Obsidian Security

Obsidian Security provides a comprehensive security and posture management solution built for Software-as-a-Service (SaaS) environments. The company was founded in 2017 by cybersecurity veterans Glenn Chisholm, Ben Johnson, and Matt Wolff. The founding team possesses deep industry expertise, with Chisholm and Wolff coming from executive and data science roles at Cylance, and Johnson having co-founded Carbon Black. Their collective background in endpoint security, data science, and threat intelligence informed their vision to address the security gaps in the burgeoning enterprise SaaS landscape. The company's platform is designed to give security and IT teams unified visibility and control over their complex SaaS ecosystems, which often include hundreds of interconnected applications like Microsoft 365, Salesforce, Workday, and ServiceNow. Obsidian operates within the SaaS Security Posture Management (SSPM) category, a term coined by Gartner. The platform works by connecting to applications via APIs to collect and analyze configuration, user activity, and privilege data. It builds a 'Knowledge Graph' that correlates this data to map relationships between users, permissions, and activities across different applications. This allows it to detect threats such as account compromise, insider threats, excessive user privileges, and configuration drift. As the market has evolved, Obsidian has expanded its focus to include the governance of AI agents and autonomous workflows being integrated into enterprise SaaS environments. The platform now offers capabilities to discover and manage 'shadow AI', monitor AI agent behavior, and protect against threats like token compromise and prompt injection. Its business model is primarily B2B, targeting mid-to-large enterprises with a pricing structure based on organizational headcount rather than the number of applications, which is advantageous for companies with a large SaaS footprint. Notable customers include Fortune 500 companies such as Snowflake, T-Mobile, and Databricks. Obsidian Security has raised over $200 million in funding, achieving a valuation of $1.1 billion after its Series D round in August 2026. The company is backed by prominent venture capital firms including Greylock Partners, Wing, GV, Norwest Venture Partners, Menlo Ventures, IVP, and Crescent Cove Advisors. Keywords: SaaS Security, SSPM, SaaS Security Posture Management, Cloud Security, Threat Detection, Application Security, Compliance Automation, Identity Threat Detection and Response, ITDR, AI Security, AI Governance, SaaS-to-SaaS integration, Shadow AI, Glenn Chisholm, Ben Johnson, Matt Wolff, Microsoft 365 Security, Salesforce Security, Workday Security, ServiceNow Security, Snowflake, User and Entity Behavior Analytics, UEBA, Configuration Management, Insider Threat, Account Compromise, Access Management