Innovator Spotlight: Push Security

Identity is the new perimeter. Attackers are no longer hacking into your organization—they’re logging in with compromised credentials. Push Security is countering this shift with a browser-based identity security platform that hardens and monitors your identity attack surface. With the rise of identity-based attacks, Push Security offers real-time visibility across identities, apps, accounts, and authentication methods, while enforcing browser-level security controls to prevent and detect identity threats that other tools can’t see.

Dan K Anderson, a CISO and vCISO with deep expertise in identity and access management, emphasizes the growing significance of identity-based security:
“In today’s threat landscape, attackers are going for the path of least resistance, and that’s often through stolen credentials. The days of defending just the network perimeter are over—identity is the new battlefield. Push Security’s browser-based solution is vital because it secures the frontlines of where these identity threats are emerging, providing unparalleled visibility and control where it’s needed most.”

Push Security empowers organizations to protect their identity attack surface by proactively preventing and detecting identity-based breaches before they occur.

Push Security, founded in 2022, is addressing a fundamental shift in cyberattack methods—from targeting traditional endpoints and networks to exploiting identities and credentials. As attackers capitalize on the expanded attack surface created by user identities on cloud-based services and SaaS apps, Push Security steps in with a browser-based agent that monitors workforce identities in real-time, including identities on unmanaged apps. This unique telemetry provides real-time detection of identity-based threats, risky user behaviors, and enables Push to enforce security controls directly in the browser, stopping attacks at the point of impact.

Push Security provides out-of-the-box controls that address the most common identity attack techniques, such as phishing, adversary-in-the-middle (AitM) toolkits, infostealer malware, credential stuffing, password spraying, and session hijacking. The platform is ready to go right out of the box, making it easy to deploy and integrate into existing security environments.

Quote from the CEO or founder:

“As security professionals, we’re facing a significant increase in SaaS risk and as a result, rethinking how we approach company security. An explosion in SaaS adoption, coupled with a big push to self-service platforms driven by product-led growth (PLG), means employees increasingly sign up and buy SaaS directly without going through the security team first. This creates an unwieldy sprawl of SaaS applications being introduced to the business with no corporate oversight. Security teams have to play catch-up to ensure these apps aren’t exposing their businesses to undue security risks or invalidating their security compliance.”

– Adam Bateman, Co-founder and CEO, Push Security

Quote from a customer:

“Other than you guys, we just didn’t have any awareness of anything in the market that matched the level of intelligence that Push can provide about how our employees use passwords. And then we learned about all the additional features, like you can see where all of your apps are integrated and what people are doing with them. You’ve got this nice unified view of all of the OAuth scopes and things that people have been granting. The product works. It ticks all the boxes, really.”

– Michael Earl, Security Operations Lead, Convex Insurance

The recent Snowflake breach, alongside incidents involving Okta and MGM Resorts, highlight the critical need for organizations to have better visibility and control over their identity attack surface. Push Security stands out as the first cybersecurity solution to recognize the browser as the natural ingress point for all identity-related activities, making it the most effective telemetry source and control point for detecting and preventing identity-based attacks.

Identity attacks, particularly those using stolen credentials, are now the leading cause of security breaches worldwide. According to IBM’s 2024 Threat Intelligence Index, 30% of all breaches involved the use of valid credentials to gain unauthorized access to corporate networks. Additionally, a report from Crowdstrike found that 80% of cyberattacks involve compromised credentials. As organizations expand their use of cloud services and SaaS applications, they face an increasingly complex and unmonitored identity attack surface, which presents attackers with numerous opportunities to exploit.

Without comprehensive visibility into their identity ecosystem, organizations are vulnerable to attackers who can leverage compromised credentials to move laterally through systems, escalate privileges, and execute malicious activities such as data theft, ransomware deployment, or operational disruption.

Two significant shifts have compounded the identity security challenge:

1. The rise of cloud-based environments and decentralized IT management: As organizations adopt more SaaS applications and rely on cloud infrastructure, employees create more digital identities, many of which go unmonitored. Traditional perimeter-based security controls are no longer enough to protect this expanding identity attack surface.
2. The increasing difficulty of traditional attacks: As cybersecurity tools evolve, attackers are finding it more difficult to exploit vulnerabilities in networks and endpoints. Instead, they are shifting focus to identity attacks, using stolen credentials as the quickest and easiest way to infiltrate an organization’s systems.

Traditional tools like MFA, SSO, and EDR only partially address the problem, as attackers can still bypass these defenses using sophisticated techniques like phishing, session hijacking, or adversary-in-the-middle toolkits. Push Security’s browser-based approach fills the gap by providing continuous monitoring and control at the point where identities are most vulnerable.

Recommendations

• Treat your identity attack surface as the primary area for defense—it is now where most breaches happen.
• Gain full visibility and control over all identities, including those in unmanaged apps, to secure your organization’s access points.
• Leverage browser-based telemetry, like Push Security, to detect and prevent identity-based attacks in real time.

Call to Action
Push Security provides a user-focused solution for managing SaaS security at scale, turning employees into active participants in safeguarding the tools they use. By offering continuous visibility, automated guidance, and behavioral nudges, Push Security helps organizations reduce risk and maintain compliance without disrupting productivity.

Learn how Push Security can transform your SaaS security strategy—

Visit https://pushsecurity.com/demo/ to schedule a free demo and explore their capabilities.  Twitter @PushSecurity   #SaaSsecurity #shadowIT #cloudsecurity

About the Author

Dan K. Anderson, Winner Top Global CISO of the year 2023

Dan currently serves as a vCISO and On-Call Roving reporter for Cyber Defense Magazine. BSEE, MS Computer Science, MBA Entrepreneurial focus, CISA, CRISC, CBCLA, C|EH, PCIP, and ITIL v3.

Dan’s work includes consulting premier teaching hospitals such as Stanford Medical Center, Harvard’s Boston Children’s Hospital, University of Utah Hospital, and large Integrated Delivery Networks such as Sutter Health, Catholic Healthcare West, Kaiser Permanente, Veteran’s Health Administration, Intermountain Healthcare and Banner Health.

Dan has served in positions as President, CEO, CIO, CISO, CTO, and Director, is currently CEO and Co-Founder of Mark V Security, and Cyber Advisor Board member for Graphite Health.

Dan is a USA Hockey level 5 Master Coach. Current volunteering by building the future of Cyber Security professionals through University Board work, the local hacking scene, and mentoring students, co-workers, and CISO’s.

Dan lives in Littleton, Colorado and Salt Lake City, Utah linkedin.com/in/dankanderson