Skip to content
SPECIFICTION
Get listed

Obsidian Security

obsidiansecurity.com

Free plan WebWindowsmacOSLinuxAPIBrowser extension
Visit obsidiansecurity.com
Spec score 8.5 #4 of 30 in SaaS Security Posture Management Software

What it is

Obsidian Security provides visibility, governance, and runtime controls for AI agents, identities, and integrations across third-party applications. Its AI security capabilities include agent visibility and governance, runtime security, and AI security posture management. The Free plan covers up to 1K users and includes discovery of app sprawl, unsanctioned AI, and shadow SaaS, plus spear-phishing detection without manual tuning. Foundations covers discovery and governance; Advanced adds detection, proactive defense, and incident response. No plan prices are stated, and both Foundations and Advanced require a quote. Advanced lists detection for account takeover, session hijacking, insider risk, misuse, sensitive data exposure, and API or token compromise. The AI Assistant is designed to explain rules, triage threats, manage exceptions, and provide security steps. The web platform has hundreds of validated connectors, with examples including Amazon Bedrock, Anthropic Claude, Google Workspace, GitHub, Microsoft 365, Salesforce, ServiceNow, and Snowflake. Organizations can build custom connectors hosted on the platform. Obsidian serves Fortune 1000 and Global 2000 organizations. A free trial requires no credit card, but no duration is stated.

Spec sheet

What it does
Obsidian Security provides SaaS and AI security for detecting threats, governing access, and protecting enterprise applications, integrations, identities, and AI agents.Read 15 Oct 2026 · crunchbase.com
Purpose
Obsidian provides visibility, governance, and runtime controls for AI agents, identities, and integrations across third-party applications.Read 30 Sep 2026 · obsidiansecurity.com
Trial
Obsidian offers a free trial with no credit card required; the page does not state a trial duration.Read 30 Sep 2026 · obsidiansecurity.com
Integrations
Named integrations include Amazon Bedrock, Microsoft Foundry, Anthropic Claude, n8n, Google Vertex AI, OpenAI, Microsoft Copilot, Salesforce Agentforce, Google Workspace, GitHub, Microsoft 365, ServiceNow, Salesforce, Snowflake, Databricks, and Workday.Read 15 Oct 2026 · obsidiansecurity.com
Compliance
Obsidian states that it has SOC 2 Type 2, ISO 27001, ISO 27701, and IRAP attestations or certifications, with ISO 42001 described as forthcoming.Read 15 Oct 2026 · obsidiansecurity.com
AI assistant
Obsidian’s AI Assistant is designed to explain rules, triage threats, manage exceptions, and provide prescriptive security steps.Read 30 Sep 2026 · obsidiansecurity.com
AI security
The platform inventories AI tools, agents, LLMs, and MCP servers and helps security teams govern their permissions and activity.Read 15 Oct 2026 · obsidiansecurity.com
API coverage
Obsidian models OAuth authorizations, service accounts, API keys, and webhooks and monitors their behavior for compromise indicators.Read 15 Oct 2026 · obsidiansecurity.com
Availability
Obsidian reports 99.99% historical availability over the preceding 12 months.Read 15 Oct 2026 · obsidiansecurity.com
Browser extension
The browser extension discovers SaaS and AI usage, can block high-risk applications, and can warn or block credential submission to malicious sites.Read 15 Oct 2026 · obsidiansecurity.com
Claude integration news
Obsidian announced a Claude Compliance API integration on July 21, 2026 to identify and remediate risky Claude configurations.Read 15 Oct 2026 · obsidiansecurity.com
Client access
Obsidian's technical measures document says end users can access the service through web, mobile, and API clients.Read 15 Oct 2026 · start.obsidiansecurity.com
Community SDK
The Obsidian Community SDK is intended for customers, partners, and SaaS vendors to build and share connectors.Read 15 Oct 2026 · obsidiansecurity.com
Company founding
LinkedIn and G2 list Obsidian Security as founded in 2017.Read 15 Oct 2026 · linkedin.com
Company headquarters
LinkedIn and Crunchbase identify Palo Alto, California as the headquarters.Read 15 Oct 2026 · linkedin.com
Company history
The company page’s timeline says Obsidian began its security-for-SaaS work in 2021.Read 30 Sep 2026 · obsidiansecurity.com
Company legal name
Crunchbase lists the legal entity as Obsidian Security, Inc.Read 15 Oct 2026 · crunchbase.com
Company size
LinkedIn reports 51–200 employees, while Crunchbase reports 51–100.Read 15 Oct 2026 · linkedin.com
Connector catalog
Obsidian says it offers hundreds of ready-to-use integrations and allows custom connectors through its community ecosystem.Read 15 Oct 2026 · obsidiansecurity.com
Custom connectors
Organizations can build custom connectors for third-party applications; the page says these are hosted on the Obsidian Platform and re-evaluated after updates.Read 30 Sep 2026 · obsidiansecurity.com
Data hosting
The trust page lists regional hosting in AWS US West 2, EU Central 1, and AP Southeast 2, plus a data center in Saudi Arabia.Read 30 Sep 2026 · obsidiansecurity.com
Data regions
The company lists AWS hosting regions in Oregon, Frankfurt, and Sydney plus a data center in Saudi Arabia.Read 15 Oct 2026 · obsidiansecurity.com
Detection
Its Advanced plan lists account takeover and session hijack, insider risk, misuse, sensitive data exposure, and API and token compromise detection.Read 30 Sep 2026 · obsidiansecurity.com
Funding news
Obsidian announced an $85 million Series D led by Crescent Cove Advisors on August 4, 2026.Read 15 Oct 2026 · obsidiansecurity.com
Governance
Foundations includes privilege minimization, compliance mapping, agent-access optimization, ownership resolution, and integration-access rightsizing.Read 15 Oct 2026 · obsidiansecurity.com
Incident response
The Advanced tier includes threat triage, remediation, full-chain auditing, and forensic investigation.Read 15 Oct 2026 · obsidiansecurity.com
Limit: extension permissions
Extension Auditor reports broad host access and permissions capable of reading cookies, monitoring requests, injecting scripts, and controlling proxy settings.Read 15 Oct 2026 · extensionauditor.com
Limit: G2 product refinement
One G2 reviewer says the product has strong fundamentals but is less polished than some established alternatives.Read 15 Oct 2026 · g2.com
Limit: Gartner delivery capacity
A Gartner reviewer says the vendor's capacity can limit how quickly posture, supply-chain, and AI-security features are delivered.Read 15 Oct 2026 · gartner.com
Limit: Gartner integration depth
Gartner reviewers report that integration depth varies by platform and that initial setup has a learning curve.Read 15 Oct 2026 · gartner.com
Limit: Gartner pricing
A Gartner reviewer describes the cost model as prohibitive when expanding and scaling deployment.Read 15 Oct 2026 · gartner.com
Praise: G2 support
G2 reviewers describe customer support and customer-success assistance as highly responsive during implementation.Read 15 Oct 2026 · g2.com
Praise: G2 visibility
G2 reviewers praise seeing security data in one place and using correlated information to speed investigations.Read 15 Oct 2026 · g2.com
Praise: Gartner partnership
Several Gartner reviewers describe customer success, technical-account, and support teams as responsive and unusually engaged.Read 15 Oct 2026 · gartner.com
Praise: Gartner visibility
Gartner reviewers repeatedly praise deep SaaS visibility, risk correlation, actionable alerts, and low false-positive volume.Read 15 Oct 2026 · gartner.com
Rating on Chrome Web Store
2.3 out of 5 from 3 reviewsRead 15 Oct 2026 · extensionauditor.com
Rating on G2
4.0 out of 5 from 3 reviewsRead 15 Oct 2026 · g2.com
Rating on Gartner Peer Insights
4.9 out of 5 from 22 reviewsRead 15 Oct 2026 · gartner.com
Responsible disclosure
Obsidian accepts vulnerability reports by email but states that it does not pay monetary rewards.Read 15 Oct 2026 · obsidiansecurity.com
Security controls
The trust page states that the service uses granular RBAC, full audit logging, customer-specific storage buckets, and dedicated database schemas.Read 15 Oct 2026 · obsidiansecurity.com
Shadow SaaS discovery
Its free tier discovers unsanctioned AI and shadow SaaS applications.Read 15 Oct 2026 · obsidiansecurity.com
System compatibility
Obsidian documents support for Windows, macOS, Linux, Chrome, Firefox, Edge, Safari, and Island enterprise browsers.Read 15 Oct 2026 · start.obsidiansecurity.com
Third-party application security
Obsidian correlates users, connected applications, AI agents, permissions, and data flows across third-party business applications.Read 15 Oct 2026 · obsidiansecurity.com
Threat detection
Advanced plans cover account takeover, session hijacking, insider risk, misuse, sensitive-data exposure, and API or token compromise.Read 15 Oct 2026 · obsidiansecurity.com
Who it serves
Obsidian says it serves Fortune 1000 and Global 2000 organizations securing mission-critical AI and third-party applications.Read 30 Sep 2026 · obsidiansecurity.com

Plans and prices

Free Free $0/m up to 1K users · app-sprawl discovery · shadow-AI discovery · spear-phishing detection Read 15 Oct 2026 · obsidiansecurity.com
Advanced Priced on request Get a Quote account-takeover and session-hijack detection · insider-risk detection · sensitive-data exposure detection · API/token compromise detection · runtime guardrails · incident response and forensics Read 15 Oct 2026 · obsidiansecurity.com
Foundations Priced on request Get a Quote shadow-app and AI-agent discovery · access-violation detection · privilege minimization · compliance mapping · integration-access rightsizing Read 15 Oct 2026 · obsidiansecurity.com

Every Obsidian Security plan and price →

Strong points and limits

Strong points

  • Free plan covers up to 1K users
  • Hundreds of validated connectors
  • Free trial requires no credit card
  • Lists security controls and compliance attestations

Limits

  • Cross-region high availability is under development

Who it suits

Obsidian Security is aimed at large organizations securing AI and third-party applications. Its plans may suit teams seeking app discovery, governance, or broader detection and response capabilities.

Verdict

Obsidian Security spans app discovery, governance, and detection capabilities, with a free tier and trial. Buyers should seek quotes for paid plans and note that cross-region high availability is still under development.

Where Specifiction places it

Alternatives to Obsidian SecurityAll alternatives →