Common Fate provides a framework for managing permissions across cloud environments and critical applications, enabling fine-grained, just-in-time access to sensitive digital assets. By enforcing least privilege access and integrating with existing identity providers, it ensures that users have the necessary access only when required, enhancing security and compliance.
Funding
$3.1M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Organizations struggle to manage and secure access to sensitive data and cloud resources across increasingly complex environments. Traditional privileged access management solutions often lack the granularity and real-time adaptability needed to enforce least privilege effectively. This can lead to over-provisioning of access, increasing the risk of data breaches and compliance violations.
Solution
Common Fate provides a just-in-time (JIT) access management platform that enables organizations to grant fine-grained, time-bound access to cloud resources and sensitive data. By integrating with existing identity providers and cloud infrastructure, Common Fate automates the process of provisioning and revoking access based on contextual factors such as on-call status, department, or project. This ensures that users have the necessary permissions only when they need them, minimizing the attack surface and improving overall security posture. The platform supports policy-as-code, allowing security teams to define and enforce access policies using familiar tools like Terraform. Common Fate also offers comprehensive audit logging and integration with SIEM tools for real-time monitoring and incident response.
Target Audience
Common Fate is designed for engineering, data, and IT teams in cloud-native organizations that need to manage and secure access to sensitive resources while maintaining developer velocity and a strong security posture.
Features
- Just-in-time (JIT) access provisioning for AWS and Google Cloud Platform (GCP)
- Integration with identity providers such as Okta and Microsoft Entra via SAML and SCIM
- Policy-as-code using Terraform for defining and managing access policies
- Fine-grained access control down to specific resources and data elements
- Automatic access revocation after a defined time period
- Integration with PagerDuty and OpsGenie for automated on-call access
- Real-time audit logging and integration with SIEM tools like Splunk and Panther
- Bring-Your-Own-Cloud (BYOC) deployment option for enhanced data sovereignty
- Command-line interface (CLI) for requesting access from the terminal
- Profile syncing to keep AWS configurations up-to-date