Saporo Preemptive Identity Exposure Management

Saporo is a Swiss cybersecurity company that builds a graph-native identity security platform. It raised a EUR 7 million Series A in December 2025 and released version 5 in October 2026, serving hybrid enterprise environments that mix Active Directory, Entra ID and AWS.

The platform, positioned as Preemptive Identity Exposure Management, builds a unified view of human and non-human identities, maps attack paths and attack opportunities, and prioritizes risk by reachability, blast radius and impact. It validates exploitability and offers automated or guided remediation, tracking progress with a Saporo Resistance Score.

• Identity visibility: unifies human and non-human identities across hybrid environments.
• Attack path discovery: finds attack paths and opportunities across directories and cloud.
• Risk prioritization: ranks by reachability, blast radius and impact.
• Exploitability validation: separates real risk from noise.
• Remediation workflows: provides automated and guided fixes.
• Resistance Score: tracks exposure reduction over time.

Bank security teams in Vietnam can map and remove privilege-escalation paths in Active Directory. Enterprises migrating to Entra ID and AWS can track exposure reduction during migration.

Shows identity attack paths the way attackers see them in hybrid environments.

Separates exploitable risk from noise through exploitability validation.

Claims deployment in about one hour and a 64% reduction in critical misconfigurations, per the vendor.

Connects to more than 1,900 security, IT and cloud tools.

Identity-based attacks on Active Directory and cloud directories are a leading breach path, and exposure management is replacing alert-only tools. Vietnamese banks and enterprises running Active Directory alongside cloud face the same privilege-escalation exposure.

Series A of EUR 7 million announced 4 December 2025, led by TIN Capital with G+D Ventures, CDP Venture Capital, XAnge, Lightbird VC and Session VC. ISO 27001 certified and member of the European Cyber Security Organization.