# p0-security

Source: https://startwithidentity.com/vendors/ai-identity/p0-security/
Last updated: 2026-10-16
License: content by Start with Identity. Cite the source URL.

---

## Overview

P0 Security provides cloud access governance across human and non-human identities, with just-in-time access and visibility into machine credentials and privileges. Founded in 2022 in Menlo Park, it is engineering-led and agentless, discovering identities through an Identity Graph that stitches together directories, identity providers, cloud IAM and key applications rather than deploying collectors.

It is also, as of late 2026, one of the few vendors in its category that a buyer can still purchase standalone. [Astrix](https://startwithidentity.com/vendors/ai-identity/astrix-security/) went to Cisco and [Entro](https://startwithidentity.com/vendors/ai-identity/entro-security/) to SailPoint on the same day in June 2026, SGNL to CrowdStrike in January, with [Natoma](https://startwithidentity.com/vendors/ai-identity/natoma/) and [Oasis](https://startwithidentity.com/vendors/ai-identity/oasis-security/) both under pending deals.

## What it is good at

Eliminating standing access rather than cataloguing it. Just-in-time provisioning across AWS, Google Cloud, Azure, Oracle Cloud, Kubernetes and on-premises resources is the core, delivered through Slack, the CLI, GitHub and Jenkins so it lands in the workflows engineers already use.

The February 2026 extension of its authorization control plane to service accounts, workloads and AI agents is well designed. Agent access is evaluated at runtime from the invoking identity, the agent identity, the tool authorisation and the resource entitlements together, with secondary authorization narrowing a broad agent permission to the end user's actual scope, and session replay tying every action back to a human. Integrations cover AWS Bedrock, Google Vertex AI and Microsoft's agent platform.

Pricing transparency deserves credit. A published AWS Marketplace listing at 5,000 dollars for 100 users on a 12-month contract, metered per verified identity, is more than any of its competitors offer.

## Where it falls short

It is early-stage and shows it. Total funding is 20 million dollars, there is no disclosed customer count or named reference logos, and legacy and very large-scale coverage is thinner than established privileged access platforms.

Compliance stops at SOC 2 Type II. No ISO 27001, no FedRAMP, which rules out some regulated and public sector buyers.

MCP server support is not documented, unlike several competitors, and the agent scope covers first-party agents you deploy rather than vendor-hosted assistants.

The zero-CVE record reflects a small closed-source product with limited external research attention rather than demonstrated hardening.

## Pricing

AWS Marketplace: 5,000 dollars for 100 users on a 12-month contract, 50 dollars per additional user per month, metered per verified identity. Above 100 users, quoted. No free tier or trial listed. Model it with our [TCO calculator](https://startwithidentity.com/tools/tco-calculator/).

## Best for, and who should look elsewhere

Choose P0 for cloud-native teams wanting to remove standing privilege across multi-cloud infrastructure, who value buying from an independent vendor. Choose [Token Security](https://startwithidentity.com/vendors/ai-identity/token-security/), [Clutch Security](https://startwithidentity.com/vendors/ai-identity/clutch-security/) or [Oasis Security](https://startwithidentity.com/vendors/ai-identity/oasis-security/) if discovery of existing non-human identities is the priority, or [CyberArk](https://startwithidentity.com/vendors/pam/cyberark/) (now Idira, part of Palo Alto Networks) or [Delinea](https://startwithidentity.com/vendors/pam/delinea/) for full enterprise privileged access.

## Bottom line

A well-designed just-in-time cloud access platform with rare pricing transparency, now notable as much for remaining independent as for its product.