Aembit raises $16.6M to bring identity management to workloads

Aembit, a Maryland-based security startup that focuses on helping DevOps and security teams manage how federated workloads talk to each other, is officially launching its service today and announcing a $16.6 million seed funding round from Ballistic Ventures and Ten Eleven Ventures.

In essence, Aembit's workload identity and access management service applies industry knowledge, from managing user and device access to cloud workloads such as APIs, databases and other cloud resources -- all without requiring developers to make changes to their code.

Image Credits: Aembit

The co-founders, David Goldschlag and Kevin Sapp, spent the last 17 years working together. Among other startups, they co-founded the zero trust platform New Edge Labs, which was acquired by Netskope, and the mobile device management platform Trust Digital, which was acquired by McAfee.

"Along the way, people would always ask us: what about workload-to-workload application-level access? It's always been this thing that's there and that's important, but we hadn't addressed it," Goldschlag explained. When the founders left Netskope in the summer of 2021, they decided to finally tackle this challenge. "It was important, because you had all these things happening in the ecosystem, right? You had all of these APIs that were becoming part of people's applications," he noted. "If you think about open source from a couple of years ago, people built apps by including open source. Today, people build apps by including databases and APIs -- and now you need to enable secure access between those."

Aembit co-founders David Goldschlag (l) and Kevin Sapp (r). Image Credits: Aembit

He noted that Aembit's mission is different from that of API gateways and security services. These services live in front of the API and help developers build and expose those securely to internal and third-party developers. But Aembit's focus is on the client that accesses the API and ensures that this client is authorized to access it. He likened it to how today's identity management systems help enterprises authorize their users. When a user uses Okta to log into Microsoft 365, for example, that user interacts with Okta and then gets the credential to access the service.