Secretless machine access that replaces static credentials with just-in-time, policy-based grants

Hush Security argues that the vault model has run out of room. Secrets managers were designed for a comparatively small number of long-lived service credentials, while a modern environment generates machine identities continuously across cloud workloads, pipelines, third-party integrations, and now AI agents that authenticate to systems on a developer's behalf. The platform starts with discovery, building a runtime inventory of non-human identities and the access they hold, including shadow agents and MCP servers that were never registered anywhere. It then attributes each identity to a human owner, which is what makes policy decisions and offboarding tractable.

The enforcement model replaces stored secrets with just-in-time credential brokering: an identity requests access, Hush evaluates policy against the workload and its context, and issues a short-lived grant rather than handing back a durable key. Every grant lands in a single audit trail, and the platform flags stale or over-broad access for remediation. Hush Security was founded in 2024 in Tel Aviv by the team behind Meta Networks, which Proofpoint acquired in 2019, and emerged from stealth in September 2025 with an $11M seed round co-led by Battery Ventures and YL Ventures. In July 2026 the company raised a $30M Series A, positioning the product around AI agent governance alongside conventional machine identity.