behavioral detection positions it between pure SSPM tools and identity threat detection and response (ITDR) platforms.