Red Hook Capital today is a result of several generations of investors.  Today our hybrid fund of funds is active in more than 35 deals.  Investment within the last two years include Rising Tide VC, PROOF VC, Social Leverage, and other co-investment with funds (Accern, Kin Insurance, Mythical Games, ICON, Guild Education, BrightInsight, Equipment Share, Two Six Technologies, Carbon Health, Varo, Ovetime, and other confidential deals)

Red Hook Capital

FortifID

FortifID is a software company that puts individuals back in control of their identity and directly connects individuals to institutions. The company building a network to power secure, trusted & robust consumer data for the digital world, also enabling individuals to seize control over the use of their personal data. They solve the needs of businesses that use, buy or sell personal data, as well as the privacy needs of consumers for business using personal data, for business selling personal data, and for individuals. Their vision is a data solution for the digital age using blockchain and next-gen concepts from MIT. FortifID was founded in 2017 and is based in Mountain View, California, USA.

FortifID provides a data authentication and privacy platform to verify, authenticate, and detect fraud in consumer onboarding applications. The platform can be used by organizations to get insights from existing databases without revealing the original data.

New data privacy regulations have opened up space for a new wave of compliance-focused startups.

Digital Privacy Tools

FortifID is a software company that puts individuals back in control of their identity and directly connects individuals to institutions. The company building a network to power secure, trusted &amp; robust consumer data for the digital world, also enabling individuals to seize control over the use of their personal data. They solve the needs ofbusinesses that use, buy or sell personal data, as well as the privacy needs of consumers for business using personal data, for business selling personal data, and for individuals. Their vision is a data solution for the digital age using blockchain and next-gen concepts from MIT. FortifID was founded in 2017 and is based in Mountain View, California, USA.

Ensuring the right people access the right resources at the right time

Identity & Access Management

<div>
 
 OneTrust provides compliance solutions that leverage AI tools and automation across all areas of privacy compliance. OneTrust Athena, the company&rsquo;s AI-powered solution, provides automation in the areas of data discovery, data subject rights management, consent management (with a user-facing preference center for greater control), data protection impact assessments, third-party risk management, incident response reporting, and monitoring. The company also provides regulatory research software that companies can use to train staff and even benchmark their own privacy programs. The company&rsquo;s Government Records Request Automation solution helps government organizations intake requests, automate data discovery and redaction, and provide a secure two-way communication portal that demonstrates compliance with FOIA, PRR, and the Privacy Act.
 
 
 OneTrust has strengthened its position in the digital privacy space through several acquisitions in recent years. In March 2021, OneTrust acquired DocuVision, an AI-powered data redaction platform to bolster its data subject rights capabilities through automatic redaction of non-relevant sensitive information. During the same month, OneTrust acquired Convercent to enhance its platform through advanced ethics and compliance capabilities, and helpline and disclosure management. OneTrust acquired the security assurance and certification platform Tugboat Logic in September 2021, to automate its InfoSec assurance and certification processes. Other notable acquisitions include Privacy Core e-learning, DataGuidance, and Integris Software.
 
 
 In March 2023, OneTrust announced the 
 <a href="https://sp-edge.com/updates/16852">
 addition of certification automation
 </a>
 to the OneTrust GRC and Security Assurance Cloud. This solution which combines automation, pre-built policies and controls spanning 29 industry frameworks, over 100 integrations, compliance content, and expert guidance enables customers to simplify and streamline compliance tasks according to OneTrust.
 
 
 Key customers and partnerships
 
 
 OneTrust entered a partnership with Dow Jones Risk and Compliance in April 2023, to incorporate risk and compliance data into its third-party due diligence solution.&nbsp;&nbsp;
 
 
 Funding and financials
 
 
 The company employed 3,000 people, served more than 12,000 customers (including 75% of the Fortune Global 500 companies), and its solutions are backed by 200 patents, as of January 2022. In June 2022, OneTrust 
 <a href="https://sp-edge.com/updates/11018">
 laid off 950 employees
 </a>
 (~25% of its global workforce) across its departments in Atlanta (US), Bengaluru (India), and London (UK), due to worsening global financial crisis and to balance between growth and profitability.
 
 
 OneTrust&rsquo;s 
 <a href="https://sp-edge.com/updates/20390">
 most recent funding
 </a>
 was in July 2023, where it raised USD 150 million in a round led by Insight Partners at a valuation of USD 4.5 billion. The company expects to use the combined funding to scale its platform to meet increasing demand.&nbsp;
 
 
 This funding was raised at a lower valuation, down from the USD 5.1 billion OneTrust recorded during its December 2020 Series C round (USD 300 million), however the company reports it has doubled ARR to USD 400 million, grown customer numbers from 7,500 to over 14,000, and increased headcount from 1,500 to over 2,000 over the same period.
 
</div>

OneTrust

<div>
 
 Privitar provides a platform that enables companies to leverage personal data in their databases for analysis without compromising the end user&rsquo;s safety and privacy. The company&rsquo;s solutions handle and process data compliant with privacy regulations such as GDPR and CCPA.
 
 
 The company&rsquo;s platform provides de-identification solutions to enable the use of personal data while maintaining data utility. Use cases include business intelligence, insights, Anti-Money Laundering (AML) analysis, etc. The platform also includes features to manage secure data sharing and invisible data watermarks to track data movement throughout the organization.
 
 
 In July 2022, Privitar 
 <a href="https://sp-edge.com/updates/11586?industryIds=34">
 acquired
 </a>
 the UK-based regulatory intelligence platform Kormoon to use the latter&rsquo;s repository of data privacy rules across 46 jurisdictions and automate policies in its own data provisioning platform. The company deemed this repository as a &ldquo;strategic asset&rdquo;&mdash;something that would take it years to build on its own. Kormoon provides a regulatory intelligence platform that analyzes the data usage behavior of companies to determine and automate necessary actions to achieve compliance with privacy regulations such as the GDPR and CCPA. Privitar expects to launch Kormoon&rsquo;s regulatory intelligence to users of Privitar by the end of 2022, although it&rsquo;s unclear whether Kormoon&rsquo;s offerings will continue to be sold as a separate product in the long term.
 
 
 In June 2023, enterprise data management firm Informatica announced 
 <a href="https://sp-edge.com/updates/19444">
 it was in talks to acquire
 </a>
 Privitar.
 
 
 As of November 2020, Privitar employed over 200 staff and has offices in the UK, the US, Singapore, and Poland.
 
 
 Key customers and partnerships
 
 
 Privitar expanded the relationship it had with HSBC through its Series C fundraise, as HSBC was the first customer for Privitar in 2016. In addition to HSBC, Privitar also has other customer-turned-investors such as Citi.
 
 
 Funding and financials
 
 
 Privitar&rsquo;s most recent funding round was in June 2020, where it raised USD 7 million as a Series C investment led by HSBC Venture Capital Coverage Group. With USD 80 million raised in April 2020, its total Series C funding now amounts to USD 87 million. The company intended to use the funding to accelerate product development, hire additional staff, and focus on international expansion.
 
</div>

Privitar

CENTRL provides automated risk management and privacy management solutions. Through its Privacy360 platform, the company provides solutions to identify compliance gaps, automate data discovery, manage data subject rights requests, consent management (with a user-facing preference center), carry out impact assessments, third-party risk management, monitoring, and reporting.

CENTRL

HighSide provides a secure communications platform for organizations, enterprise archiving solutions, data discovery, and supervision tools in compliance with GDPR, CCPA, etc. In 2019, the company announced the acquisition of Hotshot Technologies, a secure team messaging platform.

HighSide

SecuPI provides a patented platform enabling organizations to achieve compliance with regulations such as GDPR and CCPA. The platform achieves this by providing multiple features to protect data such as pseudonymization, consent controls, audit logs, streamlining breach notifications, etc. SecuPI’s platform is deployed in organizations in the banking, insurance, telecommunications, and health industries.

SecuPi

Solutions to prevent the tracking and collection of the personal data of end-users.

Encrypted communications and data exchanges for internal and external collaboration around sensitive data.

Tools to provide compliance with privacy regulations, such as GDPR and CCPA, and carry out tasks such as data discovery, data governance, consent management, Data Subject Rights (DSR) management, Data Protection Impact Assessments (DPIA) and managing incident response as mandated by these privacy regulations.

Synthetic data generation, data de-identification and anonymization, and other solutions for managing sensitive data.

Storage infrastructure for holding data in compliance with regulations such as GDPR or data residency requirements.

Central management of data access and data privacy and security policies.

Uses AI/ML to automate workflows such as data discovery and data classification

Uses generative AI to provide conversational recommendations to users to remain compliant with privacy regulations

Solutions in this industry hub are offered under a B2B SaaS model

<div>
 
 Keycloak is an open-source identity and access management (IAM) solution developed by Red Hat. It provides robust user authentication, authorization, and single sign-on (SSO) capabilities, allowing users to securely access multiple applications and services with a single set of credentials. Keycloak supports industry-standard protocols such as OpenID Connect, OAuth 2.0, and SAML 2.0, ensuring interoperability and seamless integration with various applications and frameworks.
 
 
 One of Keycloak's key features is its ability to act as an identity provider (IdP), handling user authentication and attribute assertions. It can also function as a service provider (SP), relying on external IdPs for authentication and authorization. Keycloak offers a user-friendly administration console, where administrators can manage users, roles, and permissions, as well as configure authentication methods, federation settings, and authorization policies.
 
 
 Keycloak supports user federation, allowing it to integrate with existing user stores such as LDAP and Active Directory. It also enables identity brokering, empowering users to authenticate using their existing social media accounts or external identity providers. Additionally, Keycloak provides customizable login pages, password recovery mechanisms, and support for multi-factor authentication, enhancing security and user experience.
 
 
 As an open-source project, Keycloak benefits from community contributions, ensuring its continuous improvement and adaptation to evolving business needs. Organizations can leverage the extensive documentation, forums, and resources provided by the Keycloak community for support and guidance during implementation and customization.
 
 
 
</div>

Keycloak

<div>
 
 miniOrange provides Identity and Access Management (IAM) solutions offering a range of products, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Cloud Access Security Broker (CASB). Its solutions secure access to various applications and cloud services while enabling seamless user experiences.&nbsp;
 
 
 miniOrange's technology allows organizations to implement access control policies based on factors like IP addresses, locations, devices, and time restrictions, providing granular control over data access. Additionally, its solutions integrate with platforms such as Microsoft 365, ServiceNow, Oracle EBS, and Zoom, enabling businesses to enhance security across their digital ecosystems. With a strong focus on compliance and data protection, miniOrange's IAM offerings help enterprises mitigate risks associated with unauthorized access, data breaches, and cyber threats.
 
 
 Key customers and partnerships
 
 
 miniOrange's client base spans various industries, including government entities, healthcare organizations, and enterprises across the US.&nbsp;
 
 
 miniOrange partners with companies like Oracle, Microsoft, ServiceNow, and Zoom, integrating their IAM solutions to secure access to these platforms seamlessly. Its extensive app integration library, comprising over 5,000 applications, allows organizations to optimize resources and costs while streamlining authentication and access management processes.
 
 
 
</div>

miniOrange

One Identity solutions for Identity and Access Management Identity and access management for the real world. One Identity solutions eliminate the complexities and time-consuming processes often required to govern identities, manage privileged accounts and control access. Their solutions enhance business agility while addressing your IAMchallenges with on-premises, cloud and hybrid environments.

One Identity

<div>
 
 SailPoint provides identity security solutions for enterprises. Its identity governance and administration (IGA) platform, IdentityIQ, allows organizations to manage and secure access to applications, data, and cloud resources across their entire IT infrastructure. IdentityIQ automates user provisioning, access requests, access certifications, and policy enforcement, ensuring that users have the appropriate level of access based on their roles and responsibilities.
 
 
 IdentityIQ integrates with various enterprise systems, including cloud, mobile, and on-premises applications, through connectors and APIs. This integration allows for synchronized user access management across the organization's technology landscape. The platform's key components include, 1)Identity Cube, a centralized repository for user identities and access rights, 2)Policies for enforcing organizational and regulatory standards, 3)Workflows for automating identity-related processes, and 4)Tasks, scheduled or event-driven processes for executing specific activities).
 
 
 SailPoint's identity governance solution helps organizations streamline audit and compliance processes, enhance security posture, and improve operational efficiency. It offers features such as role-based access control (RBAC), separation of duties (SoD) enforcement, password management, and compliance reporting. The platform leverages AI and machine learning (ML) capabilities to automate tasks, analyze identity data, and assist in determining appropriate access levels.
 
 
 In August 2022, SailPoint was acquired by Thoma Bravo in an all-cash transaction valued at ~USD 6.9 billion. Subsequently, it was delisted from the New York Stock Exchange.
 
 
 Key customers and partnerships
 
 
 SailPoint has established partnerships with various technology companies and has a strong customer base spanning multiple industries. Some notable customers are General Electric, Vodafone, ADP, and Western Union. SailPoint has also formed a partnership with Circle Security, a decentralized threat prevention platform, to enhance the security offerings for its customers.
 
 
 SailPoint actively collaborates with industry leaders, such as Cisco and Rapid7, to expand its identity security solutions and integrate with their respective products and services. The company maintains a partner ecosystem, including managed security service providers (MSSPs) and resellers, to facilitate the deployment and adoption of its identity governance solutions across various market segments.
 
 
 
</div>

SailPoint

Platforms that manage and control user access to systems, applications, and resources and govern the policies, processes, and controls necessary to ensure appropriate access levels, permissions, and entitlements are granted to users based on their roles, responsibilities, and organizational requirements

Platforms that manage and maintain controls, policies, and systems that govern the entire lifecycle of an employee's access to company resources, systems, and data

Platforms that provide an additional layer of security beyond traditional username and password authentication, including controls such as one-time passwords (OTP), biometric data recognition (such as fingerprint, facial recognition), hardware tokens, or push notifications to mobile devices as a means to strengthen the authentication process

Platforms that manage and secure the digital identities and access rights of customers or users across various applications, services, and resources of an organization

Platforms that focus on managing user credentials, including passwords, to ensure secure access to systems, applications, data and resources

Platforms that enable users to authenticate once and gain access to multiple systems, applications, or services without the need to provide separate credentials for each system or resource access and usage

IAM solutions enable personalization by tailoring user rights, roles, and access to services based on individual profiles

IAM solutions enhance transparency and accountability by controlling user access, monitoring activity, facilitating audits, and preventing unauthorized access, ensuring business data integrity

AI/ML in IAM help automate risk analysis, anomaly detection, and adapt access controls, improving security.

Certain customer IAM providers also offer biometric authentication solutions

This is a key demand driver for IAM solutions as companies switch to a hybrid work environment, driving the increased need to manage user identity and access to organizational resources

Companies offering IAM solutions offer their solutions under a B2B SaaS model

FortifID

About EDGE

Contact Us

Resources

Area of Focus

Technology Research Made Effortless