Vendor Profile

Ermetic

Ermetic, now part of Tenable, is a cloud identity security platform that specializes in Cloud Infrastructure Entitlement Management (CIEM) and cloud security posture management. Ermetic's core strength is analyzing and visualizing cloud identity risks, detecting overly permissive access policies, and providing automated least-privilege recommendations across AWS, Azure, and GCP. Following its acquisition by Tenable, Ermetic's CIEM capabilities are being integrated into Tenable Cloud Security.

Last updated February 28, 2026

Founded

2019

Pricing

Custom enterprise pricing (via Tenable)

Verify with vendor

Deployment

Cloud

Cloud Identity Security

Key Features

+Cloud Infrastructure Entitlement Management (CIEM)

+Automated least-privilege recommendations

+Identity risk visualization and analysis

+Cross-cloud identity correlation

+Cloud Security Posture Management (CSPM)

+Just-in-time access provisioning

+Toxic permission combination detection

+Multi-cloud IAM policy analysis

Pros & Cons

Pros

+Deepest CIEM capabilities with granular identity risk analysis
+Automated least-privilege recommendations reduce manual IAM remediation
+Strong cross-cloud identity correlation across AWS, Azure, and GCP
+Now part of Tenable, benefiting from broader vulnerability intelligence
+Effective at identifying toxic permission combinations

Cons

–Narrower platform scope focused primarily on identity and posture
–Being absorbed into Tenable Cloud Security may cause product direction uncertainty
–Lacks workload protection and container security depth
–No runtime detection or response capabilities
–Smaller standalone market presence following acquisition

Best For

Organizations where cloud identity and access management risk is the primary security concern, especially those already using Tenable products

User Reviews

Takes about 2 minutes. Your review helps other security teams.

No reviews yet. Be the first to share your experience!