Rising Star Saporo

Saporo is a cybersecurity startup founded in 2021 and headquartered in Lausanne, Switzerland, focused on Preemptive Identity Exposure Management (PIEM). PIEM aims to reduce identity-related attack opportunities before exploitation by continuously analyzing identities, permissions, relationships, and misconfigurations across hybrid environments to expose realistic attacker paths. The approach aligns closely with Continuous Threat Exposure Management (CTEM) and Identity Security Posture Management (ISPM), and increasingly supports broader Identity Fabric initiatives by prioritizing remediation based on exploitability and business impact rather than alert volume.

Saporo’s PIEM platform continuously discovers, prioritizes, validates, and remediates identity exposure via a graph-based analysis engine that models relationships among identities, permissions, systems, and infrastructure. Instead of producing isolated findings, it builds a unified security graph that shows attack opportunities and propagation paths across hybrid identity environments, covering both human and non-human identities. Supported environments include Active Directory, ADCS, Microsoft Entra ID, Microsoft 365, Azure, Google Workspace, Google Cloud Platform, AWS, Windows local environments, and SMB shares. Data collection is agentless and read-only, while remediation is guided or orchestrated through governed workflows and integrations.

A key innovation is graph-native “chokepoint analysis,” which identifies a small set of remediation actions that can eliminate large numbers of attack paths, enabling measurable reduction of exploitable risk. Saporo supports orchestration through more than 1,900 integrations and tracks progress with metrics such as attack path reduction, remediation progress, compliance posture, and resistance scoring. The company serves customers in EMEA and North America, particularly regulated industries, and raised an $8M Series A in 2025. Challenges include lower market visibility versus established vendors and ongoing roadmap expansion for additional enterprise apps and broader support for AI agents and non-human identity ecosystems.

• Saporo was founded in 2021.
• Saporo is headquartered in Lausanne, Switzerland.
• Saporo completed an $8M Series A funding round in 2025, bringing total disclosed funding to $16M.
• Saporo’s licensing model is subscription-based.
• Saporo focuses geographically on North America and EMEA.
• The platform supports Active Directory, ADCS, Microsoft Entra ID, Microsoft 365, Azure, Google Workspace, Google Cloud Platform, AWS, Windows local environments, and SMB shares.
• Data collection is agentless and read-only.
• More than 1,900 integrations support orchestration across IAM, cloud, ITSM, and security platforms.
• Saporo’s roadmap includes added coverage for Salesforce, SAP, GitHub, and Workday.
• Saporo is particularly relevant for large enterprises and upper mid-market organizations in regulated industries.

• “Preemptive Identity Exposure Management (PIEM) focuses on reducing identity-related attack opportunities before they can be exploited.”
• “Instead of presenting isolated findings, the platform continuously maps identities, permissions, relationships, misconfigurations, and activity as a unified security graph that reveals attack opportunities and propagations across hybrid environments.”
• “Saporo’s primary innovation is its graph-native approach to identity exposure analysis.”
• “A notable differentiator is Saporo’s chokepoint analysis, which identifies a small number of remediation actions capable of eliminating a very large number of attack paths.”
• “Rather than requiring security teams to remediate thousands of disconnected issues, the platform highlights convergence points where targeted changes produce the greatest measurable reduction in risk.”
• “Identity has become the dominant attack surface for modern enterprises, making visibility alone insufficient for reducing risk.”
• “Saporo addresses this requirement with a graph-based approach that emphasizes preemptive reduction of identity exposure rather than reactive detection.”
• “We expect PIEM to evolve alongside CTEM initiatives and become increasingly integrated with Identity Fabrics.”
• “The resulting growth in NHIs will make unified identity visibility and contextual risk analysis foundational capabilities rather than optional enhancements.”
• “Vendors capable of combining large-scale graph analytics with automation and continuous remediation will be well positioned to support the convergence of exposure management, posture management, and identity architecture.”