Riptides

Riptides provides a security platform that authenticates and authorizes non-human identities, such as workloads and AI agents, for every connection. This allows organizations to establish trust and control access for automated systems.

Budapest, Hungary

Updated 2 months ago

Funding

Funding not disclosed

Funding rounds are not available yet.

Founders

Founder details are not available yet.

Product

Problem

In dynamic cloud-native and AI-driven environments, traditional secret management practices relying on static credentials like API keys and tokens create security vulnerabilities due to credential sprawl, leaks, and potential exploitation. Existing solutions often lack a unified approach to managing non-human identities, leading to a patchwork of security measures that are difficult to maintain and scale.

Solution

Riptides provides a universal non-human identity (NHI) solution that secures connections between workloads, services, and AI agents by replacing static secrets with cryptographically verifiable identities. The platform issues ephemeral, SPIFFE-based identities enforced at the kernel level, eliminating the need for manual secret rotation and reducing the attack surface. Riptides integrates with Kubernetes and other container platforms to collect workload metadata and enforce access control policies, enabling zero-trust authentication for both internal and third-party connections. By enforcing identity at the kernel level, Riptides ensures that identities are tied directly to running processes, preventing identity spoofing and blocking malicious connections.

Target Audience

Riptides is designed for security engineers, platform teams, and infrastructure teams responsible for securing workload-to-workload communication in dynamic, cloud-native, and AI-native environments.

Features

Automatic issuance and rotation of short-lived, SPIFFE-based identities for workloads and AI agents
Kernel-level enforcement of identities, independent of the application layer and network stack
Integration with Kubernetes and container platforms for policy definition using familiar primitives
Support for mutual TLS (mTLS) operations within the Linux kernel using kTLS
Secret detection to monitor network traffic for secrets in transit
Credential inventory to maintain a real-time view of all non-human credentials
Trust federation through SPIFFE trust domains for establishing federated trust between systems
Automatic credential exchange for third-party integrations based on identity