Rising Star Unixi

Short Summary

Unixi is an early-stage identity vendor in the Extended SSO and Access Management segment, designed to close a persistent enterprise gap: many browser-based applications employees use still authenticate outside the organization’s primary standards-based identity provider (IdP) control. The platform coexists with major IdPs such as Okta, Ping, and Microsoft Entra ID, and extends SSO and access governance to applications that cannot support SAML or OIDC, including internally developed tools, shadow SaaS, and shadow AI applications. Rather than building and maintaining prebuilt connectors, Unixi uses AI-based observation of each application’s login flow, then replays that flow via a browser plugin to automate authentication and enforce access decisions.

Authentication is built on Key Derived Authentication (KDA), which derives a per-application passphrase at login by hashing four keys (IdP, company, system, and user) with unique identifiers using SHA-512. This design avoids central credential storage, while still relying on password submission in the login flow; “passwordless” is best interpreted as “no password storage.” The product’s core functions span discovery, risk analysis, authentication/SSO, access management, and shadow SaaS/AI governance. Plugin-based monitoring captures login and registration attempts, maps identities and access, identifies shadow usage (including optional personal account visibility), and feeds a risk engine that highlights weak or reused credentials, shared accounts, and anomalous access patterns.

Unixi also relies on a continuous global visibility loop: observed login flows populate a central data lake that improves coverage for all customers, though this creates privacy and data-handling considerations. The company (founded 2023) operates from New York City, Toronto, and Tel Aviv, has 27 employees, reports 16 customers and 500,000 endpoints, and raised a $21.5M Series A in September 2026.

Interesting Facts

• Unixi was founded in 2023.
• Headquarters are in New York City, with offices in Toronto and Tel Aviv.
• A $21.5M Series A round closed in September 2026.
• The licensing model is subscription-based and priced per user.
• The company reports 27 employees.
• Unixi reports 16 customers.
• The deployment footprint is reported as coverage across 500,000 endpoints.
• Key Derived Authentication hashes combined inputs using SHA-512 to derive a per-application passphrase at login.
• The platform is positioned to complement, not replace, major IdPs such as Okta, Ping, and Microsoft Entra ID.
• One insurance deployment found more than 800 applications in use after initially estimating roughly 55.

Notable Quotes

• “Unixi is an early-stage identity vendor offering Extended SSO and Access Management.”
• “Rather than relying on prebuilt connectors, Unixi uses AI-based observation of each Web application's login flow.”
• “KDA generates a per-application passphrase at the point of login instead of storing credentials centrally.”
• “Once a session is established, Unixi's user authentication is trusted by the organization's primary IdP, which issues a session token for the user.”
• “Beyond user authentication, the system is organized into five functions: Discovery, Risk Analysis, Authentication and SSO, Access Management, and Shadow SaaS/AI Governance.”
• “Unixi treats AI applications as another form of browser-based SaaS application rather than as a separate category.”
• “Because the architecture is connector-free, access management decisions are enforced by granting or revoking Unixi-brokered access at the point of login.”
• “Underlying all of this is a continuous, global application visibility loop.”
• “Application access that falls outside an organization's identity provider visibility and control remains one of the more persistent gaps in enterprise security.”
• “Whether the company's customer base and revenue scales to match the enterprise pipeline it reports is the key open commercial question for Unixi.”