Valence Security vs Tracecat
Side-by-side comparison of AI visibility scores, market position, and capabilities
SaaS security platform managing risks from SaaS-to-SaaS integrations, OAuth grants, and collaboration tool sprawl. Tel Aviv Israel; raised $25M+;
About
Valence Security is a SaaS security company founded in 2021 and headquartered in Tel Aviv, Israel. The company identified a growing but underaddressed attack surface: the web of integrations, OAuth grants, and third-party app connections that accumulate as organizations adopt dozens of SaaS applications. Each integration creates a trust relationship that can be exploited if the third-party application is compromised, if a token is leaked, or if permissions are granted far beyond what the use case requires. Valence was built to give security teams full visibility and governance over this SaaS integration mesh.\n\nValence raised $25 million in a Series A round led by Microsoft's M12 venture fund, with participation from YL Ventures and Porsche Ventures. The platform connects to the organization's core SaaS applications — including Microsoft 365, Google Workspace, Salesforce, GitHub, Slack, and Zoom — and discovers all OAuth applications connected to them, the permissions granted, the users who authorized them, and whether the connected applications have known security issues. Security teams can review, revoke, and enforce policies on third-party app access without disrupting end users.\n\nValence's collaboration security capabilities extend beyond OAuth to cover sharing configurations — identifying when sensitive documents, files, or data are shared externally or with overly broad permissions in collaboration tools. The platform also monitors for SaaS misconfigurations and tenant-level security settings that deviate from security baselines. Its remediation workflows allow security teams to alert the responsible users, request justification for sensitive access, or automatically revoke connections that violate policy.
SF YC W24 open-source SOAR security automation deployed by 200+ orgs (Fortune 500 + federal); $500K-$2M seed on Temporal's durable execution with 100+ integrations competing with Splunk SOAR and Tines for security incident response.
About
Tracecat is a San Francisco-based open-source security automation platform — backed by Y Combinator (W24) with $500,000-$2 million in seed funding from Y Combinator, Pioneer.app, Pioneer Fund, and SurgePoint Capital — providing security operations, IT, and infrastructure teams with a modern, cost-effective alternative to commercial SOAR (Security Orchestration, Automation, and Response) tools for automating security alerts, incident response, and IT workflows. Deployed by 200+ organizations from Fortune 500 companies to federal agencies, Tracecat is built on Temporal's durable execution platform (used by Datadog, Netflix, and Stripe) and offers 100+ integrations, AI-assisted runbooks, case management, and lookup tables. Founded in 2024 by Chris Lo and Daryl Lim.
AI Visibility Head-to-Head
Key Details
Capabilities & Ecosystem
Capabilities
Integrations
Also Compare
Track AI Visibility in Real Time
Monitor how your brand performs across ChatGPT, Gemini, Perplexity, Claude, and Grok daily.