Permiso vs Tracecat
Side-by-side comparison of AI visibility scores, market position, and capabilities
Davis CA universal identity security platform; raised $18M+; detects identity-based threats across cloud control planes and human and machine identities.
About
Permiso is a cloud identity security company founded in 2021 and headquartered in Davis, California. The company was founded by Paul Nguyen and Ian Ahl, former security leaders from FireEye, Mandiant, and Amazon, to address the rapid growth of identity-based attacks in cloud environments. As organizations moved workloads to the cloud, the cloud control plane — the APIs and IAM systems that manage cloud infrastructure — became a primary attack target. Attackers who compromise cloud credentials can provision malicious infrastructure, exfiltrate data, or pivot laterally across cloud accounts without triggering traditional network-based detection.\n\nPermiso raised $18 million in seed and Series A funding from investors including Base10 Partners, Work-Bench, and Okta Ventures. Its platform analyzes activity from cloud identity providers and control planes — AWS CloudTrail, Azure Activity Logs, GCP Audit Logs, Okta, and others — to build behavioral models for every human user and machine identity. When an identity behaves in an anomalous way, such as an IAM role making API calls it has never made or a user accessing services outside their normal patterns, Permiso generates an alert with full context about what happened and what resources were affected.\n\nPermiso's Universal Identity Graph correlates activity across multiple cloud environments and identity providers into a single timeline per identity, enabling analysts to trace attack chains across organizational boundaries. The platform is particularly valuable for detecting techniques used in sophisticated cloud attacks such as credential theft, IAM privilege escalation, persistence via new IAM roles, and lateral movement between cloud accounts. Permiso also provides a free cloud investigation tool called CloudGrappler used by threat intelligence researchers.
SF YC W24 open-source SOAR security automation deployed by 200+ orgs (Fortune 500 + federal); $500K-$2M seed on Temporal's durable execution with 100+ integrations competing with Splunk SOAR and Tines for security incident response.
About
Tracecat is a San Francisco-based open-source security automation platform — backed by Y Combinator (W24) with $500,000-$2 million in seed funding from Y Combinator, Pioneer.app, Pioneer Fund, and SurgePoint Capital — providing security operations, IT, and infrastructure teams with a modern, cost-effective alternative to commercial SOAR (Security Orchestration, Automation, and Response) tools for automating security alerts, incident response, and IT workflows. Deployed by 200+ organizations from Fortune 500 companies to federal agencies, Tracecat is built on Temporal's durable execution platform (used by Datadog, Netflix, and Stripe) and offers 100+ integrations, AI-assisted runbooks, case management, and lookup tables. Founded in 2024 by Chris Lo and Daryl Lim.
AI Visibility Head-to-Head
Key Details
Capabilities & Ecosystem
Capabilities
Integrations
Also Compare
Track AI Visibility in Real Time
Monitor how your brand performs across ChatGPT, Gemini, Perplexity, Claude, and Grok daily.