Act Security

Name: Act Security
Brand: Act Security

AI Native

Act Security is a cloud security platform that reduces breach likelihood by eliminating excessive access and attack paths through business-aligned perimeter mapping, combined identity-and-network reachability modeling, and simulation-first enforcement of native cloud controls.

Est 2025

Website|FTEs 50|HQ Tel Aviv, Israel

Published Sep 7, 2026

01Common complaints

- Company sizes or stages where this product is overkill or insufficient - This product may be overkill for early startups with minimal cloud footprint and low access complexity. - Industries or use cases where competitors are clearly superior - If a buyer requires a full CNAPP suite with deep vulnerability, container/runtime, and code security in one platform, a broader CNAPP vendor may be a better single-vendor path. - Technical requirements that this product may not meet - If mature, independently validated multi-cloud coverage (including confirmed GCP support) is required and cannot be validated, established CNAPP vendors may be preferred. - Budget constraints that make alternatives more appropriate - If enterprise-style pricing is unaffordable for SMBs, lighter or cloud-native controls may be more cost-effective. - Specific workflows or integrations where the product may fall short - If priority is developer-centric workflows (shift-left AppSec, CI/CD scanning), the perimeter and access focus may not align with those needs. - Red flags in the buying process - If key trust artifacts are only available under NDA and buyers cannot validate required controls (data residency, authentication integrations, audit logging) early in the process, delaying commitment until those items are reviewed is advisable. - Current limitations acknowledged by the vendor - No explicit known-issues list was found in public sources. - Features on the roadmap (not yet available) - No public roadmap details were identified in the captured sources. - Scale limitations - Scale limitations are not publicly documented in accessible sources. - Security or compliance gaps - Certifications are claimed in the Trust Center (ISO 27001:2022, SOC 2 Type 2); the scope and detailed evidence are not publicly visible without requesting access. - API limitations or integration constraints - API and integration specifics were not publicly documented in accessible sources.

02Why they buy

- Competitive advantages supported by observable vendor claims - Publicly stated vendor capabilities include unified identity and network authorization modeling organized into business-aligned perimeters, guided campaign workflows, and simulation-first enforcement. - There is not yet sufficient third-party customer-review evidence to validate these claims independently. - Unique features and capabilities competitors lack (vendor-claimed) - The vendor claims a focus on converging identity and network reachability into business-aligned boundaries, with tooling to orchestrate change campaigns and simulate enforcement. - Areas where competitors clearly have advantages - Competitors may provide broader CNAPP coverage, more visible customer references, and larger review footprints.

03Field reports

Availability of public reviews

The product appears to have launched publicly recently. As a result, mainstream review coverage for this specific product is limited.

Gartner Peer Insights

No public Gartner Peer Insights listing for Act Security was identified in the searches performed. Peer Insights listings often require navigation and may not be discoverable without direct matching or credentials.

G2 / TrustRadius

Searches on popular review platforms surfaced other similarly named products (for example, CRM products with similar names) rather than Act Security. No Act Security profile or user reviews were found during this research run.

Community/social

A Reddit post summarized funding and product claims consistent with media reporting; the post reads like a summary of press coverage rather than a hands-on customer review.
No high-signal Hacker News discussion thread was identified in the searches captured; additional targeted searching may be required.

Balanced assessment of testimonials/reviews

At the time of research, there are no reliable, high-signal end-user review clusters (pros/cons aggregated across many customers) publicly available for Act Security specifically.
Buyer implication: procurement teams should plan to rely on vendor references, trials/POCs, and security review documentation more than public review platforms.

Detailed customer success stories with metrics

No public case studies with named customers and quantified metrics were found in the captured sources at the time of this research.

Critical evaluation

The vendor site contains solution briefs and launch materials dated mid-2026, indicating an early go-to-market phase.
Buyers should treat early ROI claims as vendor-published unless supported by customer names, baseline vs post-implementation methodology, and independent validation.

04Best fit

- Company sizes: general company-size guidance - Likely best fit: - Mid-market to large enterprise organizations with complex cloud footprints and mature cloud operations - Security organizations that have the authority to enforce network and IAM policy changes - Industries and verticals where adoption is strongest - No named public customer evidence was found; vendor background messaging references prior experience in regulated and high-risk sectors such as healthcare and critical infrastructure. - Roles and personas: decision makers AND end users - Decision makers: - CISO / VP Security - Head of Cloud Security / Platform Security - Director of IAM / Zero Trust - End users: - Cloud security engineers - IAM engineers - Network security / cloud networking engineers - SRE / platform engineering involved in IaC and policy enforcement - Pain points and challenges the product addresses - Excessive permissions and unintended network paths that enable lateral movement - Remediation backlog where teams see risks but struggle to enforce durable fixes - Access drift as environments evolve over time - Qualification criteria: what makes a strong fit - The buyer can define meaningful perimeters and boundaries by organization/environment/application/data - There is governance to enforce least privilege and network segmentation changes - The organization is prepared to plan and run change campaigns rather than only monitoring - Deal disqualifiers: what makes a poor fit - Very small teams that cannot own policy change workflows - Organizations that primarily need vulnerability management, container runtime protection, or AppSec scanning rather than access/perimeter enforcement - Environments with unclear ownership of IAM/network controls or strong organizational blockers to enforcement - Real customer examples - No named public customer case studies were found in the captured sources.

05The pitch

What the product does (core value proposition in objective terms)

- Act Security is a cloud security platform focused on reducing breach likelihood by eliminating excessive access and attack paths across cloud environments, rather than primarily detecting misconfigurations and producing findings. - The product capabilities include: - Mapping cloud resources into business-aligned boundaries/perimeters - Modeling reachability by analyzing identity and network access together - Running hardening campaigns to remove redundant paths - Simulating changes (audit mode) before enforcement to reduce production impact

Target market and market positioning

Target buyers appear to be:
- Cloud security / platform security teams
- IAM security / cloud infrastructure engineering teams
- Organizations concerned about lateral movement and over-privileged cloud access at scale
Positioning emphasizes proactive enforcement rather than detection/alerting, and use of native cloud controls rather than agents or sidecars.

Get a comprehensive analysis of Act Security including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →