Andy Ong
CEO
AxisNow
AxisNow provides a Non-Human Identity Access Hub that manages, controls, and protects access for applications, scripts, and services across various environments using identity-centric security and runtime secrets protection. The platform addresses the challenge of securing non-human identities, such as service accounts and API keys, while ensuring speed, scalability, and reliability for automated workflows.
- Cybersecurity
- Developer Tools
- Enterprise Software
- Software Only
Updated yesterday
Funding
Funding not disclosed
Funding rounds are not available yet.
Founders
Product
Problem
Applications, scripts, and services often lack robust identity and access management, leading to insecure storage of secrets, difficulty in managing access across diverse environments, and increased risk of unauthorized access and data breaches. Traditional human-centric IAM solutions are not well-suited for the unique requirements of non-human identities.
Solution
AxisNow provides a Non-Human Identity Access Hub that centralizes the management, control, and protection of access for applications, scripts, and services across various environments. The platform employs identity-centric security principles and runtime secrets protection to ensure speed, scalability, and reliability for automated workflows. By acting as both a non-human identity provider (IdP) and a multi-protocol proxy gateway, AxisNow enables secure access to Vault/KMS, AI/LLMs, CI/CD pipelines, API providers, and mobile apps. The solution integrates with existing IaaS, PaaS, SaaS, trust providers, credential providers, IdPs, EDR, and SIEM systems to provide a comprehensive security ecosystem.
Target Audience
The primary target audience includes security teams, DevOps engineers, and IT administrators responsible for managing and securing non-human identities in organizations utilizing cloud, on-premises, and hybrid environments.
Features
- Identity-driven, trusted combination of non-human identity provider (IdP) and multi-protocol proxy gateway.
- Secure access to Vault/KMS, AI/LLMs, CI/CD pipelines, API providers, and mobile apps.
- Integration with AWS metadata, GCP Workload Identity Federation, iOS App Attest / DeviceCheck, and Google Play Integrity for comprehensive attestation.
- Runtime secrets protection that delivers credentials "just-in-time" to applications only when required and after passing attestation.
- Plugin-based architecture for controlling all access traffic on a single platform with flexible combinations and custom matching conditions via a DSL rules engine.
- Support for various operating systems and runtime environments through SDK and headless clients, enforcing device restrictions and posture checks via EDR integration.
- Automated certificate management lifecycle with Let's Encrypt integration.
- Integration with Cloudflare DNS/DoH for intelligent failover through policy-based routing.
- Automated export of log data to Amazon S3 buckets.
- API-first design with Terraform and Admin API for easy integration with existing infrastructure.