Push Security
Push Security makes a browser extension that catches identity attacks like phishing and session hijacking in real time.
On the record
Checkpoint: Watch whether Microsoft ships native browser-level AiTM detection in Edge plus Entra plus Defender, and whether Push closes a Series C
The call
Push has real usage and growth numbers, but its core idea is copyable by Microsoft and Palo Alto, and no new funding round has landed since April 2025.
Push Security is a small company that installs software in web browsers to catch hackers stealing login credentials and taking over accounts. Right now, it is hard to replace because the company has built special technology that watches what happens inside the browser in a way that Microsoft and Palo Alto have not yet matched. However, Microsoft and Palo Alto are massive and could build the same thing into their own products (Edge browser and Prisma Browser) within the next year or so, and if they do, they could crush Push Security just by giving it away for free to their existing customers. The one thing that matters most: whether Microsoft actually ships this feature in the next 12 to 18 months or decides to focus elsewhere.
Why
01
AI pressure: None apparent. AI raises phishing and session-hijack volume, which grows the problem Push sells detection for, rather than replacing its product. Could AI do the core job? Unlikely.
02
Bigger players: Microsoft (Entra ID Protection, Defender for Identity, Edge) and Palo Alto Networks (Prisma Browser). Microsoft can bundle browser-level AiTM detection into Edge and Entra for free; Palo Alto already shipped a rival enterprise browser. Could a giant copy it? Probably.
03
What protects it. Deep in-browser telemetry across 1.5M endpoints plus SIEM and identity provider workflow lock-in that a bundled feature does not easily replace.
What would change this call
Microsoft ships native AiTM/session-hijack browser detection in Edge+Entra+Defender within 18 months. Would show the bundled incumbent can replicate Push's core detection cheaply, eroding its niche.
Push announces a Series C or discloses a down-round/flat extension. Would show whether investors still believe growth outpaces incumbent bundling risk.
CrowdStrike, Palo Alto, or Zscaler ships a cross-browser identity-detection extension into their existing enterprise base. Would show a well-distributed rival matching Push's product without needing new customer acquisition.
Push announces a Series C or discloses a down-round/flat extension. Would show whether investors still believe growth outpaces incumbent bundling risk.
CrowdStrike, Palo Alto, or Zscaler ships a cross-browser identity-detection extension into their existing enterprise base. Would show a well-distributed rival matching Push's product without needing new customer acquisition.
Key numbers
- $30M Series B led by Redpoint, April 2025
- 1.5M+ endpoints deployed, 380% YoY customer growth
- Headcount grew from 27 to 102 in about two years
Named risks
- Microsoft could bundle native browser-level AiTM/session-hijacking detection into Edge/Entra/Defender within 12-18 months.
- Palo Alto's already-shipped Prisma Browser (March 2026) directly competes with core product.
- No disclosed funding round since April 2025 Series B, a 15-month gap as of July 2026.
- Conflicting third-party revenue estimates ($7.3M vs $22.5M) and headcount figures suggest unclear true financial scale.
- Attackers created fake OpenAI organization impersonating Push to target its own employees, disclosed June 2026.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Palo Alto Networks | losing to | Palo Alto shipped competing Prisma Browser from $100B+ vendor, announced 2026-03-23 |
| Microsoft | contesting | Entra ID Protection and Defender for Identity already live in browser-identity detection space |
| Island (enterprise browser) | contesting | Named SEB category competitor per comparison sites as of 2026-06 |
| Menlo Security | contesting | Direct SEB category rival, comparison published 2026-06-30 |
| Obsidian Security | contesting | Direct ITDR peer per cybersectools comparison, 2026-07-02 |
| CrowdStrike | gaining on | Named as potential entrant if it ships cross-browser identity-detection extension into enterprise footprint |
Questions people ask
- Is Push Security profitable?
- No public evidence of profitability. Push Security is a venture-backed startup with ~$49M total disclosed funding through its April 2025 Series B, and does not publicly disclose revenue or profit figures as of July 2026.
- How much funding has Push Security raised?
- Push Security has raised approximately $49M total across three rounds: a $4M Seed (July 2022, led by Decibel), a $15M Series A (April 2023, led by GV), and a $30M Series B (April 2025, led by Redpoint Ventures).
- Could AI replace Push Security's product?
- Unlikely to fully replace it. Push's moat is proprietary in-browser telemetry across 1.5M+ endpoints (as of January 2025), not a model output; the company instead uses AI internally, crediting agents with a threefold increase in new-TTP detection volume in 2026.
- Who is Push Security's biggest competitor?
- Palo Alto Networks poses the most direct threat, having already shipped Prisma Browser, a competing secure enterprise browser from a $100B+ vendor, announced March 23, 2026. Microsoft's Entra ID Protection and Defender for Identity also compete via bundling.
- Who owns Push Security?
- Push Security is privately held and venture-backed, with no parent company. Key investors include Decibel, GV (Google Ventures), Redpoint Ventures, Datadog Ventures, and B3 Capital, following its $30M Series B closed April 24, 2025.
- Is Push Security growing fast?
- Push Security reported 380% year-over-year customer growth and deployment on more than 1.5 million endpoints globally as of January 2025, per its own April 2025 Series B funding announcement.
Timeline
- 2026-07-03Push positions itself as direct SWG/CASB alternative
- 2026-06-02Push launches browser controls blocking data leaks into AI tools
- 2026-05-12Push launches AI-native agentic threat hunting platform
- 2026-03-23Palo Alto Networks unveils competing Prisma Browser
- 2026-03-05Push launches malicious browser extension blocking
- 2025-07-29Push launches 'Detections' capability for SecOps/IR teams
- 2025-04-24Push raises $30M Series B led by Redpoint Ventures
- 2023-04-03Push raises $15M Series A led by GV
- 2022-07-19Push raises $4M Seed round led by Decibel
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Push Security nabs $15M to secure companies' cloud applications (2023-04-03)
- Push Security Announces $4M Seed Round (2022-07-19)
- Push Security raises $15M (2023-04-03)
- Push Security Secures $30 Million Series B Funding (2025-04-24)
- Push Security Raises $30 Million in Series B Funding (2025-04-24)
- Push Security Listed on 2026 Redpoint InfraRed 100 (2026-05-27)
- Push Security Named Best Secure Enterprise Browser (2026-06-12)
- Push Security Wins Pinnacle Award (2026-07-02)
- Push Security - Headcount, Funding & Open Jobs (2026-06-20)
- Equipping SecOps and IR teams (2025-07-29)
- Push Security Launches Malicious Browser Extension Blocking (2026-03-05)
- Push Security Launches AI-Native Agentic Threat Hunting (2026-05-12)