# silverfort

Source: https://startwithidentity.com/vendors/itdr/silverfort/
Last updated: 2026-10-16
License: content by Start with Identity. Cite the source URL.

---

## Overview

Silverfort protects identities that other tools cannot reach. Its core claim is architectural: rather than sitting in front of applications as a proxy or requiring agents on every endpoint, it operates inside the existing identity infrastructure, analysing authentication requests and instructing the identity provider to allow, deny or step up. That makes it the default answer for extending MFA to legacy applications, Active Directory authentication, command-line access and service accounts that were never built to support it.

Founded in 2016 by Hed Kovetz, Yaron Kassner and Matan Fattal, it reports more than 1,000 customer organisations and 222 million dollars raised, most recently a 116 million dollar Series D in January 2024.

## What it is good at

Coverage of the unreachable. Universal MFA on systems with no native support is the flagship capability, and non-human identity and service account protection follow from the same interception point: if you see every authentication, you see every service account actually authenticating, which is usually a longer list than anyone expects.

Two acquisitions widened the platform materially. [Rezonate](https://www.silverfort.com/press-news/silverfort-acquires-rezonate-to-deliver-the-first-complete-identity-security-platform/) in November 2024 added posture management and threat detection; Fabrix Security in April 2026 added a team drawn from Run:ai, Orca Security and Microsoft Defender for Cloud, aimed at AI agent security.

Its commercial model deserves credit for predictability. Licensing meters by employee headcount rather than by protected identities or systems, so the bill does not grow as you extend coverage. That is the opposite of how most identity security products price, and it removes the usual disincentive to protect more.

## Where it falls short

Transparency, in two specific ways. The public documentation asserts that the product is agentless and proxyless without describing the mechanics, so buyers cannot assess the architecture from public material and must request it. And the trust centre is login-gated with public security pages returning 404, meaning certifications cannot be independently verified.

The zero-CVE record should not be overread. With no public advisory feed and closed source, absence of published vulnerabilities is not evidence of their absence.

## Pricing

Four packages, Core through Enterprise, unpriced on the vendor site. The AWS Marketplace listing publishes 15,000 dollars for 12 months, billed on employee headcount. Premier support adds 10 percent of licence cost, Diamond 20 percent. No free tier or trial.

## Best for, and who should look elsewhere

Choose Silverfort when the problem is identity coverage gaps: legacy systems, AD authentication, service accounts, OT. For broader endpoint-centric ITDR, compare [CrowdStrike Falcon Identity Protection](https://startwithidentity.com/vendors/itdr/crowdstrike-falcon-identity/). For non-human identity discovery, see [Token Security](https://startwithidentity.com/vendors/ai-identity/token-security/); [Astrix Security](https://startwithidentity.com/vendors/ai-identity/astrix-security/) is now part of Cisco and no longer sold standalone. For full privileged access, see [CyberArk](https://startwithidentity.com/vendors/pam/cyberark/) (now Idira, part of Palo Alto Networks) or [Delinea](https://startwithidentity.com/vendors/pam/delinea/).

## Bottom line

The strongest answer to identity coverage gaps that no agent or proxy can reach, with refreshingly predictable licensing, held back by public documentation that does not explain how it works.