Cygrid

Cover Block

From the public record

Field	Value
Name	Cygrid
Tagline	Identity enforcement platform for AI-driven enterprises, controlling human, non-human, and AI agent actions [Cygrid]
Headquarters	Berlin, Germany [EU-Startups, October 2026]
Founded	2026 [EU-Startups, October 2026]
Stage	Pre-Seed [EU-Startups, October 2026]
Business Model	SaaS
Industry	Security
Technology	AI / Machine Learning
Geography	Western Europe
Growth Profile	Venture Scale
Founding Team	Co-Founders (2): Dmitry Kharchenko, Dekel Paz [LinkedIn, 2026]
Funding Label	Pre-seed [EU-Startups, October 2026]
Total Disclosed	$2,860,000 [EU-Startups, October 2026]

Links

From the public record

• Website: https://www.cygrid.io/
• Careers: https://careers.cygrid.io/

The Short Version

PUBLIC Cygrid is a Berlin security startup building an identity-enforcement platform for AI-driven enterprises, and it merits investor attention now because it emerged from stealth in October 2026 alongside a €2.66 million pre-seed round led by Atlantic, putting a fresh financing event behind a category that is gaining urgency as companies extend access to service accounts and AI agents [EU-Startups, October 2026] [Berlin Partner / Invest in Berlin, October 2026] [Cygrid]. The company was founded in 2026 by Dmitry Kharchenko and Dekel Paz, according to public launch coverage and LinkedIn-based corroboration, with the early narrative centered on securing identity actions across human users, non-human accounts, and AI agents rather than treating those surfaces as separate control planes [EU-Startups, October 2026] [LinkedIn, 2026] [Berlin Partner / Invest in Berlin, October 2026].

Public materials describe the product as an "Identity Enforcement Platform" or "Identity Intelligence Graph" that maps identities across connected systems, scores risk, and can enforce policy by revoking access or blocking risky actions before execution; if that capability works as advertised, the differentiation is less in identity visibility alone and more in action-level enforcement across mixed identity types [Cygrid] [Cygrid, Unknown] [Berlin Partner / Invest in Berlin, October 2026]. The evidence base here is still narrow, however: most product detail comes from company materials, while independent coverage largely repeats the launch framing and named integrations such as Google Workspace and Microsoft 365 [Cygrid] [EU-Startups, October 2026].

The team reads as technically credible for the problem set. Kharchenko is publicly associated with prior senior product and engineering roles including CTO positions at bonify and Friendsurance, while launch coverage also links him to Firelayers; Paz is identified in public coverage as a co-founder and security leader with an intelligence background, though the deeper biography remains mainly company-sourced [Sicherheitsrisiko durch KI-Agenten: Berliner Startup Cygrid sichert sich 2,66 Millionen Euro] [Friendsurance Archive - Versicherungswirtschaft-heute] [LinkedIn, 2026] [Berlin Partner / Invest in Berlin, October 2026].

Cygrid's business model is presented as SaaS, and the financing base is straightforward at this stage: a single disclosed pre-seed round of about $2.86 million, reported as €2.66 million, led by Atlantic with participation from D11Z.Ventures and angels including Andreas Bermig, Boris Gorin, and Vlad Tropko [EU-Startups, October 2026] [Crunchbase] [Startup Rise EU, October 2026]. Over the next 12 to 18 months, the key watchpoints are whether the company can turn early design-partner and deployment claims into repeatable enterprise adoption, broaden proof of production beyond company-described environments, and show that enforcement can become a budgeted security control rather than a pilot-layer add-on [EU-Startups, October 2026] [Cygrid] [Cygrid, Unknown].

Single-source, plausible -- Core financing and company formation details are corroborated by EU-Startups, Berlin Partner, Crunchbase, and LinkedIn, but most product-capability specifics remain company-sourced.

Taxonomy Snapshot

Axis	Value
Stage	Pre-Seed
Business Model	SaaS
Industry / Vertical	Security
Technology Type	AI / Machine Learning
Geography	Western Europe
Growth Profile	Venture Scale
Founding Team	Co-Founders (2)
Funding	Pre-seed, total disclosed about $2.86 million

The Company in Brief

PUBLIC

Cygrid emerged publicly in October 2026 with a fairly specific pitch: identity enforcement for AI-driven enterprises, not just identity visibility after the fact. The company is based in Berlin, Germany, and its website frames the product around controlling what human, non-human, and AI agent identities can do across enterprise systems [Cygrid] [Crunchbase].

The public record on formation is thin but directionally consistent. Crunchbase lists Cygrid as a company founded in 2026, while the company’s October 2026 newsroom announcement marked its launch from stealth alongside a €2.66 million pre-seed financing [Crunchbase] [Cygrid] [EU-Startups, October 2026]. That launch announcement is the clearest dated milestone available in public materials, and it establishes both the Berlin operating base and the company’s initial positioning in enterprise security for AI-era identity control [Cygrid] [EU-Startups, October 2026].

The next milestone is financing rather than product maturity. EU-Startups reported in October 2026 that Cygrid raised €2.66 million in pre-seed funding led by Atlantic, with participation from D11Z.Ventures and angel investors Andreas Bermig, Boris Gorin, and Vlad Tropko [EU-Startups, October 2026]. Crunchbase also lists the company and its funding profile, which provides secondary corroboration that Cygrid is an early-stage Berlin security startup now attempting to build from a stealth launch into a venture-backed operating company [Crunchbase].

Single-source, plausible -- Core company identity and launch timing are supported by Crunchbase and Cygrid materials, with financing corroborated by EU-Startups and Crunchbase. Legal entity details and deeper incorporation history were not established from the permitted source set.

What They Have Built

MIXED

Cygrid is positioning itself around a narrow but timely control point: what identities are allowed to do once they already exist across an enterprise estate. Public materials describe the product as an identity enforcement platform for AI-driven enterprises that covers human users, non-human identities, and AI agents, with the company framing the core system as an "Identity Intelligence Graph" that maps identities, evaluates risk, and applies policy across connected systems [Cygrid]. In company and launch materials, Cygrid says the platform is designed to find shadow AI, over-scoped tokens, and residual admin rights, then enforce controls before an action executes rather than only surfacing misconfigurations after the fact [Cygrid] [Berlin Partner / Invest in Berlin, October 2026].

The more differentiated claim is not identity visibility by itself, but action-level intervention. According to Cygrid, the platform can revoke access, rewrite risky commands, or block actions before they run, and it is being used across environments including Google Workspace, Microsoft 365, GitHub, Slack, and HubSpot [Cygrid] [EU-Startups, October 2026]. That matters because the company is effectively arguing for a control layer that sits closer to runtime behavior than legacy identity governance typically does, although the public evidence here still comes largely from company-authored material and launch coverage that repeats those claims [Cygrid] [Startup Rise EU, October 2026].

Some implementation clues are visible at the hiring layer, but they should be treated cautiously. Cygrid's open roles include a Founding Backend Engineer in Go, a Founding DevOps Engineer / SRE, a Founding Product Manager, and a GTM Engineer, which suggests an early platform build with backend and infrastructure priorities rather than a services-led deployment model (inferred from job postings) [Cygrid]. The same careers pages also indicate active hiring across engineering, product, and go-to-market, consistent with a company that has launched from stealth and is building both product depth and initial commercial coverage [Cygrid] [EU-Startups, October 2026].

Unconfirmed -- Product capabilities rely primarily on company website and company launch materials, with partial repetition in launch coverage and limited independent technical verification.

Market Size and Demand

PUBLIC

The market matters now because enterprise identity control is being stretched by two simultaneous shifts, wider SaaS sprawl and the arrival of AI agents that can take actions rather than just generate text, and Cygrid is positioning itself at that intersection [Cygrid] [EU-Startups, October 2026] [Berlin Partner / Invest in Berlin, October 2026].

Public evidence for Cygrid does not support a clean TAM, SAM, or SOM build from company-specific disclosures, so the more defensible approach is to anchor on adjacent markets that map to its wedge: identity security, SaaS security, and AI governance. The company describes its product as an identity enforcement platform for AI-driven enterprises, spanning human, non-human, and AI agent identities across systems such as Google Workspace, Microsoft 365, GitHub, Slack, and HubSpot [Cygrid] [Cygrid, Unknown] [EU-Startups, October 2026]. That framing places Cygrid closest to the overlap between identity and access management, non-human identity security, SaaS posture management, and emerging AI control layers, but the available public record in this research set does not include third-party market size figures for any of those segments.

The near-term demand signal is easier to establish than the addressable market math. Cygrid's launch materials and third-party coverage both emphasize that enterprises now manage not only employees but also service accounts, API connections, and AI agents, all of which can hold permissions and trigger actions across business systems [Cygrid] [EU-Startups, October 2026] [Berlin Partner / Invest in Berlin, October 2026]. If that problem statement is directionally correct, budget can come from several existing lines rather than a net-new category, including identity governance, cloud security, SaaS security, and security operations. That usually improves adoption odds for early vendors, although it can also create longer internal buying cycles because product ownership is diffuse.

The adjacent markets matter because they shape both buyer education and competitive substitution. A security team could try to address parts of this problem with incumbent identity and access management tools, privileged access controls, SaaS security posture products, or internal policy tooling, especially if AI agents remain a limited slice of operational risk. Cygrid's public differentiation claim is that it goes beyond discovery or reporting and into action-level enforcement, including revoking access, rewriting risky commands, or blocking actions before execution, but those claims are still sourced mainly to company materials and launch coverage rather than independent product evaluations [Cygrid] [Crunchbase] [EU-Startups, October 2026].

Regulation and macro conditions also support the category, even if the company-specific impact is not yet measurable from public evidence. European enterprises face a tighter operating climate around access control, data handling, and accountable use of AI systems, which tends to favor tools that can document and constrain who, or what, can act inside production environments. At the same time, the macro push for automation creates the countervailing force: companies want the productivity gains from AI agents, but they also need tighter controls as machine identities gain broader privileges. That is the basic policy tailwind behind identity-enforcement platforms for AI-driven enterprises, according to Cygrid's own positioning and the October 2026 launch coverage [Cygrid] [Berlin Partner / Invest in Berlin, October 2026] [Startup Rise EU, October 2026].

Market lens	What public sources support	Relevance to Cygrid
Identity security	Enterprises need control over who can access and act across connected systems [Cygrid] [EU-Startups, October 2026]	Core category fit
Non-human identity security	Cygrid explicitly covers service accounts and API connections [Cygrid] [EU-Startups, October 2026]	Expands beyond employee IAM
SaaS security / posture management	Public materials reference enforcement across SaaS systems including Google Workspace, Microsoft 365, Slack, GitHub, and HubSpot [Cygrid] [Berlin Partner / Invest in Berlin, October 2026]	Likely deployment surface
AI governance / AI agent control	Public positioning centers on controlling AI agent actions before execution [Cygrid] [Startup Rise EU, October 2026]	Emerging demand wedge

The practical takeaway is that Cygrid appears to be selling into a real security budget problem, but the public record still describes the opportunity more clearly as a convergence of adjacent markets than as a standalone, measured category. For investors, that usually means the early question is not total market size in the abstract, but whether the company can own a sharp use case before larger identity and security platforms absorb the same control layer.

Single-source, plausible -- Market characterization is supported by company materials and October 2026 launch coverage, but this section includes no independently cited third-party TAM figures or market sizing reports.

Who Else Is Fighting for This

MIXED Cygrid is entering identity security from a narrow but timely angle, not by replacing core IAM, but by arguing that AI agents, service accounts, and human users now need one enforcement layer that can act before risky commands execute [Cygrid] [EU-Startups, October 2026].

The public record does not name direct competitors, so the cleanest map is by category rather than by vendor. On one side sit incumbent identity and access vendors, which already own authentication, directory, and policy workflows inside large enterprises, but are not described in the available Cygrid materials as offering the same cross-identity, action-level enforcement wedge for AI agents [Cygrid] [Berlin Partner / Invest in Berlin, October 2026]. On another side are cloud and SaaS security tools that surface misconfigurations, token risk, or excessive privileges across systems such as Google Workspace, Microsoft 365, GitHub, Slack, and HubSpot, which are the environments Cygrid says it connects to today [Cygrid] [EU-Startups, October 2026]. A third bucket is adjacent substitute tooling, including internal security engineering workflows and policy scripts, which can sometimes block risky behavior but usually lack a unified graph spanning human, non-human, and AI-agent identities, at least based on the company's own framing [Cygrid] [Startup Rise EU, October 2026].

Cygrid's present edge, on public evidence, is conceptual clarity more than proven scale. The company has put a specific claim into market, that identity risk should be mapped across human, machine, and AI-agent activity, scored in one graph, and enforced directly in connected systems, rather than handled as a sequence of separate IAM and posture products [Cygrid] [Berlin Partner / Invest in Berlin, October 2026]. That wedge is credible enough to have supported a €2.66 million pre-seed round led by Atlantic, with participation from D11Z.Ventures and angels, and to support early hiring across product, engineering, and go-to-market roles [EU-Startups, October 2026] [Cygrid]. Still, durability is not yet established. If the differentiation rests mainly on workflow design and system integrations, larger identity or cloud security vendors could narrow the gap quickly; if it rests on a proprietary identity graph and action-level policy engine that performs reliably across fragmented SaaS estates, the edge could compound with deployment data over time, but that remains an inference rather than a demonstrated public fact [Cygrid] [Crunchbase].

The company appears most exposed where incumbents already control the operator console and budget line. A buyer that already standardizes on a major identity platform may prefer to extend from an existing vendor before adopting a separate enforcement layer, especially if AI-agent governance is still early and procurement teams view it as an extension of IAM rather than a new control plane [Berlin Partner / Invest in Berlin, October 2026] [Startup Rise EU, October 2026]. Cygrid is also exposed on proof. The company cites customers or design partners including Barfer's and Horizn Studios, and says the platform runs in production across major SaaS environments, but public materials do not yet show a broader roster, renewal data, or quantified security outcomes that would make displacement easier against better-known vendors [EU-Startups, October 2026] [Cygrid].

The most plausible 18-month scenario is a category race in which the winner is the vendor that turns AI identity governance from a positioning statement into an operating control with clear buyer ownership. On current evidence, Cygrid could be a winner if enterprises decide AI-agent activity needs a distinct enforcement layer and if the company converts its early product narrative into referenceable deployments beyond design partners [EU-Startups, October 2026] [Cygrid]. The likely loser, if incumbents absorb the use case into existing IAM and SaaS security bundles before startups establish independent budgets, is the standalone enforcement layer that cannot show faster deployment or materially better policy coverage. That is the central competitive tension around Cygrid today.

Opportunity

PUBLIC

The prize here is large if Cygrid can become the control layer that enterprises trust to govern not just employee access, but every machine identity and AI agent action across their SaaS estate [Cygrid] [EU-Startups, October 2026].

Cygrid's headline opportunity is to become default identity enforcement infrastructure for AI-enabled enterprises, a layer that sits downstream of identity discovery and upstream of execution, deciding what humans, service accounts, API connections, and AI agents are actually allowed to do in real time [Cygrid] [Berlin Partner / Invest in Berlin, October 2026]. That matters because the company is not positioning itself as another visibility tool. Its public materials describe action-level controls such as revoking access, rewriting risky commands, and blocking actions before they run, which is a more operational wedge than passive posture management if it works as advertised [Cygrid] [EU-Startups, October 2026]. The path is still early, but it is not purely theoretical: Cygrid emerged from stealth in October 2026, disclosed a €2.66 million pre-seed led by Atlantic, and says the platform is already running across environments such as Google Workspace, Microsoft 365, GitHub, Slack, and HubSpot, with Barfer's and Horizn Studios cited as customers or design partners [EU-Startups, October 2026] [Cygrid] [Startup Rise EU, October 2026].

The upside cases are easiest to read as a small set of specific adoption paths rather than one generic growth story.

Scenario	What happens	Catalyst	Why it's plausible
Control plane for AI agents	Cygrid becomes a standard policy layer for enterprises deploying internal AI agents, with security teams using it to constrain what agents can read, write, and trigger across SaaS systems.	Wider enterprise use of AI agents raises demand for pre-execution controls rather than after-the-fact alerts [Cygrid] [Berlin Partner / Invest in Berlin, October 2026].	Cygrid's product is explicitly framed around human, non-human, and AI agent identities, and the company launched into a market narrative already focused on AI-driven security risk [Cygrid] [Minutes of AI, October 2026].
Identity enforcement across the SaaS stack	The company lands first in a few core systems, then expands into a broader cross-SaaS governance layer used by identity and security teams.	Production use across Google Workspace, Microsoft 365, GitHub, Slack, and HubSpot creates a credible multi-system footprint from day one [EU-Startups, October 2026] [Cygrid].	The platform is described as an Identity Intelligence Graph spanning connected systems, which gives Cygrid a cross-platform architecture rather than a single-app point solution, at least in the current product narrative [Cygrid] [Berlin Partner / Invest in Berlin, October 2026].
Security platform tuck-in with strategic value	Cygrid grows into an acquisition target for a larger identity, cloud security, or security operations vendor that wants enforcement for non-human and AI identities.	A category buyer decides building this internally is slower than acquiring a team and product already positioned around AI-era identity control [EU-Startups, October 2026].	The founders' public backgrounds include prior operating roles at companies later acquired by SCHUFA, Cover Genius, and Proofpoint, which does not predict an outcome but does suggest familiarity with products that reached strategic relevance [Sicherheitsrisiko durch KI-Agenten: Berliner Startup Cygrid sichert sich 2,66 Millionen Euro] [TechBiz Global].

What compounding could look like is fairly clear from the product framing. If Cygrid is deployed first into a small number of high-value SaaS systems, it can map more identities, permissions, service accounts, and agent actions into its graph, which should improve policy coverage and risk scoring over time [Cygrid] [Crunchbase]. Each additional integration also raises switching costs: once a security team uses one control plane across Google Workspace, Microsoft 365, GitHub, Slack, and HubSpot, replacing that layer means reworking policy logic across several systems rather than one [EU-Startups, October 2026] [Cygrid]. The early hiring pattern points in the same direction. Open roles span engineering, product, operations, and go-to-market, including a GTM engineer, an account executive, and founding infrastructure roles, which is consistent with a company trying to deepen integrations while building repeatable enterprise distribution [Cygrid].

The size of the win is hard to quantify cleanly from the public record because no market-size dataset or direct public comparable was provided in the sourced material. Even so, the disclosed €2.66 million pre-seed and the category framing support a concrete upside case: if Cygrid became a strategic control layer for AI identity enforcement across large enterprises, it could plausibly grow into the sort of asset that larger security vendors buy to fill a product gap, or into a standalone venture-scale security platform (scenario, not a forecast) [EU-Startups, October 2026] [Berlin Partner / Invest in Berlin, October 2026]. The public evidence does not support a precise valuation range, so the cleaner read is strategic rather than numeric. The company is pursuing a problem that expands as enterprises add more non-human identities and AI agents, and its architecture is described in a way that could benefit from that complexity rather than being overwhelmed by it [Cygrid] [Startup Rise EU, October 2026].

Single-source, plausible -- This section relies on one independent news source for financing and launch details, plus company materials for product capabilities and deployments.

Sources

From the public record

1. [Cygrid] Identity Enforcement for AI-Driven Enterprises | Cygrid | https://www.cygrid.io/

2. [EU-Startups, October 2026] Berlin-based Cygrid raises €2.66 million pre-seed to enforce identity security for AI agents | https://www.startup.eu/investments/cygrid-2-66-m-pre-seed-10-2026

3. [LinkedIn, 2026] Sascha Buehrle - Lemony | LinkedIn | https://www.linkedin.com/in/saschabuehrle/

4. [Berlin Partner / Invest in Berlin, October 2026] Cygrid Launches Identity Enforcement Platform | https://invest-in.berlin/n/cygrid-lunches-identity-enforcement-platform/

5. [Crunchbase] Cygrid - Crunchbase Company Profile & Funding | https://www.crunchbase.com/organization/cygrid

6. [Friendsurance Archive - Versicherungswirtschaft-heute] Friendsurance Archive | https://versicherungswirtschaft-heute.de/tag/friendsurance/

7. [Startup Rise EU, October 2026] Cygrid Exits Stealth with €2.66M Pre-Seed Round for Identity-Enforcement Platform | https://startuprise.co.uk/cygrid-exits-stealth-with-e2-66m-pre-seed-round

8. [Minutes of AI, October 2026] AI, minute by minute | https://minutesofai.com/

9. [TechBiz Global] bonify Germany (SCHUFA Holding AG) and TechBiz Global! | https://techbiz.global/bonify-germany-schufa-holding-ag-and-techbiz-global/