P0 Security

P0 Security: frequently asked questions

How much does P0 Security cost?

P0 publishes a real figure through AWS Marketplace, which is unusual in this segment: a 12-month contract at 5,000 dollars for 100 users, with additional usage at 50 dollars per user per month, and deployments above 100 users directed to sales. The licensing unit is defined on the listing as a verified identity that requests and receives access through the platform, so you pay per identity rather than per cloud account or per workload. Two caveats. There is no pricing page on p0.dev, which returns a 404, so everything beyond the marketplace listing is quote-based. And the two published figures do not reconcile arithmetically into a single blended rate, so treat the 5,000 dollars as an entry contract and the 50 dollars as an overage dimension rather than computing a combined cost.

Is P0 Security still independent?

Yes, and in this segment that is now a differentiator worth stating. The non-human identity category consolidated sharply in the first half of 2026: Astrix Security was acquired by Cisco and closed 29 June 2026, Entro Security by SailPoint the same day, SGNL by CrowdStrike in January 2026, and Natoma and Oasis Security both have pending deals. P0 has neither acquired nor been acquired. It raised a 15 million dollar Series A in September 2024 led by SYN Ventures with participation from Zscaler and existing investor Lightspeed, bringing total funding to 20 million dollars. No Series B has been announced and no valuation has been disclosed.

What does P0 Security actually do?

It positions as unified identity governance and privileged access for cloud, covering both human and non-human identities, with an agentless architecture. Discovery works through an Identity Graph that connects data from directories, identity providers, cloud identity services and key applications rather than deploying agents. Coverage spans AWS, Google Cloud, Azure, Oracle Cloud Infrastructure, Kubernetes and on-premises resources, with workflow integrations into Slack, the CLI, GitHub and Jenkins. Just-in-time access provisioning is the core function.

Does P0 Security cover AI agents?

Yes, and this is recent. On 24 February 2026 P0 extended its authorization control plane to service accounts, workloads and AI agents, which is its formal entry into non-human identity coverage. The agent capability provisions just-in-time access with human in the loop, explicitly without vaults, static credentials or overly permissive keys, applies secondary authorization to narrow a broad agent permission down to the invoking end user's scope, and provides session-level audit and replay tying every action back to the triggering human identity. Named platform integrations are AWS Bedrock, Google Vertex AI and Microsoft's agent platform. Note the scope is first-party agents you deploy, not vendor-hosted assistants, and MCP support is not documented.

How does P0 differ from Astrix, Entro and the other NHI vendors?

Direction of travel, mainly. P0 started in cloud privileged access and identity governance and extended into non-human identity in 2026; Astrix and Entro started in non-human identity discovery and extended into agents. That produces a real architectural difference: Astrix does centralised secrets management across vaults, while P0 explicitly positions against vaults and static credentials in favour of just-in-time issuance. If your problem is inventorying credentials that already exist, the discovery-first vendors fit better. If your problem is eliminating standing access in the first place, P0's model fits better.

Is P0 Security compliant and secure?

It holds SOC 2 Type II, audited by Advantage Partners, with the report available under NDA through a sales representative. It runs annual third-party penetration testing plus internal red team exercises, issues its own production access just in time, and requires FIDO2 multi-factor authentication or passkeys for developer and production access, which is a reasonable signal that the company runs its own advice. No ISO 27001 certification and no FedRAMP authorization appear on its trust centre, so do not assume either. The National Vulnerability Database contains no CVEs attributable to P0 Security, and there is no CISA KEV entry or breach disclosure.

How big is P0 Security?

Small, and it does not disclose much. Founded in 2022 in Menlo Park, total funding is 20 million dollars across a 5 million dollar seed led by Lightspeed and the 2024 Series A. No customer count, named customer logos, ARR or valuation is published. Employee estimates on third-party trackers conflict and sit somewhere in the 30 to 45 range, but none is authoritative enough to quote. Buyers evaluating P0 should weigh the early-stage profile against the fact that most of its competitors have just been absorbed into platform vendors.

What are the best P0 Security alternatives?

Oasis Security is now the best-funded independent in the segment, with 195 million dollars raised including a 120 million dollar Series B in March 2026, though Cyera has since signed a letter of intent to acquire it. GitGuardian remains independent with a 2026 raise and strong secrets-scanning heritage. Token Security, Clutch Security, Aembit and Corsha compete on non-human identity discovery. Astrix is now Cisco and no longer sold standalone; Entro is now SailPoint. For the cloud privileged access half of P0's pitch, compare Britive and the cloud modules of CyberArk and Delinea.