Identity is the new security perimeter
As artificial intelligence multiplies the number of autonomous agents and machine accounts inside enterprise systems, the boundary between trusted and untrusted has shifted from the network edge to identity itself. Keeper Security's arrival at $225 million in annual recurring revenue is less a corporate milestone than a signal of how profoundly the nature of digital identity has changed — in some organizations, machines now outnumber human users by 150 to one, each representing a credential that must be governed. Growing at four times the industry average and profitable without debt, the company is positioning itself as the custodian of a new kind of perimeter, one defined not by firewalls but by the question of who — or what — is allowed to act.
- Non-human identities now outnumber human ones by as much as 150 to 1 in large enterprises, creating an attack surface that traditional security tools were never designed to manage.
- Autonomous AI agents and machine-to-machine workflows are already operating inside corporate environments without adequate governance, secrets management, or access controls — a vulnerability hiding in plain sight.
- Keeper's KeeperPAM platform, launched in February 2025, has grown tenfold in revenue year-over-year as security teams scramble for a unified way to govern both human and non-human privileged access.
- The company is adding roughly 850 new organizational customers every month and has been ranked the second-fastest-growing security software company in the world, behind only Google.
- With $225 million ARR, no debt, and a stated target of $1 billion, Keeper is signaling a potential IPO path while framing identity security as the defining cybersecurity challenge of the AI era.
Keeper Security has crossed $225 million in annual recurring revenue — more than tripling its business since 2021 — at precisely the moment enterprises are confronting a security problem that barely existed five years ago. The challenge is no longer just protecting the people inside a system, but governing the machines, agents, and automated processes that now operate alongside them. In some large enterprise environments, non-human identities outnumber human ones by a ratio of 150 to 1, and each machine account represents a credential that must be managed, monitored, and protected.
The company now serves more than 95,000 organizations, from Fortune 500 corporations to government agencies, adding roughly 850 new customers each month. That pace — more than four times the broader identity security industry's growth rate — reflects a market urgency that goes beyond ordinary demand. The primary driver is KeeperPAM, a unified privileged access management platform launched in February 2025 that has seen tenfold revenue growth year-over-year. The platform spans service accounts, machine identities, databases, and AI agents, addressing the full spectrum of identities now populating enterprise infrastructure.
Co-founder and CEO Darren Guccione frames the shift plainly: identity has become the new security perimeter. As AI agents and autonomous systems proliferate, the number of privileged machine credentials grows exponentially — often without adequate governance already in place. CTO Craig Lurey notes that many of these systems are running inside enterprises right now, ungoverned and unmonitored. Keeper positions itself as purpose-built to solve that problem at scale.
Gartner ranked Keeper the second-fastest-growing security software company worldwide in 2025, behind only Google. The company is profitable and carries no debt — a rare profile in venture-backed software. With its sights set on $1 billion ARR and a potential public offering on the horizon, Keeper is making the case that securing non-human identities is not a niche concern but the central cybersecurity challenge of the AI era.
Keeper Security has crossed a threshold that few cybersecurity companies reach. The company announced it has hit $225 million in annual recurring revenue, a figure that represents more than tripling its business since 2021. The milestone arrives at a moment when enterprises are grappling with a problem that barely existed five years ago: securing not just the people who work inside their systems, but the machines, agents, and automated processes that now outnumber human users by staggering margins.
The company now counts more than 95,000 organizations as customers, ranging from Fortune 500 corporations to government agencies. Each month, it adds roughly 850 new organizations to that roster. What makes this growth noteworthy is its velocity. Keeper is expanding at more than four times the pace of the broader identity security industry, suggesting the company has tapped into something deeper than typical market growth.
That something is the explosion of non-human identities. As enterprises deploy artificial intelligence tools, machine learning systems, and autonomous software agents, they create new accounts that need access to data, infrastructure, and applications. In some large enterprise environments, non-human identities now outnumber human ones by a ratio of 150 to 1. Each of these machine accounts represents a potential attack surface, a credential that must be managed, monitored, and protected. The traditional security perimeter—the boundary between inside and outside the organization—has dissolved. Identity itself has become the new perimeter.
Keeper's primary growth engine has been KeeperPAM, a unified platform for managing privileged access across both human and non-human identities. Launched in February 2025, the product has seen its revenue grow tenfold year-over-year. The company has poured engineering effort into the platform, adding more than 400 features and products over the past 15 months. The platform manages service accounts, machine identities, databases, and AI agents—the full spectrum of identities that now populate enterprise infrastructure.
Darren Guccione, the company's chief executive and co-founder, frames the shift in stark terms. "Identity is the new security perimeter," he said. As enterprises deploy AI agents and autonomous systems, the number of privileged identities and machine credentials grows exponentially. Organizations need a unified platform that secures every identity—human and non-human alike—and governs every privileged interaction. The market's demand for such a platform is what Keeper's growth reflects.
The challenge for security teams is not simply storing credentials in a vault. It is discovering which identities exist across the organization, authenticating them reliably, and monitoring how they behave. When access is granted to software agents and workloads that operate continuously and at scale, the complexity multiplies. Craig Lurey, Keeper's chief technology officer and co-founder, notes that many of these systems are already running inside enterprises without adequate governance or access controls. "Autonomous agents, frontier LLMs and machine-to-machine workflows are operating inside enterprise environments right now—without adequate governance, secrets management or access controls," he said. Keeper positions itself as purpose-built to solve this problem at scale.
Gartner ranked Keeper as the second-fastest-growing security software company worldwide in 2025, behind only Google. The ranking places it in a competitive landscape that includes password managers, secrets management vendors, and broader identity governance platforms. Yet Keeper's unified approach—combining enterprise password management, secrets management, privileged session management, database management, and endpoint privilege management—gives it a distinct position as enterprises confront the AI era's identity challenges.
The company's financial profile strengthens its hand. Keeper is profitable and carries no debt, a rare combination in the venture-backed software world. The company has set its sights on $1 billion in annual recurring revenue, a trajectory that could position it for a public offering. Guccione said that every enterprise conversation now centers on the risks created by non-human identities. The $225 million milestone, he argued, confirms what security leaders already know: securing non-human identities is the defining security challenge of the AI era.
Citações Notáveis
Identity is the new security perimeter. As enterprises increasingly deploy AI agents and autonomous systems, the number of privileged identities and machine credentials is growing exponentially.— Darren Guccione, CEO and Co-founder, Keeper Security
Autonomous agents, frontier LLMs and machine-to-machine workflows are operating inside enterprise environments right now—without adequate governance, secrets management or access controls.— Craig Lurey, CTO and Co-founder, Keeper Security
A Conversa do Hearth Outra perspectiva sobre a história
Why does a company that manages passwords and access controls suddenly become so valuable?
Because the problem they're solving just got exponentially larger. Five years ago, you had maybe a few thousand accounts in a company—mostly people. Now you have hundreds of thousands of machine accounts, AI agents, service accounts. Each one needs a credential. Each one is a potential breach point.
But couldn't existing security tools handle this?
Not really. Traditional identity management was built for humans. You log in, you authenticate, you get access. Machines don't work that way. They need credentials that never expire, that operate continuously, that scale to thousands of instances. It's a different problem entirely.
So Keeper is essentially saying: the old perimeter is dead, identity is the new perimeter?
Exactly. The network boundary used to be where you defended. Now that boundary is meaningless. Everything is in the cloud. Everything is distributed. The only thing that matters is: who or what is trying to access what, and do they have the right to do it?
And they're growing four times faster than the industry average. Why?
Because they're one of the few vendors who understood this shift early and built a platform that handles both human and non-human identities in a unified way. Most competitors are still playing catch-up, bolting machine identity management onto password managers. Keeper built it in from the start.
The 150-to-1 ratio of non-human to human identities—is that real or marketing?
It's real in large enterprises with heavy AI adoption. Maybe not everywhere, but in organizations running dozens of AI agents, thousands of microservices, and continuous automation, those numbers are accurate. And it's only going to get worse as AI becomes more embedded.
What happens if they reach $1 billion ARR?
They go public. They've already said so. And at that valuation, they'd be one of the largest pure-play identity security companies. It signals that identity security has moved from a niche concern to the center of enterprise defense strategy.