WillItSurvive
Cybersecurity companies · United States

Nudge Security

Startup that finds shadow SaaS and AI app use by scanning email metadata for security teams.

Losing its protection
Assessed 21 July 2026 · Evidence as of 21 July 2026
The structural protection is eroding.
On the recordSince 21 July 2026 · Checkable from Q4 2026 · Every call on the record Checkpoint: First two to three quarters of new CRO Patrick Dillon's enterprise sales ramp
The call

Nudge Security is growing fast but sits on a discovery mechanism that Microsoft and Okta can copy and bundle for free, and its market mindshare is already sliding.

Nudge Security scans company email to find unauthorized or risky apps that employees are using. The problem is that Microsoft and Okta, who already own the email and login systems, can build the same discovery tool themselves without extra work, and smaller competitors like Grip Security and Zluri are already shipping nearly identical features. The company grew fast (three times over two years, $22.5 million raised in late 2025) but lost market attention from 7.4% to 4.8% year-over-year, suggesting customers see less difference between Nudge and its rivals. What matters next: whether a new sales leader hired in April 2026 can rebuild customer loyalty and keep them paying, or whether Microsoft adds shadow-app detection to its own security tools and makes Nudge redundant.

Why
01
AI pressure: OpenAI, Anthropic, Google shipping their own SaaS/AI usage oversight tools. Frontier AI labs could bundle app-usage visibility directly into their platforms, making a separate discovery layer pointless. Could AI do the core job? Yes, likely.
02
Bigger players: Microsoft (Entra, Defender for Cloud Apps) and Okta identity governance. Microsoft and Okta already own the identity platforms Nudge reads from and can bundle shadow-app discovery into E5 or Okta for free. Could a giant copy it? Yes, easily.
03
What protects it. Its database of 175,000+ known SaaS and AI apps gives faster, cleaner detection than generic platform logs today.
What would change this call
Microsoft or Okta bundles native shadow-AI/shadow-SaaS discovery into Entra or Identity Governance within 12 months. Would show the core detection feature is becoming a free platform add-on, not a standalone product.
Nudge's PeerSpot mindshare continues falling or stabilizes over the next two quarters. Shows whether Grip, Zluri, and Wing keep taking comparative market attention.
New CRO Patrick Dillon's pipeline results and enterprise logo wins become public within 2-3 quarters. Would show whether go-to-market changes reverse customer and revenue erosion.
Key numbers
  • $22.5M Series A, Nov 2025, ~$30M total raised (2025-11-18)
  • PeerSpot mindshare fell 7.4% to 4.8% YoY (2026-05)
  • 200+ customers, ARR tripled two years running (2026-04-29)
Named risks
  • Microsoft/Okta could bundle native shadow-AI discovery into E5/Identity Governance, capping upside. Severity: high
  • SSPM mindshare fell from 7.4% to 4.8% YoY as of May 2026 amid rival feature parity. Severity: high
  • Core discovery mechanism relies on single easy integration, offering thin lock-in versus incumbents. Severity: medium
  • Revenue figures conflict across third-party trackers, making true financial health unverifiable. Severity: medium
  • New CRO (April 2026) unproven; enterprise pipeline and net retention results not yet demonstrated. Severity: medium
Rivals, as read in July 2026
RivalDirectionEvidence
Microsoft (Entra, Defender for Cloud Apps)losing toEntra Global Secure Access previewed native AI-agent discovery June 2026
Oktalosing toExpanding identity governance into shadow SaaS/AI discovery, 2026
Grip Securitygaining onShips identity-based SaaS/AI discovery with stronger enforcement claims, 2026
Zlurigaining onConverges SSPM with SaaS management and identity governance, 800+ integrations, 2026
Wing SecuritycontestingDirect PeerSpot comparison rival amid Nudge's mindshare decline, May 2026
Zscaler, Check Point, Cloudflarelosing toRanked category Leaders vs Nudge as Challenger, CB Insights, May 2026
Questions people ask
Is Nudge Security profitable?
No profitability figures are disclosed. Nudge Security is a private, VC-backed startup that raised a $22.5M Series A in November 2025 (total raised close to $30M) and reports tripling ARR for two straight years through April 2026, but revenue itself remains undisclosed.
Who owns Nudge Security?
Nudge Security is privately held and venture-backed, founded in 2021 by CEO Russell Spitler and CTO Jaime Blasco. As of the November 2025 Series A, investors include Cerberus Ventures (lead), Ballistic Ventures, Forgepoint Capital, and Squadra Ventures; Cerberus's Morgan Mahlock joined the board.
Could AI replace Nudge Security?
Nudge's core mechanism, reading email metadata to find shadow SaaS/AI apps, is becoming a commodity feature. As of June 2026, Microsoft's Entra Global Secure Access shipped an AI-agent-discovery preview, and rivals like Grip, Zluri, and Wing already ship near-identical AI-governance capabilities.
Is Nudge Security losing market share?
Yes. Per PeerSpot, Nudge's SaaS Security Posture Management category mindshare fell to 4.8% in May 2026 from 7.4% a year earlier, even as it shipped AI agent discovery in April 2026 and hired its first CRO, Patrick Dillon, that same month.
Who is Nudge Security's biggest competitor threat?
The biggest structural threat is Microsoft and Okta, which already own the identity/email plane Nudge integrates into; Microsoft's Entra previewed native AI-agent discovery in June 2026. Among funded direct rivals, Grip Security, Zluri, and Wing Security are cited as closest competitors as of 2026.
How much funding has Nudge Security raised?
Nudge Security raised a $7M Seed in April 2022 (Ballistic Ventures), extended to $16.5M in May 2024 with Forgepoint Capital, then closed a $22.5M Series A in November 2025 led by Cerberus Ventures, bringing total funding to close to $30M per SecurityWeek.
Timeline
  • 2026-05PeerSpot SSPM mindshare falls to 4.8%, down from 7.4% a year earlier
  • 2026-04-29Patrick Dillon hired as first CRO; AI agent discovery feature shipped
  • 2025-12-09Launches 'industry's most comprehensive AI security governance platform'
  • 2025-11-18$22.5M Series A led by Cerberus Ventures; total raised near $30M
  • 2025-01-14Reports tripled ARR, doubled customers in 2024; Gartner MQ honorable mention
  • 2024-05-07Seed round extended to $16.5M with Forgepoint Capital joining
  • 2024-01-17Reports 4x customer growth, 115% QoQ revenue growth in 2023; two patents awarded
  • 2022-10-13Emerges from stealth
  • 2022-04$7M Seed round led by Ballistic Ventures
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources