- Home
- SaaS Security Posture Management Software
- Obsidian Security
Obsidian Security
What it is
Obsidian Security is a web platform for visibility, governance, and runtime controls across AI agents, identities, integrations, and third-party applications. Its AI security capabilities include agent visibility, governance, runtime security, and AI security posture management. The Free plan supports up to 1K users, helps discover app sprawl including unsanctioned AI and shadow SaaS, and detects spear phishing without manual tuning. Foundations focuses on discovery and governance, while Advanced adds detection, proactive defense, and incident response. Advanced detection covers account takeover, session hijacking, insider risk, misuse, sensitive data exposure, and API or token compromise. An AI Assistant explains rules, helps triage threats, manages exceptions, and provides security steps. The service lists hundreds of validated connectors, including Amazon Bedrock, Anthropic Claude, Google Workspace, GitHub, Microsoft 365, Salesforce, ServiceNow, and Snowflake. Custom connectors are supported.
For and against
For
- Free plan supports up to 1K users
- AI security posture management
- Hundreds of validated connectors
- Custom connector support
- Free trial requires no credit card
Against
- Paid plan prices require quotes
- Web platform only
The verdict
Obsidian Security centers on governance and runtime protection for AI-connected environments. Its free tier and broad integrations provide an entry point, while expanded detection and response require quoted plans.
Who it suits
It is presented for Fortune 1000 and Global 2000 organizations securing mission-critical AI and third-party applications. Teams needing connector-based discovery, governance, and security controls may consider it.
Plans and prices
Free
up to 1K users · app-sprawl discovery · shadow-AI discovery · spear-phishing detection
Read 15 Oct 2026 · obsidiansecurity.com
Advanced
account-takeover and session-hijack detection · insider-risk detection · sensitive-data exposure detection · API/token compromise detection
Read 15 Oct 2026 · obsidiansecurity.com
Foundations
shadow-app and AI-agent discovery · access-violation detection · privilege minimization · compliance mapping
Read 15 Oct 2026 · obsidiansecurity.com
On the record
- AI assistant
- Obsidian’s AI Assistant is designed to explain rules, triage threats, manage exceptions, and provide prescriptive security steps.obsidiansecurity.com · read 30 Sep 2026
- AI security
- The platform inventories AI tools, agents, LLMs, and MCP servers and helps security teams govern their permissions and activity.obsidiansecurity.com · read 15 Oct 2026
- API coverage
- Obsidian models OAuth authorizations, service accounts, API keys, and webhooks and monitors their behavior for compromise indicators.obsidiansecurity.com · read 15 Oct 2026
- Availability
- Obsidian reports 99.99% historical availability over the preceding 12 months.obsidiansecurity.com · read 15 Oct 2026
- Browser extension
- The browser extension discovers SaaS and AI usage, can block high-risk applications, and can warn or block credential submission to malicious sites.obsidiansecurity.com · read 15 Oct 2026
- Claude integration news
- Obsidian announced a Claude Compliance API integration on July 21, 2026 to identify and remediate risky Claude configurations.obsidiansecurity.com · read 15 Oct 2026
- Client access
- Obsidian's technical measures document says end users can access the service through web, mobile, and API clients.start.obsidiansecurity.com · read 15 Oct 2026
- Community SDK
- The Obsidian Community SDK is intended for customers, partners, and SaaS vendors to build and share connectors.obsidiansecurity.com · read 15 Oct 2026
- Company founding
- LinkedIn and G2 list Obsidian Security as founded in 2017.linkedin.com · read 15 Oct 2026
- Company headquarters
- LinkedIn and Crunchbase identify Palo Alto, California as the headquarters.linkedin.com · read 15 Oct 2026
- Company history
- The company page’s timeline says Obsidian began its security-for-SaaS work in 2021.obsidiansecurity.com · read 30 Sep 2026
- Company legal name
- Crunchbase lists the legal entity as Obsidian Security, Inc.crunchbase.com · read 15 Oct 2026
- Company size
- LinkedIn reports 51–200 employees, while Crunchbase reports 51–100.linkedin.com · read 15 Oct 2026
- Compliance
- Obsidian states that it has SOC 2 Type 2, ISO 27001, ISO 27701, and IRAP attestations or certifications, with ISO 42001 described as forthcoming.obsidiansecurity.com · read 15 Oct 2026
- Connector catalog
- Obsidian says it offers hundreds of ready-to-use integrations and allows custom connectors through its community ecosystem.obsidiansecurity.com · read 15 Oct 2026
- Custom connectors
- Organizations can build custom connectors for third-party applications; the page says these are hosted on the Obsidian Platform and re-evaluated after updates.obsidiansecurity.com · read 30 Sep 2026
- Data hosting
- The trust page lists regional hosting in AWS US West 2, EU Central 1, and AP Southeast 2, plus a data center in Saudi Arabia.obsidiansecurity.com · read 30 Sep 2026
- Data regions
- The company lists AWS hosting regions in Oregon, Frankfurt, and Sydney plus a data center in Saudi Arabia.obsidiansecurity.com · read 15 Oct 2026
