Elimity

Main service(s)

Elimity is a SaaS product, which provides an identity analytics platform. It helps organisations collect, understand and govern who can access what in the fastest way possible.

Identity and access management (IAM) is a crucial, but complex security building block. Tools like active directory are very powerful, but also very complex. Additionally, the legacy concept exists in IAM: various roles and groups have historically grown and (hopefully) adapted with the changing organisation in which they exist.

Identity governance and administration (IGA) is the practice within IAM that focuses on actively managing the users and permissions of the employees of a company, with activities such as role management, attestation (review), analytics and reporting. The goal is to enable everyone to do their jobs, but with adherence to policy such as segregation of duties.

Where traditional IGA tools focus on joiner-mover-leaver flows (keeping access rights in sync with organisation roles), Elimity takes a more lightweight approach: it is an identity analytics platform. It sits on top of various IAM tools and provides insight into the questions which are fundamental for security and governance. Here are some examples:

• Which users have which rights?
• Are there any orphaned accounts?
• Are there any users which are accumulating access rights?
• Is the segregation of duty principle violated?

The aim of Elimity is to automate the repetitive analysis often present within IAM and security. For example: for both security and compliance purposes, many organisations have adopted a painful and manual periodic review of the various roles and access rights. Elimity eliminates this manual process and provides an automated overview of access rights. It also provides alerting when certain (configurable) KPI’s are violated.

From the security point-of-view, Elimity delivers 3 important aspects related to AGI:

• Ad-hoc queries. For example: which rights does this user(group) have?
• Tracking and alerting wrt KPI’s. For example: are there any orphaned user accounts?
• Access review: the ability to reach out to stakeholders such as team leads or application owners and have them validate the users and access rights.

The above points greatly help organisations remove potential security issues (such as active accounts for organisation leavers) and help show compliance with various IAM related governance controls.

The Elimity target market typically consists of larger organisations, as there has to be a certain size before IAM issues and controls become too large to handle manually.

Differentiators

Differentiators wrt IAM tooling

• Coverage across multiple IAM tools: many organisations have different IAM tools for different parts in the organisation (ie: on-premise vs cloud tooling). Elimity consolidates the view over all tools.
• Security perspective: where IAM tools are often (rightfully) focussed on operations, Elimity aims to provide insight and answer security related questions. Additionally, Elimity has built in automation, allowing stakeholders to continuously validate controls.

Differentiators wrt IGA tooling

• Security insight versus synchronisation: traditional AGI tooling focuses on synchronisation: keeping the IAM tool in sync with the actual enterprise picture. Elimity aims to deliver the security visibility and insights needed to adhere to security controls.
• More lightweight, bottom-up approach: Elimity helps organisations to quickly reduce risk. The tooling does not require a comprehensive and risky IAM project, progress can be made by using the insights to remove the biggest risks first. In fact, Elimity even built a framework to support this approach.

Future plans

Elimity is currently focusing on scaling its customer base, mainly in Western Europe and the USA. Additionally, Elimity is building up its partner channel.

Company history

Elimity was founded in 2017 and is a product vendor within the IAM and IGA space.

It signed Rabobank as its first big customer in 2018.

In 2019, Elimity had a seed funding round of €800k. Elimity used this funding to build out its solution and added a governance aspect (next to the analytics aspect) to its solution.

Elimity currently has a linkedin headcount of 6 people.