Cerby

Name: Cerby
Brand: Cerby
Rating: 4.5 (29 reviews)

AI Native

Cerby is an access management and identity security automation platform that extends lifecycle management, MFA/2FA enforcement, and credential governance to applications that lack standard federation (SAML/OIDC) or provisioning (SCIM) interfaces, using orchestration and UI automation where required.

Est 2020|Valuation $162.7M|Raised $86.5M|35 Ref Customers

LinkedIn 17K|Website|FTEs 126|HQ Alameda, California, US

MarketsIdentity Governance & Administration (IGA)

01Competitive Landscape

| Aspect | Cerby | Nudge Security | Okta Workforce Identity | |--------|-------|----------------|-------------------------| | Starting Price | Not publicly listed (quote-based); buyers should clarify how supported applications are counted | Published pricing for SaaS discovery/governance by active account/mailbox tiers | Public list pricing varies by edition; enterprise packages often require quoting | | Primary Use Case | Extending lifecycle controls and governance to applications that lack SAML/SCIM/APIs | SaaS discovery and governance workflows driven by identity/email signals; spend optimization | Standards-based SSO, conditional access, and provisioning for applications that support SAML/OIDC/SCIM | | Key Strength | Designed to address the long tail of disconnected applications by orchestrating access and lifecycle actions | Transparent published pricing and continuous discovery orientation | Large ecosystem of integrations and mature enterprise features | | Key Weakness | Limited public pricing and security attestations; potential maintenance burden for UI-based automation | Not designed primarily as a last-mile access orchestration bridge for nonstandard apps | For nonstandard apps, may require manual or SWA approaches rather than automated lifecycle enforcement | - Pricing comparison: value proposition vs alternatives - Cerby: limited public transparency; buyers should expect negotiation and clarification on what counts as a supported application. - Nudge: publishes pricing tied to active accounts/mailboxes. - Okta: typically licensed on a per-user or per-seat basis with additional costs for advanced governance modules; buyers should collect up-to-date pricing for comparable scopes. - Feature comparison: where Cerby may excel vs lag behind - Areas where Cerby may be advantageous: - Enforcement and orchestration for applications that lack standard protocols, particularly for offboarding and MFA enablement triggered by upstream IdP events. - Governance of shared credentials for team-managed accounts. - Areas where Cerby may lag or be less suitable: - SaaS discovery, spend optimization, and continuous nudging of end-user behavior (core strengths of some governance vendors). - Large-scale, standards-first provisioning at enterprise scale where API-based integrations are available and preferred. - Customer testimonials comparing to competitors - Community discussions include anecdotal comparisons between Cerby and other bridging approaches; these are context-dependent and should be validated via reference checks. - Market share and adoption trends - No authoritative public market share data was identified in the accessible sources. Press coverage and marketplace listings indicate vendor activity in the enterprise buyer channel.

01Competitive Landscape

Aspect	Cerby	Nudge Security	Okta Workforce Identity
Starting Price	Not publicly listed (quote-based); buyers should clarify how supported applications are counted	Published pricing for SaaS discovery/governance by active account/mailbox tiers	Public list pricing varies by edition; enterprise packages often require quoting
Primary Use Case	Extending lifecycle controls and governance to applications that lack SAML/SCIM/APIs	SaaS discovery and governance workflows driven by identity/email signals; spend optimization	Standards-based SSO, conditional access, and provisioning for applications that support SAML/OIDC/SCIM
Key Strength	Designed to address the long tail of disconnected applications by orchestrating access and lifecycle actions	Transparent published pricing and continuous discovery orientation	Large ecosystem of integrations and mature enterprise features
Key Weakness	Limited public pricing and security attestations; potential maintenance burden for UI-based automation	Not designed primarily as a last-mile access orchestration bridge for nonstandard apps	For nonstandard apps, may require manual or SWA approaches rather than automated lifecycle enforcement

Pricing comparison: value proposition vs alternatives
- Cerby: limited public transparency; buyers should expect negotiation and clarification on what counts as a supported application.
- Nudge: publishes pricing tied to active accounts/mailboxes.
- Okta: typically licensed on a per-user or per-seat basis with additional costs for advanced governance modules; buyers should collect up-to-date pricing for comparable scopes.
Feature comparison: where Cerby may excel vs lag behind
- Areas where Cerby may be advantageous:
  - Enforcement and orchestration for applications that lack standard protocols, particularly for offboarding and MFA enablement triggered by upstream IdP events.
  - Governance of shared credentials for team-managed accounts.
- Areas where Cerby may lag or be less suitable:
  - SaaS discovery, spend optimization, and continuous nudging of end-user behavior (core strengths of some governance vendors).
  - Large-scale, standards-first provisioning at enterprise scale where API-based integrations are available and preferred.
Customer testimonials comparing to competitors
- Community discussions include anecdotal comparisons between Cerby and other bridging approaches; these are context-dependent and should be validated via reference checks.
Market share and adoption trends
- No authoritative public market share data was identified in the accessible sources. Press coverage and marketplace listings indicate vendor activity in the enterprise buyer channel.

Aspect

Cerby

Nudge Security

Okta Workforce Identity

Starting Price

Not publicly listed (quote-based); buyers should clarify how supported applications are counted

Published pricing for SaaS discovery/governance by active account/mailbox tiers

Public list pricing varies by edition; enterprise packages often require quoting

Primary Use Case

Extending lifecycle controls and governance to applications that lack SAML/SCIM/APIs

SaaS discovery and governance workflows driven by identity/email signals; spend optimization

Standards-based SSO, conditional access, and provisioning for applications that support SAML/OIDC/SCIM

Key Strength

Designed to address the long tail of disconnected applications by orchestrating access and lifecycle actions

Transparent published pricing and continuous discovery orientation

Large ecosystem of integrations and mature enterprise features

Key Weakness

Limited public pricing and security attestations; potential maintenance burden for UI-based automation

Not designed primarily as a last-mile access orchestration bridge for nonstandard apps

For nonstandard apps, may require manual or SWA approaches rather than automated lifecycle enforcement