Aembit
Aembit is an identity and access management company for AI agents and software workloads, founded in 2021 and based in Silver Spring, Maryland. It is free for up to 10 workloads or 3 AI agents, and its Teams plan costs $20 per agent or workload per month.
CyberReviewed Editorial Team · Updated · aembit.io
Company details
- Score
- 7.6/10Ranked 15 of 40 (tied)
- Category
- Identity security
- Founded
- 2021
- Headquarters
- Silver Spring, Maryland
- Leadership
- David Goldschlag, co-founder and CEO; Kevin Sapp, co-founder and CTO
- Funding disclosed
- Nearly $45 million, including a $25 million Series A in September 2024
- Pricing
- Free for 10 workloads or 3 AI agents; Teams plan $20 per agent or per workload per month; Enterprise quoted
- Best fit
- Engineering and security teams that want AI agents and workloads to reach APIs and databases without stored secrets
Our take
Aembit is a strong pick for an engineering team that wants its AI agents and services to reach databases, APIs, and SaaS tools without API keys stored in code or vaults. Its free tier and published per-agent price make it easy to try, and its founders built the zero trust access product Netskope bought in 2019.
Scores by criterion
| Criterion | Score |
|---|---|
| Pricing transparency | 8.0 |
| Product scope and fit | 7.8 |
| Company durability | 7.0 |
| Evidence of adoption | 7.0 |
| Ease of adoption | 8.2 |
| Overall score (average of the five) | 7.6 |
Each criterion is defined on our methodology page.
Who uses Aembit and what it's for
Aembit is built for platform engineering, DevOps, and security teams whose software and AI agents connect to databases, APIs, cloud services, and SaaS tools. In place of an API key or password stored somewhere, Aembit verifies the identity of the agent or workload, checks policy, and issues a short-lived credential for each request.12 Its homepage features Cameron Tekiyeh of Snowflake, who says We estimate that Aembit can save us five to 10 hours a day.
1
Its best uses are removing secrets from code, controlling what internal copilots, coding assistants, and autonomous agents can reach, and keeping an audit log of every access.1 Aembit publishes prices, which is uncommon in this market. Its competitors include Token Security, which focuses on discovering and governing machine identities, and secrets managers that store credentials Aembit aims to replace.
Secretless Access for Agents and Workloads
Aembit's control plane governs workforce agents, autonomous agents, and traditional workloads with one identity model, one policy engine, and one audit trail.1 It supports agents that employees connect to work resources, agents that run on a schedule with no human involved, and AI coding assistants running on employee laptops.1 Credentials are short-lived and revocable, and the company can run in a discovery mode that maps which workloads talk to which before it enforces policy.13
Aembit has announced integrations with CrowdStrike and Wiz that tie access decisions to security posture, and a partnership with Netskope for agentic AI deployments.24
A Free Tier and a $20 Teams Plan
Aembit publishes two parallel price lists, one for AI agents and one for workloads. The free plan covers 3 AI agents or 10 workloads, with 24-hour log retention and community support.21 The Teams plan costs $20 per agent per month, from 10 agents up to 500, or $20 per workload per month, from 10 workloads up to 50.2 Enterprise plans with unlimited agents or workloads are quoted.2
Customers that pass the free limits move automatically to a free trial of the Enterprise plan with no payment details required.1 A team running 25 agents in production would pay $500 a month on Teams.
Founders Who Built Netskope's Zero Trust Product
David Goldschlag and Kevin Sapp have worked together for nearly two decades. They founded New Edge Labs, which Netskope acquired in 2019 and turned into its zero trust network access product, and earlier co-founded the mobile device management company Trust Digital, which McAfee acquired.53 Goldschlag began his career at the National Security Agency and co-invented onion routing, the technology behind Tor.5 They left Netskope in the summer of 2021 to start Aembit, and Ten Eleven Ventures lists 2021 as its founding year.34
Aembit launched in March 2023 with a $16.6 million seed round from Ballistic Ventures and Ten Eleven Ventures.6 In September 2024 it raised a $25 million Series A led by Acrew Capital, with Ballistic, Ten Eleven, Okta Ventures, and CrowdStrike Falcon Fund, for nearly $45 million in total, and it was a top-two finalist in the 2024 RSA Innovation Sandbox.7
How it compares with Token Security and secrets managers
Token Security discovers the machine identities a company has accumulated and fixes their owners and permissions. Aembit replaces long-lived credentials with access issued at the moment of each request. A company with years of unmanaged service accounts may start with discovery, while a team building new agents can design them around Aembit from the start.
Secrets managers store and rotate API keys. Goldschlag argued in an interview with Okta Ventures that you really don’t want to manage secrets; you want to manage access.
8 Aembit brokers credentials so the agent never holds a long-lived one.1
Where Aembit falls short
The Teams plan for workloads stops at 50 workloads, so a company with a large microservice estate will need an Enterprise quote.2 Moving workloads to Aembit also means routing their access through a new control plane, which takes engineering work.
Aembit is a young company with about $45 million raised, and the identity platforms its customers use today are adding agent and workload features of their own.7
Buyer sentiment
- “We took the database passwords out of our agents' configuration, and every request now shows up in one log.”
- “The free tier let us put three agents on it before anyone had to approve a budget.”
- “The workload plan tops out at 50 workloads, so our microservices pushed us straight into an Enterprise quote.”
- “Getting each service to request credentials through Aembit took more engineering time than we planned.”
Where customer reviews couldn't be found, our analysts attempted to give a voice to buyer sentiment, drawing on real information from review sites, forums and product documentation.
Based on: Aembit pricing page, Aembit product overview and FAQ
Sources
- Aembit, homepage, accessed October 28, 2026
- Aembit, Pricing, accessed October 28, 2026
- TechCrunch, Aembit raises $16.6M to bring identity management to workloads, March 20, 2023
- Ten Eleven Ventures, Aembit portfolio page, accessed October 28, 2026
- Aembit, About us, accessed October 28, 2026
- Aembit, Aembit launches with $16.6M to secure workload access, March 20, 2023
- Aembit, Aembit Raises $25 Million in Series A Funding, September 12, 2024
- Okta, Founders in Focus: David Goldschlag of Aembit, accessed October 28, 2026
